$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32322d3232203d3e203338353234.roa File: 3130332e33382e3130302e302f32322d3232203d3e203338353234.roa (raw, json) Hash identifier: C4qJzg2Jt2hn/mh2V2mcZcIhD5oI1ea0H1QDbkjiXg4= Subject key identifier: E9:BA:0D:74:27:9D:F6:61:60:83:BD:60:1B:10:AF:D2:90:6C:1D:80 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 690FE74B89A05C239FC050909D9CDC1FA7E9054D Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32322d3232203d3e203338353234.roa Signing time: Mon 31 Jul 2023 00:05:37 +0000 ROA not before: Mon 31 Jul 2023 00:00:37 +0000 ROA not after: Mon 29 Jul 2024 00:05:37 +0000 asID: 38524 IP address blocks: 103.38.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 08:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0f:e7:4b:89:a0:5c:23:9f:c0:50:90:9d:9c:dc:1f:a7:e9:05:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jul 31 00:00:37 2023 GMT Not After : Jul 29 00:05:37 2024 GMT Subject: CN=E9BA0D74279DF6616083BD601B10AFD2906C1D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:77:09:a0:5f:a2:e0:bc:39:9f:10:b0:b0: ea:06:b0:3f:ce:6b:31:16:1e:df:6b:8d:a4:35:b8: d4:5c:5d:e4:08:fa:dd:ad:07:8a:0c:64:d8:ec:b7: 88:c4:d7:f7:ba:92:86:44:6d:25:98:4a:dd:86:a4: db:8f:69:9a:2e:9f:a4:4f:49:2c:9d:43:fb:97:c1: 30:13:b8:b5:3b:e2:da:69:be:dd:d2:28:d6:10:58: 26:36:19:45:2c:1e:27:2c:44:2f:79:c9:7c:92:70: f0:fc:87:aa:45:77:10:59:7a:87:98:40:79:00:de: 73:97:cc:27:a1:6e:61:33:73:c2:5e:3f:b1:2c:50: 97:40:e0:81:5c:1a:3b:0d:df:cb:5d:55:ac:50:a6: a1:cc:81:be:7a:7f:f6:a0:b1:4e:bf:40:a7:e1:19: e2:ee:90:9a:6c:48:28:73:a3:c1:59:b5:eb:ac:15: 69:c8:25:54:bd:e8:c7:2c:cf:4d:c2:bf:c7:ee:3b: 18:7f:b5:ed:f3:b4:f8:46:c1:bc:43:a5:9e:99:cd: fb:be:85:e3:55:65:4d:0d:2b:01:33:48:18:a4:08: 16:81:07:1d:47:77:6a:ca:4a:ee:0e:4c:55:25:3d: ba:18:a1:54:9a:dd:8b:49:4d:d1:cd:88:ab:b6:34: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:0D:74:27:9D:F6:61:60:83:BD:60:1B:10:AF:D2:90:6C:1D:80 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32322d3232203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.100.0/22 Signature Algorithm: sha256WithRSAEncryption 34:b8:fb:36:3b:f6:9a:2d:96:ce:58:17:0b:fb:1d:5d:ae:98: 2f:7e:c8:11:a3:dd:d4:48:6b:1e:0a:3c:cd:7a:a7:dd:d4:dd: d0:a6:f5:0b:89:e1:a6:7e:66:08:9e:cc:8f:90:e5:6a:6c:b8: dc:b0:b2:6a:3e:ab:e0:5d:fd:fd:72:3b:14:98:70:8c:7a:25: 24:ef:45:58:b7:cb:1f:f6:78:0e:cf:bf:90:64:54:79:f8:18: 80:22:85:1b:9d:99:bb:de:11:5e:c1:a6:7b:7a:80:a9:39:0a: 36:16:b4:64:97:66:76:a7:91:a9:e7:bc:4d:e9:d0:11:cc:f9: bc:60:c9:70:da:ce:70:35:6b:14:90:c0:95:f6:07:da:92:a1: 13:27:59:ee:05:a1:d9:d7:9a:19:32:50:8c:fa:fc:eb:25:48: a5:b3:16:3b:00:76:fa:ed:12:02:f0:53:0f:14:7d:23:36:db: d5:e4:d0:cb:21:01:c6:d8:b9:b7:02:ca:eb:89:19:5a:2a:be: 1e:12:cb:32:db:19:cf:ff:40:c0:71:48:1f:f7:f1:b9:d1:32: c1:d8:47:c6:88:57:da:31:b5:f2:87:e9:6a:2b:d0:42:d5:e1: a2:77:9d:8e:fc:d2:b7:3d:96:d0:d8:8f:86:44:52:6d:ab:8e: 56:8c:9e:ed -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaQ/nS4mgXCOfwFCQnZzcH6fpBU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yMzA3MzEwMDAwMzdaFw0yNDA3MjkwMDA1MzdaMDMxMTAvBgNV BAMTKEU5QkEwRDc0Mjc5REY2NjE2MDgzQkQ2MDFCMTBBRkQyOTA2QzFEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCib3cJoF+i4Lw5nxCwsOoGsD/O azEWHt9rjaQ1uNRcXeQI+t2tB4oMZNjst4jE1/e6koZEbSWYSt2GpNuPaZoun6RP SSydQ/uXwTATuLU74tppvt3SKNYQWCY2GUUsHicsRC95yXyScPD8h6pFdxBZeoeY QHkA3nOXzCehbmEzc8JeP7EsUJdA4IFcGjsN38tdVaxQpqHMgb56f/agsU6/QKfh GeLukJpsSChzo8FZteusFWnIJVS96Mcsz03Cv8fuOxh/te3ztPhGwbxDpZ6Zzfu+ heNVZU0NKwEzSBikCBaBBx1Hd2rKSu4OTFUlPboYoVSa3YtJTdHNiKu2NKLFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6boNdCed9mFgg71gGxCv0pBsHYAwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMxMzAzMzJlMzMzODJlMzEzMDMwMmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzMzODM1MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcmZDANBgkqhkiG 9w0BAQsFAAOCAQEANLj7Njv2mi2WzlgXC/sdXa6YL37IEaPd1EhrHgo8zXqn3dTd 0Kb1C4nhpn5mCJ7Mj5Dlamy43LCyaj6r4F39/XI7FJhwjHolJO9FWLfLH/Z4Ds+/ kGRUefgYgCKFG52Zu94RXsGme3qAqTkKNha0ZJdmdqeRqee8TenQEcz5vGDJcNrO cDVrFJDAlfYH2pKhEydZ7gWh2deaGTJQjPr86yVIpbMWOwB2+u0SAvBTDxR9Izbb 1eTQyyEBxti5twLK64kZWiq+HhLLMtsZz/9AwHFIH/fxudEywdhHxohX2jG18ofp aivQQtXhonedjvzStz2W0NiPhkRSbauOVoye7Q== -----END CERTIFICATE-----Generated at Tue Apr 23 18:27:44 2024 by rpki-client on console-fra.rpki-client.org