$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35372e302f32342d3234203d3e20313332363337.roa File: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (raw, json) Hash identifier: texOhEQUWXFwZ44bCxPcXWqjlXjNCjfDPfcDED/k8io= Subject key identifier: 1C:FE:56:E4:5A:F8:34:26:81:EC:E9:A1:63:13:02:5A:22:69:6F:17 Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 079A5DADBFD9E8D43AAEF3FD7FBE5557F6102998 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35372e302f32342d3234203d3e20313332363337.roa Signing time: Mon 31 Jul 2023 00:14:29 +0000 ROA not before: Mon 31 Jul 2023 00:09:29 +0000 ROA not after: Mon 29 Jul 2024 00:14:29 +0000 asID: 132637 IP address blocks: 103.19.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 07:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9a:5d:ad:bf:d9:e8:d4:3a:ae:f3:fd:7f:be:55:57:f6:10:29:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Jul 31 00:09:29 2023 GMT Not After : Jul 29 00:14:29 2024 GMT Subject: CN=1CFE56E45AF8342681ECE9A16313025A22696F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:f1:51:78:b6:94:d2:2e:e3:91:5a:da:03: b6:42:62:c5:e9:45:b5:cf:9b:f5:a8:61:0c:d5:8b: 78:3d:ef:e3:e7:6f:3c:78:92:e7:df:8f:d1:c4:cd: 8e:da:6d:eb:f2:cf:b9:c1:38:69:c6:5a:5c:f2:29: 69:c9:42:81:c4:03:0f:36:52:0b:23:2c:ee:e8:97: 55:da:16:fd:1c:9f:08:d3:41:50:53:9c:91:02:d7: d0:24:5b:3b:fa:09:34:c5:2d:05:d9:83:70:a1:f1: e4:16:da:37:40:47:e4:96:3d:4e:27:9d:98:ff:71: 48:9d:9b:6b:d5:ba:13:7d:ac:7c:06:ca:f4:de:16: e5:fb:0b:78:e7:74:6a:c3:b6:af:2c:92:e3:b8:8a: 8c:a1:b9:ee:59:0c:05:34:84:f8:c3:b4:69:a6:83: 60:0c:f3:1e:0c:d7:7c:e3:40:09:7d:46:91:4f:64: 43:ec:4e:c6:2b:df:51:d7:98:d6:f3:2d:f7:dd:fe: 03:5d:f3:a2:a1:e5:5a:47:55:cc:7f:b7:77:27:0a: ea:03:33:c6:1a:92:12:bb:4a:c5:ff:5e:0e:1f:d9: 2f:3a:cb:96:60:c1:00:7c:66:bf:6f:77:ff:96:8b: 30:2f:63:97:9a:71:95:cd:b7:5f:e2:73:09:da:36: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FE:56:E4:5A:F8:34:26:81:EC:E9:A1:63:13:02:5A:22:69:6F:17 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35372e302f32342d3234203d3e20313332363337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.57.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:65:02:3d:3e:1a:46:f4:30:2a:a7:8d:66:85:76:a0:6b:50: 2a:d5:85:37:73:80:20:46:00:d5:3e:f9:10:d9:e8:94:49:05: 7d:5e:78:17:53:79:54:dc:18:03:61:63:e5:68:a2:c8:94:e9: ee:ab:64:01:37:12:dd:8e:16:75:31:af:69:48:5c:27:6c:8c: 87:0d:04:94:e2:3a:df:3b:f0:2b:47:69:c5:de:32:64:50:eb: d8:96:79:fa:4a:33:4e:2e:b4:2f:98:8e:93:48:63:00:e5:9a: 45:64:0e:2e:f2:a3:d9:3f:92:28:cb:24:98:91:bc:b0:dc:5f: 62:01:60:48:c1:16:98:de:01:ab:09:8b:91:82:90:e8:a2:64: b1:05:73:d1:ca:0a:f0:f8:c2:7e:a8:07:40:0b:cd:25:f1:f7: d1:7b:ad:fe:8a:ca:5e:10:d6:72:02:39:e8:90:49:5c:d8:e1: 08:24:5e:02:85:0d:ce:cc:df:36:2e:d1:38:fe:11:ba:c6:2e: b2:bf:88:6a:c1:f0:cc:6c:73:2e:ae:74:8f:db:60:a3:ee:1d: 9e:0b:de:44:86:65:fa:c1:46:a9:a0:49:d4:99:5d:8a:af:77: 18:10:57:28:55:8f:60:e6:c5:1c:a9:28:78:53:74:09:30:7e: 7d:9d:95:98 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUB5pdrb/Z6NQ6rvP9f75VV/YQKZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yMzA3MzEwMDA5MjlaFw0yNDA3MjkwMDE0MjlaMDMxMTAvBgNV BAMTKDFDRkU1NkU0NUFGODM0MjY4MUVDRTlBMTYzMTMwMjVBMjI2OTZGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0O/FReLaU0i7jkVraA7ZCYsXp RbXPm/WoYQzVi3g97+Pnbzx4kuffj9HEzY7abevyz7nBOGnGWlzyKWnJQoHEAw82 UgsjLO7ol1XaFv0cnwjTQVBTnJEC19AkWzv6CTTFLQXZg3Ch8eQW2jdAR+SWPU4n nZj/cUidm2vVuhN9rHwGyvTeFuX7C3jndGrDtq8skuO4ioyhue5ZDAU0hPjDtGmm g2AM8x4M13zjQAl9RpFPZEPsTsYr31HXmNbzLffd/gNd86Kh5VpHVcx/t3cnCuoD M8YakhK7SsX/Xg4f2S86y5ZgwQB8Zr9vd/+WizAvY5eacZXNt1/icwnaNtH1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHP5W5Fr4NCaB7OmhYxMCWiJpbxcwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkMDkyN2U2LThhMGEtNGZhNy04 OTY5LTlmYjlkNjk0Mzk3Yy8wLzMxMzAzMzJlMzEzOTJlMzUzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcTOTANBgkqhkiG 9w0BAQsFAAOCAQEAn2UCPT4aRvQwKqeNZoV2oGtQKtWFN3OAIEYA1T75ENnolEkF fV54F1N5VNwYA2Fj5WiiyJTp7qtkATcS3Y4WdTGvaUhcJ2yMhw0ElOI63zvwK0dp xd4yZFDr2JZ5+kozTi60L5iOk0hjAOWaRWQOLvKj2T+SKMskmJG8sNxfYgFgSMEW mN4BqwmLkYKQ6KJksQVz0coK8PjCfqgHQAvNJfH30Xut/orKXhDWcgI56JBJXNjh CCReAoUNzszfNi7ROP4RusYusr+IasHwzGxzLq50j9tgo+4dngveRIZl+sFGqaBJ 1Jldiq93GBBXKFWPYObFHKkoeFN0CTB+fZ2VmA== -----END CERTIFICATE-----Generated at Sat Apr 20 09:09:02 2024 by rpki-client on console-ams.rpki-client.org