$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa File: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (raw, json) Hash identifier: cFx4F318lmgqnqfVUsIIY+PXIESbpoeWbWeYkyG5ZuM= Subject key identifier: 4F:D1:80:1D:C6:58:EA:C7:A0:DB:31:1D:D4:A6:CA:71:71:78:5B:89 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 26E13E06338FE3A348ACB4194A38311540A34BC4 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa Signing time: Mon 31 Jul 2023 00:06:17 +0000 ROA not before: Mon 31 Jul 2023 00:01:17 +0000 ROA not after: Mon 29 Jul 2024 00:06:17 +0000 asID: 138119 IP address blocks: 103.126.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Mar 2024 16:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e1:3e:06:33:8f:e3:a3:48:ac:b4:19:4a:38:31:15:40:a3:4b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Jul 31 00:01:17 2023 GMT Not After : Jul 29 00:06:17 2024 GMT Subject: CN=4FD1801DC658EAC7A0DB311DD4A6CA7171785B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:d4:00:1b:a5:1c:b5:f7:2a:13:46:c1:b0: d0:aa:90:2b:02:f3:7c:82:a4:4d:ba:d2:90:e5:48: 95:be:33:64:52:cd:d7:ff:a0:b5:58:8a:57:70:c8: b8:ec:d0:1e:00:a9:89:56:15:d5:db:c0:ef:86:a0: c0:b8:ea:75:13:22:9a:86:da:c9:4e:15:f3:5d:33: 62:cc:6c:8e:29:68:cd:c0:d3:93:4a:2c:41:15:6b: ef:50:21:31:f3:e2:30:c8:5c:7d:d9:fb:ce:46:84: b6:37:97:29:58:8e:7d:e2:07:d5:52:6b:a6:98:9e: 46:6c:38:bf:64:a1:53:ee:c1:5a:46:5f:a2:71:ae: c0:1a:00:d2:7a:40:98:49:8a:b2:78:96:80:43:40: fe:35:57:71:8e:d5:fb:ff:89:05:6c:ef:77:05:ea: 78:81:26:2c:04:e1:f1:a2:bc:07:0a:2d:87:f0:f8: 0a:cc:75:82:e6:2e:2a:76:bb:ce:bd:e9:14:85:3c: aa:00:8f:39:e7:f6:1f:06:df:e3:17:85:41:09:c9: 73:e5:91:e1:e7:f1:e6:99:7e:e1:8a:12:0e:3d:b7: 2f:64:46:35:3d:a0:a7:cc:fd:a8:d1:16:e2:18:6e: 99:d9:cb:84:7d:d8:c5:f3:2b:93:74:d0:97:a5:6c: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D1:80:1D:C6:58:EA:C7:A0:DB:31:1D:D4:A6:CA:71:71:78:5B:89 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.28.0/22 Signature Algorithm: sha256WithRSAEncryption 96:b6:23:f0:65:56:4e:62:11:9b:2f:5a:c6:ba:86:22:da:21: f7:ff:b1:ea:87:28:f6:e4:1d:3a:1c:a6:5c:88:cf:33:83:6f: db:f0:b3:86:b8:45:c2:cc:d9:9e:b1:3d:7e:a7:05:ac:b1:1f: fe:f9:3b:64:d0:d1:2c:a9:9a:04:3e:64:50:4f:bb:50:d7:b5: 6a:2c:3b:e6:cd:5b:71:76:19:b9:b1:da:58:57:23:70:21:28: 8f:ec:78:43:c3:6f:8e:92:b7:2b:b1:cf:df:ca:87:51:f7:78: 66:7d:83:25:a7:64:06:7d:56:30:48:1d:bb:29:c7:4f:7b:2b: e6:4a:36:60:a0:1a:54:31:32:23:24:3b:6e:f5:73:05:e3:b5: 03:72:93:34:88:62:f3:e0:11:7f:93:76:82:ac:b3:4d:d1:fd: a1:c4:ee:db:32:84:e7:51:85:58:48:b7:25:b6:8b:49:23:3d: 6e:a2:d2:dd:7d:9e:65:d1:2b:70:77:24:b4:f3:1d:6f:33:d2: b2:d2:ae:19:ca:c3:fe:5e:aa:8d:55:29:19:53:e7:ac:82:fd: 24:84:bb:c1:57:2c:45:11:7d:20:9a:e4:f5:11:d2:ee:f8:d5: ae:5c:80:09:8f:cb:17:b2:1e:12:b5:c3:bf:c5:91:8b:34:7e: d6:d7:24:fd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJuE+BjOP46NIrLQZSjgxFUCjS8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yMzA3MzEwMDAxMTdaFw0yNDA3MjkwMDA2MTdaMDMxMTAvBgNV BAMTKDRGRDE4MDFEQzY1OEVBQzdBMERCMzExREQ0QTZDQTcxNzE3ODVCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnltQAG6UctfcqE0bBsNCqkCsC 83yCpE260pDlSJW+M2RSzdf/oLVYildwyLjs0B4AqYlWFdXbwO+GoMC46nUTIpqG 2slOFfNdM2LMbI4paM3A05NKLEEVa+9QITHz4jDIXH3Z+85GhLY3lylYjn3iB9VS a6aYnkZsOL9koVPuwVpGX6JxrsAaANJ6QJhJirJ4loBDQP41V3GO1fv/iQVs73cF 6niBJiwE4fGivAcKLYfw+ArMdYLmLip2u8696RSFPKoAjznn9h8G3+MXhUEJyXPl keHn8eaZfuGKEg49ty9kRjU9oKfM/ajRFuIYbpnZy4R92MXzK5N00JelbDwFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUT9GAHcZY6seg2zEd1KbKcXF4W4kwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNmVhMjIxLTc3YjctNDc5MS1h OGE4LWI1MTY0YjAwZjFjNS8wLzMxMzAzMzJlMzEzMjM2MmUzMjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ34cMA0GCSqG SIb3DQEBCwUAA4IBAQCWtiPwZVZOYhGbL1rGuoYi2iH3/7Hqhyj25B06HKZciM8z g2/b8LOGuEXCzNmesT1+pwWssR/++Ttk0NEsqZoEPmRQT7tQ17VqLDvmzVtxdhm5 sdpYVyNwISiP7HhDw2+Okrcrsc/fyodR93hmfYMlp2QGfVYwSB27KcdPeyvmSjZg oBpUMTIjJDtu9XMF47UDcpM0iGLz4BF/k3aCrLNN0f2hxO7bMoTnUYVYSLcltotJ Iz1uotLdfZ5l0StwdyS08x1vM9Ky0q4ZysP+XqqNVSkZU+esgv0khLvBVyxFEX0g muT1EdLu+NWuXIAJj8sXsh4StcO/xZGLNH7W1yT9 -----END CERTIFICATE-----Generated at Wed Mar 27 01:50:18 2024 by rpki-client on console-ams.rpki-client.org