$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa File: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (raw, json) Hash identifier: i+2ZZzfHCUXCCwROoAhUyzPTUuhD1uyOksffOp6JYQI= Subject key identifier: 1B:E3:94:10:38:D7:1E:EA:3D:BD:6B:E6:0B:42:9E:F0:F5:60:60:9C Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 48FBCAB5C2C576A30F5EA9E239DD14732664BB76 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa Signing time: Sat 12 Aug 2023 12:00:02 +0000 ROA not before: Sat 12 Aug 2023 11:55:02 +0000 ROA not after: Sat 10 Aug 2024 12:00:02 +0000 asID: 136856 IP address blocks: 103.102.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 05:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fb:ca:b5:c2:c5:76:a3:0f:5e:a9:e2:39:dd:14:73:26:64:bb:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Aug 12 11:55:02 2023 GMT Not After : Aug 10 12:00:02 2024 GMT Subject: CN=1BE3941038D71EEA3DBD6BE60B429EF0F560609C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:1c:e4:a0:8a:51:c2:4c:85:08:a0:a8:4f: 81:88:28:85:a4:c4:b5:e4:c0:9a:95:5f:1b:43:b9: 4e:e4:bd:10:c3:85:7b:cf:d1:65:73:1b:aa:9c:79: 67:20:13:7c:fb:0c:20:68:d7:8c:1c:4e:e6:22:5d: c6:95:25:c2:20:11:56:64:72:2c:ca:27:51:25:48: 51:74:20:1c:0c:f5:ea:94:66:3b:18:46:8e:e2:a1: e4:c9:8d:05:cb:cc:69:08:28:63:91:7c:09:5f:66: a4:62:1c:c2:42:34:ba:8f:bf:91:9a:29:dc:92:6d: df:76:bc:67:ae:df:49:ee:1f:1b:74:fd:17:68:97: 35:e3:d7:3f:34:31:db:ee:44:f6:70:ac:6d:7e:68: 32:65:4b:b6:3f:42:9b:29:07:37:8f:3a:2d:83:37: 76:c0:f2:06:7f:ad:b1:9e:55:4f:c0:49:6b:bb:3c: 8f:08:dc:13:5b:e1:c8:8e:9b:86:56:44:b7:10:b7: 2c:22:87:37:67:63:90:58:36:6e:5a:52:ff:b4:ed: 89:5c:3a:f7:71:6e:23:58:fb:66:e3:55:dc:20:6e: 76:15:12:1d:95:1e:7e:14:c2:89:ba:63:45:64:62: 8b:f2:3b:41:92:cb:c0:ea:28:a5:4f:99:c9:47:b1: 1b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E3:94:10:38:D7:1E:EA:3D:BD:6B:E6:0B:42:9E:F0:F5:60:60:9C X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.114.0/24 Signature Algorithm: sha256WithRSAEncryption 10:74:9a:0f:85:1f:dc:48:c7:59:26:49:4d:ae:ec:d9:74:fd: 0f:1f:49:f1:74:5c:f1:a8:18:d6:89:aa:b7:89:7d:e7:80:e8: e8:c7:72:8d:08:ca:7d:98:b6:be:41:26:9e:2b:a6:86:bc:40: 9d:fa:d2:15:7b:c8:18:00:fc:d4:90:14:17:7d:b5:53:08:23: 0b:ff:d0:d4:b9:ff:10:d7:c5:45:7f:84:61:71:bc:46:b0:bd: 79:e3:6a:42:62:78:7a:00:42:ba:89:20:4e:3d:17:7d:31:5d: 0a:ff:aa:bd:57:87:6e:54:64:68:5e:7f:3a:59:50:07:67:7a: 2b:b8:07:f1:e4:4b:98:03:98:4e:0a:5c:74:b1:b8:ff:ce:e9: ec:5e:04:ce:65:ed:1a:ec:22:3d:24:0b:ba:7c:9d:e0:26:06: 92:d2:fa:eb:95:1d:6f:1a:fe:07:95:56:e3:dd:6a:00:6c:17: 76:65:36:ef:17:16:11:1c:5b:80:53:11:26:a6:c4:69:ba:0d: 1b:8b:d1:0a:d2:b2:25:17:f0:d8:86:d3:73:70:4b:67:7c:de: f8:da:ca:67:25:9a:23:9c:54:f6:1e:93:de:7f:44:48:c0:30: 48:ed:56:ef:a3:af:f1:05:7f:ee:8a:b7:03:bc:ab:2d:d8:37: 74:c1:f4:eb -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSPvKtcLFdqMPXqniOd0UcyZku3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yMzA4MTIxMTU1MDJaFw0yNDA4MTAxMjAwMDJaMDMxMTAvBgNV BAMTKDFCRTM5NDEwMzhENzFFRUEzREJENkJFNjBCNDI5RUYwRjU2MDYwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwRzkoIpRwkyFCKCoT4GIKIWk xLXkwJqVXxtDuU7kvRDDhXvP0WVzG6qceWcgE3z7DCBo14wcTuYiXcaVJcIgEVZk cizKJ1ElSFF0IBwM9eqUZjsYRo7ioeTJjQXLzGkIKGORfAlfZqRiHMJCNLqPv5Ga KdySbd92vGeu30nuHxt0/RdolzXj1z80MdvuRPZwrG1+aDJlS7Y/QpspBzePOi2D N3bA8gZ/rbGeVU/ASWu7PI8I3BNb4ciOm4ZWRLcQtywihzdnY5BYNm5aUv+07Ylc OvdxbiNY+2bjVdwgbnYVEh2VHn4Uwom6Y0VkYovyO0GSy8DqKKVPmclHsRsnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUG+OUEDjXHuo9vWvmC0Ke8PVgYJwwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1YzdhNDA0LWViM2YtNGNmMS05 OWY5LTgyNzk2MTY2MWYzMS8wLzMxMzAzMzJlMzEzMDMyMmUzMTMxMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZnIwDQYJ KoZIhvcNAQELBQADggEBABB0mg+FH9xIx1kmSU2u7Nl0/Q8fSfF0XPGoGNaJqreJ feeA6OjHco0Iyn2Ytr5BJp4rpoa8QJ360hV7yBgA/NSQFBd9tVMIIwv/0NS5/xDX xUV/hGFxvEawvXnjakJieHoAQrqJIE49F30xXQr/qr1Xh25UZGhefzpZUAdneiu4 B/HkS5gDmE4KXHSxuP/O6exeBM5l7RrsIj0kC7p8neAmBpLS+uuVHW8a/geVVuPd agBsF3ZlNu8XFhEcW4BTESamxGm6DRuL0QrSsiUX8NiG03NwS2d83vjaymclmiOc VPYek95/REjAMEjtVu+jr/EFf+6KtwO8qy3YN3TB9Os= -----END CERTIFICATE-----Generated at Wed Apr 17 23:08:02 2024 by rpki-client on console-fra.rpki-client.org