$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa File: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (raw, json) Hash identifier: LTeumIJw6lcc7eh01DkIR+ona9N5hadGNleSiFENr0k= Subject key identifier: DE:2C:AA:78:F7:95:8E:C6:9B:43:3A:F6:45:EB:94:FF:67:17:4F:D6 Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 6FB9EC4A7E402B2120222B5B3D5FC815C3CAB956 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa Signing time: Thu 18 Apr 2024 17:00:01 +0000 ROA not before: Thu 18 Apr 2024 16:55:01 +0000 ROA not after: Thu 17 Apr 2025 17:00:01 +0000 asID: 150971 IP address blocks: 103.127.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 13:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b9:ec:4a:7e:40:2b:21:20:22:2b:5b:3d:5f:c8:15:c3:ca:b9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Apr 18 16:55:01 2024 GMT Not After : Apr 17 17:00:01 2025 GMT Subject: CN=DE2CAA78F7958EC69B433AF645EB94FF67174FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:81:04:51:e6:86:f3:d8:78:3d:a9:b4:2f:a0: 49:21:f2:d1:45:98:a7:af:0a:61:ef:3d:e5:69:0f: ba:8f:20:28:24:1c:fa:45:02:6b:3e:56:70:5d:a7: e1:3b:d4:ad:8f:66:54:79:fe:69:20:56:55:1d:81: 71:91:fe:8b:18:03:46:fe:82:90:84:8d:9f:11:d7: a2:b2:aa:40:cc:cc:ba:ee:5c:31:13:40:ea:b3:56: 48:51:40:e5:c0:05:a9:cc:4b:e5:cc:dd:92:ce:b0: 0a:f2:2a:7b:4c:e5:18:ed:40:0c:79:0e:a8:21:4f: e3:63:45:27:df:82:0b:46:8a:d5:9e:3f:28:c1:93: 76:a3:70:83:6a:8e:5c:4b:25:e7:14:32:29:48:e4: 16:61:7d:a5:04:70:2d:40:98:82:11:60:6c:2f:fe: f3:e1:a0:c8:85:45:54:a4:d8:0d:65:8a:44:46:0f: 84:ad:82:1b:dd:68:86:8e:7d:75:d7:f0:8e:e4:10: 64:f8:06:e9:45:f6:84:af:ab:47:f7:f0:4d:25:dc: 40:c0:8e:e9:17:9e:f0:a3:ec:f5:dd:9e:39:b4:16: 8e:6d:b6:89:7e:de:0d:8a:16:a3:ee:15:76:11:e8: 4c:51:1d:60:60:ca:7e:d0:60:5a:c9:ae:1c:55:9e: 27:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2C:AA:78:F7:95:8E:C6:9B:43:3A:F6:45:EB:94:FF:67:17:4F:D6 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.106.0/23 Signature Algorithm: sha256WithRSAEncryption bd:22:fe:81:d1:45:7d:3e:e0:a9:e8:70:f4:b8:80:d6:bb:ae: 8f:a7:0a:cf:f8:1b:06:4a:ff:36:20:6f:85:fe:80:58:ec:69: ca:25:05:c7:ea:a2:c6:41:9b:f4:d8:e2:07:52:8e:ca:ad:76: 1b:14:6a:a5:65:99:b7:31:8d:f0:7d:3d:aa:ff:82:5d:48:31: 0e:22:60:2f:2d:6f:29:93:dc:90:00:9a:93:40:67:67:e3:d6: d4:b8:4a:f0:ab:f0:75:b3:89:c3:fe:3a:10:ad:51:93:9d:97: f2:c2:a6:e3:92:5a:0a:3d:10:1e:a2:23:e2:0b:e2:ac:2e:59: 7d:06:08:6a:f2:76:48:7e:e4:81:aa:37:ba:35:79:6a:92:ae: 0b:9d:ce:d9:79:eb:29:4e:17:b8:05:1b:d6:7a:3b:04:08:53: aa:04:5d:0e:fc:d2:ac:fe:68:14:25:f9:2c:0b:48:ac:f3:11: e5:d2:72:19:28:34:11:80:30:5c:9e:98:02:99:a4:7f:11:76: 3b:b1:ab:c5:09:5f:66:a5:44:63:54:42:1c:9e:29:53:37:fc: c2:00:e8:f9:a4:45:04:e8:bc:4f:bd:40:6e:b6:b2:e3:13:9e: 63:04:24:a2:dd:00:34:f6:3b:8c:bd:b5:6b:8c:e0:63:61:74: 7d:f7:04:d7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUb7nsSn5AKyEgIitbPV/IFcPKuVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNDA0MTgxNjU1MDFaFw0yNTA0MTcxNzAwMDFaMDMxMTAvBgNV BAMTKERFMkNBQTc4Rjc5NThFQzY5QjQzM0FGNjQ1RUI5NEZGNjcxNzRGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhgQRR5obz2Hg9qbQvoEkh8tFF mKevCmHvPeVpD7qPICgkHPpFAms+VnBdp+E71K2PZlR5/mkgVlUdgXGR/osYA0b+ gpCEjZ8R16KyqkDMzLruXDETQOqzVkhRQOXABanMS+XM3ZLOsAryKntM5RjtQAx5 DqghT+NjRSffggtGitWePyjBk3ajcINqjlxLJecUMilI5BZhfaUEcC1AmIIRYGwv /vPhoMiFRVSk2A1likRGD4StghvdaIaOfXXX8I7kEGT4BulF9oSvq0f38E0l3EDA jukXnvCj7PXdnjm0Fo5ttol+3g2KFqPuFXYR6ExRHWBgyn7QYFrJrhxVnienAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU3iyqePeVjsabQzr2ReuU/2cXT9YwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4ZDdhMDM4LWY4YTEtNGVkMC1h MWFmLTU0OTUyZTU0M2M0My8wLzMxMzAzMzJlMzEzMjM3MmUzMTMwMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM3MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnf2owDQYJ KoZIhvcNAQELBQADggEBAL0i/oHRRX0+4KnocPS4gNa7ro+nCs/4GwZK/zYgb4X+ gFjsacolBcfqosZBm/TY4gdSjsqtdhsUaqVlmbcxjfB9Par/gl1IMQ4iYC8tbymT 3JAAmpNAZ2fj1tS4SvCr8HWzicP+OhCtUZOdl/LCpuOSWgo9EB6iI+IL4qwuWX0G CGrydkh+5IGqN7o1eWqSrgudztl56ylOF7gFG9Z6OwQIU6oEXQ780qz+aBQl+SwL SKzzEeXSchkoNBGAMFyemAKZpH8Rdjuxq8UJX2alRGNUQhyeKVM3/MIA6PmkRQTo vE+9QG62suMTnmMEJKLdADT2O4y9tWuM4GNhdH33BNc= -----END CERTIFICATE-----Generated at Fri Jun 21 05:15:53 2024 by rpki-client on console-fra.rpki-client.org