$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e392e302f32342d3234203d3e20313331373137.roa File: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (raw, json) Hash identifier: Kw+n95Hy9qYvFpAmqlEFDfLqo7cZQ87ctXtxSulGVYA= Subject key identifier: A3:62:1D:C2:B8:A2:07:32:7B:6F:0E:41:64:39:D9:68:CD:AB:18:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 6D99E9C5F49B65D6F4EAC8D7B4D168D811294550 Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e392e302f32342d3234203d3e20313331373137.roa Signing time: Mon 31 Jul 2023 00:09:24 +0000 ROA not before: Mon 31 Jul 2023 00:04:24 +0000 ROA not after: Mon 29 Jul 2024 00:09:24 +0000 asID: 131717 IP address blocks: 103.110.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 16:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:99:e9:c5:f4:9b:65:d6:f4:ea:c8:d7:b4:d1:68:d8:11:29:45:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Jul 31 00:04:24 2023 GMT Not After : Jul 29 00:09:24 2024 GMT Subject: CN=A3621DC2B8A207327B6F0E416439D968CDAB1885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:35:55:9d:72:da:ac:e9:8f:df:ce:42:98: fc:ff:23:31:3e:cd:f4:f7:eb:cf:e4:ab:c4:88:63: c1:d1:b1:d5:cb:24:a6:1d:ac:ad:34:18:04:7d:52: ce:17:21:bd:24:b1:73:c3:ac:52:56:cb:c4:34:11: 6f:85:e2:21:c2:46:1c:e0:13:8d:c2:ad:2d:1c:be: af:01:fb:dd:39:86:39:be:e2:ce:a7:db:20:09:4d: b1:7d:7d:b3:96:9b:c5:a0:97:a1:82:ba:3d:2b:e7: 18:4f:20:b1:10:80:85:48:ac:fa:28:1e:14:ab:7b: a7:9a:f0:0a:3e:4a:bb:90:c8:96:70:d7:11:39:15: 12:0b:80:dc:6f:dd:bf:41:eb:3b:c9:27:59:5d:77: c2:9f:8c:8b:02:38:25:c0:ad:5e:be:c3:d1:b6:03: 1d:ec:13:8f:d5:fc:3d:1d:f6:6d:72:bf:c2:5e:1d: 3b:0e:2b:77:6a:55:e4:34:5e:84:9f:be:e4:36:4f: 6b:a5:a2:30:16:21:f0:55:59:3c:35:f7:fa:c2:79: 0d:31:3f:df:66:08:14:0c:10:b6:b5:a8:03:57:1a: 7a:41:bb:cf:c1:ae:85:e9:cf:bf:50:3a:32:94:cc: e4:c0:10:07:76:44:3e:d0:fe:6b:6d:61:00:c9:df: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:62:1D:C2:B8:A2:07:32:7B:6F:0E:41:64:39:D9:68:CD:AB:18:85 X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e392e302f32342d3234203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.9.0/24 Signature Algorithm: sha256WithRSAEncryption 87:8d:04:12:99:dc:ad:82:f9:4e:9f:dd:66:94:5b:42:f1:00: a0:2d:40:26:b9:c9:fa:7c:05:0c:98:1f:f1:a5:ed:19:c6:0e: 8b:62:27:d4:6f:38:59:e8:4b:46:b2:44:11:d7:f2:19:71:02: 46:ef:14:9d:a7:1a:e3:70:f2:bc:e9:f9:2c:64:42:5d:23:1c: dd:93:77:8d:b6:82:6e:43:1e:bb:28:62:5c:ec:8f:0b:7a:7b: 8d:21:97:94:81:0a:e3:5c:34:92:1a:96:eb:56:c8:8f:f9:b9: a9:70:54:b0:6d:a5:bd:17:07:83:6e:ca:ca:34:f7:75:62:b6: e5:ac:df:c3:a0:0c:02:91:ff:42:2e:c2:e9:84:31:10:70:b8: 59:43:9d:59:a5:74:f1:32:e8:91:54:1a:4e:d5:2d:1f:c0:90: 32:1e:f6:9d:e3:2d:b3:8c:3f:c5:b9:bf:88:1a:c1:e7:b2:da: 40:b9:a9:4c:b0:52:76:a3:3a:fd:71:a9:dc:21:24:b8:d5:36: 7e:40:da:fb:ee:f5:c2:12:95:ea:01:e8:6f:e5:93:69:ec:5f: 1d:08:58:f8:07:11:83:39:3c:16:4e:25:41:32:2b:dc:2c:07: d4:67:8e:16:2b:09:13:cd:a3:28:67:c2:5b:21:9b:a4:f8:a5: e5:d3:ac:a2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbZnpxfSbZdb06sjXtNFo2BEpRVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yMzA3MzEwMDA0MjRaFw0yNDA3MjkwMDA5MjRaMDMxMTAvBgNV BAMTKEEzNjIxREMyQjhBMjA3MzI3QjZGMEU0MTY0MzlEOTY4Q0RBQjE4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioDVVnXLarOmP385CmPz/IzE+ zfT368/kq8SIY8HRsdXLJKYdrK00GAR9Us4XIb0ksXPDrFJWy8Q0EW+F4iHCRhzg E43CrS0cvq8B+905hjm+4s6n2yAJTbF9fbOWm8Wgl6GCuj0r5xhPILEQgIVIrPoo HhSre6ea8Ao+SruQyJZw1xE5FRILgNxv3b9B6zvJJ1ldd8KfjIsCOCXArV6+w9G2 Ax3sE4/V/D0d9m1yv8JeHTsOK3dqVeQ0XoSfvuQ2T2ulojAWIfBVWTw19/rCeQ0x P99mCBQMELa1qANXGnpBu8/BroXpz79QOjKUzOTAEAd2RD7Q/mttYQDJ3/5bAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUo2IdwriiBzJ7bw5BZDnZaM2rGIUwHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkYTc3M2RkLTk1YWEtNDQ3ZS05 OTNkLTRjZjRhMTI3M2IzMS8wLzMxMzAzMzJlMzEzMTMwMmUzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGduCTANBgkqhkiG 9w0BAQsFAAOCAQEAh40EEpncrYL5Tp/dZpRbQvEAoC1AJrnJ+nwFDJgf8aXtGcYO i2In1G84WehLRrJEEdfyGXECRu8Unaca43DyvOn5LGRCXSMc3ZN3jbaCbkMeuyhi XOyPC3p7jSGXlIEK41w0khqW61bIj/m5qXBUsG2lvRcHg27KyjT3dWK25azfw6AM ApH/Qi7C6YQxEHC4WUOdWaV08TLokVQaTtUtH8CQMh72neMts4w/xbm/iBrB57La QLmpTLBSdqM6/XGp3CEkuNU2fkDa++71whKV6gHob+WTaexfHQhY+AcRgzk8Fk4l QTIr3CwH1GeOFisJE82jKGfCWyGbpPil5dOsog== -----END CERTIFICATE-----Generated at Thu Apr 25 11:35:10 2024 by rpki-client on console-ams.rpki-client.org