$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa File: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (raw, json) Hash identifier: x67r2B14IjWrI46BbltBp0HpYPdGfuGnQVBssYHeV2U= Subject key identifier: AB:3A:FB:FE:B9:02:F2:D5:DD:5A:38:B6:32:AC:F3:96:4E:77:44:8C Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 1BA1B507DBE61526D7BB53EE84257BC8C00080C7 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa Signing time: Fri 30 Jun 2023 16:00:01 +0000 ROA not before: Fri 30 Jun 2023 15:55:01 +0000 ROA not after: Fri 28 Jun 2024 16:00:01 +0000 asID: 136840 IP address blocks: 103.100.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a1:b5:07:db:e6:15:26:d7:bb:53:ee:84:25:7b:c8:c0:00:80:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Jun 30 15:55:01 2023 GMT Not After : Jun 28 16:00:01 2024 GMT Subject: CN=AB3AFBFEB902F2D5DD5A38B632ACF3964E77448C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:64:27:2c:65:1c:0c:b6:9b:27:32:08:fe: 90:63:76:f2:7d:13:71:19:de:43:fe:63:81:87:6d: 96:2a:79:e0:bc:ae:5f:4f:fc:99:22:96:72:8a:d0: 36:d9:3b:18:83:ea:db:9c:bd:7f:f9:00:8b:2f:ca: 08:03:e7:78:56:6c:cb:51:52:ff:a1:a1:be:45:55: 27:7b:38:49:24:52:b7:00:97:7b:a0:49:81:6c:17: 74:e4:bf:08:93:d3:1b:d6:30:ed:ac:5f:80:53:a7: 53:0a:80:20:53:e2:a6:69:29:29:d3:23:50:d9:da: 43:99:73:07:9f:62:2c:21:dc:7e:60:2f:7c:a7:03: 85:77:76:60:26:08:46:28:75:07:7b:af:2c:e1:f7: d1:2a:da:f0:9a:62:16:e2:62:6f:d4:80:7c:48:2c: b9:cd:0f:18:7b:80:98:73:17:e3:ee:41:f6:ed:7f: 35:4b:95:ba:de:e6:bd:fc:9e:8a:f6:be:bb:17:0c: 80:e5:af:61:b8:e5:8d:57:54:5b:59:d4:26:36:5b: ee:88:77:ea:9c:75:9c:38:11:76:54:73:3f:a5:77: 5b:2e:03:73:a4:06:cf:d6:09:6f:7a:29:d9:ea:21: c7:51:d4:55:3d:71:ee:9a:e6:27:79:ee:00:c9:fa: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3A:FB:FE:B9:02:F2:D5:DD:5A:38:B6:32:AC:F3:96:4E:77:44:8C X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.180.0/22 Signature Algorithm: sha256WithRSAEncryption 33:81:e4:71:65:e0:2e:ac:a3:3b:f1:de:3b:af:65:95:bd:87: 1c:1a:c8:76:5f:8b:4a:aa:03:34:14:c9:d5:f2:f7:70:11:71: 6a:3c:e1:8d:bd:5c:99:5a:66:60:19:5c:e1:8d:3a:6f:c4:d0: f9:d7:fe:e1:d6:65:4c:6c:56:4d:a7:0e:86:76:03:b1:31:d7: 4f:23:44:46:00:69:f4:59:2c:53:40:c9:0e:ba:b8:f5:0a:0f: bd:a8:e1:47:16:11:53:fd:d7:76:71:22:a7:15:70:28:9d:23: 92:80:75:52:8f:a1:00:ce:31:2d:df:6d:08:f6:55:2f:71:cc: a7:fc:e1:72:62:e7:16:71:b2:8f:76:f7:95:a4:78:c1:b9:39: d0:6c:cc:6b:92:3d:8f:a9:0e:f1:bc:82:1c:8d:19:f3:9e:8e: 4f:b3:10:3f:95:c8:6d:7e:39:62:f1:40:f7:ba:e2:ba:86:5f: fb:1b:6a:ed:41:df:67:49:cd:27:a1:36:c7:82:53:53:16:7c: 8e:ca:41:b5:dd:6c:46:65:65:c8:7a:a3:4c:a8:39:2c:2e:f1: 28:92:fd:e7:98:b3:91:78:b5:6e:e3:c6:33:65:ad:73:11:3d: 6c:eb:b7:9e:ee:77:46:05:bf:cb:d0:39:e8:f0:e9:14:df:c2: 2f:5f:1c:f8 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUG6G1B9vmFSbXu1PuhCV7yMAAgMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yMzA2MzAxNTU1MDFaFw0yNDA2MjgxNjAwMDFaMDMxMTAvBgNV BAMTKEFCM0FGQkZFQjkwMkYyRDVERDVBMzhCNjMyQUNGMzk2NEU3NzQ0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSWQnLGUcDLabJzII/pBjdvJ9 E3EZ3kP+Y4GHbZYqeeC8rl9P/JkilnKK0DbZOxiD6tucvX/5AIsvyggD53hWbMtR Uv+hob5FVSd7OEkkUrcAl3ugSYFsF3TkvwiT0xvWMO2sX4BTp1MKgCBT4qZpKSnT I1DZ2kOZcwefYiwh3H5gL3ynA4V3dmAmCEYodQd7ryzh99Eq2vCaYhbiYm/UgHxI LLnNDxh7gJhzF+PuQfbtfzVLlbre5r38nor2vrsXDIDlr2G45Y1XVFtZ1CY2W+6I d+qcdZw4EXZUcz+ld1suA3OkBs/WCW96KdnqIcdR1FU9ce6a5id57gDJ+kybAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUqzr7/rkC8tXdWji2Mqzzlk53RIwwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlZjA4OTAwLWYyYzYtNGQwNy1i Njk0LWQxODhiYWEzYjhmMi8wLzMxMzAzMzJlMzEzMDMwMmUzMTM4MzAyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzYzODM0MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnZLQwDQYJ KoZIhvcNAQELBQADggEBADOB5HFl4C6sozvx3juvZZW9hxwayHZfi0qqAzQUydXy 93ARcWo84Y29XJlaZmAZXOGNOm/E0PnX/uHWZUxsVk2nDoZ2A7Ex108jREYAafRZ LFNAyQ66uPUKD72o4UcWEVP913ZxIqcVcCidI5KAdVKPoQDOMS3fbQj2VS9xzKf8 4XJi5xZxso9295WkeMG5OdBszGuSPY+pDvG8ghyNGfOejk+zED+VyG1+OWLxQPe6 4rqGX/sbau1B32dJzSehNseCU1MWfI7KQbXdbEZlZch6o0yoOSwu8SiS/eeYs5F4 tW7jxjNlrXMRPWzrt57ud0YFv8vQOejw6RTfwi9fHPg= -----END CERTIFICATE-----Generated at Sat May 4 17:59:03 2024 by rpki-client on console-fra.rpki-client.org