$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37392e302f32342d3234203d3e203435373031.roa File: 3130332e38392e37392e302f32342d3234203d3e203435373031.roa (raw, json) Hash identifier: qa7QfUczq7E13MteALse3+HcU+CRKGoztPl8KJpsjxc= Subject key identifier: 33:62:D2:48:F7:2D:B3:60:03:12:93:8B:2C:28:2F:F7:5A:A0:9C:5F Certificate issuer: /CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E Certificate serial: 346CB12FD2B3423EE7C61ABC9FE9600A94429EE1 Authority key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37392e302f32342d3234203d3e203435373031.roa Signing time: Thu 16 Nov 2023 06:00:01 +0000 ROA not before: Thu 16 Nov 2023 05:55:01 +0000 ROA not after: Thu 14 Nov 2024 06:00:01 +0000 asID: 45701 IP address blocks: 103.89.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6c:b1:2f:d2:b3:42:3e:e7:c6:1a:bc:9f:e9:60:0a:94:42:9e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E Validity Not Before: Nov 16 05:55:01 2023 GMT Not After : Nov 14 06:00:01 2024 GMT Subject: CN=3362D248F72DB3600312938B2C282FF75AA09C5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:2e:4a:69:4d:d6:84:ec:20:fd:d5:cc:a3: 8f:65:23:d9:ec:fe:f9:bb:c6:9f:0f:1c:0a:19:c4: 42:6f:cb:09:27:f6:d4:ce:3c:c0:86:f9:ea:0b:e4: f4:4a:8b:a2:b2:b4:e1:7d:d4:0e:ad:9d:be:73:b8: a5:22:ba:b0:4a:05:8e:a6:8d:a2:30:1d:b6:4e:44: b2:27:62:fc:03:39:18:9d:55:5c:76:00:d8:96:20: 04:a6:00:23:1e:1c:86:4b:f0:5b:f8:33:47:30:ed: 0e:ae:8a:4f:f4:23:cd:21:92:1c:17:eb:d1:b7:4e: b0:ad:0c:03:f6:62:22:6f:6f:4d:8b:af:69:38:41: 30:95:a4:39:18:08:fd:9e:ae:eb:d7:2b:3a:88:47: 30:13:8c:83:ff:74:6b:ce:ba:81:9b:99:87:04:b0: c3:23:4b:ea:b0:6b:6c:f1:78:98:93:6b:b7:15:fa: 10:e9:fb:23:11:da:d4:f6:32:18:79:99:03:f0:16: 1d:a8:72:83:da:0d:1f:fe:f9:e8:04:17:7f:13:10: 71:1d:ce:90:e7:30:1b:49:a4:a1:e5:7a:d3:bd:c2: 0a:58:57:d7:e9:96:ac:8f:77:83:ed:6c:01:10:f9: 61:57:9c:d5:dd:0a:f6:49:54:94:e5:d4:fc:cf:4d: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:62:D2:48:F7:2D:B3:60:03:12:93:8B:2C:28:2F:F7:5A:A0:9C:5F X509v3 Authority Key Identifier: keyid:FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37392e302f32342d3234203d3e203435373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.79.0/24 Signature Algorithm: sha256WithRSAEncryption 03:69:e8:de:f6:03:d0:2f:eb:f5:46:dc:29:e3:c1:5d:1e:51: 66:95:0d:29:76:ca:99:40:bd:4a:6c:9f:75:8f:e6:9e:a7:85: 26:63:8e:2c:1b:bc:4d:df:88:54:de:17:d2:ff:9a:e2:07:e6: