$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e33312e3131302e302f32332d3234203d3e203435323837.roa File: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (raw, json) Hash identifier: kui4ZivxNZ9Q3imWjNih9ERmYVIHPMxv7b6absdtP8c= Subject key identifier: F1:3A:84:6B:59:1E:53:D7:BB:3F:DA:27:DE:87:7F:C2:EC:79:05:29 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 245B0ADC9D58F77C4D1E25711AF82B5F54452B76 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e33312e3131302e302f32332d3234203d3e203435323837.roa Signing time: Mon 08 Jan 2024 08:19:24 +0000 ROA not before: Mon 08 Jan 2024 08:14:24 +0000 ROA not after: Mon 06 Jan 2025 08:19:24 +0000 asID: 45287 IP address blocks: 103.31.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5b:0a:dc:9d:58:f7:7c:4d:1e:25:71:1a:f8:2b:5f:54:45:2b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Jan 8 08:14:24 2024 GMT Not After : Jan 6 08:19:24 2025 GMT Subject: CN=F13A846B591E53D7BB3FDA27DE877FC2EC790529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:fc:b9:9d:27:cd:8c:0f:ce:f6:a9:7d:2a: 85:fd:4a:2b:01:22:48:74:20:b9:1a:85:ee:07:70: 0c:a8:51:49:ef:be:5d:97:e3:cd:c3:c9:05:3d:70: 16:0d:fc:71:8a:5c:a2:f6:66:6f:62:93:ce:47:37: ea:ac:0b:1b:3f:22:aa:9c:58:f9:0d:c8:f1:80:30: b8:8d:83:3c:d7:2a:e8:c8:ae:6d:24:1f:aa:1d:73: ca:75:8e:15:cd:37:a4:6f:df:b0:fd:ea:66:9a:18: d0:b7:6e:72:48:69:88:50:79:94:bb:5c:7f:7a:87: c6:15:38:ed:be:16:59:ca:cf:9c:05:9e:32:e0:5a: 33:bd:2b:20:d2:ff:8c:b2:f1:4f:90:62:fd:77:78: 8c:43:6c:b1:40:0d:fa:fd:ea:63:c9:34:41:04:bf: 58:b4:59:47:10:e4:d4:55:9d:5a:55:71:bc:20:26: f0:6b:48:13:bd:72:ef:33:d5:aa:75:39:93:3b:8a: 36:75:77:ca:b0:7e:92:28:22:da:82:72:bf:81:e2: 9f:9e:8e:4e:da:09:4c:ab:7d:1f:90:65:9c:99:12: 50:02:84:4f:25:65:2c:9d:e9:7f:35:16:2d:6b:77: 88:28:ea:7f:72:50:30:87:40:b3:40:f9:39:2b:20: 30:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3A:84:6B:59:1E:53:D7:BB:3F:DA:27:DE:87:7F:C2:EC:79:05:29 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e33312e3131302e302f32332d3234203d3e203435323837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.110.0/23 Signature Algorithm: sha256WithRSAEncryption a4:8f:8c:ba:4d:65:31:c2:16:91:2e:cf:e6:6e:00:3e:46:fb: 3e:40:b0:da:6d:08:dd:5a:2c:00:c3:b3:1a:f6:a0:e2:07:16: da:61:36:64:ce:33:31:76:3c:ab:19:a5:f1:a0:63:32:72:c1: 99:b8:ef:fd:2a:53:82:9e:90:ac:5f:fe:2b:f4:8c:3f:5a:cb: 65:73:c3:b4:5b:1c:98:fd:c0:23:d6:34:cb:82:05:92:c8:d3: 71:b5:bc:d8:22:83:7f:a7:6c:17:f9:c2:da:ec:1f:0b:25:a3: e9:42:94:8f:04:3e:28:e3:10:b8:f8:e5:ba:0f:ec:30:fe:ad: f0:ea:db:b1:4a:31:89:19:b3:ae:25:f9:b6:6c:f9:52:64:0f: 35:25:57:4b:f4:a1:69:df:2b:08:37:f2:aa:6c:59:5c:12:70: e4:b7:1f:9e:a4:26:c9:53:1c:cd:6a:74:a3:af:63:8d:1a:a2: d1:fe:6a:1c:99:0f:fa:4b:f2:5f:2e:46:55:1c:c0:60:c0:fa: 76:ee:75:35:67:6a:bd:78:8e:b6:a3:ee:c1:af:12:8a:a2:b7: 28:e3:d7:81:72:96:c9:98:82:08:a0:81:85:40:68:88:b1:e9: 48:50:bf:33:66:f9:cf:71:32:6b:59:9a:d9:61:1f:a2:c4:55: cc:cd:1a:87 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJFsK3J1Y93xNHiVxGvgrX1RFK3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNDAxMDgwODE0MjRaFw0yNTAxMDYwODE5MjRaMDMxMTAvBgNV BAMTKEYxM0E4NDZCNTkxRTUzRDdCQjNGREEyN0RFODc3RkMyRUM3OTA1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YPy5nSfNjA/O9ql9KoX9SisB Ikh0ILkahe4HcAyoUUnvvl2X483DyQU9cBYN/HGKXKL2Zm9ik85HN+qsCxs/Iqqc WPkNyPGAMLiNgzzXKujIrm0kH6odc8p1jhXNN6Rv37D96maaGNC3bnJIaYhQeZS7 XH96h8YVOO2+FlnKz5wFnjLgWjO9KyDS/4yy8U+QYv13eIxDbLFADfr96mPJNEEE v1i0WUcQ5NRVnVpVcbwgJvBrSBO9cu8z1ap1OZM7ijZ1d8qwfpIoItqCcr+B4p+e jk7aCUyrfR+QZZyZElAChE8lZSyd6X81Fi1rd4go6n9yUDCHQLNA+TkrIDCDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8TqEa1keU9e7P9on3od/wux5BSkwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i MDY3LWEwYzZhODQwYTNhOS8wLzMxMzAzMzJlMzMzMTJlMzEzMTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcfbjANBgkqhkiG 9w0BAQsFAAOCAQEApI+Muk1lMcIWkS7P5m4APkb7PkCw2m0I3VosAMOzGvag4gcW 2mE2ZM4zMXY8qxml8aBjMnLBmbjv/SpTgp6QrF/+K/SMP1rLZXPDtFscmP3AI9Y0 y4IFksjTcbW82CKDf6dsF/nC2uwfCyWj6UKUjwQ+KOMQuPjlug/sMP6t8OrbsUox iRmzriX5tmz5UmQPNSVXS/Shad8rCDfyqmxZXBJw5LcfnqQmyVMczWp0o69jjRqi 0f5qHJkP+kvyXy5GVRzAYMD6du51NWdqvXiOtqPuwa8SiqK3KOPXgXKWyZiCCKCB hUBoiLHpSFC/M2b5z3Eya1ma2WEfosRVzM0ahw== -----END CERTIFICATE-----Generated at Wed May 1 22:05:26 2024 by rpki-client on console-fra.rpki-client.org