$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38362e302f32342d3234203d3e203137373237.roa File: 3131302e33352e38362e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: JDWtyGCM2PT5PU2xHtOZi8Xmhw7Si9LP5iGnfE3FDYg= Subject key identifier: 7B:63:97:F3:AB:5D:E1:53:DD:0F:81:27:41:52:FF:34:CF:A4:CE:32 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 78E73F1AA40B448E54B06CF2FE0D70A34D84A0AD Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38362e302f32342d3234203d3e203137373237.roa Signing time: Sun 29 Oct 2023 07:00:00 +0000 ROA not before: Sun 29 Oct 2023 06:55:00 +0000 ROA not after: Sun 27 Oct 2024 07:00:00 +0000 asID: 17727 IP address blocks: 110.35.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e7:3f:1a:a4:0b:44:8e:54:b0:6c:f2:fe:0d:70:a3:4d:84:a0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 06:55:00 2023 GMT Not After : Oct 27 07:00:00 2024 GMT Subject: CN=7B6397F3AB5DE153DD0F81274152FF34CFA4CE32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:d1:ff:5f:d3:eb:35:76:21:ba:ef:0f:b5: 48:d4:fa:81:73:eb:9e:12:07:7e:1a:e7:98:1b:44: b9:26:8f:bb:3c:fe:23:ae:16:d9:33:27:d0:b3:f8: c8:31:58:57:a7:c2:3c:ac:c4:7d:a1:8d:c5:07:6f: f2:01:7a:ba:2e:3b:62:45:31:63:6e:58:b7:04:3d: d6:f2:49:57:db:38:4d:76:ec:7b:08:1e:05:3c:c4: 36:c3:75:e2:2a:60:bd:12:95:2b:49:f5:32:37:d3: 82:9f:58:e3:9d:32:4d:27:da:97:d7:94:0a:80:e8: 98:ae:82:ec:de:21:b3:bf:7f:f1:88:59:0d:d7:9b: 58:56:9b:90:6e:10:3c:82:41:03:d3:0b:7e:70:62: 25:36:e5:e4:91:11:59:9f:54:18:6c:93:a8:9b:a5: 1e:8f:04:ec:e2:7c:95:02:c7:0d:93:dd:bc:7c:42: ba:da:14:4a:a4:d7:d4:31:18:39:fa:0b:d4:01:67: 97:ff:0e:fc:67:a6:40:63:f8:43:9d:91:b7:97:14: c2:0c:27:1d:e5:ef:c4:4a:f7:06:20:9b:f9:40:a4: 88:45:38:ca:a7:b3:be:2d:d2:95:59:6e:82:68:9d: 26:53:a9:28:ca:f5:52:b4:9c:3f:8a:91:77:03:11: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:63:97:F3:AB:5D:E1:53:DD:0F:81:27:41:52:FF:34:CF:A4:CE:32 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38362e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.35.86.0/24 Signature Algorithm: sha256WithRSAEncryption 15:1c:2e:4a:a8:b7:21:50:b7:65:91:36:d5:1a:41:fe:42:f4: 86:c8:62:51:d9:54:22:ca:c9:d6:61:cc:95:1f:74:95:30:a3: 77:f7:31:a2:0e:a4:fb:52:01:66:24:d4:97:e1:7b:a9:c7:fb: 21:e6:d6:fe:f6:3f:aa:4a:3b:0b:ed:19:e6:5e:d1:1c:4f:09: c3:7d:b0:61:3a:0e:6b:f0:35:70:d1:66:a5:1d:03:7d:bf:d8: 10:13:33:89:51:bf:ac:4e:e5:64:d9:aa:e7:f4:12:36:bd:4f: f5:54:02:2b:f5:cd:10:18:6a:dd:7f:c3:98:f1:82:91:fd:ba: ca:da:62:6f:9e:4d:b6:c9:12:d9:67:1d:61:75:ea:c3:28:10: 5f:6f:82:19:f9:4c:fd:13:85:54:7c:cc:81:b7:bc:ad:20:bc: 07:a2:f2:62:2c:a6:67:d6:1c:6b:01:dc:14:e4:30:37:57:74: 92:de:d8:d5:77:b2:f6:fd:87:02:eb:a3:eb:68:87:c7:72:de: 7f:b8:60:9d:ff:83:02:0a:01:2a:70:90:0f:86:24:43:91:f6: 48:f3:b1:e1:67:5a:0a:54:04:88:84:6f:3b:47:6d:c7:58:b9: 44:f7:a9:35:a2:f7:c7:a7:24:34:1d:7d:a8:94:8c:a7:fc:4c: 2a:4f:c3:d1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUeOc/GqQLRI5UsGzy/g1wo02EoK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNjU1MDBaFw0yNDEwMjcwNzAwMDBaMDMxMTAvBgNV BAMTKDdCNjM5N0YzQUI1REUxNTNERDBGODEyNzQxNTJGRjM0Q0ZBNENFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMtH/X9PrNXYhuu8PtUjU+oFz 654SB34a55gbRLkmj7s8/iOuFtkzJ9Cz+MgxWFenwjysxH2hjcUHb/IBerouO2JF MWNuWLcEPdbySVfbOE127HsIHgU8xDbDdeIqYL0SlStJ9TI304KfWOOdMk0n2pfX lAqA6JiuguzeIbO/f/GIWQ3Xm1hWm5BuEDyCQQPTC35wYiU25eSREVmfVBhsk6ib pR6PBOzifJUCxw2T3bx8QrraFEqk19QxGDn6C9QBZ5f/DvxnpkBj+EOdkbeXFMIM Jx3l78RK9wYgm/lApIhFOMqns74t0pVZboJonSZTqSjK9VK0nD+KkXcDEapJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUe2OX86td4VPdD4EnQVL/NM+kzjIwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzMDJlMzMzNTJlMzgzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuI1YwDQYJKoZIhvcN AQELBQADggEBABUcLkqotyFQt2WRNtUaQf5C9IbIYlHZVCLKydZhzJUfdJUwo3f3 MaIOpPtSAWYk1Jfhe6nH+yHm1v72P6pKOwvtGeZe0RxPCcN9sGE6DmvwNXDRZqUd A32/2BATM4lRv6xO5WTZquf0Eja9T/VUAiv1zRAYat1/w5jxgpH9usraYm+eTbbJ EtlnHWF16sMoEF9vghn5TP0ThVR8zIG3vK0gvAei8mIspmfWHGsB3BTkMDdXdJLe 2NV3svb9hwLro+toh8dy3n+4YJ3/gwIKASpwkA+GJEOR9kjzseFnWgpUBIiEbztH bcdYuUT3qTWi98enJDQdfaiUjKf8TCpPw9E= -----END CERTIFICATE-----Generated at Wed May 1 19:11:08 2024 by rpki-client on console-fra.rpki-client.org