$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f31382d3230203d3e2034373837.roa File: 3130312e3132382e36342e302f31382d3230203d3e2034373837.roa (raw, json) Hash identifier: zqbPTBEouYIiqHNmIkgnLglh0fr5CWDOJZMCe1bbwrQ= Subject key identifier: 57:F0:62:72:88:3B:9A:14:6C:E6:21:D8:78:1D:2E:F8:72:F9:DE:F0 Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Certificate serial: 27EF84302BD6A9F41B43A84FEDFFB4F9A02F78B0 Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f31382d3230203d3e2034373837.roa Signing time: Mon 31 Jul 2023 00:02:22 +0000 ROA not before: Sun 30 Jul 2023 23:57:22 +0000 ROA not after: Mon 29 Jul 2024 00:02:22 +0000 asID: 4787 IP address blocks: 101.128.64.0/18 maxlen: 20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ef:84:30:2b:d6:a9:f4:1b:43:a8:4f:ed:ff:b4:f9:a0:2f:78:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Validity Not Before: Jul 30 23:57:22 2023 GMT Not After : Jul 29 00:02:22 2024 GMT Subject: CN=57F06272883B9A146CE621D8781D2EF872F9DEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:bd:8d:71:2d:6b:ea:0e:f1:a6:8c:90:50: c7:b9:31:c0:11:95:05:e4:7a:2c:c1:a1:42:83:16: 9a:a7:05:f6:6f:c5:e4:b1:55:8a:f7:cb:95:a2:b0: 9d:a7:0e:ad:72:d6:2e:46:eb:5f:dd:4e:0c:b7:db: f4:b5:fe:37:4e:bb:50:7e:c1:ff:17:6b:34:10:d4: 7a:af:bd:01:09:ab:b4:25:f3:c4:8e:c0:4e:5f:5f: 4f:7f:cb:b7:74:05:42:ce:13:ca:df:85:a4:12:16: 8a:48:91:bc:c6:c0:83:55:12:9b:5d:0a:68:43:0d: 95:39:11:fa:02:50:61:88:8d:56:a9:28:83:8e:bc: e4:6f:c8:3d:eb:40:79:0a:c1:00:87:4f:7d:0d:f2: 84:af:85:26:f0:0f:5b:fe:43:a1:08:02:8f:2c:ef: 36:82:25:43:df:3f:dc:45:0d:31:5f:85:ca:7b:a5: 88:2c:f8:a2:4e:dc:12:70:7a:77:b1:c8:d1:53:bb: 55:e8:96:4e:a7:06:83:da:53:d1:1a:d6:a6:0a:19: 0b:c7:d3:71:25:e0:96:6e:6d:83:a2:42:55:5f:57: 55:23:94:d0:a2:5f:e0:11:ce:cd:b4:fe:02:dc:47: 9c:c7:e5:07:a0:8e:70:ff:47:9f:e4:6c:5a:d1:46: c5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F0:62:72:88:3B:9A:14:6C:E6:21:D8:78:1D:2E:F8:72:F9:DE:F0 X509v3 Authority Key Identifier: keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f31382d3230203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.128.64.0/18 Signature Algorithm: sha256WithRSAEncryption 87:06:1c:76:e9:16:09:8e:6e:81:f6:c7:ae:a8:af:11:b5:b9: 35:9e:73:b9:61:3f:b8:17:0c:b4:71:de:b8:3a:7d:3b:e5:f3: e8:09:70:3b:5c:d0:41:95:27:22:da:a9:29:d8:ac:21:7d:b3: 0d:2e:a7:2c:08:d3:93:41:53:93:c9:ac:fd:8a:3f:1f:8a:86: ce:64:57:fc:a1:95:cc:34:91:08:94:c4:17:77:90:36:81:a5: d2:2a:c8:a7:b6:86:10:4f:23:5f:ea:fc:84:20:1e:84:4e:c1: c7:22:0e:bb:63:cb:d6:01:cd:58:6a:c1:6f:bd:2b:4e:1f:35: 50:0a:36:36:fb:c7:c3:f1:43:72:2a:85:ad:e5:94:97:ef:51: ca:08:2e:4d:56:01:c0:d3:9a:da:cc:95:60:81:6c:88:36:1f: 41:6f:3c:4d:09:f9:74:c7:1d:2b:c2:af:df:87:ea:32:bf:43: 29:01:09:40:cd:92:2c:4d:eb:02:4d:e7:05:39:e8:9d:d3:a2: f8:2f:90:21:d1:7d:79:0a:b8:a7:55:8a:9e:05:68:ff:77:d7: 2b:95:9b:a7:41:44:4f:60:12:8d:b0:61:15:71:c7:1c:a1:2e: be:7d:2b:07:63:ec:f6:2e:02:bd:05:20:41:96:8c:56:d6:df: 7b:8d:6d:ae -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJ++EMCvWqfQbQ6hP7f+0+aAveLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz N0Q2OTk4QTAeFw0yMzA3MzAyMzU3MjJaFw0yNDA3MjkwMDAyMjJaMDMxMTAvBgNV BAMTKDU3RjA2MjcyODgzQjlBMTQ2Q0U2MjFEODc4MUQyRUY4NzJGOURFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZb2NcS1r6g7xpoyQUMe5McAR lQXkeizBoUKDFpqnBfZvxeSxVYr3y5WisJ2nDq1y1i5G61/dTgy32/S1/jdOu1B+ wf8XazQQ1HqvvQEJq7Ql88SOwE5fX09/y7d0BULOE8rfhaQSFopIkbzGwINVEptd CmhDDZU5EfoCUGGIjVapKIOOvORvyD3rQHkKwQCHT30N8oSvhSbwD1v+Q6EIAo8s 7zaCJUPfP9xFDTFfhcp7pYgs+KJO3BJwenexyNFTu1Xolk6nBoPaU9Ea1qYKGQvH 03El4JZubYOiQlVfV1UjlNCiX+ARzs20/gLcR5zH5QegjnD/R5/kbFrRRsVtAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUV/Bicog7mhRs5iHYeB0u+HL53vAwHwYDVR0j BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1 REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2 OTk4QS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzNjM0MmUzMDJmMzEz ODJkMzIzMDIwM2QzZTIwMzQzNzM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZlgEAwDQYJKoZIhvcN AQELBQADggEBAIcGHHbpFgmOboH2x66orxG1uTWec7lhP7gXDLRx3rg6fTvl8+gJ cDtc0EGVJyLaqSnYrCF9sw0upywI05NBU5PJrP2KPx+Khs5kV/yhlcw0kQiUxBd3 kDaBpdIqyKe2hhBPI1/q/IQgHoROwcciDrtjy9YBzVhqwW+9K04fNVAKNjb7x8Px Q3Iqha3llJfvUcoILk1WAcDTmtrMlWCBbIg2H0FvPE0J+XTHHSvCr9+H6jK/QykB CUDNkixN6wJN5wU56J3TovgvkCHRfXkKuKdVip4FaP931yuVm6dBRE9gEo2wYRVx xxyhLr59Kwdj7PYuAr0FIEGWjFbW33uNba4= -----END CERTIFICATE-----Generated at Fri May 3 01:27:19 2024 by rpki-client on console-fra.rpki-client.org