$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35392e302f32342d3234203d3e20313332363337.roa File: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (raw, json) Hash identifier: paBxLJ1vnsKLTRPrzOfqpRffSI9YdxnAU4navYzZHhk= Subject key identifier: 3C:27:3A:A1:08:74:69:E8:A4:6A:4D:82:E6:12:C1:1B:A3:AF:EC:94 Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 5731B8B3BBD6593E7491724848D437DBBF4017C8 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35392e302f32342d3234203d3e20313332363337.roa Signing time: Mon 31 Jul 2023 00:14:29 +0000 ROA not before: Mon 31 Jul 2023 00:09:29 +0000 ROA not after: Mon 29 Jul 2024 00:14:29 +0000 asID: 132637 IP address blocks: 103.19.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:31:b8:b3:bb:d6:59:3e:74:91:72:48:48:d4:37:db:bf:40:17:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Jul 31 00:09:29 2023 GMT Not After : Jul 29 00:14:29 2024 GMT Subject: CN=3C273AA1087469E8A46A4D82E612C11BA3AFEC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:52:c5:49:8d:28:92:c4:4a:07:02:72:27: 7b:46:b4:52:dd:1d:62:37:aa:74:f2:a5:b5:a0:8a: 86:34:18:b2:20:a9:6c:9d:65:e3:55:7e:36:bb:16: 96:cd:8a:f5:65:ea:e4:2d:c6:7e:4b:ff:5a:1f:0f: 7c:c0:82:90:f8:81:d0:f4:c2:84:74:b7:f2:ff:cc: ef:89:d2:6a:b9:22:15:c2:f2:31:a6:4f:e2:34:48: fb:7a:3b:3c:04:e5:20:a0:66:c8:89:6d:fe:05:9f: 08:b8:ea:0c:2f:f8:b5:c1:90:26:a2:46:98:4c:c7: 52:c6:ea:89:b7:65:72:e6:4a:54:c2:6c:74:2b:2d: be:e5:17:21:12:6f:c4:eb:77:da:00:9e:02:51:cf: 32:cd:6e:29:84:1d:34:57:2d:bb:05:41:2e:9c:28: 11:1d:81:ca:da:5f:af:17:28:c7:23:17:cd:70:4d: 75:d0:1e:1d:98:9e:cc:45:d2:2a:5e:fc:67:d6:75: 53:48:41:87:cf:f7:33:e4:4b:51:4b:8a:e7:78:bf: 86:fa:79:69:34:93:87:bc:43:27:9b:56:88:a4:92: 4d:dd:b7:25:19:10:20:29:3d:8a:9a:16:a4:32:a7: 50:2f:64:5b:63:51:65:5c:10:ed:61:f0:47:02:a1: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:27:3A:A1:08:74:69:E8:A4:6A:4D:82:E6:12:C1:1B:A3:AF:EC:94 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35392e302f32342d3234203d3e20313332363337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.59.0/24 Signature Algorithm: sha256WithRSAEncryption 06:1a:df:5a:77:72:03:8c:a5:b0:f6:b1:ac:52:7c:bf:20:26: 30:14:5f:24:8d:93:60:f4:8e:7d:ff:51:1c:e9:c5:00:62:bf: ad:8a:c1:87:9c:55:23:47:d1:43:e3:30:88:af:9f:b2:84:78: 04:15:3c:06:2a:44:a1:1c:15:12:c9:50:eb:1f:72:ce:c5:a8: 38:d5:4b:31:fa:7e:8c:37:dc:be:c4:7c:73:c1:9a:27:d4:92: 59:ac:b7:0c:23:61:e2:b5:b0:40:bd:39:1f:df:0d:25:28:a8: 51:1d:52:26:a3:4d:74:1b:66:00:48:6c:d1:c1:85:af:ed:0a: fd:af:f7:34:52:c1:49:ef:1e:79:46:c4:7a:da:66:e8:23:d2: b1:4f:31:8f:df:ea:9b:b9:6d:54:41:23:ab:10:b6:49:bd:e0: 4c:1b:ce:6f:ed:27:96:43:01:5a:40:a0:9a:2f:43:e1:c9:5e: 2c:a4:16:25:7d:44:54:95:2b:c1:f4:91:a4:b3:55:9e:4c:6e: 11:89:32:0d:77:39:bb:bc:96:92:92:75:82:dc:79:b8:ea:ee: 64:c3:fa:47:96:b7:4c:6b:ca:59:0b:18:e6:4d:0f:23:7c:f6: 3e:52:d9:eb:6d:5f:81:cd:0f:da:ee:98:77:c0:27:78:c2:6b: ea:4f:7e:93 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVzG4s7vWWT50kXJISNQ3279AF8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yMzA3MzEwMDA5MjlaFw0yNDA3MjkwMDE0MjlaMDMxMTAvBgNV BAMTKDNDMjczQUExMDg3NDY5RThBNDZBNEQ4MkU2MTJDMTFCQTNBRkVDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjFLFSY0oksRKBwJyJ3tGtFLd HWI3qnTypbWgioY0GLIgqWydZeNVfja7FpbNivVl6uQtxn5L/1ofD3zAgpD4gdD0 woR0t/L/zO+J0mq5IhXC8jGmT+I0SPt6OzwE5SCgZsiJbf4Fnwi46gwv+LXBkCai RphMx1LG6om3ZXLmSlTCbHQrLb7lFyESb8Trd9oAngJRzzLNbimEHTRXLbsFQS6c KBEdgcraX68XKMcjF81wTXXQHh2YnsxF0ipe/GfWdVNIQYfP9zPkS1FLiud4v4b6 eWk0k4e8QyebVoikkk3dtyUZECApPYqaFqQyp1AvZFtjUWVcEO1h8EcCocULAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPCc6oQh0aeikak2C5hLBG6Ov7JQwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkMDkyN2U2LThhMGEtNGZhNy04 OTY5LTlmYjlkNjk0Mzk3Yy8wLzMxMzAzMzJlMzEzOTJlMzUzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcTOzANBgkqhkiG 9w0BAQsFAAOCAQEABhrfWndyA4ylsPaxrFJ8vyAmMBRfJI2TYPSOff9RHOnFAGK/ rYrBh5xVI0fRQ+MwiK+fsoR4BBU8BipEoRwVEslQ6x9yzsWoONVLMfp+jDfcvsR8 c8GaJ9SSWay3DCNh4rWwQL05H98NJSioUR1SJqNNdBtmAEhs0cGFr+0K/a/3NFLB Se8eeUbEetpm6CPSsU8xj9/qm7ltVEEjqxC2Sb3gTBvOb+0nlkMBWkCgmi9D4cle LKQWJX1EVJUrwfSRpLNVnkxuEYkyDXc5u7yWkpJ1gtx5uOruZMP6R5a3TGvKWQsY 5k0PI3z2PlLZ621fgc0P2u6Yd8AneMJr6k9+kw== -----END CERTIFICATE-----Generated at Wed Apr 24 14:24:32 2024 by rpki-client on console-fra.rpki-client.org