$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa File: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (raw, json) Hash identifier: Ipdt/h1gjwfSANY0Qj3LWCJO/TizuVongWPU/2ZIKX4= Subject key identifier: 87:1A:C3:F3:56:AB:5B:67:89:DD:D3:11:93:D5:2C:48:AA:1B:6A:FB Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 340ED4FF9DFCDC32BCD5998F8D75D7D1112E1F89 Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa Signing time: Mon 31 Jul 2023 00:07:29 +0000 ROA not before: Mon 31 Jul 2023 00:02:29 +0000 ROA not after: Mon 29 Jul 2024 00:07:29 +0000 asID: 135480 IP address blocks: 103.76.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 15:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0e:d4:ff:9d:fc:dc:32:bc:d5:99:8f:8d:75:d7:d1:11:2e:1f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Jul 31 00:02:29 2023 GMT Not After : Jul 29 00:07:29 2024 GMT Subject: CN=871AC3F356AB5B6789DDD31193D52C48AA1B6AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:93:6a:13:e3:00:d6:da:00:90:a1:21:c4: 24:e4:dd:cf:1b:34:30:c1:6d:2b:5a:2a:8a:9d:1a: 06:bb:7e:f3:02:0d:b9:4c:0e:37:57:2e:27:e7:36: 67:04:db:1b:c0:05:69:0d:40:20:90:9b:cc:83:2f: 27:a4:8a:13:fa:06:fc:a3:61:9e:80:50:9b:32:fb: 1a:b1:33:a1:dc:fa:cb:cf:a1:ef:16:ed:2b:c7:db: 18:61:a3:a8:56:60:42:2c:f2:59:f0:45:be:f5:18: 3e:e8:d3:3d:5a:f3:6c:a7:30:99:fa:e7:1c:60:97: 9d:1e:28:a6:5e:3d:e9:55:81:a6:b3:7a:b0:e3:53: 8d:06:63:a8:6d:93:d3:d8:e7:9c:25:e1:3b:26:94: ce:9c:17:f9:94:84:f9:01:c3:39:db:29:fc:65:78: 36:dc:14:62:25:bc:ee:fd:62:b5:e7:d2:de:33:4a: a4:e2:9e:88:30:73:81:48:4d:df:7e:fc:04:88:e7: f6:a2:e0:b5:ff:92:58:88:bd:e7:77:00:10:9d:a3: 43:e7:86:a0:4d:b0:e4:3b:9d:08:6c:c3:35:92:2c: 88:fc:19:eb:b7:3d:6a:e3:20:74:e8:12:57:dd:a8: 1c:d0:3a:02:3e:bf:56:88:f1:65:a1:e1:c7:41:ce: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1A:C3:F3:56:AB:5B:67:89:DD:D3:11:93:D5:2C:48:AA:1B:6A:FB X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.200.0/22 Signature Algorithm: sha256WithRSAEncryption 86:79:aa:77:82:f4:1e:ac:d3:5b:9e:ad:ea:92:61:a4:15:28: 00:4d:8b:00:3c:0c:99:9f:50:f7:15:dc:02:6e:af:65:36:9f: 8f:e6:59:9e:ff:df:9c:62:aa:65:4e:91:b6:00:49:fa:e0:54: b6:e1:8a:be:78:fb:d6:b7:b6:eb:99:20:cb:38:01:73:f5:2a: c6:9f:cf:9a:76:50:ee:f1:03:f1:0a:5d:fb:fe:42:4b:bb:70: 27:17:11:64:bc:18:32:02:f4:6e:80:91:34:92:a1:c6:14:dc: 49:f8:89:f0:e3:53:35:81:19:58:b7:49:34:26:39:dd:57:24: fb:e9:79:28:ec:8a:73:fd:4e:f6:4e:2c:a7:31:68:42:c1:ea: 60:d5:39:04:ce:c4:12:2e:bd:a3:38:13:29:11:66:80:da:ee: 7a:06:45:df:ca:22:2f:f8:41:77:0a:3a:f7:32:32:88:ad:05: b7:64:5f:63:34:b3:e8:54:cb:26:75:00:aa:b4:92:da:99:c9: bc:66:4b:0c:29:d3:0c:45:c9:33:d9:82:57:d0:b1:f6:c6:fb: 93:c6:a5:2b:b2:c8:1a:33:ca:92:51:f1:b3:dd:07:47:d6:3d: a2:ad:f6:20:79:88:a3:33:ae:74:6f:16:ff:df:75:49:43:a0: a4:19:f6:c7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNA7U/5383DK81ZmPjXXX0REuH4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yMzA3MzEwMDAyMjlaFw0yNDA3MjkwMDA3MjlaMDMxMTAvBgNV BAMTKDg3MUFDM0YzNTZBQjVCNjc4OURERDMxMTkzRDUyQzQ4QUExQjZBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJJNqE+MA1toAkKEhxCTk3c8b NDDBbStaKoqdGga7fvMCDblMDjdXLifnNmcE2xvABWkNQCCQm8yDLyekihP6Bvyj YZ6AUJsy+xqxM6Hc+svPoe8W7SvH2xhho6hWYEIs8lnwRb71GD7o0z1a82ynMJn6 5xxgl50eKKZePelVgaazerDjU40GY6htk9PY55wl4TsmlM6cF/mUhPkBwznbKfxl eDbcFGIlvO79YrXn0t4zSqTinogwc4FITd9+/ASI5/ai4LX/kliIved3ABCdo0Pn hqBNsOQ7nQhswzWSLIj8Geu3PWrjIHToElfdqBzQOgI+v1aI8WWh4cdBzrgxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhxrD81arW2eJ3dMRk9UsSKobavswHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljMzcwZTZmLWYwYzctNGY0MC04 YmE0LWEwMWU1ZDBjNzRlNC8wLzMxMzAzMzJlMzczNjJlMzIzMDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0zIMA0GCSqG SIb3DQEBCwUAA4IBAQCGeap3gvQerNNbnq3qkmGkFSgATYsAPAyZn1D3FdwCbq9l Np+P5lme/9+cYqplTpG2AEn64FS24Yq+ePvWt7brmSDLOAFz9SrGn8+adlDu8QPx Cl37/kJLu3AnFxFkvBgyAvRugJE0kqHGFNxJ+Inw41M1gRlYt0k0JjndVyT76Xko 7Ipz/U72TiynMWhCwepg1TkEzsQSLr2jOBMpEWaA2u56BkXfyiIv+EF3Cjr3MjKI rQW3ZF9jNLPoVMsmdQCqtJLamcm8ZksMKdMMRckz2YJX0LH2xvuTxqUrssgaM8qS UfGz3QdH1j2irfYgeYijM650bxb/33VJQ6CkGfbH -----END CERTIFICATE-----Generated at Thu Apr 18 06:53:59 2024 by rpki-client on console-fra.rpki-client.org