$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa File: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (raw, json) Hash identifier: rKjZcDMbTbVc1rf8DzpRBjDwfFv4Rw1GbiI3REhk8q0= Subject key identifier: 30:B2:F3:5E:CF:0A:3F:23:85:AD:D7:68:AC:63:76:94:40:26:30:83 Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Certificate serial: 73AF681A8AE4BFF0E21A44385C7B738390DE169B Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa Signing time: Thu 02 Nov 2023 19:00:01 +0000 ROA not before: Thu 02 Nov 2023 18:55:01 +0000 ROA not after: Thu 31 Oct 2024 19:00:01 +0000 asID: 58485 IP address blocks: 103.247.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:af:68:1a:8a:e4:bf:f0:e2:1a:44:38:5c:7b:73:83:90:de:16:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Validity Not Before: Nov 2 18:55:01 2023 GMT Not After : Oct 31 19:00:01 2024 GMT Subject: CN=30B2F35ECF0A3F2385ADD768AC63769440263083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dd:52:cf:66:6f:d8:8e:38:20:eb:6f:8b:43: 94:ab:3e:ee:a7:fe:15:7d:70:24:42:a4:64:b9:b9: a6:36:87:75:43:fc:42:d3:ab:e2:ec:32:95:50:27: 34:9e:f4:ad:c1:d9:21:c2:54:1b:6d:1c:be:f1:37: 09:7b:3f:6f:03:d4:f1:6d:a7:40:8d:fe:ac:44:2f: 5d:02:6a:a1:9e:3f:6d:60:68:40:bc:85:90:b7:e5: 62:07:51:1d:cf:aa:63:0e:a8:37:7c:c3:38:aa:64: 84:9b:c9:7a:77:71:51:6d:1a:e6:a2:d9:55:3f:cf: 5d:e4:33:89:db:ad:27:5b:51:ae:57:9c:cd:3a:1c: a9:36:64:bf:e9:4c:95:64:71:26:33:05:f8:3c:e6: 94:a9:c7:12:8f:03:db:45:cf:64:c4:2a:09:13:27: 09:72:a2:ab:d6:ce:82:57:a7:fe:ce:4e:8a:86:a4: 30:8e:9b:38:8a:be:be:f2:9f:ee:57:68:de:e7:18: 88:6e:0e:4a:61:11:77:f8:cd:8c:98:e4:14:6e:d1: 7c:f2:2b:e7:2c:cf:ee:0f:1f:5e:77:f3:e1:f6:58: b3:d1:7f:a7:9f:66:7b:6a:ee:26:8a:09:97:d9:f9: 7e:2d:44:51:03:b0:7f:a8:14:4d:e3:8f:a5:a6:98: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B2:F3:5E:CF:0A:3F:23:85:AD:D7:68:AC:63:76:94:40:26:30:83 X509v3 Authority Key Identifier: keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.21.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:3f:2f:1b:a7:5a:52:a8:0f:23:21:8c:dd:b4:10:23:d0:7e: c1:a8:33:40:5a:8a:24:ff:35:16:2a:e4:0e:77:2e:a3:91:35: bf:a2:c4:a4:37:4f:39:63:4d:37:01:57:ac:cb:0f:91:72:38: 8a:e5:6b:eb:cf:30:70:e3:47:4e:cc:9b:ee:3e:ba:4f:8c:8c: e6:a1:cd:32:a8:49:f0:f7:8d:36:5a:f1:6f:6a:dd:33:3b:d4: b5:95:ef:1a:b3:bd:50:ec:dd:70:ae:78:57:c6:ea:88:61:2d: 6b:86:00:de:42:81:70:84:68:03:12:81:47:d7:64:26:4b:b4: 9f:e8:55:65:78:4e:c6:3b:5d:b0:06:d4:ac:ff:77:48:d9:e6: c3:2e:6a:09:32:2e:cc:7e:5a:e5:9f:d4:90:26:79:f5:9c:52: dc:12:4a:4f:d1:c1:ae:e0:3e:2a:62:2e:83:3e:8c:1f:5d:cf: 18:46:3c:2e:e9:be:e9:3b:c9:03:ba:11:56:3e:52:8f:cb:1b: df:25:63:a1:86:9b:95:61:1f:3a:24:4f:c9:31:cc:a7:85:d8: 92:c3:13:f6:46:ea:4b:84:a4:62:7c:9b:ec:49:ef:7b:93:9b: 3e:c1:e8:3f:f3:fd:78:5f:61:bd:05:3c:61:5b:d7:11:c1:e9: fc:78:62:fd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUc69oGorkv/DiGkQ4XHtzg5DeFpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF QjNCRkYzOTAeFw0yMzExMDIxODU1MDFaFw0yNDEwMzExOTAwMDFaMDMxMTAvBgNV BAMTKDMwQjJGMzVFQ0YwQTNGMjM4NUFERDc2OEFDNjM3Njk0NDAyNjMwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3VLPZm/Yjjgg62+LQ5SrPu6n /hV9cCRCpGS5uaY2h3VD/ELTq+LsMpVQJzSe9K3B2SHCVBttHL7xNwl7P28D1PFt p0CN/qxEL10CaqGeP21gaEC8hZC35WIHUR3PqmMOqDd8wziqZISbyXp3cVFtGuai 2VU/z13kM4nbrSdbUa5XnM06HKk2ZL/pTJVkcSYzBfg85pSpxxKPA9tFz2TEKgkT JwlyoqvWzoJXp/7OToqGpDCOmziKvr7yn+5XaN7nGIhuDkphEXf4zYyY5BRu0Xzy K+csz+4PH1538+H2WLPRf6efZntq7iaKCZfZ+X4tRFEDsH+oFE3jj6WmmCbTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMLLzXs8KPyOFrddorGN2lEAmMIMwHwYDVR0j BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC RkYzOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlZTQ3YmJmLWJhODQtNDQ4Zi05 NjJiLTJhYWY1YzdkZDY4ZC8wLzMxMzAzMzJlMzIzNDM3MmUzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3FTANBgkqhkiG 9w0BAQsFAAOCAQEASz8vG6daUqgPIyGM3bQQI9B+wagzQFqKJP81FirkDncuo5E1 v6LEpDdPOWNNNwFXrMsPkXI4iuVr688wcONHTsyb7j66T4yM5qHNMqhJ8PeNNlrx b2rdMzvUtZXvGrO9UOzdcK54V8bqiGEta4YA3kKBcIRoAxKBR9dkJku0n+hVZXhO xjtdsAbUrP93SNnmwy5qCTIuzH5a5Z/UkCZ59ZxS3BJKT9HBruA+KmIugz6MH13P GEY8Lum+6TvJA7oRVj5Sj8sb3yVjoYablWEfOiRPyTHMp4XYksMT9kbqS4SkYnyb 7Enve5ObPsHoP/P9eF9hvQU8YVvXEcHp/Hhi/Q== -----END CERTIFICATE-----Generated at Fri May 3 00:27:04 2024 by rpki-client on console-fra.rpki-client.org