$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31372e302f32342d3234203d3e20313333383131.roa File: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (raw, json) Hash identifier: A988pdJTc0xy001eLcUEfZgCQy4/feH+8xHrvxaAa7w= Subject key identifier: 62:D9:D1:82:E8:C1:CC:CE:13:5B:BD:4C:BB:6A:C9:86:A9:5C:FA:45 Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 3909699FBF2984B8EB3F1285334FB9AE4B30B977 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31372e302f32342d3234203d3e20313333383131.roa Signing time: Mon 31 Jul 2023 00:02:38 +0000 ROA not before: Sun 30 Jul 2023 23:57:38 +0000 ROA not after: Mon 29 Jul 2024 00:02:38 +0000 asID: 133811 IP address blocks: 103.52.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:09:69:9f:bf:29:84:b8:eb:3f:12:85:33:4f:b9:ae:4b:30:b9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: Jul 30 23:57:38 2023 GMT Not After : Jul 29 00:02:38 2024 GMT Subject: CN=62D9D182E8C1CCCE135BBD4CBB6AC986A95CFA45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e6:1b:8b:4b:54:4c:3d:0a:58:46:ca:03:c8: 48:1e:f9:2f:47:51:41:c8:5a:e5:81:f2:bf:72:ca: c2:62:4f:34:16:10:c7:ec:fd:ba:36:ff:5d:6c:d9: ae:e9:f6:1d:e1:d7:db:83:02:6c:3f:8e:d6:5e:cc: 81:b4:4a:a2:3c:b2:c6:d0:f7:4c:21:bb:bb:03:f1: 03:9c:a7:83:e7:f0:9f:e8:91:4c:6c:53:de:cf:57: 65:ac:a5:c1:69:c9:11:62:c4:91:6f:38:36:ab:8d: c3:bd:42:09:68:ca:df:0a:f0:34:ea:f9:e8:97:4a: 1b:8b:c3:1a:db:ec:66:b1:84:77:57:cb:09:8d:52: 83:65:fb:f1:be:90:f4:47:56:50:d7:b9:e4:84:7c: bc:e7:7b:ab:51:d1:5c:33:54:7d:41:2f:72:a6:a0: 6f:84:09:22:9e:b7:bf:34:58:71:5a:94:68:d5:22: 10:f7:7c:b6:53:21:59:23:58:e4:e5:d2:20:47:ec: 06:0f:43:f3:d6:b3:e2:12:2c:cd:48:b8:3a:bd:c1: 49:8b:fd:dd:44:16:b1:9a:95:7f:8d:be:aa:89:88: 32:36:ea:f2:14:c9:8c:c6:11:98:9b:b1:2e:03:d2: c8:45:a2:de:b6:17:07:97:8e:9c:44:cd:13:c2:f9: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:D1:82:E8:C1:CC:CE:13:5B:BD:4C:BB:6A:C9:86:A9:5C:FA:45 X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31372e302f32342d3234203d3e20313333383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.17.0/24 Signature Algorithm: sha256WithRSAEncryption 84:8c:05:bf:38:c6:b5:73:ef:5c:d1:b3:06:a5:fd:ea:59:43: 8d:3c:d1:ff:3c:e0:ef:91:6b:bc:10:a2:e3:5a:17:df:c2:5d: 7c:d3:4b:39:a1:3c:28:b7:80:b2:5f:fc:3a:d5:53:2b:a9:42: 24:1c:00:e4:e8:a0:54:07:17:2f:ec:d9:a6:88:62:33:93:10: 8b:90:3e:65:8a:17:3c:08:a8:28:2f:10:92:16:3a:ff:b0:34: 4e:cf:aa:29:15:1c:35:91:44:3d:5b:b9:08:a2:fb:8a:ea:5f: ce:52:0d:50:3c:c3:bb:30:5e:2e:fc:a5:2e:a0:2d:4c:59:44: 97:83:1f:ff:93:0c:21:9c:4c:b4:00:2e:6c:79:3b:8d:11:4b: 8e:c0:11:8a:01:78:c1:36:12:10:83:b2:c3:fa:39:c2:10:6a: 15:88:7d:3d:89:de:1b:3f:41:57:a7:a5:78:46:e2:28:c2:41: 46:8b:c3:7c:f6:98:b1:c9:ef:e5:0d:31:88:66:90:df:77:55: 7b:13:db:82:ea:9b:dd:ec:d3:ac:09:87:3f:a4:68:5f:34:b4: d0:ce:57:b3:ee:33:5a:dc:8e:ba:d9:df:30:0f:cc:cc:b2:83: d7:c7:cf:60:e0:99:34:ad:ff:b4:18:c0:af:b1:fb:9f:5b:ac: 51:01:43:33 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOQlpn78phLjrPxKFM0+5rkswuXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yMzA3MzAyMzU3MzhaFw0yNDA3MjkwMDAyMzhaMDMxMTAvBgNV BAMTKDYyRDlEMTgyRThDMUNDQ0UxMzVCQkQ0Q0JCNkFDOTg2QTk1Q0ZBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk5huLS1RMPQpYRsoDyEge+S9H UUHIWuWB8r9yysJiTzQWEMfs/bo2/11s2a7p9h3h19uDAmw/jtZezIG0SqI8ssbQ 90whu7sD8QOcp4Pn8J/okUxsU97PV2WspcFpyRFixJFvODarjcO9Qgloyt8K8DTq +eiXShuLwxrb7GaxhHdXywmNUoNl+/G+kPRHVlDXueSEfLzne6tR0VwzVH1BL3Km oG+ECSKet780WHFalGjVIhD3fLZTIVkjWOTl0iBH7AYPQ/PWs+ISLM1IuDq9wUmL /d1EFrGalX+NvqqJiDI26vIUyYzGEZibsS4D0shFot62FweXjpxEzRPC+TZpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUYtnRgujBzM4TW71Mu2rJhqlc+kUwHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZGQ3YzBmLTAyZDMtNDIxNy05 ZmMzLTAwNDdhZTE4MzZkYy8wLzMxMzAzMzJlMzUzMjJlMzEzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc0ETANBgkqhkiG 9w0BAQsFAAOCAQEAhIwFvzjGtXPvXNGzBqX96llDjTzR/zzg75FrvBCi41oX38Jd fNNLOaE8KLeAsl/8OtVTK6lCJBwA5OigVAcXL+zZpohiM5MQi5A+ZYoXPAioKC8Q khY6/7A0Ts+qKRUcNZFEPVu5CKL7iupfzlINUDzDuzBeLvylLqAtTFlEl4Mf/5MM IZxMtAAubHk7jRFLjsARigF4wTYSEIOyw/o5whBqFYh9PYneGz9BV6eleEbiKMJB RovDfPaYscnv5Q0xiGaQ33dVexPbguqb3ezTrAmHP6RoXzS00M5Xs+4zWtyOutnf MA/MzLKD18fPYOCZNK3/tBjAr7H7n1usUQFDMw== -----END CERTIFICATE-----Generated at Thu May 2 20:47:38 2024 by rpki-client on console-fra.rpki-client.org