$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32342d3234203d3e203536323432.roa File: 3130332e3232382e3131362e302f32342d3234203d3e203536323432.roa (raw, json) Hash identifier: /jVhuhRg6dIf6XOC0U7MNvw21kXzsJMzw+jgLo7le34= Subject key identifier: 6F:35:05:F0:F3:15:B5:82:DE:29:78:C7:27:CA:8F:19:13:5D:E6:3A Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 408971A309919DEE6E1B53CE32C21364D3E86708 Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32342d3234203d3e203536323432.roa Signing time: Sat 10 Feb 2024 08:00:00 +0000 ROA not before: Sat 10 Feb 2024 07:55:00 +0000 ROA not after: Sat 08 Feb 2025 08:00:00 +0000 asID: 56242 IP address blocks: 103.228.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:89:71:a3:09:91:9d:ee:6e:1b:53:ce:32:c2:13:64:d3:e8:67:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Feb 10 07:55:00 2024 GMT Not After : Feb 8 08:00:00 2025 GMT Subject: CN=6F3505F0F315B582DE2978C727CA8F19135DE63A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:c5:a1:60:a7:f1:08:75:2d:e2:22:b8:d6: ac:69:c4:1e:3f:51:6f:de:9a:67:c9:6d:01:91:73: b6:f3:51:1c:cf:63:35:0a:dd:56:e2:1e:ec:07:37: fa:10:b1:c0:e3:19:a4:38:4a:a3:d3:6d:ee:a5:64: 7d:36:d5:aa:3f:fc:5e:9f:75:0b:90:a8:ae:c0:95: a5:6c:32:9f:b3:ca:26:29:cb:ab:2a:16:4f:85:e1: 61:5e:38:87:8e:6f:4e:1d:b0:4f:cf:51:d6:cd:90: 93:5e:91:1d:82:95:28:10:a5:51:03:5a:de:b4:bf: b0:95:05:ae:33:d3:be:01:fa:1f:a3:e4:f9:8f:55: 1e:aa:b7:20:3f:82:54:a0:98:82:d4:db:d6:fa:29: 88:aa:b3:05:b1:00:d2:e1:18:f9:ac:1c:f7:d2:d4: 7e:44:1d:bc:71:47:72:d6:6a:2a:62:3f:e4:5b:91: 70:a2:2b:24:a4:ef:42:99:be:38:e5:61:93:1c:1c: 1a:9e:22:8b:b6:e7:5b:35:88:9a:72:41:54:61:d7: b7:b3:14:4f:02:1c:94:07:66:eb:93:5d:25:6f:cc: aa:b5:89:85:a8:dd:c4:c4:77:fe:fc:a7:a2:87:57: 49:b7:6b:9c:1d:7a:ae:90:8a:c8:e4:85:89:43:d0: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:35:05:F0:F3:15:B5:82:DE:29:78:C7:27:CA:8F:19:13:5D:E6:3A X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32342d3234203d3e203536323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.116.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:79:04:68:7f:e6:14:f4:a8:2b:4f:8f:36:b9:f8:7c:a1:10: 2a:97:e8:b4:5d:b8:25:49:ac:f4:27:eb:56:ed:28:e7:d3:32: 29:32:8d:68:24:02:27:99:c8:de:40:9b:b3:75:bd:2f:9d:bd: ef:6f:8f:95:36:69:0f:dc:56:c5:9e:c3:aa:1b:d0:fa:9c:c0: 01:77:fa:02:2f:d2:30:3a:fb:46:b5:a3:e3:aa:fa:62:09:f2: 01:ce:34:88:46:1c:2c:fa:10:7e:7a:8d:13:d5:da:f3:79:a6: 69:f4:68:1b:a4:4c:62:81:e9:26:a4:45:34:fd:7d:e4:99:94: 08:f1:47:61:2d:c4:58:51:c8:a5:4b:8e:11:3b:1b:98:ae:b1: 37:eb:2e:94:c4:eb:b2:39:ab:d7:06:c0:96:d3:f9:46:68:09: c0:05:85:82:92:cc:48:e2:79:22:ee:97:02:49:a3:d8:2c:e0: 4c:7e:d4:66:a2:17:b6:d5:2a:38:bf:53:2c:16:01:b5:9e:40: 47:68:f3:25:71:b7:9f:b2:e8:7a:82:1b:79:62:e0:05:85:2d: 63:a6:f2:b8:f4:6a:3f:a9:9a:95:fa:dc:b0:23:08:8d:3c:ad: fe:f7:e8:20:7d:79:97:40:4c:21:32:a7:7b:e5:7b:74:c9:53: e9:ef:21:67 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQIlxowmRne5uG1POMsITZNPoZwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNDAyMTAwNzU1MDBaFw0yNTAyMDgwODAwMDBaMDMxMTAvBgNV BAMTKDZGMzUwNUYwRjMxNUI1ODJERTI5NzhDNzI3Q0E4RjE5MTM1REU2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FMWhYKfxCHUt4iK41qxpxB4/ UW/emmfJbQGRc7bzURzPYzUK3VbiHuwHN/oQscDjGaQ4SqPTbe6lZH021ao//F6f dQuQqK7AlaVsMp+zyiYpy6sqFk+F4WFeOIeOb04dsE/PUdbNkJNekR2ClSgQpVED Wt60v7CVBa4z074B+h+j5PmPVR6qtyA/glSgmILU29b6KYiqswWxANLhGPmsHPfS 1H5EHbxxR3LWaipiP+RbkXCiKySk70KZvjjlYZMcHBqeIou251s1iJpyQVRh17ez FE8CHJQHZuuTXSVvzKq1iYWo3cTEd/78p6KHV0m3a5wdeq6QisjkhYlD0EdBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbzUF8PMVtYLeKXjHJ8qPGRNd5jowHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05 ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzAzMzJlMzIzMjM4MmUzMTMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM2MzIzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+R0MA0GCSqG SIb3DQEBCwUAA4IBAQBceQRof+YU9KgrT482ufh8oRAql+i0XbglSaz0J+tW7Sjn 0zIpMo1oJAInmcjeQJuzdb0vnb3vb4+VNmkP3FbFnsOqG9D6nMABd/oCL9IwOvtG taPjqvpiCfIBzjSIRhws+hB+eo0T1drzeaZp9GgbpExigekmpEU0/X3kmZQI8Udh LcRYUcilS44ROxuYrrE36y6UxOuyOavXBsCW0/lGaAnABYWCksxI4nki7pcCSaPY LOBMftRmohe21So4v1MsFgG1nkBHaPMlcbefsuh6ght5YuAFhS1jpvK49Go/qZqV +tywIwiNPK3+9+ggfXmXQEwhMqd75Xt0yVPp7yFn -----END CERTIFICATE-----Generated at Wed May 1 02:06:09 2024 by rpki-client on console-fra.rpki-client.org