c8:e4:21:0b:1d:9a:af:97:46:da:68:92:ee:6b:e3:2f:1a:f4: 9f:16:f5:5f:e0:68:0b:74:04:30:3c:5d:f6:d7:c5:fa:10:38: 8d:42:8c:b7:2c:72:8e:09:f5:6f:26:27:e1:10:11:23:a4:94: 3b:98:e9:f2:15:f8:47:c2:53:4e:17:a0:06:ba:16:00:51:71: af:85:ac:75:7f:f0:96:65:70:df:7f:7c:49:fe:be:9f:6a:a7: 74:a0:27:8a:d6:e4:f6:45:09:ec:9c:1c:0c:c0:1e:b5:91:64: 44:52:81:71:d4:83:12:98:71:cf:2f:e6:8d:e8:7e:85:fa:6f: e6:8e:cc:13:0f:f0:9f:50:da:e5:ee:24:70:ef:4d:26:d7:5f: af:1b:ec:1f:8c:86:6f:de:65:83:d8:85:4f:0d:5e:db:b3:ab: d4:e6:64:52:ee:0f:c7:03:e5:66:fe:ea:b5:58:64:9e:51:1f: 99:30:5c:c5:94:9b:d3:7e:3e:9d:32:bf:26:25:67:ec:f5:c4: 14:c3:c0:89 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUNGyxL9KzQj7nxhq8n+lgCpRCnuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI4OEE4ODUyNTE2REJDRUFDNDI5QzVCNkY5QjdGOThG QUEwMTQwRTAeFw0yMzExMTYwNTU1MDFaFw0yNDExMTQwNjAwMDFaMDMxMTAvBgNV BAMTKDMzNjJEMjQ4RjcyREIzNjAwMzEyOTM4QjJDMjgyRkY3NUFBMDlDNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iy5KaU3WhOwg/dXMo49lI9ns /vm7xp8PHAoZxEJvywkn9tTOPMCG+eoL5PRKi6KytOF91A6tnb5zuKUiurBKBY6m jaIwHbZORLInYvwDORidVVx2ANiWIASmACMeHIZL8Fv4M0cw7Q6uik/0I80hkhwX 69G3TrCtDAP2YiJvb02Lr2k4QTCVpDkYCP2eruvXKzqIRzATjIP/dGvOuoGbmYcE sMMjS+qwa2zxeJiTa7cV+hDp+yMR2tT2Mhh5mQPwFh2ocoPaDR/++egEF38TEHEd zpDnMBtJpKHletO9wgpYV9fplqyPd4PtbAEQ+WFXnNXdCvZJVJTl1PzPTTCdAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUM2LSSPcts2ADEpOLLCgv91qgnF8wHwYDVR0j BBgwFoAU+4iohSUW286sQpxbb5t/mPqgFA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIxY2RkNS0yYjNkLTQ2MWEtOWE3Mi0wMDMxZjBiZmI0NWQvMC9GQjg4QTg4NTI1 MTZEQkNFQUM0MjlDNUI2RjlCN0Y5OEZBQTAxNDBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkI4OEE4ODUyNTE2REJDRUFDNDI5QzVCNkY5QjdGOThGQUEw MTQwRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxYjFjZGQ1LTJiM2QtNDYxYS05 YTcyLTAwMzFmMGJmYjQ1ZC8wLzMxMzAzMzJlMzgzOTJlMzczOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnWU8wDQYJKoZIhvcN AQELBQADggEBAANp6N72A9Av6/VG3CnjwV0eUWaVDSl2yplAvUpsn3WP5p6nhSZj jiwbvE3fiFTeF9L/muIH5sjkIQsdmq+XRtpoku5r4y8a9J8W9V/gaAt0BDA8XfbX xfoQOI1CjLcsco4J9W8mJ+EQESOklDuY6fIV+EfCU04XoAa6FgBRca+FrHV/8JZl cN9/fEn+vp9qp3SgJ4rW5PZFCeycHAzAHrWRZERSgXHUgxKYcc8v5o3ofoX6b+aO zBMP8J9Q2uXuJHDvTSbXX68b7B+Mhm/eZYPYhU8NXtuzq9TmZFLuD8cD5Wb+6rVY ZJ5RH5kwXMWUm9N+Pp0yvyYlZ+z1xBTDwIk= -----END CERTIFICATE-----Generated at Sat Apr 27 21:40:25 2024 by rpki-client on console-ams.rpki-client.org