$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa File: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (raw, json) Hash identifier: lKYUujo/wZxeNdciSdEzU7lGgAqVjuJSUCsOAKdUprM= Subject key identifier: 7F:23:93:A5:F1:23:97:3B:62:33:79:2C:61:6F:86:8E:09:44:98:9A Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 3882EE5257C515BA7DC5E6B4251C56A95BF93E14 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa Signing time: Mon 31 Jul 2023 00:09:44 +0000 ROA not before: Mon 31 Jul 2023 00:04:44 +0000 ROA not after: Mon 29 Jul 2024 00:09:44 +0000 asID: 136840 IP address blocks: 103.100.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 19:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:82:ee:52:57:c5:15:ba:7d:c5:e6:b4:25:1c:56:a9:5b:f9:3e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Jul 31 00:04:44 2023 GMT Not After : Jul 29 00:09:44 2024 GMT Subject: CN=7F2393A5F123973B6233792C616F868E0944989A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:5e:93:88:cd:4e:96:c4:57:81:65:9c:d8: 30:40:ac:a6:e3:9e:29:35:83:37:dc:83:3c:d9:61: bc:b8:79:ef:16:1f:01:1d:11:62:11:31:17:53:70: 39:d4:5c:37:1d:49:cf:76:b8:16:df:f0:ae:14:15: 2b:4f:82:a5:47:17:81:c1:fd:ce:1a:06:3b:a6:4b: 18:bb:4f:a7:1f:4f:c8:6e:22:c2:8e:95:55:ab:f9: dd:25:8d:79:e7:44:2e:4d:64:57:37:f3:0b:6f:e6: 94:e4:cd:ed:0e:b9:41:2e:6b:b4:76:5a:66:31:ba: 32:8b:f1:70:ea:60:4c:bd:f6:d1:29:bf:52:f7:00: 5c:38:e8:4c:fc:4e:22:7d:2b:4c:ec:51:92:c0:f6: 8b:6b:b0:61:46:3b:04:2d:00:d8:ab:78:0c:86:01: 2c:17:e1:0b:8a:84:32:a9:05:92:ca:f2:33:d4:1e: 1f:1c:f1:62:bb:66:dd:d6:ba:1a:69:bc:a2:18:a7: 25:03:7c:84:fd:13:05:97:9b:49:ed:79:35:1c:c1: 54:cb:b2:89:93:7f:c3:38:d3:49:19:ea:c4:1f:e4: e3:a5:74:5a:0c:a0:d9:7b:cf:fc:b3:8c:35:30:cd: 40:e8:03:06:be:d5:f4:e0:a8:23:36:d0:5f:d6:b3: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:23:93:A5:F1:23:97:3B:62:33:79:2C:61:6F:86:8E:09:44:98:9A X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.181.0/24 Signature Algorithm: sha256WithRSAEncryption 43:3b:e0:0c:9f:c2:de:35:13:2c:55:d0:25:3f:a5:57:87:8c: 33:44:3e:c3:dd:e5:08:97:da:5a:ce:b4:7a:b2:cd:61:c8:e1: b1:9c:c0:6b:ea:2c:e9:d4:87:fc:12:46:8c:90:2c:c0:f1:54: c5:2a:39:56:ef:00:4a:be:75:6a:f3:ab:37:80:6b:b1:dc:a5: e5:94:67:ca:ee:8c:c6:11:49:bd:37:ee:65:90:9b:14:71:4c: 2d:b0:74:1a:bf:a7:b0:92:67:a0:57:e5:34:98:4f:94:25:71: e2:db:d6:05:1d:86:09:c9:e5:df:b0:e0:8a:9f:e6:7e:39:c5: 42:7b:c2:a4:1e:96:b0:08:5a:e0:b4:4e:7a:ba:df:9a:b7:8f: 45:98:cf:b4:52:1f:7e:b0:d5:c9:34:0d:d7:7a:a2:73:f9:10: c9:bc:62:ad:4e:3c:f3:59:48:8b:59:b6:b2:b2:74:f8:e8:8f: ad:69:9f:eb:72:c9:9e:83:39:36:35:e3:1a:fa:d0:4f:8b:fc: 49:6e:fc:c7:a5:52:42:85:b6:e3:fb:37:f8:71:fb:6a:e7:f2: c6:9e:25:86:2b:36:68:6b:c9:08:44:0e:17:90:5c:d5:e1:26: 71:c4:67:5b:ac:08:a3:1f:f1:1b:f6:8c:17:60:09:a3:c4:89: 61:bd:04:10 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOILuUlfFFbp9xea0JRxWqVv5PhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yMzA3MzEwMDA0NDRaFw0yNDA3MjkwMDA5NDRaMDMxMTAvBgNV BAMTKDdGMjM5M0E1RjEyMzk3M0I2MjMzNzkyQzYxNkY4NjhFMDk0NDk4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8l6TiM1OlsRXgWWc2DBArKbj nik1gzfcgzzZYby4ee8WHwEdEWIRMRdTcDnUXDcdSc92uBbf8K4UFStPgqVHF4HB /c4aBjumSxi7T6cfT8huIsKOlVWr+d0ljXnnRC5NZFc38wtv5pTkze0OuUEua7R2 WmYxujKL8XDqYEy99tEpv1L3AFw46Ez8TiJ9K0zsUZLA9otrsGFGOwQtANireAyG ASwX4QuKhDKpBZLK8jPUHh8c8WK7Zt3WuhppvKIYpyUDfIT9EwWXm0nteTUcwVTL somTf8M400kZ6sQf5OOldFoMoNl7z/yzjDUwzUDoAwa+1fTgqCM20F/Ws5DpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUfyOTpfEjlztiM3ksYW+GjglEmJowHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlZjA4OTAwLWYyYzYtNGQwNy1i Njk0LWQxODhiYWEzYjhmMi8wLzMxMzAzMzJlMzEzMDMwMmUzMTM4MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM0MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZLUwDQYJ KoZIhvcNAQELBQADggEBAEM74Ayfwt41EyxV0CU/pVeHjDNEPsPd5QiX2lrOtHqy zWHI4bGcwGvqLOnUh/wSRoyQLMDxVMUqOVbvAEq+dWrzqzeAa7HcpeWUZ8rujMYR Sb037mWQmxRxTC2wdBq/p7CSZ6BX5TSYT5QlceLb1gUdhgnJ5d+w4Iqf5n45xUJ7 wqQelrAIWuC0Tnq635q3j0WYz7RSH36w1ck0Ddd6onP5EMm8Yq1OPPNZSItZtrKy dPjoj61pn+tyyZ6DOTY14xr60E+L/Elu/MelUkKFtuP7N/hx+2rn8saeJYYrNmhr yQhEDheQXNXhJnHEZ1usCKMf8Rv2jBdgCaPEiWG9BBA= -----END CERTIFICATE-----Generated at Thu Apr 18 18:14:07 2024 by rpki-client on console-fra.rpki-client.org