$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/3130332e33312e3130392e302f32342d3234203d3e20313331373537.roa File: 3130332e33312e3130392e302f32342d3234203d3e20313331373537.roa (raw, json) Hash identifier: hg9gvpgrFr8Z5PIr50od7tdQR+wDb7C/AqkEXRVC2Ck= Subject key identifier: BA:3B:0A:5E:1D:94:D1:30:45:5F:93:53:C9:2C:3F:21:DE:C4:72:19 Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Certificate serial: 2E02F43AF5771F49BC0FDF2914797BA36CC4BCD9 Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/3130332e33312e3130392e302f32342d3234203d3e20313331373537.roa Signing time: Mon 31 Jul 2023 00:07:14 +0000 ROA not before: Mon 31 Jul 2023 00:02:14 +0000 ROA not after: Mon 29 Jul 2024 00:07:14 +0000 asID: 131757 IP address blocks: 103.31.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Apr 2024 21:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:02:f4:3a:f5:77:1f:49:bc:0f:df:29:14:79:7b:a3:6c:c4:bc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Validity Not Before: Jul 31 00:02:14 2023 GMT Not After : Jul 29 00:07:14 2024 GMT Subject: CN=BA3B0A5E1D94D130455F9353C92C3F21DEC47219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:5c:ae:82:66:dc:17:5c:b9:f7:da:82:58: 80:ca:16:37:bd:72:11:a4:9b:9d:57:58:8a:8c:04: 1f:22:a5:f8:f4:08:0c:00:26:2d:d2:71:f7:32:49: 2f:11:56:20:1d:cb:39:6b:3f:55:b5:a5:32:f5:f0: 26:b3:fe:a6:cb:4a:43:ff:2d:29:87:f5:88:99:da: 10:90:0a:38:a9:3f:b6:6d:ad:b1:49:de:04:42:fe: 1c:c0:00:26:0d:6b:08:65:80:b0:d0:00:9e:94:89: de:be:9f:2c:bd:9d:d6:2e:19:0d:20:f2:72:f7:5c: c9:1c:30:50:a0:fb:91:2b:05:97:5c:4a:9c:2d:9b: 3c:f3:39:f0:61:c0:a4:df:b1:4d:2c:98:a7:2e:53: 50:a8:b9:23:ed:d3:69:38:5b:fa:aa:e0:6c:7d:6c: 4f:27:1a:6c:09:76:6f:05:38:0b:86:7a:04:85:32: db:75:f9:66:a0:86:f4:e8:3f:63:09:03:22:6c:90: de:40:18:25:24:2c:72:d8:7c:3e:78:28:e2:02:3a: 63:9c:6a:85:75:df:52:1c:11:70:54:ed:9a:cb:ce: 13:ef:13:6f:b7:80:8e:64:2f:8c:24:3d:e8:00:e1: cd:cc:bd:bd:3d:31:84:44:c8:6d:25:40:91:00:35: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3B:0A:5E:1D:94:D1:30:45:5F:93:53:C9:2C:3F:21:DE:C4:72:19 X509v3 Authority Key Identifier: keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/3130332e33312e3130392e302f32342d3234203d3e20313331373537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.109.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:b4:d1:8b:40:93:13:92:80:78:14:58:fa:e5:8f:49:43:87: 2e:ef:ad:29:b4:fb:74:94:ed:15:fe:9c:6a:7b:35:1c:94:f5: 09:b3:89:90:f9:ec:bc:2a:0c:4f:df:cf:1f:a5:99:8e:81:c9: bb:c6:95:f9:fc:27:f2:f3:ef:f3:d8:5c:01:f0:54:f8:dc:20: 72:0d:86:0e:df:97:b5:96:cb:a1:16:a4:56:f0:49:2a:e5:49: 0d:39:7f:8a:29:67:dd:f6:de:5c:22:25:24:1f:9f:77:73:5e: 4f:ad:82:89:e6:a2:a9:56:41:4f:ea:60:53:8c:15:4c:34:4c: ae:91:92:2e:ad:cd:fc:67:37:c7:68:8a:e0:4e:43:b3:63:e1: 16:82:b3:f8:48:56:43:bf:a4:7e:b5:69:58:c1:95:36:df:57: cf:c1:60:57:79:33:e6:27:bf:33:31:52:d7:56:21:ea:dc:eb: 74:0a:15:7f:a8:bd:b4:f4:1c:44:8d:29:f4:e9:1a:9d:0e:a5: 65:1c:fe:10:e6:3b:d0:22:4f:da:52:ba:bf:a4:23:e8:82:10: 00:9e:3d:c7:0a:59:fe:ed:d1:19:5c:57:54:fd:4d:5f:5b:4d: 69:a8:a2:f2:4e:81:a6:b3:df:a1:22:f3:6d:7e:c4:68:42:a9: 6c:86:77:cf -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULgL0OvV3H0m8D98pFHl7o2zEvNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0 QzdCQ0U3MjAeFw0yMzA3MzEwMDAyMTRaFw0yNDA3MjkwMDA3MTRaMDMxMTAvBgNV BAMTKEJBM0IwQTVFMUQ5NEQxMzA0NTVGOTM1M0M5MkMzRjIxREVDNDcyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSlyugmbcF1y599qCWIDKFje9 chGkm51XWIqMBB8ipfj0CAwAJi3ScfcySS8RViAdyzlrP1W1pTL18Caz/qbLSkP/ LSmH9YiZ2hCQCjipP7ZtrbFJ3gRC/hzAACYNawhlgLDQAJ6Uid6+nyy9ndYuGQ0g 8nL3XMkcMFCg+5ErBZdcSpwtmzzzOfBhwKTfsU0smKcuU1CouSPt02k4W/qq4Gx9 bE8nGmwJdm8FOAuGegSFMtt1+WaghvToP2MJAyJskN5AGCUkLHLYfD54KOICOmOc aoV131IcEXBU7ZrLzhPvE2+3gI5kL4wkPegA4c3Mvb09MYREyG0lQJEANWMzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUujsKXh2U0TBFX5NTySw/Id7EchkwHwYDVR0j BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC Q0U3Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNmFhMzFhLWRkMGQtNGMxMC1i NWRkLWIxYTgzZmE1Nzc2My8wLzMxMzAzMzJlMzMzMTJlMzEzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx9tMA0GCSqG SIb3DQEBCwUAA4IBAQA8tNGLQJMTkoB4FFj65Y9JQ4cu760ptPt0lO0V/pxqezUc lPUJs4mQ+ey8KgxP388fpZmOgcm7xpX5/Cfy8+/z2FwB8FT43CByDYYO35e1lsuh FqRW8Ekq5UkNOX+KKWfd9t5cIiUkH593c15PrYKJ5qKpVkFP6mBTjBVMNEyukZIu rc38ZzfHaIrgTkOzY+EWgrP4SFZDv6R+tWlYwZU231fPwWBXeTPmJ78zMVLXViHq 3Ot0ChV/qL209BxEjSn06RqdDqVlHP4Q5jvQIk/aUrq/pCPoghAAnj3HCln+7dEZ XFdU/U1fW01pqKLyToGms9+hIvNtfsRoQqlshnfP -----END CERTIFICATE-----Generated at Wed Apr 17 00:10:36 2024 by rpki-client on console-fra.rpki-client.org