$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa File: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (raw, json) Hash identifier: 9sjXHzh+gDGpkNtn/t6qQ/V18SafvTmnORPgSdmEdiw= Subject key identifier: 79:57:E6:A8:C1:77:57:01:39:BF:75:0A:3B:90:03:88:2A:A3:77:3A Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Certificate serial: 6390A15D3882194212E355488870228D594E4821 Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa Signing time: Thu 02 Nov 2023 11:00:00 +0000 ROA not before: Thu 02 Nov 2023 10:55:00 +0000 ROA not after: Thu 31 Oct 2024 11:00:00 +0000 asID: 141607 IP address blocks: 103.220.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 02:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:90:a1:5d:38:82:19:42:12:e3:55:48:88:70:22:8d:59:4e:48:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Validity Not Before: Nov 2 10:55:00 2023 GMT Not After : Oct 31 11:00:00 2024 GMT Subject: CN=7957E6A8C177570139BF750A3B9003882AA3773A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:51:b0:af:ac:25:61:3b:dc:77:4f:41:67: 79:54:d8:8e:80:bc:18:75:93:bb:63:0e:82:b4:b2: 38:0e:0d:2a:5f:79:4c:3e:5f:10:9a:73:46:50:9e: fa:e0:e8:37:cf:55:c9:21:8f:ba:a4:b5:b2:40:1a: 1d:60:5c:63:cf:e6:01:70:56:d1:c0:ab:3f:53:8d: 0d:f3:61:8d:4c:ae:e8:2e:2a:44:7e:d7:20:e5:49: 50:f9:0c:48:4c:00:03:ad:0b:f5:c6:2f:36:13:1b: 1d:98:98:65:d6:a1:5c:c6:3c:e5:6d:a9:98:75:1b: 82:b5:f5:5a:56:a6:40:eb:2a:40:dc:e9:cf:0c:a8: b2:57:d7:0d:74:36:95:14:c9:89:8c:f4:b7:62:2b: c2:1a:69:e2:4d:b8:54:25:a8:59:df:c7:4c:06:53: 0a:4a:a5:df:3b:5c:dd:05:06:39:4f:08:1f:89:7b: d3:a1:bb:86:b9:fe:58:43:4b:35:c3:e9:ce:58:83: 93:af:c0:af:c1:a0:0a:a9:c5:4d:0d:cb:85:fd:ae: d2:3e:ea:16:db:87:fb:7e:4a:3e:3e:ce:ec:a3:71: a6:62:4d:73:0e:7c:b3:f3:1a:d8:c2:8b:62:60:ee: c5:89:4f:25:8b:ad:70:32:89:ea:1d:dd:5e:8e:1b: 0b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:57:E6:A8:C1:77:57:01:39:BF:75:0A:3B:90:03:88:2A:A3:77:3A X509v3 Authority Key Identifier: keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.22.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:ad:16:14:61:dc:bc:9c:f5:f5:68:90:2c:47:2a:bc:82:fd: f4:c0:18:4c:4c:be:f2:f6:11:a6:80:17:d8:ff:39:9e:6e:62: d5:24:77:62:2c:2a:f0:2a:7e:a5:2d:ad:8d:be:ca:e0:b2:1b: bb:2e:9a:b4:05:e0:84:4b:b1:d4:72:bd:3c:38:09:f8:9d:a5: 58:1f:99:ce:e4:57:16:13:2a:41:20:c1:50:a2:49:ee:47:e8: 7f:f5:24:e1:c7:ed:81:39:0e:83:c4:30:ab:42:d8:42:44:2a: 7d:bb:d2:0c:c1:8c:6d:a4:a4:97:e5:d6:df:21:41:31:37:61: 06:b8:20:9f:97:be:cd:03:a5:7c:39:1f:8e:aa:82:f1:28:7f: 20:43:a2:e5:77:6a:09:d7:b9:ef:73:3f:51:04:7d:85:41:54: 22:39:b1:00:2a:0e:c1:f0:5d:bd:be:ec:8e:3b:03:04:3c:b5: 20:21:1f:ed:4e:92:bf:fd:f5:e9:56:e5:18:e7:72:82:18:de: 70:28:27:c9:47:e5:20:cc:1c:2a:c5:8c:ce:e0:e6:25:f2:04: d8:53:d3:2a:c8:61:d7:0e:6f:89:0a:6d:0b:cc:ec:ac:8c:0d: 13:bd:45:6b:64:e7:c7:a8:6f:d8:19:75:37:4b:64:b1:ca:fa: ab:0e:87:0c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUY5ChXTiCGUIS41VIiHAijVlOSCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVE OEJBMzg2MjAeFw0yMzExMDIxMDU1MDBaFw0yNDEwMzExMTAwMDBaMDMxMTAvBgNV BAMTKDc5NTdFNkE4QzE3NzU3MDEzOUJGNzUwQTNCOTAwMzg4MkFBMzc3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QFGwr6wlYTvcd09BZ3lU2I6A vBh1k7tjDoK0sjgODSpfeUw+XxCac0ZQnvrg6DfPVckhj7qktbJAGh1gXGPP5gFw VtHAqz9TjQ3zYY1MruguKkR+1yDlSVD5DEhMAAOtC/XGLzYTGx2YmGXWoVzGPOVt qZh1G4K19VpWpkDrKkDc6c8MqLJX1w10NpUUyYmM9LdiK8IaaeJNuFQlqFnfx0wG UwpKpd87XN0FBjlPCB+Je9Ohu4a5/lhDSzXD6c5Yg5OvwK/BoAqpxU0Ny4X9rtI+ 6hbbh/t+Sj4+zuyjcaZiTXMOfLPzGtjCi2Jg7sWJTyWLrXAyieod3V6OGwvBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeVfmqMF3VwE5v3UKO5ADiCqjdzowHwYDVR0j BBgwFoAUdx0KucRFsoyIf9e6GN7FFdi6OGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMC83NzFEMEFCOUM0 NDVCMjhDODg3RkQ3QkExOERFQzUxNUQ4QkEzODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVEOEJB Mzg2Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYWQ2YTNmLTZjYTAtNDY2OS05 OGY3LTZmMzQ4MzdmYWE2Mi8wLzMxMzAzMzJlMzIzMjMwMmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9wWMA0GCSqG SIb3DQEBCwUAA4IBAQAarRYUYdy8nPX1aJAsRyq8gv30wBhMTL7y9hGmgBfY/zme bmLVJHdiLCrwKn6lLa2Nvsrgshu7Lpq0BeCES7HUcr08OAn4naVYH5nO5FcWEypB IMFQoknuR+h/9SThx+2BOQ6DxDCrQthCRCp9u9IMwYxtpKSX5dbfIUExN2EGuCCf l77NA6V8OR+OqoLxKH8gQ6Lld2oJ17nvcz9RBH2FQVQiObEAKg7B8F29vuyOOwME PLUgIR/tTpK//fXpVuUY53KCGN5wKCfJR+UgzBwqxYzO4OYl8gTYU9MqyGHXDm+J Cm0LzOysjA0TvUVrZOfHqG/YGXU3S2SxyvqrDocM -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:50 2024 by rpki-client on console-ams.rpki-client.org