$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137302e302f32342d3234203d3e203234323036.roa File: 3131302e34342e3137302e302f32342d3234203d3e203234323036.roa (raw, json) Hash identifier: WhR5aCDo709k1+Zht6gBTe0Ks4BMzNFKoAL1xzVK+bQ= Subject key identifier: 53:5B:40:1F:C9:5E:D4:17:2B:5C:5F:80:7C:6F:A7:94:5C:42:88:E2 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 2D27EC89C867F72D6BE3F9A54F891CBD475A4C38 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137302e302f32342d3234203d3e203234323036.roa Signing time: Fri 29 Sep 2023 15:18:02 +0000 ROA not before: Fri 29 Sep 2023 15:13:02 +0000 ROA not after: Fri 27 Sep 2024 15:18:02 +0000 asID: 24206 IP address blocks: 110.44.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:27:ec:89:c8:67:f7:2d:6b:e3:f9:a5:4f:89:1c:bd:47:5a:4c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Sep 29 15:13:02 2023 GMT Not After : Sep 27 15:18:02 2024 GMT Subject: CN=535B401FC95ED4172B5C5F807C6FA7945C4288E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:74:8c:d3:93:8b:9c:eb:b9:86:74:dd:9b: 86:8e:7d:9d:a7:60:22:83:f8:62:fb:54:6b:c7:8f: 61:ef:3d:12:1a:b3:26:ee:a1:d8:8d:ad:75:8f:7a: 85:db:e8:2f:ca:8b:fe:ba:ed:ce:33:86:ce:fa:d7: 63:e5:f9:7e:67:ac:ed:02:f5:c6:47:75:c7:1c:68: 2d:fd:03:98:da:ea:f4:84:0f:d7:c9:23:f1:07:ef: 26:69:ad:94:68:a9:e7:e4:e0:0a:94:b0:c4:64:e8: 92:92:fe:e0:99:11:7f:4e:3a:42:19:ff:47:41:c6: 25:43:f6:b6:c4:53:a6:27:26:43:11:8e:9e:2d:f1: 71:ca:9b:44:e9:24:8b:6e:f7:e4:10:6a:ee:cf:f3: 02:53:bd:41:18:51:ad:ce:3b:da:00:9e:72:aa:25: 14:4b:3f:42:fd:61:87:af:57:b7:5c:70:a5:6c:e7: f3:42:d0:b8:34:ba:f8:b9:b8:8a:5d:23:8a:da:40: 8c:d2:35:21:dc:ad:cf:04:e2:41:5b:a5:d9:52:76: c8:da:bb:02:05:06:16:a3:2c:e2:85:85:d1:24:93: f2:9f:14:51:b7:3d:45:53:80:49:f6:a5:a6:ac:48: 1c:6f:c0:1d:90:a8:c0:2c:36:dd:bb:bd:9b:15:2f: 24:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5B:40:1F:C9:5E:D4:17:2B:5C:5F:80:7C:6F:A7:94:5C:42:88:E2 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137302e302f32342d3234203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.44.170.0/24 Signature Algorithm: sha256WithRSAEncryption 47:8d:c3:ac:d4:1d:18:5a:68:4f:3c:2f:2c:57:82:8e:99:2b: ac:bd:28:7a:e3:a8:b7:af:cc:ab:3f:40:5b:7c:1a:5e:29:2d: f8:54:42:1d:3d:4d:b9:4c:74:2c:da:6f:8b:de:be:5e:6d:01: 0e:4f:df:b8:1c:2c:79:c6:a3:dc:f7:df:5c:a1:7c:15:17:43: 2d:5f:50:ab:80:b6:33:8a:43:64:24:e8:cc:b3:00:7b:28:91: 5d:ed:91:17:7c:ff:89:5c:9b:45:06:62:cb:1d:c0:c1:de:fa: 63:8c:c2:6e:cf:4a:8c:22:bb:68:53:77:bb:55:5f:1c:73:ad: 26:17:4b:82:75:88:14:03:25:a9:a1:17:80:52:dc:8c:bc:52: 73:67:63:25:3c:b6:75:81:37:a7:52:25:99:9b:a4:43:84:e1: d2:45:8d:98:fc:5b:fc:df:f2:7a:25:0a:ad:cb:3d:e2:e7:1b: ad:32:61:2d:6e:7d:6d:19:5f:bc:ef:d3:0f:1c:45:c2:e1:d7: 5e:db:54:68:e7:83:29:22:fd:fe:2f:da:a5:8f:e4:dc:92:cf: 18:da:f5:09:fe:68:4b:e7:73:f6:40:29:1f:ab:6e:49:ed:d9: 8b:0b:61:d4:89:8e:18:4b:6a:06:17:9b:d4:77:78:e4:b6:6a: 08:8a:d7:f9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULSfsichn9y1r4/mlT4kcvUdaTDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yMzA5MjkxNTEzMDJaFw0yNDA5MjcxNTE4MDJaMDMxMTAvBgNV BAMTKDUzNUI0MDFGQzk1RUQ0MTcyQjVDNUY4MDdDNkZBNzk0NUM0Mjg4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsDnSM05OLnOu5hnTdm4aOfZ2n YCKD+GL7VGvHj2HvPRIasybuodiNrXWPeoXb6C/Ki/667c4zhs7612Pl+X5nrO0C 9cZHdcccaC39A5ja6vSED9fJI/EH7yZprZRoqefk4AqUsMRk6JKS/uCZEX9OOkIZ /0dBxiVD9rbEU6YnJkMRjp4t8XHKm0TpJItu9+QQau7P8wJTvUEYUa3OO9oAnnKq JRRLP0L9YYevV7dccKVs5/NC0Lg0uvi5uIpdI4raQIzSNSHcrc8E4kFbpdlSdsja uwIFBhajLOKFhdEkk/KfFFG3PUVTgEn2paasSBxvwB2QqMAsNt27vZsVLyQXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUU1tAH8le1BcrXF+AfG+nlFxCiOIwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG4sqjANBgkqhkiG 9w0BAQsFAAOCAQEAR43DrNQdGFpoTzwvLFeCjpkrrL0oeuOot6/Mqz9AW3waXikt +FRCHT1NuUx0LNpvi96+Xm0BDk/fuBwsecaj3PffXKF8FRdDLV9Qq4C2M4pDZCTo zLMAeyiRXe2RF3z/iVybRQZiyx3Awd76Y4zCbs9KjCK7aFN3u1VfHHOtJhdLgnWI FAMlqaEXgFLcjLxSc2djJTy2dYE3p1IlmZukQ4Th0kWNmPxb/N/yeiUKrcs94ucb rTJhLW59bRlfvO/TDxxFwuHXXttUaOeDKSL9/i/apY/k3JLPGNr1Cf5oS+dz9kAp H6tuSe3Ziwth1ImOGEtqBheb1Hd45LZqCIrX+Q== -----END CERTIFICATE-----Generated at Thu May 2 08:50:11 2024 by rpki-client on console-fra.rpki-client.org