$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa File: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (raw, json) Hash identifier: APTpfGDy/sEuwEzv3qOTAqPrUEh5Hjkd2ZxnM+KpS9w= Subject key identifier: F8:AA:B7:CC:8D:D8:64:31:60:A4:D2:0D:05:40:F6:27:B3:F9:B0:9A Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 325C56ADD0033DD9BC6FE81FC94679A6DF8F30AE Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa Signing time: Mon 31 Jul 2023 00:14:28 +0000 ROA not before: Mon 31 Jul 2023 00:09:28 +0000 ROA not after: Mon 29 Jul 2024 00:14:28 +0000 asID: 24529 IP address blocks: 103.217.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 05:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5c:56:ad:d0:03:3d:d9:bc:6f:e8:1f:c9:46:79:a6:df:8f:30:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Jul 31 00:09:28 2023 GMT Not After : Jul 29 00:14:28 2024 GMT Subject: CN=F8AAB7CC8DD8643160A4D20D0540F627B3F9B09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:e9:30:a5:7a:60:e5:17:70:27:88:b1:34: 13:28:04:83:86:60:7d:3d:17:34:25:72:51:d7:8d: 93:72:ca:0d:12:63:03:b7:4a:39:ff:b4:9f:28:30: 1f:3a:c9:01:ae:11:a6:a6:47:33:e2:09:5b:91:ed: c3:09:78:23:e8:10:f8:76:a8:fe:97:1a:9c:2b:6f: f3:8d:72:73:22:d5:f7:4f:40:fc:9e:e8:06:6f:ae: c3:1e:7a:17:24:58:51:e9:23:da:df:fc:ab:aa:15: e4:64:5b:ee:86:71:c8:e3:d3:72:c3:2e:1d:6c:19: fa:2e:7f:7d:93:02:73:d5:f9:31:31:13:22:f0:a1: 96:3e:46:7b:41:c6:08:4c:e3:45:9d:a3:e1:80:b6: 12:b5:63:d6:d9:60:c2:0b:90:81:0d:39:02:85:01: 19:68:68:76:70:5d:a9:42:0c:92:5f:0f:b0:e2:f0: 46:da:40:75:e1:06:e6:fb:3d:a8:a7:35:4d:68:ba: 01:bf:26:e7:d5:bb:97:46:c9:ee:c4:fc:22:9e:3c: 07:dd:0e:69:52:9e:fb:3f:78:d6:25:9d:61:7e:ee: 7d:dc:21:3b:07:2a:4f:d1:52:f3:98:6e:cf:4b:3e: de:df:18:69:fa:f0:39:7b:58:92:df:f8:1d:b9:49: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AA:B7:CC:8D:D8:64:31:60:A4:D2:0D:05:40:F6:27:B3:F9:B0:9A X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.216.0/24 Signature Algorithm: sha256WithRSAEncryption af:75:8d:86:73:6e:e6:01:83:ee:25:dd:98:2b:b2:4c:32:62: d5:81:5d:cf:2b:5c:26:73:c0:a8:32:7f:2b:dc:18:e6:31:24: 1d:f4:7e:1b:39:6f:98:b2:aa:52:4a:ac:62:8e:07:17:03:f8: c4:ef:dd:06:35:c3:9f:2d:05:ea:79:a9:a8:f0:14:42:80:04: 95:59:a3:c0:86:e4:36:5d:be:d4:b7:69:c6:f7:27:41:75:a7: cb:c3:fe:5b:28:b6:a2:b2:d5:ec:d5:cc:7a:76:22:5a:83:27: 3c:05:a9:f6:be:10:0d:e8:50:00:07:9e:69:b2:f6:a9:16:76: c6:3e:ea:8e:8a:f3:6a:d9:61:39:f2:1e:23:b0:ae:bb:f9:fd: 9b:71:04:f4:12:23:bc:a6:ca:67:bf:ad:45:4b:3f:84:ce:c6: d9:bf:3e:f1:88:91:a5:d2:3c:7a:8d:0d:51:18:39:70:e9:45: eb:5b:6a:28:dc:8d:f4:97:1e:88:d2:ba:a8:20:29:e8:80:dc: 30:86:42:c2:31:d9:3d:aa:e5:39:6c:36:8f:aa:40:2f:03:32: a3:47:a1:64:25:89:72:8a:ad:02:ca:b6:a8:c4:34:a4:08:1c: 8a:f8:1e:72:60:ee:b1:81:6d:c6:e6:3e:8f:d0:f0:51:79:71: 8e:21:2b:6d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMlxWrdADPdm8b+gfyUZ5pt+PMK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yMzA3MzEwMDA5MjhaFw0yNDA3MjkwMDE0MjhaMDMxMTAvBgNV BAMTKEY4QUFCN0NDOEREODY0MzE2MEE0RDIwRDA1NDBGNjI3QjNGOUIwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92ekwpXpg5RdwJ4ixNBMoBIOG YH09FzQlclHXjZNyyg0SYwO3Sjn/tJ8oMB86yQGuEaamRzPiCVuR7cMJeCPoEPh2 qP6XGpwrb/ONcnMi1fdPQPye6AZvrsMeehckWFHpI9rf/KuqFeRkW+6Gccjj03LD Lh1sGfouf32TAnPV+TExEyLwoZY+RntBxghM40Wdo+GAthK1Y9bZYMILkIENOQKF ARloaHZwXalCDJJfD7Di8EbaQHXhBub7PainNU1ougG/JufVu5dGye7E/CKePAfd DmlSnvs/eNYlnWF+7n3cITsHKk/RUvOYbs9LPt7fGGn68Dl7WJLf+B25SZdxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+Kq3zI3YZDFgpNINBUD2J7P5sJowHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyMmY1MTUyLWEyOTUtNDdiNy1h ZGRjLWZiZmVmMzI0N2UzYi8wLzMxMzAzMzJlMzIzMTM3MmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9nYMA0GCSqG SIb3DQEBCwUAA4IBAQCvdY2Gc27mAYPuJd2YK7JMMmLVgV3PK1wmc8CoMn8r3Bjm MSQd9H4bOW+YsqpSSqxijgcXA/jE790GNcOfLQXqeamo8BRCgASVWaPAhuQ2Xb7U t2nG9ydBdafLw/5bKLaistXs1cx6diJagyc8Ban2vhAN6FAAB55psvapFnbGPuqO ivNq2WE58h4jsK67+f2bcQT0EiO8pspnv61FSz+EzsbZvz7xiJGl0jx6jQ1RGDlw 6UXrW2oo3I30lx6I0rqoICnogNwwhkLCMdk9quU5bDaPqkAvAzKjR6FkJYlyiq0C yraoxDSkCByK+B5yYO6xgW3G5j6P0PBReXGOIStt -----END CERTIFICATE-----Generated at Thu Apr 18 00:45:36 2024 by rpki-client on console-fra.rpki-client.org