$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa File: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (raw, json) Hash identifier: vS6/EEtMQVT4K3YP4R6xoIVUl5MVwEjWaihe/UDhtsg= Subject key identifier: E9:48:7A:BE:01:15:EA:2F:95:74:F9:5E:E9:EA:9E:6B:0C:3B:A4:9C Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 779284EEAFE055259A35A3F70E70685EACBC29FE Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa Signing time: Fri 29 Mar 2024 06:00:00 +0000 ROA not before: Fri 29 Mar 2024 05:55:00 +0000 ROA not after: Fri 28 Mar 2025 06:00:00 +0000 asID: 140443 IP address blocks: 103.168.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:92:84:ee:af:e0:55:25:9a:35:a3:f7:0e:70:68:5e:ac:bc:29:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Mar 29 05:55:00 2024 GMT Not After : Mar 28 06:00:00 2025 GMT Subject: CN=E9487ABE0115EA2F9574F95EE9EA9E6B0C3BA49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:f2:f0:30:ac:d2:37:95:50:49:e8:33:2c: 25:6f:20:ee:7a:72:e8:0a:d5:fb:86:48:73:a0:04: 64:af:17:da:22:05:2c:a3:b4:76:26:ca:bd:18:71: 3c:fa:db:2d:10:22:fe:e6:5b:e0:2e:ad:48:2f:bd: e6:08:29:d7:ed:c7:d4:f5:ad:fa:71:a5:7f:30:f2: 79:e2:ef:50:be:31:8e:3b:2e:dc:b7:c7:92:f5:3f: b2:00:c3:97:c1:33:0a:ea:ca:34:14:b1:41:96:29: 27:8f:b1:a4:12:6b:f1:7e:10:c3:ec:12:3e:2f:b6: d6:17:40:ee:e2:6e:2c:13:0a:39:b9:66:81:f1:8b: d4:3c:0f:c9:39:3d:1b:d8:65:00:4d:f0:6a:c2:39: 4e:fe:3f:f4:2a:d4:16:52:01:31:7e:a0:1d:65:eb: 5e:f1:75:c0:cf:48:aa:33:57:c5:08:dc:b7:8f:f0: fe:ae:f3:26:e0:7a:34:ff:3e:1c:26:b4:00:f4:4e: 8a:25:5f:8f:08:4d:79:d8:e1:13:a3:5d:69:fe:05: bc:2e:b9:1b:12:4e:47:82:ff:f2:74:dd:fc:2c:21: 04:2f:5e:65:43:ae:77:93:5f:13:da:49:9b:de:4d: 00:a5:29:12:38:e6:6f:b1:5e:51:c9:fb:b5:8b:2d: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:48:7A:BE:01:15:EA:2F:95:74:F9:5E:E9:EA:9E:6B:0C:3B:A4:9C X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.146.0/23 Signature Algorithm: sha256WithRSAEncryption 41:a1:1e:97:1f:1f:56:21:46:d4:28:f6:54:db:85:48:1f:73: 04:38:f3:2b:eb:0e:25:e4:65:73:7e:8b:22:81:72:80:b0:74: 96:f7:9d:6f:51:15:75:ce:0f:12:51:3a:b2:75:39:23:a9:05: 38:d9:78:43:49:b0:3f:3e:41:c0:03:a5:fc:71:4d:be:aa:73: 6f:d4:8b:d1:8b:77:e7:fb:c5:54:d5:70:7b:b5:bc:cb:f5:2a: dd:1b:0d:68:a6:0e:9c:be:ae:96:83:a7:e6:bd:0f:2b:30:a6: 03:4c:44:0c:63:18:20:cc:6e:cf:db:ef:1c:9d:fa:9f:ad:ce: 38:99:e8:e5:3b:cd:f7:9d:30:54:ea:f1:68:cf:f3:91:dc:a7: 53:18:0e:0d:b5:5c:a0:87:4b:83:37:9f:0c:92:82:fc:f2:c4: eb:46:00:87:dd:0b:f5:2d:f2:c3:2a:e8:a1:ba:fc:a4:d8:49: 5c:3d:ac:89:4f:7b:bf:f6:f5:e1:2a:97:d3:84:90:e2:a2:23: ff:44:a1:72:93:07:72:d2:cb:fe:13:de:45:62:be:24:16:19: 6b:f8:6c:56:c0:9f:be:6e:c4:2c:83:49:1e:85:f4:6e:4c:d2: 58:a6:c0:25:63:17:07:bf:b7:b4:17:98:07:19:68:bd:19:c6: 0a:e5:f7:93 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUd5KE7q/gVSWaNaP3DnBoXqy8Kf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNDAzMjkwNTU1MDBaFw0yNTAzMjgwNjAwMDBaMDMxMTAvBgNV BAMTKEU5NDg3QUJFMDExNUVBMkY5NTc0Rjk1RUU5RUE5RTZCMEMzQkE0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHPLwMKzSN5VQSegzLCVvIO56 cugK1fuGSHOgBGSvF9oiBSyjtHYmyr0YcTz62y0QIv7mW+AurUgvveYIKdftx9T1 rfpxpX8w8nni71C+MY47Lty3x5L1P7IAw5fBMwrqyjQUsUGWKSePsaQSa/F+EMPs Ej4vttYXQO7ibiwTCjm5ZoHxi9Q8D8k5PRvYZQBN8GrCOU7+P/Qq1BZSATF+oB1l 617xdcDPSKozV8UI3LeP8P6u8ybgejT/PhwmtAD0ToolX48ITXnY4ROjXWn+Bbwu uRsSTkeC//J03fwsIQQvXmVDrneTXxPaSZveTQClKRI45m+xXlHJ+7WLLcFbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU6Uh6vgEV6i+VdPle6eqeaww7pJwwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNDYzNjBkLTY2MmItNGY3ZC1i YjE3LWQ4NjA4MjE1MjQ3MS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM0MzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqJIwDQYJ KoZIhvcNAQELBQADggEBAEGhHpcfH1YhRtQo9lTbhUgfcwQ48yvrDiXkZXN+iyKB coCwdJb3nW9RFXXODxJROrJ1OSOpBTjZeENJsD8+QcADpfxxTb6qc2/Ui9GLd+f7 xVTVcHu1vMv1Kt0bDWimDpy+rpaDp+a9DyswpgNMRAxjGCDMbs/b7xyd+p+tzjiZ 6OU7zfedMFTq8WjP85Hcp1MYDg21XKCHS4M3nwySgvzyxOtGAIfdC/Ut8sMq6KG6 /KTYSVw9rIlPe7/29eEql9OEkOKiI/9EoXKTB3LSy/4T3kViviQWGWv4bFbAn75u xCyDSR6F9G5M0limwCVjFwe/t7QXmAcZaL0Zxgrl95M= -----END CERTIFICATE-----Generated at Sun May 5 00:10:48 2024 by rpki-client on console-fra.rpki-client.org