$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e203338353237.roa File: 3130332e32352e3130382e302f32342d3234203d3e203338353237.roa (raw, json) Hash identifier: Bv8+N1YZfCOW9Mp7ZexXKugvyjYari83w80CY0qHyeM= Subject key identifier: 9A:EA:2A:E3:93:0C:EC:C4:B2:FE:1F:2D:8D:AB:E7:FD:5A:BA:88:B6 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 7D27C2FAD12DCCABA452AF1A9367369CA234CC3B Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e203338353237.roa Signing time: Fri 16 Feb 2024 05:00:02 +0000 ROA not before: Fri 16 Feb 2024 04:55:02 +0000 ROA not after: Fri 14 Feb 2025 05:00:02 +0000 asID: 38527 IP address blocks: 103.25.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Jun 2024 01:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:27:c2:fa:d1:2d:cc:ab:a4:52:af:1a:93:67:36:9c:a2:34:cc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Feb 16 04:55:02 2024 GMT Not After : Feb 14 05:00:02 2025 GMT Subject: CN=9AEA2AE3930CECC4B2FE1F2D8DABE7FD5ABA88B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:47:b7:1a:61:59:0a:ec:e9:ac:80:17:b8:09: 9d:18:f0:d2:d3:ee:e4:47:74:62:33:b7:d9:88:3d: 29:80:68:85:a2:13:05:f4:8a:b7:44:e4:44:de:fa: 95:10:37:8b:a0:4a:d2:6f:b8:a6:1c:03:5e:58:d1: df:c7:3c:e0:00:6f:fe:ff:3f:1d:c3:40:cc:c2:98: 95:d4:dd:cc:96:e0:27:ae:90:79:0b:66:12:31:f6: 14:66:17:a3:32:e8:d7:cc:95:0f:d1:59:9c:05:83: c8:e7:62:f7:dd:93:d3:7f:1a:56:01:0a:06:c9:4b: 28:b7:d6:d2:5a:ab:25:1a:3a:3f:82:7d:13:c5:cb: b1:0d:e1:66:93:c2:51:db:34:45:f3:c2:70:8a:35: 3f:db:45:2a:eb:2f:72:28:7c:89:79:06:d1:70:7d: 94:ea:7c:44:8c:c2:b0:ee:3a:51:08:41:9e:9a:02: fb:de:ca:32:fd:9d:f9:15:3e:8e:24:37:48:60:12: 98:e9:7d:6e:c7:15:98:64:d7:a4:ee:a0:4b:4f:13: cb:4a:28:10:1e:5e:f1:76:1c:8c:aa:36:02:e6:9e: 3a:1f:0f:1f:40:64:8d:ea:1f:c0:01:01:4f:67:94: a7:d5:09:f0:50:d7:af:f3:9e:b7:aa:20:18:8d:20: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EA:2A:E3:93:0C:EC:C4:B2:FE:1F:2D:8D:AB:E7:FD:5A:BA:88:B6 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e203338353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.108.0/24 Signature Algorithm: sha256WithRSAEncryption b2:cd:ba:02:11:ca:dc:5c:f8:ef:cd:1f:d2:64:45:5d:24:6b: 18:ef:a1:1c:54:9f:66:f0:29:e3:7d:36:31:a1:6c:57:4a:0b: c6:0e:61:c9:e9:c5:33:4a:c2:f5:74:1b:8f:34:f2:09:e1:ab: ee:73:20:4f:d4:27:50:2e:44:91:3c:eb:4e:28:8c:7e:3c:d4: d8:e0:27:aa:fe:1c:7d:5b:5f:4b:d9:14:32:e8:c0:04:05:82: e1:30:25:62:ac:ff:6d:e9:3c:01:6f:3a:49:e4:50:99:50:e2: e0:ff:b5:ea:57:45:cf:b8:10:20:94:74:60:f7:25:f1:eb:c5: 7d:31:e2:76:1b:41:6f:5a:46:86:26:9e:2e:20:52:4d:94:26: 8f:48:19:6d:69:29:10:18:5a:96:4b:73:7e:da:44:c7:ed:35: b5:1c:c5:4d:56:92:9f:60:67:7b:6a:e6:0f:6b:5c:cc:8e:09: 53:98:9b:3e:6c:44:cc:92:a6:63:7d:53:9e:25:1a:58:9b:67: f6:c4:ea:63:e8:3a:78:7b:d3:97:84:8b:bb:29:2a:59:62:64: 11:d2:5b:30:0a:47:7d:14:25:c6:71:06:6c:43:fd:44:10:ec: 68:68:61:e6:9c:81:fa:b9:30:37:c4:84:f8:22:1b:64:fe:cf: 85:1f:e2:1b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfSfC+tEtzKukUq8ak2c2nKI0zDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNDAyMTYwNDU1MDJaFw0yNTAyMTQwNTAwMDJaMDMxMTAvBgNV BAMTKDlBRUEyQUUzOTMwQ0VDQzRCMkZFMUYyRDhEQUJFN0ZENUFCQTg4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwR7caYVkK7OmsgBe4CZ0Y8NLT 7uRHdGIzt9mIPSmAaIWiEwX0irdE5ETe+pUQN4ugStJvuKYcA15Y0d/HPOAAb/7/ Px3DQMzCmJXU3cyW4CeukHkLZhIx9hRmF6My6NfMlQ/RWZwFg8jnYvfdk9N/GlYB CgbJSyi31tJaqyUaOj+CfRPFy7EN4WaTwlHbNEXzwnCKNT/bRSrrL3IofIl5BtFw fZTqfESMwrDuOlEIQZ6aAvveyjL9nfkVPo4kN0hgEpjpfW7HFZhk16TuoEtPE8tK KBAeXvF2HIyqNgLmnjofDx9AZI3qH8ABAU9nlKfVCfBQ16/znreqIBiNIBLxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUmuoq45MM7MSy/h8tjavn/Vq6iLYwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzAzMzJlMzIzNTJlMzEzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcZbDANBgkqhkiG 9w0BAQsFAAOCAQEAss26AhHK3Fz4780f0mRFXSRrGO+hHFSfZvAp4302MaFsV0oL xg5hyenFM0rC9XQbjzTyCeGr7nMgT9QnUC5EkTzrTiiMfjzU2OAnqv4cfVtfS9kU MujABAWC4TAlYqz/bek8AW86SeRQmVDi4P+16ldFz7gQIJR0YPcl8evFfTHidhtB b1pGhiaeLiBSTZQmj0gZbWkpEBhalktzftpEx+01tRzFTVaSn2Bne2rmD2tczI4J U5ibPmxEzJKmY31TniUaWJtn9sTqY+g6eHvTl4SLuykqWWJkEdJbMApHfRQlxnEG bEP9RBDsaGhh5pyB+rkwN8SE+CIbZP7PhR/iGw== -----END CERTIFICATE-----Generated at Mon Jun 24 21:21:14 2024 by rpki-client on console-ams.rpki-client.org