$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32342d3234203d3e203234323036.roa File: 3131302e34342e3137342e302f32342d3234203d3e203234323036.roa (raw, json) Hash identifier: MHagHnPl30BF0NDaOaJx1INmhqZcDwpdUzOh+zw7M+8= Subject key identifier: 05:2A:09:C7:9B:B7:AA:F9:04:A0:77:BE:93:C4:6F:63:89:D8:C9:FC Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 665957C8CD4CF97EABCFF752C2D08BEDDAB1AE07 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32342d3234203d3e203234323036.roa Signing time: Fri 29 Sep 2023 15:19:28 +0000 ROA not before: Fri 29 Sep 2023 15:14:28 +0000 ROA not after: Fri 27 Sep 2024 15:19:28 +0000 asID: 24206 IP address blocks: 110.44.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:59:57:c8:cd:4c:f9:7e:ab:cf:f7:52:c2:d0:8b:ed:da:b1:ae:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Sep 29 15:14:28 2023 GMT Not After : Sep 27 15:19:28 2024 GMT Subject: CN=052A09C79BB7AAF904A077BE93C46F6389D8C9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:cc:65:33:f3:d6:62:5a:b6:b0:fc:71:ef: f2:29:51:a1:b2:08:d3:6b:d8:5a:3e:4d:dc:a6:c4: c0:f6:f4:32:50:af:2a:c8:da:10:78:e8:f8:e3:7b: f3:0f:81:b0:2d:28:20:55:2b:0d:4e:52:18:49:5e: 8c:65:d9:96:2e:6b:4c:4c:29:75:08:de:f5:00:3e: 3e:61:3d:b2:fc:d6:01:4f:b9:47:83:29:dc:a0:3f: 55:a7:64:8b:bb:fd:62:4e:44:4a:a1:d8:43:11:c5: 3c:48:2a:b9:7e:e5:77:bc:11:55:0b:16:0b:40:9c: d2:e9:1d:5e:b6:ab:81:f2:6f:e6:ee:43:65:3d:eb: d6:2c:b3:cd:2e:34:48:51:e6:9e:e2:57:d2:0e:59: 5b:2d:18:b7:44:49:25:f4:40:05:97:9e:25:b1:50: f0:c8:30:46:45:b0:2a:ca:b4:cd:a0:66:de:1d:2a: 24:d3:d2:65:2b:39:7d:a3:d2:8c:b5:dd:fa:bc:a7: 40:c1:69:8d:ea:17:85:64:65:21:8f:10:30:b4:af: cd:75:9a:9e:95:83:97:e1:03:8b:7f:86:24:73:8d: bc:c3:6d:a1:68:ab:fd:6c:df:19:d8:31:31:c1:bd: a5:ae:81:c5:b3:63:6a:3c:16:32:b8:7c:cf:bb:28: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2A:09:C7:9B:B7:AA:F9:04:A0:77:BE:93:C4:6F:63:89:D8:C9:FC X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32342d3234203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.44.174.0/24 Signature Algorithm: sha256WithRSAEncryption 49:65:21:68:13:86:80:9f:1f:b1:7a:90:c8:d9:5b:f6:a5:25: 6d:c6:e2:b9:67:1e:5a:fc:f3:c5:a3:ab:e7:9c:4d:43:04:dd: e7:f9:64:9f:6c:37:c5:2a:bb:f1:00:da:61:ea:d9:0f:45:4b: c2:b4:8f:a9:9e:de:92:00:46:07:e9:66:f5:d4:a1:f8:6a:b9: 2f:69:99:a1:72:03:a0:83:2a:e8:b4:12:c9:19:61:62:24:d6: 83:70:91:bf:52:c2:a6:ca:49:4b:0e:29:29:f0:6a:7f:76:3f: 01:9f:94:11:ef:a8:08:4f:0c:83:62:d5:8c:e0:6b:f0:49:68: 2a:1a:90:bf:fe:3a:c9:14:2e:49:bb:f8:ab:c0:fc:32:02:47: 23:b8:cd:6f:85:cc:db:63:e0:46:8d:8d:1e:8f:ee:8b:ae:d4: b6:87:13:33:b0:ba:9f:d6:f2:80:b2:b2:a3:60:d0:ee:8c:a2: b3:d6:f8:04:16:4f:e3:58:c8:a9:94:a2:b2:66:ca:a5:0f:1c: 93:38:20:f2:4a:f3:dd:25:40:9c:55:06:07:be:97:64:b4:b1: f6:0d:ab:c9:ef:be:d1:5b:67:83:ee:48:75:2c:90:1b:c6:bb: 9b:b2:cc:9b:84:8c:4b:bd:85:ed:ff:e3:b2:7b:63:51:ba:1e: a5:a9:4f:25 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZllXyM1M+X6rz/dSwtCL7dqxrgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yMzA5MjkxNTE0MjhaFw0yNDA5MjcxNTE5MjhaMDMxMTAvBgNV BAMTKDA1MkEwOUM3OUJCN0FBRjkwNEEwNzdCRTkzQzQ2RjYzODlEOEM5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTv8xlM/PWYlq2sPxx7/IpUaGy CNNr2Fo+TdymxMD29DJQryrI2hB46Pjje/MPgbAtKCBVKw1OUhhJXoxl2ZYua0xM KXUI3vUAPj5hPbL81gFPuUeDKdygP1WnZIu7/WJOREqh2EMRxTxIKrl+5Xe8EVUL FgtAnNLpHV62q4Hyb+buQ2U969Yss80uNEhR5p7iV9IOWVstGLdESSX0QAWXniWx UPDIMEZFsCrKtM2gZt4dKiTT0mUrOX2j0oy13fq8p0DBaY3qF4VkZSGPEDC0r811 mp6Vg5fhA4t/hiRzjbzDbaFoq/1s3xnYMTHBvaWugcWzY2o8FjK4fM+7KJi/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUBSoJx5u3qvkEoHe+k8RvY4nYyfwwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG4srjANBgkqhkiG 9w0BAQsFAAOCAQEASWUhaBOGgJ8fsXqQyNlb9qUlbcbiuWceWvzzxaOr55xNQwTd 5/lkn2w3xSq78QDaYerZD0VLwrSPqZ7ekgBGB+lm9dSh+Gq5L2mZoXIDoIMq6LQS yRlhYiTWg3CRv1LCpspJSw4pKfBqf3Y/AZ+UEe+oCE8Mg2LVjOBr8EloKhqQv/46 yRQuSbv4q8D8MgJHI7jNb4XM22PgRo2NHo/ui67UtocTM7C6n9bygLKyo2DQ7oyi s9b4BBZP41jIqZSismbKpQ8ckzgg8krz3SVAnFUGB76XZLSx9g2rye++0Vtng+5I dSyQG8a7m7LMm4SMS72F7f/jsntjUboepalPJQ== -----END CERTIFICATE-----Generated at Thu May 2 10:17:06 2024 by rpki-client on console-ams.rpki-client.org