$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37362e302f32342d3234203d3e203233363739.roa File: 3130332e3131342e37362e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: Di4bxTeHVZAGALpcAJOfAd5SAJgetpbmq8aeWJaZ+aw= Subject key identifier: AF:98:1C:BE:33:89:73:C5:EF:12:EF:7D:C6:96:95:F4:CF:31:31:0D Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 77B52CA4EACC16E3A903A4D971D2778F03B0B7F7 Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37362e302f32342d3234203d3e203233363739.roa Signing time: Sat 23 Sep 2023 11:00:02 +0000 ROA not before: Sat 23 Sep 2023 10:55:02 +0000 ROA not after: Sat 21 Sep 2024 11:00:02 +0000 asID: 23679 IP address blocks: 103.114.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b5:2c:a4:ea:cc:16:e3:a9:03:a4:d9:71:d2:77:8f:03:b0:b7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: Sep 23 10:55:02 2023 GMT Not After : Sep 21 11:00:02 2024 GMT Subject: CN=AF981CBE338973C5EF12EF7DC69695F4CF31310D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:a4:9c:c3:2e:0a:da:1b:46:3b:32:84:16: 37:0f:2a:f7:72:74:38:16:3d:d1:71:b8:88:d3:02: f4:55:2d:bc:50:b6:b0:a8:18:6d:45:f5:dd:2c:34: c5:e7:01:5f:7b:bb:70:56:7e:4b:8b:8d:bc:60:ba: 14:49:22:33:7c:4f:3d:61:99:5f:a9:a6:58:d2:f5: 5c:28:40:e0:0a:be:1d:2c:31:6d:57:ab:2e:63:12: a7:47:8c:e8:7c:5c:2a:70:59:e3:f7:02:18:c1:5d: f6:42:21:ca:29:a4:9c:e1:30:f5:38:c8:47:ea:25: f5:ae:36:ce:03:31:59:e9:fd:dd:99:34:f5:40:97: aa:b3:e6:c3:2e:4d:78:b4:bd:ca:03:f5:48:e5:66: c6:af:8a:ae:be:ae:dd:f8:08:d8:c9:08:ab:7e:bd: a6:87:f5:55:6d:95:cf:0c:de:95:b5:79:cb:4d:a4: bf:8a:98:c5:9b:57:c7:e9:33:23:b2:6c:03:28:32: 02:6a:19:18:eb:d1:00:3e:8f:f8:a2:1a:d6:b9:4f: 88:b3:dd:6b:22:76:63:9b:0d:09:20:51:fe:08:a7: c5:ee:68:cf:6d:46:dd:0c:06:83:0f:b9:74:5d:af: 3d:7c:18:61:1d:bd:db:43:97:73:e4:94:1b:b8:5b: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:98:1C:BE:33:89:73:C5:EF:12:EF:7D:C6:96:95:F4:CF:31:31:0D X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37362e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.76.0/24 Signature Algorithm: sha256WithRSAEncryption 55:13:28:42:4f:7f:97:e4:88:a9:d3:cc:87:45:a8:ef:89:37: 01:77:6c:b5:6f:f1:0b:45:34:4f:e2:67:d2:af:8f:90:96:1c: 91:93:90:c7:84:cb:14:25:c1:15:ce:2c:24:0e:0b:4c:67:aa: cc:3f:f7:a9:d3:a0:4a:a0:30:d4:c3:3f:5c:35:f2:31:a9:b8: 4e:0d:59:47:45:8c:18:6f:ea:b2:4f:3d:00:a2:0f:3e:31:1a: f5:03:6b:f6:60:4d:a9:74:1b:42:75:b7:d4:0c:d1:d6:0b:4d: a0:95:2a:76:21:2b:13:ed:4d:1b:ff:88:bf:56:82:b4:56:dc: c1:46:3d:90:ac:90:c5:48:81:7c:0e:1c:27:7c:bd:52:9e:fd: eb:5e:a3:38:b8:f4:de:d1:ce:38:cf:10:a5:ca:56:04:73:a0: fc:8d:ab:34:e6:c7:03:b2:53:83:a1:b0:c6:bd:f7:30:72:0c: 6d:f3:c3:6c:a2:3f:86:e6:16:7a:b9:43:9d:ae:c8:58:eb:60: 7d:ad:5b:8d:7e:b7:c5:47:a6:b3:af:fe:ce:9b:a1:db:ab:c0: 04:03:eb:45:89:12:66:a9:df:1e:d0:da:9b:29:44:b0:f2:26: 40:f8:d7:01:0f:27:d2:6d:e1:5f:48:a4:b6:d7:8d:f7:dd:58: 3a:3d:48:59 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUd7UspOrMFuOpA6TZcdJ3jwOwt/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yMzA5MjMxMDU1MDJaFw0yNDA5MjExMTAwMDJaMDMxMTAvBgNV BAMTKEFGOTgxQ0JFMzM4OTczQzVFRjEyRUY3REM2OTY5NUY0Q0YzMTMxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oqScwy4K2htGOzKEFjcPKvdy dDgWPdFxuIjTAvRVLbxQtrCoGG1F9d0sNMXnAV97u3BWfkuLjbxguhRJIjN8Tz1h mV+ppljS9VwoQOAKvh0sMW1Xqy5jEqdHjOh8XCpwWeP3AhjBXfZCIcoppJzhMPU4 yEfqJfWuNs4DMVnp/d2ZNPVAl6qz5sMuTXi0vcoD9UjlZsaviq6+rt34CNjJCKt+ vaaH9VVtlc8M3pW1ectNpL+KmMWbV8fpMyOybAMoMgJqGRjr0QA+j/iiGta5T4iz 3WsidmObDQkgUf4Ip8XuaM9tRt0MBoMPuXRdrz18GGEdvdtDl3PklBu4W34nAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUr5gcvjOJc8XvEu99xpaV9M8xMQ0wHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NTQ3N2NlLTA3MTctNDdjMC04 NzY2LThiOWJlYzBjMDg2Yy8wLzMxMzAzMzJlMzEzMTM0MmUzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdyTDANBgkqhkiG 9w0BAQsFAAOCAQEAVRMoQk9/l+SIqdPMh0Wo74k3AXdstW/xC0U0T+Jn0q+PkJYc kZOQx4TLFCXBFc4sJA4LTGeqzD/3qdOgSqAw1MM/XDXyMam4Tg1ZR0WMGG/qsk89 AKIPPjEa9QNr9mBNqXQbQnW31AzR1gtNoJUqdiErE+1NG/+Iv1aCtFbcwUY9kKyQ xUiBfA4cJ3y9Up79616jOLj03tHOOM8QpcpWBHOg/I2rNObHA7JTg6Gwxr33MHIM bfPDbKI/huYWerlDna7IWOtgfa1bjX63xUems6/+zpuh26vABAPrRYkSZqnfHtDa mylEsPImQPjXAQ8n0m3hX0iktteN991YOj1IWQ== -----END CERTIFICATE-----Generated at Sat May 4 04:36:17 2024 by rpki-client on console-fra.rpki-client.org