$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa File: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (raw, json) Hash identifier: ZjAatsMbqem2M1+X3kvcjs774YMqFrhWPF0EDDLVfTA= Subject key identifier: 1E:22:A0:26:7F:98:7F:99:3F:56:B2:07:6C:55:1E:B1:F2:87:59:56 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 0B3B77CB58EB75BCB9902B9C801B7746892E343B Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa Signing time: Thu 04 Jan 2024 06:17:12 +0000 ROA not before: Thu 04 Jan 2024 06:12:12 +0000 ROA not after: Thu 02 Jan 2025 06:17:12 +0000 asID: 138128 IP address blocks: 103.96.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3b:77:cb:58:eb:75:bc:b9:90:2b:9c:80:1b:77:46:89:2e:34:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Jan 4 06:12:12 2024 GMT Not After : Jan 2 06:17:12 2025 GMT Subject: CN=1E22A0267F987F993F56B2076C551EB1F2875956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:10:be:47:5e:51:dc:30:32:78:05:46:a7: ee:03:60:00:1d:c6:b2:ea:31:cc:12:83:9d:04:56: 74:1a:6d:ae:47:58:dc:39:ed:72:f6:fe:33:59:cd: 81:6b:49:b7:72:d1:bc:4a:07:c1:06:56:f1:cc:1a: a4:05:2e:4e:e1:81:a5:34:3c:e6:ba:ea:c3:f0:0a: 52:03:c0:05:73:29:ff:f4:24:16:49:da:11:17:73: 99:69:9d:60:8b:68:0a:99:fd:87:d8:c0:84:8f:61: 64:0d:c5:0e:c0:9f:70:53:df:59:43:2d:e6:ba:fa: 5b:f7:a8:70:13:f7:b8:92:d5:cc:97:91:5c:bf:e4: 2e:c7:77:62:42:f7:bf:de:58:92:7e:1e:94:ce:0f: d9:6a:9e:77:d0:aa:9c:8e:6f:ef:53:df:76:37:08: 97:01:2c:f2:56:e9:7d:81:d0:60:92:a9:e9:9c:73: 90:92:84:ff:0d:c5:a6:e9:67:35:31:a5:e6:37:81: c7:25:e5:39:74:9b:a1:d5:5e:6e:e7:98:c7:72:8b: d4:cd:87:45:ee:74:00:57:63:31:d2:8b:2d:71:2a: e2:67:d4:e0:d4:85:14:1a:76:c5:be:de:71:34:b9: bc:04:09:b4:3b:6f:5f:db:2e:7c:0e:49:d1:cf:14: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:22:A0:26:7F:98:7F:99:3F:56:B2:07:6C:55:1E:B1:F2:87:59:56 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.145.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:56:c5:c4:5f:8e:0b:77:76:92:28:14:d3:ac:85:36:fb:5b: f5:2f:71:5b:32:db:b4:52:db:e2:0c:f1:07:64:3e:83:63:1e: 1f:7b:e8:1b:1c:0e:4d:80:2d:f6:b6:63:38:1e:b3:ec:55:9c: 65:d8:9e:c3:be:3f:20:f3:10:12:40:b4:cf:c0:c0:cf:92:3a: b4:5d:65:fd:2e:ab:ca:6d:7a:25:12:24:a0:2f:ff:2c:56:c8: 6f:79:18:63:04:88:6d:f2:1d:c0:7f:67:32:de:cf:6f:5c:42: d1:10:89:82:60:6f:8f:9c:af:cf:3f:4b:ed:18:2b:1e:e2:7f: 5a:28:00:01:24:51:40:b5:dd:ff:fc:be:ee:33:92:7b:04:4b: b0:f4:be:b4:19:e1:c3:cf:08:7f:ab:92:f7:78:d2:eb:13:62: cb:19:a8:36:33:c4:4e:bd:88:7e:c3:63:5a:95:61:2f:ce:29: d7:5c:25:01:e7:e7:9d:59:d9:c8:38:0f:f0:01:b8:5d:2a:9e: 99:88:27:b5:09:11:dd:5c:9c:38:24:e7:ed:17:4d:f0:d9:73: 5f:53:83:be:09:3e:f2:a9:d6:46:b4:6e:e6:a0:55:1b:51:2a: 20:d8:2f:4f:51:f9:17:ba:a9:b4:dd:21:3f:83:05:35:11:ed: 34:51:f8:b9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCzt3y1jrdby5kCucgBt3RokuNDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNDAxMDQwNjEyMTJaFw0yNTAxMDIwNjE3MTJaMDMxMTAvBgNV BAMTKDFFMjJBMDI2N0Y5ODdGOTkzRjU2QjIwNzZDNTUxRUIxRjI4NzU5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExhC+R15R3DAyeAVGp+4DYAAd xrLqMcwSg50EVnQaba5HWNw57XL2/jNZzYFrSbdy0bxKB8EGVvHMGqQFLk7hgaU0 POa66sPwClIDwAVzKf/0JBZJ2hEXc5lpnWCLaAqZ/YfYwISPYWQNxQ7An3BT31lD Lea6+lv3qHAT97iS1cyXkVy/5C7Hd2JC97/eWJJ+HpTOD9lqnnfQqpyOb+9T33Y3 CJcBLPJW6X2B0GCSqemcc5CShP8NxabpZzUxpeY3gccl5Tl0m6HVXm7nmMdyi9TN h0XudABXYzHSiy1xKuJn1ODUhRQadsW+3nE0ubwECbQ7b1/bLnwOSdHPFDY7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHiKgJn+Yf5k/VrIHbFUesfKHWVYwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4MjYxYzM3LTU5YTUtNDM2OS05 MWU1LTRiMTM2NjAxMGM2ZC8wLzMxMzAzMzJlMzkzNjJlMzEzNDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2CRMA0GCSqG SIb3DQEBCwUAA4IBAQBvVsXEX44Ld3aSKBTTrIU2+1v1L3FbMtu0UtviDPEHZD6D Yx4fe+gbHA5NgC32tmM4HrPsVZxl2J7Dvj8g8xASQLTPwMDPkjq0XWX9LqvKbXol EiSgL/8sVshveRhjBIht8h3Af2cy3s9vXELREImCYG+PnK/PP0vtGCse4n9aKAAB JFFAtd3//L7uM5J7BEuw9L60GeHDzwh/q5L3eNLrE2LLGag2M8ROvYh+w2NalWEv zinXXCUB5+edWdnIOA/wAbhdKp6ZiCe1CRHdXJw4JOftF03w2XNfU4O+CT7yqdZG tG7moFUbUSog2C9PUfkXuqm03SE/gwU1Ee00Ufi5 -----END CERTIFICATE-----Generated at Wed May 1 19:11:28 2024 by rpki-client on console-fra.rpki-client.org