$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/3130332e3134372e37342e302f32332d3234203d3e203137373639.roa File: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (raw, json) Hash identifier: vYglQevQhoZ92zyD1uM0y+A7+HsE2k/833k+45zfz1Y= Subject key identifier: 24:20:BC:02:C3:20:B6:89:DB:68:50:3F:CC:2D:20:A0:6F:95:9D:29 Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 73F90877EDCCA4E0E280A3102BEA8220A25EFF49 Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/3130332e3134372e37342e302f32332d3234203d3e203137373639.roa Signing time: Tue 31 Oct 2023 04:02:09 +0000 ROA not before: Tue 31 Oct 2023 03:57:09 +0000 ROA not after: Tue 29 Oct 2024 04:02:09 +0000 asID: 17769 IP address blocks: 103.147.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 12:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f9:08:77:ed:cc:a4:e0:e2:80:a3:10:2b:ea:82:20:a2:5e:ff:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: Oct 31 03:57:09 2023 GMT Not After : Oct 29 04:02:09 2024 GMT Subject: CN=2420BC02C320B689DB68503FCC2D20A06F959D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ca:47:64:25:63:63:ad:bd:b8:6c:a1:11:11: a5:47:dd:3e:0b:6a:3a:34:e9:60:fe:9b:df:10:75: 79:ef:42:ab:cb:15:8e:61:e0:bb:ed:a1:7d:ec:39: f0:02:61:93:20:35:d0:13:5b:7f:8d:87:a2:d5:11: a7:b4:0d:df:c4:63:5f:7e:46:d9:5c:49:7a:72:9b: ee:b2:f4:8f:0d:16:13:da:c9:83:15:4f:7f:0e:63: 9c:8c:cc:51:a4:6e:4e:a5:4a:dc:01:0d:ca:31:c7: 1a:20:63:10:94:e3:f2:f6:e2:13:07:8b:e8:6d:0f: d6:48:9f:d7:3a:5a:72:7f:69:81:bb:21:ae:56:76: 2b:dc:a7:d6:8d:e0:49:75:cc:79:86:3f:cb:3d:81: ae:82:e6:a3:2d:cb:53:30:c1:f6:7a:34:a1:60:56: cd:cc:26:bd:d8:03:ac:9a:7d:93:9f:60:5b:c9:4e: da:c3:e8:f7:db:22:c1:63:55:15:ca:10:da:07:3a: 1d:c3:fd:3c:b4:ce:03:35:2f:ff:e5:4d:54:09:0d: 80:d7:62:85:76:b7:07:46:78:53:c0:4b:8f:8f:07: b4:f0:35:fb:e1:94:66:ea:f9:bf:e7:b3:65:e0:b8: 5d:04:d0:de:98:70:a6:97:eb:14:5b:e0:9a:91:8e: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:20:BC:02:C3:20:B6:89:DB:68:50:3F:CC:2D:20:A0:6F:95:9D:29 X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/3130332e3134372e37342e302f32332d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.74.0/23 Signature Algorithm: sha256WithRSAEncryption d5:f7:5b:0e:ff:0c:b4:6b:f6:09:3d:3f:0d:f1:19:08:1e:da: ac:e1:59:db:76:da:3b:5c:a7:18:da:83:41:7b:50:cb:7c:a2: fd:3b:fa:8e:37:99:20:b5:0b:cc:de:07:08:be:b7:99:8f:f9: f8:18:7d:12:27:87:3c:fa:38:18:c4:5f:7e:ca:b5:40:b6:6d: 15:e3:32:b1:53:88:56:4f:02:11:77:ab:98:5a:16:d6:9e:07: 71:7f:70:e1:ca:e0:96:7a:5f:d7:b1:bd:f2:51:a9:26:9c:8c: 52:87:d9:90:65:11:55:f7:3a:11:e3:99:6d:25:06:cb:8f:80: ea:93:3d:bf:a5:d1:73:c2:84:16:bd:91:62:ca:fb:6a:3f:ab: cb:26:72:3b:1d:d3:a7:ad:b6:52:e3:99:de:db:69:0d:92:61: af:4a:0e:97:71:22:21:89:2d:86:81:51:ed:d1:40:f5:2d:99: cd:e0:d2:48:d7:db:41:be:49:ae:05:cb:e7:d5:7f:99:2f:41: 81:7d:7f:fd:cc:7c:1c:0f:ca:a0:3b:54:ba:ce:d0:15:c3:64: 01:e2:81:6a:99:70:6c:df:5d:3f:6a:50:fe:18:54:eb:21:48: ad:34:c3:11:35:8b:d3:8b:06:a1:f3:4d:67:6c:b3:d7:06:f5: 8a:91:d0:6a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUc/kId+3MpODigKMQK+qCIKJe/0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yMzEwMzEwMzU3MDlaFw0yNDEwMjkwNDAyMDlaMDMxMTAvBgNV BAMTKDI0MjBCQzAyQzMyMEI2ODlEQjY4NTAzRkNDMkQyMEEwNkY5NTlEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoykdkJWNjrb24bKEREaVH3T4L ajo06WD+m98QdXnvQqvLFY5h4LvtoX3sOfACYZMgNdATW3+Nh6LVEae0Dd/EY19+ RtlcSXpym+6y9I8NFhPayYMVT38OY5yMzFGkbk6lStwBDcoxxxogYxCU4/L24hMH i+htD9ZIn9c6WnJ/aYG7Ia5Wdivcp9aN4El1zHmGP8s9ga6C5qMty1MwwfZ6NKFg Vs3MJr3YA6yafZOfYFvJTtrD6PfbIsFjVRXKENoHOh3D/Ty0zgM1L//lTVQJDYDX YoV2twdGeFPAS4+PB7TwNfvhlGbq+b/ns2XguF0E0N6YcKaX6xRb4JqRjkPfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJCC8AsMgtonbaFA/zC0goG+VnSkwHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3MjkwN2QzLWJlMjQtNGRhOC05 NmJiLWYxMjI4ZmM5OTIwNS8wLzMxMzAzMzJlMzEzNDM3MmUzNzM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNzM3MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeTSjANBgkqhkiG 9w0BAQsFAAOCAQEA1fdbDv8MtGv2CT0/DfEZCB7arOFZ23baO1ynGNqDQXtQy3yi /Tv6jjeZILULzN4HCL63mY/5+Bh9EieHPPo4GMRffsq1QLZtFeMysVOIVk8CEXer mFoW1p4HcX9w4crglnpf17G98lGpJpyMUofZkGURVfc6EeOZbSUGy4+A6pM9v6XR c8KEFr2RYsr7aj+ryyZyOx3Tp622UuOZ3ttpDZJhr0oOl3EiIYkthoFR7dFA9S2Z zeDSSNfbQb5JrgXL59V/mS9BgX1//cx8HA/KoDtUus7QFcNkAeKBaplwbN9dP2pQ /hhU6yFIrTTDETWL04sGofNNZ2yz1wb1ipHQag== -----END CERTIFICATE-----Generated at Wed May 1 12:16:02 2024 by rpki-client on console-ams.rpki-client.org