$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa File: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (raw, json) Hash identifier: KTRHLJJjBOC7tc8RhpsbsW5kfNNxmta//9ragq7/KSs= Subject key identifier: F1:DB:92:07:86:DF:E6:A1:57:CD:C1:32:6D:53:9F:B0:D3:07:8F:DD Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 253225C9E063B239E1B7C27756B7FA52C0E1AFBF Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa Signing time: Fri 20 Oct 2023 18:01:36 +0000 ROA not before: Fri 20 Oct 2023 17:56:36 +0000 ROA not after: Fri 18 Oct 2024 18:01:36 +0000 asID: 134658 IP address blocks: 103.175.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 20:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:32:25:c9:e0:63:b2:39:e1:b7:c2:77:56:b7:fa:52:c0:e1:af:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Oct 20 17:56:36 2023 GMT Not After : Oct 18 18:01:36 2024 GMT Subject: CN=F1DB920786DFE6A157CDC1326D539FB0D3078FDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:24:59:20:44:ca:b7:f5:0e:5a:89:0b:92: 2b:97:e7:3c:a0:6e:b6:ec:a6:e5:94:d8:6c:ab:13: 2d:b3:79:fa:3b:30:fc:c9:e6:ca:b2:a4:64:86:50: 0f:37:76:0c:ff:9f:f8:72:9a:d5:86:ed:50:ac:0a: c3:03:b5:31:ca:a8:58:f5:e8:36:0a:35:44:8d:75: 86:f8:c2:b3:da:6b:97:bd:55:12:76:54:72:92:27: c6:98:07:d8:ff:d1:01:df:24:86:72:df:e7:09:19: b1:ab:e9:ea:86:4f:c7:a6:5f:a1:e7:41:f6:9f:59: 42:81:19:f0:31:9b:44:3f:18:c8:98:26:43:26:06: 55:14:cd:c1:4a:45:f3:87:5b:4f:96:12:f8:74:7b: ff:05:91:2c:b4:65:6e:fb:da:fe:96:78:64:9f:b5: 94:88:5f:5b:58:6b:ee:a0:b3:3d:4d:c5:f0:7e:d4: 1d:84:c4:e4:c1:a2:6e:a8:bd:e3:d3:43:94:96:c1: a2:cf:b0:b6:3f:63:46:a8:78:b7:d0:85:92:4a:f1: a3:2f:80:16:ac:9f:f6:c1:f7:ad:f2:81:52:ea:04: 29:a8:fa:15:f1:ff:82:5c:f8:7f:29:2b:21:dd:3f: cc:23:6f:59:27:e4:b8:48:2e:bb:11:a3:9a:6f:6f: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DB:92:07:86:DF:E6:A1:57:CD:C1:32:6D:53:9F:B0:D3:07:8F:DD X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.188.0/23 Signature Algorithm: sha256WithRSAEncryption 88:53:b9:0f:c7:d3:67:d7:81:de:34:7f:90:b5:0b:b3:aa:4c: d9:0a:17:3e:c7:c8:00:da:4b:33:eb:69:f1:51:ac:7f:04:eb: af:fc:4a:3e:df:7c:f2:22:c6:b0:a7:a3:fc:6d:95:ef:50:7c: c2:d6:b0:5e:19:fb:7d:0d:bb:32:c4:78:3d:08:a7:87:09:86: 68:4a:3f:bd:53:ca:25:0a:3c:f6:ec:45:c9:87:f1:e5:f1:b2: f4:b9:f6:15:49:b9:30:70:13:6e:dc:05:a9:c5:a2:e2:1f:00: fb:8c:03:50:fe:38:18:cf:c0:34:b8:0a:0f:e6:19:51:da:30: d8:3b:cd:d4:8c:95:1e:53:97:4d:8f:f5:4d:12:44:39:a4:1f: 9e:d3:b0:a8:6f:93:0a:bf:86:8c:f0:d8:90:94:d4:f4:44:0d: ef:f4:d3:46:44:ac:1e:0a:21:f0:0f:2e:04:a9:ca:4d:1e:61: e8:e2:81:a1:c3:46:08:b9:5a:5b:d4:33:d9:ef:e0:79:ee:b9: 65:88:f3:3e:78:88:27:a3:c5:4e:ee:86:a4:e5:2e:5e:31:22: b8:54:44:d3:5f:c2:da:e6:48:f1:6b:ae:09:e4:09:f8:ee:f7: 94:fa:d5:dd:3c:bf:9d:1a:6d:bd:3a:f4:51:43:a8:2c:b3:89: d4:12:ae:71 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJTIlyeBjsjnht8J3Vrf6UsDhr78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yMzEwMjAxNzU2MzZaFw0yNDEwMTgxODAxMzZaMDMxMTAvBgNV BAMTKEYxREI5MjA3ODZERkU2QTE1N0NEQzEzMjZENTM5RkIwRDMwNzhGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOfCRZIETKt/UOWokLkiuX5zyg brbspuWU2GyrEy2zefo7MPzJ5sqypGSGUA83dgz/n/hymtWG7VCsCsMDtTHKqFj1 6DYKNUSNdYb4wrPaa5e9VRJ2VHKSJ8aYB9j/0QHfJIZy3+cJGbGr6eqGT8emX6Hn QfafWUKBGfAxm0Q/GMiYJkMmBlUUzcFKRfOHW0+WEvh0e/8FkSy0ZW772v6WeGSf tZSIX1tYa+6gsz1NxfB+1B2ExOTBom6ovePTQ5SWwaLPsLY/Y0aoeLfQhZJK8aMv gBasn/bB963ygVLqBCmo+hXx/4Jc+H8pKyHdP8wjb1kn5LhILrsRo5pvbwzLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU8duSB4bf5qFXzcEybVOfsNMHj90wHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I5ZjYwOTI3LTFmMzQtNGM1NC05 Njc0LWY5ZGVhZjc1YzJmYy8wLzMxMzAzMzJlMzEzNzM1MmUzMTM4MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzQzNjM1Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnr7wwDQYJ KoZIhvcNAQELBQADggEBAIhTuQ/H02fXgd40f5C1C7OqTNkKFz7HyADaSzPrafFR rH8E66/8Sj7ffPIixrCno/xtle9QfMLWsF4Z+30NuzLEeD0Ip4cJhmhKP71TyiUK PPbsRcmH8eXxsvS59hVJuTBwE27cBanFouIfAPuMA1D+OBjPwDS4Cg/mGVHaMNg7 zdSMlR5Tl02P9U0SRDmkH57TsKhvkwq/hozw2JCU1PREDe/000ZErB4KIfAPLgSp yk0eYejigaHDRgi5WlvUM9nv4HnuuWWI8z54iCejxU7uhqTlLl4xIrhURNNfwtrm SPFrrgnkCfju95T61d08v50abb069FFDqCyzidQSrnE= -----END CERTIFICATE-----Generated at Sat Apr 27 20:20:10 2024 by rpki-client on console-ams.rpki-client.org