$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa File: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (raw, json) Hash identifier: m0OyRcGhRSLMpJuESy/IfYraD1kkUhEWkOCA2Hwna6I= Subject key identifier: 2E:57:77:BE:B0:88:65:D2:0A:18:ED:BC:25:7F:C4:10:B4:3B:85:18 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: CA1F4D53181E644EE0FCA4477E7306701ECF35 Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa Signing time: Mon 31 Jul 2023 00:03:09 +0000 ROA not before: Sun 30 Jul 2023 23:58:09 +0000 ROA not after: Mon 29 Jul 2024 00:03:09 +0000 asID: 136888 IP address blocks: 103.106.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 08:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ca:1f:4d:53:18:1e:64:4e:e0:fc:a4:47:7e:73:06:70:1e:cf:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Jul 30 23:58:09 2023 GMT Not After : Jul 29 00:03:09 2024 GMT Subject: CN=2E5777BEB08865D20A18EDBC257FC410B43B8518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4f:d4:e2:7c:7a:ff:04:46:a9:eb:31:f6:0f: 02:22:98:ff:4c:27:7d:aa:84:b6:b0:6c:01:b9:90: 87:bd:a0:68:14:16:89:15:0f:ed:97:eb:59:13:39: 13:5b:57:9b:cf:04:39:ff:1c:cb:d2:7e:66:ca:a5: f3:b1:23:f2:2e:9c:4c:b0:57:8a:2b:00:84:97:b7: ff:29:5f:49:5f:96:0c:8b:3d:3c:34:f2:cd:c8:5a: a7:e9:9a:74:cc:71:ac:69:41:da:b4:2d:47:17:06: 5b:5a:4e:96:f8:8a:84:05:29:bf:94:46:cb:97:d5: c0:9c:79:1d:54:21:32:b4:e4:2d:5b:e7:59:fc:9a: d1:a8:cb:ce:33:11:90:dc:76:24:e4:22:36:84:e1: fa:c2:43:11:fb:45:c8:6b:7c:82:91:c5:83:a2:4c: c2:d7:6b:6b:c2:e6:87:5d:1a:95:cc:f1:e2:d5:b0: 57:01:af:21:e4:9d:c7:5f:4f:2b:43:75:36:04:c4: 84:88:3b:a6:e2:b5:12:c6:0e:dc:ea:2d:fe:bc:be: e5:c2:54:6c:6d:d1:31:a0:a7:8c:e3:22:97:12:5c: 06:fb:be:d0:0b:96:fa:10:e4:b3:cb:e4:9a:20:28: aa:0a:b3:02:84:d4:c1:78:31:30:a2:3f:c6:86:4d: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:57:77:BE:B0:88:65:D2:0A:18:ED:BC:25:7F:C4:10:B4:3B:85:18 X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.172.0/23 Signature Algorithm: sha256WithRSAEncryption 62:44:c4:90:f1:91:5f:5d:62:0c:db:3b:50:e1:c2:4f:a1:75: 39:e2:a8:58:fb:2a:79:ee:46:aa:ba:79:99:c2:51:c2:9b:80: fe:66:34:75:ce:f3:5a:9e:c0:f2:c6:65:b1:23:c5:91:43:1f: 58:17:f6:c2:b4:61:15:70:35:c9:8a:dc:48:cf:22:90:61:11: 7b:4a:06:75:45:90:c7:59:04:20:a8:93:4e:6b:ee:ca:95:53: e8:f0:7c:e2:61:26:f8:2a:0c:c5:3e:6a:ff:0b:6a:0e:16:c7: 49:5e:77:b4:02:53:9c:cd:e8:ac:e4:1c:7b:04:38:3f:7a:72: b8:a5:60:dd:0f:c1:31:46:15:90:1c:83:1f:7a:81:d1:f8:e6: b1:18:e2:e6:61:79:5d:75:bd:47:5a:61:92:28:41:67:b4:0c: df:17:e5:25:b7:c0:09:8a:5a:74:71:f6:30:f9:1c:05:50:55: 17:97:0e:f2:3a:72:41:50:33:92:b4:62:1c:1f:85:e7:db:1d: 50:a6:c1:ce:80:7a:dc:11:63:e3:88:76:23:3e:6f:53:9a:00: 67:82:fc:99:f7:aa:92:70:4c:bd:77:ed:ee:e9:a2:22:7a:1d: 64:ba:2a:7c:94:7f:b2:ca:49:85:cb:54:5b:e8:63:9f:49:98: 2e:57:8a:30 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAMofTVMYHmRO4PykR35zBnAezzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yMzA3MzAyMzU4MDlaFw0yNDA3MjkwMDAzMDlaMDMxMTAvBgNV BAMTKDJFNTc3N0JFQjA4ODY1RDIwQTE4RURCQzI1N0ZDNDEwQjQzQjg1MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkT9TifHr/BEap6zH2DwIimP9M J32qhLawbAG5kIe9oGgUFokVD+2X61kTORNbV5vPBDn/HMvSfmbKpfOxI/IunEyw V4orAISXt/8pX0lflgyLPTw08s3IWqfpmnTMcaxpQdq0LUcXBltaTpb4ioQFKb+U RsuX1cCceR1UITK05C1b51n8mtGoy84zEZDcdiTkIjaE4frCQxH7RchrfIKRxYOi TMLXa2vC5oddGpXM8eLVsFcBryHkncdfTytDdTYExISIO6bitRLGDtzqLf68vuXC VGxt0TGgp4zjIpcSXAb7vtALlvoQ5LPL5JogKKoKswKE1MF4MTCiP8aGTdddAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQULld3vrCIZdIKGO28JX/EELQ7hRgwHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmYmQ3Y2Y2LWY1NWEtNGI3OC1h NTg4LWQ5MjYxZjE1Zjc2My8wLzMxMzAzMzJlMzEzMDM2MmUzMTM3MzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnaqwwDQYJ KoZIhvcNAQELBQADggEBAGJExJDxkV9dYgzbO1Dhwk+hdTniqFj7KnnuRqq6eZnC UcKbgP5mNHXO81qewPLGZbEjxZFDH1gX9sK0YRVwNcmK3EjPIpBhEXtKBnVFkMdZ BCCok05r7sqVU+jwfOJhJvgqDMU+av8Lag4Wx0led7QCU5zN6KzkHHsEOD96cril YN0PwTFGFZAcgx96gdH45rEY4uZheV11vUdaYZIoQWe0DN8X5SW3wAmKWnRx9jD5 HAVQVReXDvI6ckFQM5K0YhwfhefbHVCmwc6AetwRY+OIdiM+b1OaAGeC/Jn3qpJw TL137e7poiJ6HWS6KnyUf7LKSYXLVFvoY59JmC5XijA= -----END CERTIFICATE-----Generated at Wed Apr 24 08:33:50 2024 by rpki-client on console-fra.rpki-client.org