$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa File: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (raw, json) Hash identifier: iDYpSOfozIgb/OpJ8A8n0rebz9BaHCM0DtqJs5+ners= Subject key identifier: 84:E0:6D:C2:96:9B:E7:F0:1B:62:8F:8F:D7:66:3F:AA:F4:36:46:46 Certificate issuer: /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Certificate serial: 717905445CD5D11E313E9C5B0D21F12104C44D78 Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa Signing time: Thu 02 Nov 2023 13:00:47 +0000 ROA not before: Thu 02 Nov 2023 12:55:47 +0000 ROA not after: Thu 31 Oct 2024 13:00:47 +0000 asID: 151586 IP address blocks: 103.119.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:79:05:44:5c:d5:d1:1e:31:3e:9c:5b:0d:21:f1:21:04:c4:4d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Validity Not Before: Nov 2 12:55:47 2023 GMT Not After : Oct 31 13:00:47 2024 GMT Subject: CN=84E06DC2969BE7F01B628F8FD7663FAAF4364646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:45:f1:60:d9:14:db:a0:6b:d5:c4:2a:ea: 36:60:8c:e6:f6:be:ec:d0:90:fb:80:78:ba:cb:3d: 94:aa:6f:f0:7f:21:5f:27:aa:b5:30:11:b0:7f:a9: bb:97:61:79:44:61:cb:cb:7c:1f:87:e7:91:e4:f3: ee:8e:90:f7:e8:ee:b8:44:2b:36:d8:63:a0:5f:8d: bc:41:97:5a:b5:96:c6:eb:6d:7e:70:f3:68:99:cb: 5a:ce:86:f3:da:85:30:f7:43:42:87:b3:d9:14:93: 04:c2:4d:18:9b:62:d6:bd:ab:88:92:fd:c9:2d:dc: 13:eb:24:e0:24:79:d1:97:18:58:b0:69:46:62:cf: e9:ef:21:a0:31:0c:a0:86:56:d0:22:2d:2c:64:42: 0e:0e:b6:b1:fb:f7:eb:98:35:f3:5a:fa:cc:25:e9: b6:eb:92:86:99:a9:8d:ff:43:4f:2a:e5:f3:a9:d8: 85:bf:cd:5e:e1:b7:10:03:8c:0c:79:7f:30:38:47: 4f:1b:be:02:72:29:d6:be:79:fd:10:73:ac:90:d7: d6:a3:bf:89:12:a5:bb:b8:4d:15:df:2f:c9:e2:bd: 9d:07:96:f6:27:11:43:d8:8f:6e:ed:2f:1a:c3:69: 7c:9a:77:11:ca:f2:91:19:34:e3:85:ff:db:1b:d2: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E0:6D:C2:96:9B:E7:F0:1B:62:8F:8F:D7:66:3F:AA:F4:36:46:46 X509v3 Authority Key Identifier: keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.236.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:8b:cf:af:a2:29:02:a8:29:0a:a2:95:fb:3c:ea:fd:3d:2f: 1a:80:d7:8b:40:cb:40:32:0b:c2:5f:04:9d:c5:11:62:d4:e2: a2:c8:69:1d:c9:6e:09:4c:46:4d:24:1e:32:de:ff:41:a3:b7: 94:cb:28:10:2e:44:c8:c8:4a:f8:b9:f7:8f:d5:47:79:5a:61: 76:09:fe:ae:39:db:0e:9e:1f:1b:5e:80:9a:19:4a:68:26:c2: 7a:6f:3a:d6:27:f7:08:2e:c7:cd:77:37:9a:ac:f8:74:f5:b8: fd:7a:2e:96:8f:15:ad:d4:51:34:a8:35:9a:83:86:7b:9a:a7: 51:8f:3b:38:dc:1c:28:e6:2d:b6:72:d0:f3:75:57:45:56:95: 98:95:3c:c6:c6:1c:93:ce:1c:fc:76:98:c2:5f:af:95:6a:13: 6f:cd:53:0e:ae:f2:18:54:f6:de:d0:13:cf:88:e9:23:7e:aa: d9:b0:ec:7f:3f:a4:87:f0:4c:6e:81:a0:e9:40:50:cb:1c:e2: 0a:c4:0b:22:01:c1:ac:ee:79:3e:e2:4b:d0:f1:70:a4:4b:57: b0:05:fd:9a:af:bb:62:d4:6a:6a:d9:fb:90:63:e2:0d:57:83: fb:75:bb:33:ef:34:5b:ab:4d:08:0b:40:fb:ec:12:75:8c:c0: b8:0e:d8:33 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUcXkFRFzV0R4xPpxbDSHxIQTETXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2 MEU3MzQ5OTAeFw0yMzExMDIxMjU1NDdaFw0yNDEwMzExMzAwNDdaMDMxMTAvBgNV BAMTKDg0RTA2REMyOTY5QkU3RjAxQjYyOEY4RkQ3NjYzRkFBRjQzNjQ2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0kXxYNkU26Br1cQq6jZgjOb2 vuzQkPuAeLrLPZSqb/B/IV8nqrUwEbB/qbuXYXlEYcvLfB+H55Hk8+6OkPfo7rhE KzbYY6BfjbxBl1q1lsbrbX5w82iZy1rOhvPahTD3Q0KHs9kUkwTCTRibYta9q4iS /ckt3BPrJOAkedGXGFiwaUZiz+nvIaAxDKCGVtAiLSxkQg4OtrH79+uYNfNa+swl 6bbrkoaZqY3/Q08q5fOp2IW/zV7htxADjAx5fzA4R08bvgJyKda+ef0Qc6yQ19aj v4kSpbu4TRXfL8nivZ0HlvYnEUPYj27tLxrDaXyadxHK8pEZNOOF/9sb0nC7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhOBtwpab5/AbYo+P12Y/qvQ2RkYwHwYDVR0j BBgwFoAUeCWpww1a6kFEdA6bEqPAvGDnNJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDAwYjBjMi03ZWZkLTQyNzgtOThlNC1kNGY3YzI3M2VlYzIvMC83ODI1QTlDMzBE NUFFQTQxNDQ3NDBFOUIxMkEzQzBCQzYwRTczNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2MEU3 MzQ5OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwMDBiMGMyLTdlZmQtNDI3OC05 OGU0LWQ0ZjdjMjczZWVjMi8wLzMxMzAzMzJlMzEzMTM5MmUzMjMzMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzEzNTM4MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnd+wwDQYJ KoZIhvcNAQELBQADggEBAHyLz6+iKQKoKQqilfs86v09LxqA14tAy0AyC8JfBJ3F EWLU4qLIaR3JbglMRk0kHjLe/0Gjt5TLKBAuRMjISvi594/VR3laYXYJ/q452w6e HxtegJoZSmgmwnpvOtYn9wgux813N5qs+HT1uP16LpaPFa3UUTSoNZqDhnuap1GP OzjcHCjmLbZy0PN1V0VWlZiVPMbGHJPOHPx2mMJfr5VqE2/NUw6u8hhU9t7QE8+I 6SN+qtmw7H8/pIfwTG6BoOlAUMsc4grECyIBwazueT7iS9DxcKRLV7AF/Zqvu2LU amrZ+5Bj4g1Xg/t1uzPvNFurTQgLQPvsEnWMwLgO2DM= -----END CERTIFICATE-----Generated at Sat Jun 22 13:58:56 2024 by rpki-client on console-fra.rpki-client.org