$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa File: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (raw, json) Hash identifier: 0kLCizOX6Jcat44K5p+qM0oJg+fboeaRA8mRcok+3XM= Subject key identifier: CE:30:9B:F0:10:83:9D:D6:F8:1E:D5:FB:31:E8:DF:F4:98:7A:BE:62 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 709261AF1593F1E73FFD6B5ACF495BE7CEEE0B01 Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa Signing time: Wed 10 Apr 2024 10:00:02 +0000 ROA not before: Wed 10 Apr 2024 09:55:02 +0000 ROA not after: Wed 09 Apr 2025 10:00:02 +0000 asID: 150262 IP address blocks: 103.27.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 02:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:92:61:af:15:93:f1:e7:3f:fd:6b:5a:cf:49:5b:e7:ce:ee:0b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Apr 10 09:55:02 2024 GMT Not After : Apr 9 10:00:02 2025 GMT Subject: CN=CE309BF010839DD6F81ED5FB31E8DFF4987ABE62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:80:f6:d4:74:ae:90:32:15:99:ca:df:1e: 5c:1f:59:69:84:37:ed:90:51:09:04:6e:3f:b9:16: a5:1d:0a:c7:ab:5e:bd:a7:3c:be:53:da:96:73:88: 16:f4:81:dd:58:5f:bc:40:7f:4d:83:97:fb:c6:74: 27:57:03:6c:e8:4d:2a:01:49:d4:f9:b9:da:eb:16: 02:f0:7b:8c:7d:b5:81:e7:8e:4b:61:f6:03:62:92: 74:11:88:88:f2:7d:dd:ee:fe:a7:3e:f8:36:54:97: 7c:9d:4f:4a:20:79:7f:4a:4b:ca:36:3a:51:14:83: 02:76:b8:b2:58:8b:7a:25:90:c2:db:bf:3e:9a:e0: a9:1f:6c:32:68:75:b7:2b:d1:d9:8a:32:35:f4:84: cc:62:2d:18:5b:ff:16:d5:21:9f:14:41:8b:b9:17: d4:00:ce:b9:c6:ba:6b:ee:8b:ae:a6:b4:4d:89:77: 94:a8:76:8b:cd:32:95:35:6a:ad:4a:c4:e0:52:74: 4f:e2:40:1f:29:d7:2c:71:a1:34:53:a2:db:d8:c6: d8:25:f3:3f:e3:59:64:5e:1d:a5:fc:05:58:72:45: 72:01:2b:de:8e:72:21:82:ac:c4:f1:a4:82:21:88: 6f:ee:69:b5:04:e0:4a:f0:50:5c:c4:87:7b:9e:2a: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:30:9B:F0:10:83:9D:D6:F8:1E:D5:FB:31:E8:DF:F4:98:7A:BE:62 X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.27.193.0/24 Signature Algorithm: sha256WithRSAEncryption 26:1c:8c:85:26:03:65:38:6e:f7:93:b5:0d:3e:77:a9:5c:e4: 0d:be:c6:0c:f5:23:01:0f:66:44:65:52:8e:7c:f7:84:c3:1e: a6:13:cc:2b:bd:51:d9:67:74:68:51:d9:e7:7c:e7:68:8a:23: 31:03:91:ef:d0:86:da:62:11:64:fc:a0:e9:58:fe:06:d8:83: 5a:23:8f:1a:38:e0:4c:7c:96:72:e6:d1:d6:e2:01:e7:94:4c: 42:9c:0e:be:4e:7d:55:d1:ee:f7:84:de:cb:d5:fd:09:21:2c: 6e:5e:24:fc:6c:c0:f2:7d:67:88:6f:22:53:81:e6:2a:a3:80: cd:da:67:10:a0:b6:23:12:54:60:e8:d7:c8:c6:d7:3c:3e:2e: 79:61:51:52:55:72:20:d4:ce:c3:d5:ba:67:bf:71:ad:ec:eb: f6:60:fa:de:ba:fa:fb:c5:94:33:5e:19:0c:ca:a3:db:da:24: 5b:13:b1:57:05:5c:94:d1:a1:e9:52:68:95:d6:b6:33:fd:19: d3:e5:b9:eb:f7:fc:27:b9:c3:83:8b:df:17:c5:2d:ba:70:5e: 30:68:39:aa:fd:b1:0b:de:4a:aa:27:0d:42:70:08:17:d6:7e: b0:c6:91:4a:3f:fa:6f:ad:f6:58:ac:06:81:8e:46:de:ef:cb: 65:72:be:57 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcJJhrxWT8ec//Wtaz0lb587uCwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNDA0MTAwOTU1MDJaFw0yNTA0MDkxMDAwMDJaMDMxMTAvBgNV BAMTKENFMzA5QkYwMTA4MzlERDZGODFFRDVGQjMxRThERkY0OTg3QUJFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOoD21HSukDIVmcrfHlwfWWmE N+2QUQkEbj+5FqUdCserXr2nPL5T2pZziBb0gd1YX7xAf02Dl/vGdCdXA2zoTSoB SdT5udrrFgLwe4x9tYHnjkth9gNiknQRiIjyfd3u/qc++DZUl3ydT0ogeX9KS8o2 OlEUgwJ2uLJYi3olkMLbvz6a4KkfbDJodbcr0dmKMjX0hMxiLRhb/xbVIZ8UQYu5 F9QAzrnGumvui66mtE2Jd5SodovNMpU1aq1KxOBSdE/iQB8p1yxxoTRTotvYxtgl 8z/jWWReHaX8BVhyRXIBK96OciGCrMTxpIIhiG/uabUE4ErwUFzEh3ueKoBxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzjCb8BCDndb4HtX7Mejf9Jh6vmIwHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyMjdiMTc2LTRjMTctNDI0NC1i YWRmLWY0OTZiY2IxNWUyMC8wLzMxMzAzMzJlMzIzNzJlMzEzOTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxvBMA0GCSqG SIb3DQEBCwUAA4IBAQAmHIyFJgNlOG73k7UNPnepXOQNvsYM9SMBD2ZEZVKOfPeE wx6mE8wrvVHZZ3RoUdnnfOdoiiMxA5Hv0IbaYhFk/KDpWP4G2INaI48aOOBMfJZy 5tHW4gHnlExCnA6+Tn1V0e73hN7L1f0JISxuXiT8bMDyfWeIbyJTgeYqo4DN2mcQ oLYjElRg6NfIxtc8Pi55YVFSVXIg1M7D1bpnv3Gt7Ov2YPreuvr7xZQzXhkMyqPb 2iRbE7FXBVyU0aHpUmiV1rYz/RnT5bnr9/wnucODi98XxS26cF4waDmq/bEL3kqq Jw1CcAgX1n6wxpFKP/pvrfZYrAaBjkbe78tlcr5X -----END CERTIFICATE-----Generated at Sat Jun 22 00:19:00 2024 by rpki-client on console-ams.rpki-client.org