$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa File: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (raw, json) Hash identifier: lBk+MLisEIo2PZv6+uPNgR6V2FGWrogLPB8MGeJ08Wk= Subject key identifier: 45:51:43:6F:D9:29:D6:BE:81:1F:D8:05:65:16:1C:FA:D3:AC:58:AF Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 3BBE11ADF7C916C0DB49441CD5904FEFD0791307 Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa Signing time: Wed 24 Jul 2024 15:02:17 +0000 ROA not before: Wed 24 Jul 2024 14:57:17 +0000 ROA not after: Wed 23 Jul 2025 15:02:17 +0000 asID: 46055 IP address blocks: 103.198.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:be:11:ad:f7:c9:16:c0:db:49:44:1c:d5:90:4f:ef:d0:79:13:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Jul 24 14:57:17 2024 GMT Not After : Jul 23 15:02:17 2025 GMT Subject: CN=4551436FD929D6BE811FD80565161CFAD3AC58AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:15:7f:fe:05:06:ab:ca:44:d8:3c:aa:3b: 6f:cc:a2:e7:8e:c8:0b:90:ed:ad:48:fe:f4:65:e8: c3:30:4c:91:8b:4e:69:0f:3e:6d:cd:75:eb:74:f1: 35:ff:ab:a5:aa:eb:24:da:4b:79:97:58:25:d8:73: 38:aa:78:ed:cb:c3:93:fe:1e:bc:da:29:93:51:57: 11:52:66:ba:51:81:1b:ff:b7:72:98:6d:d2:8d:28: 2a:b5:ad:2d:5a:60:5f:f6:83:79:78:89:31:16:a4: 91:85:94:5b:90:d2:9f:ff:e5:18:aa:2f:08:41:82: 70:76:73:47:cb:43:1b:ed:eb:86:94:37:3a:ab:d0: 6b:16:2b:ac:c3:53:6f:05:69:b6:18:c9:df:42:e6: 05:55:b2:af:35:54:d9:e9:16:1e:82:47:09:a3:8b: 07:b9:56:6b:cf:e4:9b:57:a5:6d:03:c8:81:74:96: 01:00:3e:49:48:47:c8:8e:ba:3d:b7:a4:96:eb:da: 3d:d4:92:e0:cc:45:81:79:b3:1a:f0:80:4a:58:2a: 85:39:27:b1:35:b7:23:ba:72:d0:99:9e:52:e8:07: fc:a5:80:86:1f:3a:cb:e4:57:9b:46:95:8a:88:1c: 69:3d:52:c5:2b:58:af:cc:84:36:6b:97:3e:bb:de: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:51:43:6F:D9:29:D6:BE:81:1F:D8:05:65:16:1C:FA:D3:AC:58:AF X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.120.0/23 Signature Algorithm: sha256WithRSAEncryption fa:39:f0:f2:79:8f:d0:73:0b:f7:3c:ff:8b:04:fe:9d:a6:0c: 79:22:c4:8d:ff:a9:fe:fa:99:ff:20:e2:7d:31:c6:5b:57:0e: 79:5f:08:3b:a1:c2:dc:55:c6:4b:28:16:c1:2d:d6:75:04:b9: ad:81:40:52:24:e1:2f:4f:76:cc:56:e7:e6:c8:da:05:0b:ed: 61:62:25:e3:0b:17:dc:c2:80:ca:01:71:6b:bf:b7:30:06:65: 1f:20:82:d0:57:7d:7e:46:15:9b:db:2a:d3:eb:b2:f3:64:fa: 47:5d:d1:9d:0b:35:c5:94:f7:38:98:eb:0c:37:ff:f8:62:d1: 44:f5:9d:11:54:df:0b:27:90:bc:65:b3:07:12:ce:68:04:9f: c0:22:da:7c:95:12:7f:0f:90:9f:2c:e8:f2:53:c8:9c:90:95: cd:ee:81:7b:1d:18:a7:8b:8b:ba:21:b8:ee:a5:ef:97:c1:5b: 73:2d:d6:d7:f7:ab:b7:0c:05:37:65:31:22:dd:d8:24:40:ea: 8c:8d:e4:f2:14:0c:20:8c:74:85:2f:de:60:6e:f3:8b:9c:fb: a1:5f:f7:12:b4:b1:dd:a9:2a:ae:01:34:ca:e6:00:34:bd:2f: 68:0a:4a:45:bd:38:80:ad:ef:00:3b:3d:1c:83:9c:cc:cc:3e: 16:c7:48:df -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO74RrffJFsDbSUQc1ZBP79B5EwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNDA3MjQxNDU3MTdaFw0yNTA3MjMxNTAyMTdaMDMxMTAvBgNV BAMTKDQ1NTE0MzZGRDkyOUQ2QkU4MTFGRDgwNTY1MTYxQ0ZBRDNBQzU4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrihV//gUGq8pE2DyqO2/MoueO yAuQ7a1I/vRl6MMwTJGLTmkPPm3Ndet08TX/q6Wq6yTaS3mXWCXYcziqeO3Lw5P+ HrzaKZNRVxFSZrpRgRv/t3KYbdKNKCq1rS1aYF/2g3l4iTEWpJGFlFuQ0p//5Riq LwhBgnB2c0fLQxvt64aUNzqr0GsWK6zDU28FabYYyd9C5gVVsq81VNnpFh6CRwmj iwe5VmvP5JtXpW0DyIF0lgEAPklIR8iOuj23pJbr2j3UkuDMRYF5sxrwgEpYKoU5 J7E1tyO6ctCZnlLoB/ylgIYfOsvkV5tGlYqIHGk9UsUrWK/MhDZrlz673p15AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURVFDb9kp1r6BH9gFZRYc+tOsWK8wHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0LThjMmQtNGViMS1i NGNkLTM1YjQ5MjE2ZTA3My8wLzMxMzAzMzJlMzEzOTM4MmUzMTMyMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzNDM2MzAzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ8Z4MA0GCSqG SIb3DQEBCwUAA4IBAQD6OfDyeY/Qcwv3PP+LBP6dpgx5IsSN/6n++pn/IOJ9McZb Vw55Xwg7ocLcVcZLKBbBLdZ1BLmtgUBSJOEvT3bMVufmyNoFC+1hYiXjCxfcwoDK AXFrv7cwBmUfIILQV31+RhWb2yrT67LzZPpHXdGdCzXFlPc4mOsMN//4YtFE9Z0R VN8LJ5C8ZbMHEs5oBJ/AItp8lRJ/D5CfLOjyU8ickJXN7oF7HRini4u6Ibjupe+X wVtzLdbX96u3DAU3ZTEi3dgkQOqMjeTyFAwgjHSFL95gbvOLnPuhX/cStLHdqSqu ATTK5gA0vS9oCkpFvTiAre8AOz0cg5zMzD4Wx0jf -----END CERTIFICATE-----Generated at Thu Nov 21 05:34:31 2024 by rpki-client on console-ams.rpki-client.org