$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36382e302f32322d3234203d3e20313335343738.roa File: 3130312e3132382e36382e302f32322d3234203d3e20313335343738.roa (raw, json) Hash identifier: tuKi/nlG8PAWkwYV/JncW9xVwdH+FB8B6h7W16WtOSI= Subject key identifier: E7:C6:29:F6:D8:43:3A:0B:14:DA:7A:6D:31:B4:58:2C:9C:72:0D:74 Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Certificate serial: 73202D858E1A5FB0BE3FBD10561F4E4A651C5052 Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36382e302f32322d3234203d3e20313335343738.roa Signing time: Mon 31 Jul 2023 00:02:24 +0000 ROA not before: Sun 30 Jul 2023 23:57:24 +0000 ROA not after: Mon 29 Jul 2024 00:02:24 +0000 asID: 135478 IP address blocks: 101.128.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:20:2d:85:8e:1a:5f:b0:be:3f:bd:10:56:1f:4e:4a:65:1c:50:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Validity Not Before: Jul 30 23:57:24 2023 GMT Not After : Jul 29 00:02:24 2024 GMT Subject: CN=E7C629F6D8433A0B14DA7A6D31B4582C9C720D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:89:ab:d9:52:dc:6c:a3:d2:9b:4b:b3:4a: 00:fa:5f:13:fe:d0:cf:90:75:4b:a7:ae:c5:60:33: 69:7c:4e:85:05:12:3f:62:02:97:71:d6:cc:d8:16: 7d:70:cb:12:31:51:c5:7a:79:01:ce:60:c7:57:87: c5:4b:eb:45:4a:09:7b:96:f5:01:dc:95:22:74:37: 2c:31:2c:a7:82:10:9d:fb:11:2a:04:0a:9d:7f:a4: 03:cd:57:40:0b:a5:7f:ca:50:22:4d:40:6a:2e:5c: 90:ce:b0:86:ae:08:3f:50:91:74:99:e1:32:3d:99: 55:94:f8:e4:c6:c2:98:fe:a0:d3:2c:23:a2:56:db: 8f:3c:9d:37:0c:d1:c6:d3:33:57:f6:de:9f:ae:1e: 32:bb:d4:cd:0b:4c:f3:12:5e:c4:fa:38:01:5f:a3: ac:12:19:f0:f1:3e:c8:e4:30:7d:30:18:81:9d:92: ed:50:d3:33:fc:fa:b2:3a:1a:ac:ba:3e:34:72:28: b2:fe:11:47:bc:b2:99:60:36:1a:28:6c:0f:f6:73: 8e:3f:d0:d2:c3:09:b2:8f:53:5e:e4:95:68:bb:82: 78:a2:60:6e:6d:f2:bb:19:3e:97:83:d4:e9:17:35: 94:f8:4c:d0:31:f7:78:7b:a6:93:30:01:c5:62:be: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C6:29:F6:D8:43:3A:0B:14:DA:7A:6D:31:B4:58:2C:9C:72:0D:74 X509v3 Authority Key Identifier: keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36382e302f32322d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.128.68.0/22 Signature Algorithm: sha256WithRSAEncryption 43:b8:a3:a2:b8:2c:d0:fd:fb:ad:5b:f7:00:a5:a4:8c:74:89: d4:b2:d9:be:a5:b7:bb:08:d8:87:f4:2c:41:1a:12:6c:94:c6: cd:b4:d9:c8:d8:b1:b3:77:55:8d:6d:f7:71:7c:0a:3c:99:c8: e3:31:43:f7:6f:ac:0b:9a:e8:1b:6a:c3:91:44:84:a9:78:74: 46:30:63:16:43:25:94:b1:27:1b:69:2f:37:4e:07:0b:3d:55: cf:96:76:2e:99:a6:9c:0d:c8:14:fe:0b:8b:8a:32:73:06:f9: 37:1f:68:31:ff:45:74:72:69:cd:dc:6a:0e:cb:be:6e:44:13: 08:4a:1d:50:d5:c5:4d:b6:dd:6a:07:95:ac:13:80:60:e6:ad: e5:5a:fe:81:e3:b5:8e:15:bd:b2:60:3b:82:b6:77:65:bd:cd: 61:7f:3c:b2:83:b0:51:8b:54:e6:00:07:ad:ba:6d:36:00:4a: 57:15:dc:87:54:9b:5d:50:25:2b:5a:c8:0c:7c:38:f8:95:3e: e6:57:e4:5e:a5:ce:e3:6d:d8:f1:8e:6f:f3:a8:ef:82:b7:e7: 55:3a:1e:d4:9c:c4:0d:e6:94:17:3c:10:57:e1:8d:34:98:50: 8f:42:a3:e6:df:f5:dd:8f:85:11:ad:c1:55:db:74:1d:25:df: 25:f7:fd:71 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcyAthY4aX7C+P70QVh9OSmUcUFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz N0Q2OTk4QTAeFw0yMzA3MzAyMzU3MjRaFw0yNDA3MjkwMDAyMjRaMDMxMTAvBgNV BAMTKEU3QzYyOUY2RDg0MzNBMEIxNERBN0E2RDMxQjQ1ODJDOUM3MjBENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMy4mr2VLcbKPSm0uzSgD6XxP+ 0M+QdUunrsVgM2l8ToUFEj9iApdx1szYFn1wyxIxUcV6eQHOYMdXh8VL60VKCXuW 9QHclSJ0NywxLKeCEJ37ESoECp1/pAPNV0ALpX/KUCJNQGouXJDOsIauCD9QkXSZ 4TI9mVWU+OTGwpj+oNMsI6JW2488nTcM0cbTM1f23p+uHjK71M0LTPMSXsT6OAFf o6wSGfDxPsjkMH0wGIGdku1Q0zP8+rI6Gqy6PjRyKLL+EUe8splgNhoobA/2c44/ 0NLDCbKPU17klWi7gniiYG5t8rsZPpeD1OkXNZT4TNAx93h7ppMwAcVivkBBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU58Yp9thDOgsU2nptMbRYLJxyDXQwHwYDVR0j BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1 REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2 OTk4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzNjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZYBEMA0GCSqG SIb3DQEBCwUAA4IBAQBDuKOiuCzQ/futW/cApaSMdInUstm+pbe7CNiH9CxBGhJs lMbNtNnI2LGzd1WNbfdxfAo8mcjjMUP3b6wLmugbasORRISpeHRGMGMWQyWUsScb aS83TgcLPVXPlnYumaacDcgU/guLijJzBvk3H2gx/0V0cmnN3GoOy75uRBMISh1Q 1cVNtt1qB5WsE4Bg5q3lWv6B47WOFb2yYDuCtndlvc1hfzyyg7BRi1TmAAetum02 AEpXFdyHVJtdUCUrWsgMfDj4lT7mV+Repc7jbdjxjm/zqO+Ct+dVOh7UnMQN5pQX PBBX4Y00mFCPQqPm3/Xdj4URrcFV23QdJd8l9/1x -----END CERTIFICATE-----Generated at Tue Apr 30 21:36:30 2024 by rpki-client on console-fra.rpki-client.org