$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa File: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: gfSNXO/7tCdEUlvBTifLsPb5YJfDLfnsjOTNQzWLgZA= Subject key identifier: CA:E4:31:58:6F:DF:3A:1A:6F:22:E8:CF:C7:74:D0:E2:55:2D:4B:D9 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 3B278600A276598928989F120DCF23B698CF8517 Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa Signing time: Wed 03 Jan 2024 08:02:03 +0000 ROA not before: Wed 03 Jan 2024 07:57:03 +0000 ROA not after: Wed 01 Jan 2025 08:02:03 +0000 asID: 135478 IP address blocks: 103.121.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 13:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:27:86:00:a2:76:59:89:28:98:9f:12:0d:cf:23:b6:98:cf:85:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: Jan 3 07:57:03 2024 GMT Not After : Jan 1 08:02:03 2025 GMT Subject: CN=CAE431586FDF3A1A6F22E8CFC774D0E2552D4BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:dd:23:7f:e0:03:bd:1a:8c:56:18:a8:2c: 02:df:dc:7e:4c:12:0d:91:83:1c:49:b0:26:f2:5f: 0b:51:86:8f:7a:87:7d:99:d0:4d:39:fa:61:64:f0: ee:54:09:eb:7a:14:c3:46:e5:16:8a:9f:da:8d:b3: 2c:93:0c:86:31:eb:09:40:5c:52:c4:2e:5b:e4:f1: 7c:55:85:b6:75:54:08:31:b0:5a:69:77:4b:5a:ac: 16:3f:e7:4f:ca:6f:b3:15:c8:da:5c:ec:de:60:75: 03:3a:74:95:83:46:c4:db:b4:f1:5b:5f:17:cd:df: 02:5f:d9:1e:8f:c2:5d:bd:bb:e8:61:f4:0b:89:8c: 17:3e:5a:4e:7e:3c:d4:b2:ad:3b:b9:fd:8b:ec:84: 73:72:31:dc:4e:44:a4:d0:34:f3:00:7a:69:48:1f: 51:ac:48:4b:6a:c9:e9:10:5a:0f:e4:23:c4:85:ea: 84:3c:ec:2b:fe:9e:8f:f3:6f:a6:b7:5a:9c:e4:db: 2c:05:cc:e3:05:77:df:d8:21:d6:e1:73:89:ed:c9: b0:fe:1f:f0:37:e7:cb:c4:0f:39:26:21:ae:1a:73: 39:6e:52:84:52:03:1a:81:3a:3f:f9:64:63:37:40: d1:ef:89:e3:32:b6:08:bb:a4:1f:fc:33:bf:c0:90: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E4:31:58:6F:DF:3A:1A:6F:22:E8:CF:C7:74:D0:E2:55:2D:4B:D9 X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.244.0/23 Signature Algorithm: sha256WithRSAEncryption 90:b4:7f:2a:96:7d:1f:74:31:c7:4d:b8:07:6b:7d:3c:95:10: 59:29:72:2e:ea:43:4e:a4:24:f3:31:33:7b:75:04:8d:a9:df: d5:76:90:45:c8:92:3f:ab:d2:9a:ba:3b:68:4f:c2:eb:52:7e: d4:bb:1e:a2:ac:dd:9b:9b:87:73:f8:2f:3e:a8:8b:44:c1:a8: 69:ff:25:ba:fd:f7:8e:3e:2b:9b:18:19:b9:5d:96:87:9d:54: b9:04:57:d6:62:69:63:84:01:9d:78:e6:d9:78:90:ed:ac:57: 0a:d5:e0:27:04:4f:16:ce:32:a1:40:19:56:a2:1a:4e:d0:09: 63:b7:a2:9f:85:61:d9:bb:80:48:ae:ac:21:5c:6e:8d:dc:39: 00:0c:de:12:c9:0c:0d:99:68:97:96:de:ee:7a:05:a4:9b:62: f4:c0:b3:4b:96:df:2e:07:92:be:b8:9e:4b:62:56:36:b3:31: d0:b1:f8:32:73:3a:47:e1:f4:30:2b:62:e6:71:78:01:d7:ec: 9c:e5:eb:7e:5f:40:24:3d:1d:e2:19:e4:4a:0a:93:7e:22:21: 9f:3e:19:ba:23:3a:19:36:6f:f2:14:29:b8:2c:39:e8:35:9b: 25:d4:55:4e:50:31:1c:a4:b6:b0:ac:0e:50:54:8d:65:63:5a: f9:a9:e2:12 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOyeGAKJ2WYkomJ8SDc8jtpjPhRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNDAxMDMwNzU3MDNaFw0yNTAxMDEwODAyMDNaMDMxMTAvBgNV BAMTKENBRTQzMTU4NkZERjNBMUE2RjIyRThDRkM3NzREMEUyNTUyRDRCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYt0jf+ADvRqMVhioLALf3H5M Eg2RgxxJsCbyXwtRho96h32Z0E05+mFk8O5UCet6FMNG5RaKn9qNsyyTDIYx6wlA XFLELlvk8XxVhbZ1VAgxsFppd0tarBY/50/Kb7MVyNpc7N5gdQM6dJWDRsTbtPFb XxfN3wJf2R6Pwl29u+hh9AuJjBc+Wk5+PNSyrTu5/YvshHNyMdxORKTQNPMAemlI H1GsSEtqyekQWg/kI8SF6oQ87Cv+no/zb6a3Wpzk2ywFzOMFd9/YIdbhc4ntybD+ H/A358vEDzkmIa4aczluUoRSAxqBOj/5ZGM3QNHvieMytgi7pB/8M7/AkL/vAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyuQxWG/fOhpvIujPx3TQ4lUtS9kwHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5NWVlOGZjLTZlZmUtNDE1ZC1i NmMxLTBmMGNjY2YyNjE0NC8wLzMxMzAzMzJlMzEzMjMxMmUzMjM0MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnefQwDQYJ KoZIhvcNAQELBQADggEBAJC0fyqWfR90McdNuAdrfTyVEFkpci7qQ06kJPMxM3t1 BI2p39V2kEXIkj+r0pq6O2hPwutSftS7HqKs3Zubh3P4Lz6oi0TBqGn/Jbr9944+ K5sYGbldloedVLkEV9ZiaWOEAZ145tl4kO2sVwrV4CcETxbOMqFAGVaiGk7QCWO3 op+FYdm7gEiurCFcbo3cOQAM3hLJDA2ZaJeW3u56BaSbYvTAs0uW3y4Hkr64nkti VjazMdCx+DJzOkfh9DArYuZxeAHX7Jzl635fQCQ9HeIZ5EoKk34iIZ8+GbojOhk2 b/IUKbgsOeg1myXUVU5QMRyktrCsDlBUjWVjWvmp4hI= -----END CERTIFICATE-----Generated at Tue Apr 30 12:55:39 2024 by rpki-client on console-fra.rpki-client.org