$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa File: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (raw, json) Hash identifier: UWkWpy75FXXiO6uLHlRhSo0V3lTHBX2E8QT7GG3BfWs= Subject key identifier: 7A:B8:5A:B4:AE:72:19:61:F3:DF:97:EA:18:74:2E:68:20:C4:B2:1A Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 63744CDA81331BD37D599F7E676216E4EBC33963 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa Signing time: Sat 20 Jul 2024 07:00:00 +0000 ROA not before: Sat 20 Jul 2024 06:55:00 +0000 ROA not after: Sat 19 Jul 2025 07:00:00 +0000 asID: 137331 IP address blocks: 103.157.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:74:4c:da:81:33:1b:d3:7d:59:9f:7e:67:62:16:e4:eb:c3:39:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Jul 20 06:55:00 2024 GMT Not After : Jul 19 07:00:00 2025 GMT Subject: CN=7AB85AB4AE721961F3DF97EA18742E6820C4B21A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ad:24:85:ff:fa:ea:fa:82:9d:54:2e:c9:74: a6:4e:f0:31:f7:84:e3:b0:93:55:53:d7:58:e2:c4: c3:a4:86:71:65:67:3e:21:f3:43:e6:40:cc:c0:ed: a1:01:fd:41:b1:35:5d:77:16:9f:27:8e:45:81:a7: 3f:e1:84:78:28:4b:4d:80:60:fa:1c:ae:6c:52:c6: 2f:00:6d:f7:d2:82:7d:e1:42:51:73:87:b1:6f:fa: e9:11:55:00:d2:fa:3b:04:96:2a:ff:c3:85:e8:1e: 70:a6:05:0e:6b:34:41:ab:c6:58:e4:3c:16:99:57: 3a:91:35:d6:08:a8:92:59:74:55:e2:a9:15:2e:34: 0c:8f:3b:6e:b5:db:1f:14:2f:1f:a8:05:05:c9:b5: e3:90:eb:7f:95:67:fc:e6:1a:1d:e9:5e:ec:e5:1f: da:ab:0d:c4:ab:c5:44:a5:35:d2:08:17:57:17:cb: 82:d2:84:98:cc:87:5b:1e:cc:88:9a:3d:c1:e9:53: 3b:63:51:31:ec:21:f8:1b:0c:34:d0:a2:96:a4:83: 00:c9:a7:fe:54:57:dc:fd:01:66:0e:7f:f8:a9:60: 72:5a:dd:e8:71:74:55:e7:7a:22:ef:e1:c3:1c:ac: e1:a4:92:52:8d:2d:ac:c3:4b:f1:8a:0c:5e:2a:ef: d4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B8:5A:B4:AE:72:19:61:F3:DF:97:EA:18:74:2E:68:20:C4:B2:1A X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.116.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:f4:42:d1:4d:62:59:ec:8d:27:b8:7b:80:01:69:32:3b:e1: 54:b9:35:b4:e8:57:f5:36:06:c2:55:8b:47:5b:e2:1e:18:94: ec:52:73:c7:1a:64:35:be:cc:bd:1b:c8:ca:b5:a5:e2:9b:35: 8b:25:65:4e:f6:f5:d6:0b:70:f6:da:2c:4b:f6:61:5b:7a:19: 49:6f:60:72:17:8a:57:1c:82:bc:26:cc:86:58:be:fe:87:16: 11:ae:3c:38:cf:ed:2b:00:44:41:91:34:9c:06:68:17:85:3a: 21:28:08:7a:3e:dd:31:19:21:ca:7c:36:d2:59:a9:8a:78:58: 7c:b0:93:c6:7f:1c:d1:16:4e:d4:55:15:c3:fa:fe:39:78:d1: 3c:f7:6a:ef:dc:4d:b3:53:06:8b:86:4a:03:2f:f6:a7:8c:85: 8b:10:96:e2:37:da:06:34:26:a4:6d:ae:89:91:03:1e:d5:65: 5d:82:e1:72:b2:52:c0:3a:09:f4:a2:6b:f0:f2:a2:ab:28:62: b0:27:96:09:a3:2d:9c:6d:46:4b:b8:68:f5:1c:8a:fa:0d:c6: 5c:c8:c9:af:a2:29:e8:dc:8f:0a:f0:b7:65:a3:07:c7:08:3f: 7e:ff:b5:27:4f:6c:de:c1:b0:93:15:50:8c:1f:7f:02:c5:76: da:31:01:7e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUY3RM2oEzG9N9WZ9+Z2IW5OvDOWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNDA3MjAwNjU1MDBaFw0yNTA3MTkwNzAwMDBaMDMxMTAvBgNV BAMTKDdBQjg1QUI0QUU3MjE5NjFGM0RGOTdFQTE4NzQyRTY4MjBDNEIyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdrSSF//rq+oKdVC7JdKZO8DH3 hOOwk1VT11jixMOkhnFlZz4h80PmQMzA7aEB/UGxNV13Fp8njkWBpz/hhHgoS02A YPocrmxSxi8AbffSgn3hQlFzh7Fv+ukRVQDS+jsElir/w4XoHnCmBQ5rNEGrxljk PBaZVzqRNdYIqJJZdFXiqRUuNAyPO2612x8ULx+oBQXJteOQ63+VZ/zmGh3pXuzl H9qrDcSrxUSlNdIIF1cXy4LShJjMh1sezIiaPcHpUztjUTHsIfgbDDTQopakgwDJ p/5UV9z9AWYOf/ipYHJa3ehxdFXneiLv4cMcrOGkklKNLazDS/GKDF4q79RpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUerhatK5yGWHz35fqGHQuaCDEshowHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkMDdlM2Q4LTliZmMtNDQ4My1h MmRkLWFmYTQ1OTM4MTFlNS8wLzMxMzAzMzJlMzEzNTM3MmUzMTMxMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnXQwDQYJ KoZIhvcNAQELBQADggEBAE30QtFNYlnsjSe4e4ABaTI74VS5NbToV/U2BsJVi0db 4h4YlOxSc8caZDW+zL0byMq1peKbNYslZU729dYLcPbaLEv2YVt6GUlvYHIXilcc grwmzIZYvv6HFhGuPDjP7SsAREGRNJwGaBeFOiEoCHo+3TEZIcp8NtJZqYp4WHyw k8Z/HNEWTtRVFcP6/jl40Tz3au/cTbNTBouGSgMv9qeMhYsQluI32gY0JqRtromR Ax7VZV2C4XKyUsA6CfSia/DyoqsoYrAnlgmjLZxtRku4aPUcivoNxlzIya+iKejc jwrwt2WjB8cIP37/tSdPbN7BsJMVUIwffwLFdtoxAX4= -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:09 2024 by rpki-client on console-fra.rpki-client.org