$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa File: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: RXntz4xQdjEpFbNfWf/MZIAblJ5/vN10Mq0BH/lS+s8= Subject key identifier: CF:F8:9D:D0:B4:F4:21:EB:82:0A:9A:FB:81:DD:75:5F:FA:AE:FB:2D Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E Certificate serial: 1FF7FDB9C30E9751DD4FCC82E08756B7D541FDDA Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa Signing time: Tue 08 Aug 2023 17:17:13 +0000 ROA not before: Tue 08 Aug 2023 17:12:13 +0000 ROA not after: Tue 06 Aug 2024 17:17:13 +0000 asID: 23679 IP address blocks: 103.238.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f7:fd:b9:c3:0e:97:51:dd:4f:cc:82:e0:87:56:b7:d5:41:fd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E Validity Not Before: Aug 8 17:12:13 2023 GMT Not After : Aug 6 17:17:13 2024 GMT Subject: CN=CFF89DD0B4F421EB820A9AFB81DD755FFAAEFB2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:7b:dd:18:d3:8c:54:1a:7e:91:6e:91:ae: 6b:a1:36:5f:0d:ec:b4:b3:22:48:f7:6c:eb:ee:eb: 72:55:23:50:cc:f5:a6:76:30:0a:55:f5:e1:e4:b8: e8:00:ee:26:3d:c2:0d:0e:e5:b5:c3:9c:46:bb:76: 09:f7:cf:f1:63:36:1d:22:07:79:25:51:77:e2:15: 4d:ed:9e:6a:0d:c6:cd:f8:43:97:05:2f:00:b8:b1: de:fb:ad:87:71:d9:fe:0b:4d:76:d6:5a:17:39:96: 21:1d:10:f4:55:df:93:d1:1b:af:28:9a:23:f3:80: f7:94:d8:eb:c6:8b:82:c8:b0:ac:bd:6a:16:21:2d: 25:6b:fd:18:f5:14:08:ad:8e:43:a7:d3:89:1f:aa: 47:61:4f:9f:cc:ef:7e:55:d2:c3:9c:2c:35:9f:e6: 06:d1:0c:e7:8d:84:cf:cb:85:ad:01:2a:08:39:19: 0c:94:31:35:2b:bf:31:fb:45:87:f7:9a:89:98:1b: 28:fa:06:74:44:8a:0c:0f:4d:02:9e:0e:58:04:2b: c7:51:86:64:9b:27:02:f9:3d:c8:c5:29:69:0c:ee: f9:ca:64:a8:78:20:ad:30:55:20:c2:75:4b:89:9d: 3f:e2:5b:ce:5a:b7:90:38:da:e3:c7:36:7d:d1:48: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F8:9D:D0:B4:F4:21:EB:82:0A:9A:FB:81:DD:75:5F:FA:AE:FB:2D X509v3 Authority Key Identifier: keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.202.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:43:bd:31:2e:f9:8d:0d:5a:6d:bf:78:a3:0e:19:25:ea:a8: 0b:6f:43:df:1c:f8:45:76:79:c0:50:8f:a5:fe:c4:de:c2:57: 1d:7b:93:ba:fd:4e:c3:26:83:4e:8c:6b:86:4f:44:45:01:20: c9:34:be:0c:6b:7e:e4:a4:43:46:ba:24:ca:2e:1b:f1:8c:cb: 68:8b:84:7d:79:b5:c6:dd:8e:b2:29:93:38:7b:e0:19:14:49: dd:eb:f6:01:ae:18:f9:ac:27:20:58:94:8b:3f:2c:29:d9:a2: 22:5c:4d:d3:44:53:f5:9e:a0:58:d9:54:4e:0b:d9:a3:34:79: cd:1b:71:60:a7:17:bf:36:57:91:3f:da:a1:52:db:38:50:c3: 29:64:1a:62:95:a5:fe:de:9c:98:c7:6f:6d:49:6b:1e:4e:5e: 35:25:8d:1b:c5:d7:bc:d3:39:bc:17:85:c2:e7:94:bb:48:33: ab:24:a5:52:0a:9c:75:4d:cd:db:ba:05:7c:29:03:ae:16:ce: f1:1a:55:b4:d6:02:11:36:4e:a7:d8:d4:94:42:53:f2:77:9d: e3:0f:c6:e1:4d:f5:81:4e:8b:20:89:1e:78:b3:eb:d5:a2:a7: c0:a4:7d:68:75:38:3f:22:48:62:d0:4e:4b:86:00:90:96:01: b2:7f:50:b3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUH/f9ucMOl1HdT8yC4IdWt9VB/dowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC NTlCRjkxRTAeFw0yMzA4MDgxNzEyMTNaFw0yNDA4MDYxNzE3MTNaMDMxMTAvBgNV BAMTKENGRjg5REQwQjRGNDIxRUI4MjBBOUFGQjgxREQ3NTVGRkFBRUZCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5O3vdGNOMVBp+kW6RrmuhNl8N 7LSzIkj3bOvu63JVI1DM9aZ2MApV9eHkuOgA7iY9wg0O5bXDnEa7dgn3z/FjNh0i B3klUXfiFU3tnmoNxs34Q5cFLwC4sd77rYdx2f4LTXbWWhc5liEdEPRV35PRG68o miPzgPeU2OvGi4LIsKy9ahYhLSVr/Rj1FAitjkOn04kfqkdhT5/M735V0sOcLDWf 5gbRDOeNhM/Lha0BKgg5GQyUMTUrvzH7RYf3momYGyj6BnREigwPTQKeDlgEK8dR hmSbJwL5PcjFKWkM7vnKZKh4IK0wVSDCdUuJnT/iW85at5A42uPHNn3RSHRNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUz/id0LT0IeuCCpr7gd11X/qu+y0wHwYDVR0j BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC RjkxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMxMzAzMzJlMzIzMzM4MmUzMjMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+7KMA0GCSqG SIb3DQEBCwUAA4IBAQBLQ70xLvmNDVptv3ijDhkl6qgLb0PfHPhFdnnAUI+l/sTe wlcde5O6/U7DJoNOjGuGT0RFASDJNL4Ma37kpENGuiTKLhvxjMtoi4R9ebXG3Y6y KZM4e+AZFEnd6/YBrhj5rCcgWJSLPywp2aIiXE3TRFP1nqBY2VROC9mjNHnNG3Fg pxe/NleRP9qhUts4UMMpZBpilaX+3pyYx29tSWseTl41JY0bxde80zm8F4XC55S7 SDOrJKVSCpx1Tc3bugV8KQOuFs7xGlW01gIRNk6n2NSUQlPyd53jD8bhTfWBTosg iR54s+vVoqfApH1odTg/Ikhi0E5LhgCQlgGyf1Cz -----END CERTIFICATE-----Generated at Sat May 4 02:34:29 2024 by rpki-client on console-fra.rpki-client.org