$ rpki-client -vvf repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa File: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (raw, json) Hash identifier: +PwAii4pxe4mn5lFB8CfkXjIbzkXgupYGq2pfldtUCk= Subject key identifier: D0:89:23:FF:23:25:E3:5E:2F:D6:F6:79:09:50:0A:64:FC:EF:0E:E3 Certificate issuer: /CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Certificate serial: 02D6EEA682657BEF5069375C17D3E21FB28BCD61 Authority key identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa Signing time: Tue 31 Oct 2023 03:01:54 +0000 ROA not before: Tue 31 Oct 2023 02:56:54 +0000 ROA not after: Tue 29 Oct 2024 03:01:54 +0000 asID: 17769 IP address blocks: 103.147.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d6:ee:a6:82:65:7b:ef:50:69:37:5c:17:d3:e2:1f:b2:8b:cd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Validity Not Before: Oct 31 02:56:54 2023 GMT Not After : Oct 29 03:01:54 2024 GMT Subject: CN=D08923FF2325E35E2FD6F67909500A64FCEF0EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:08:b5:b8:e2:bc:f8:98:7e:3f:4c:09:d2: 47:23:23:91:9c:79:88:fc:fc:c4:a8:09:8b:d2:2d: 57:f7:90:9b:ed:af:0b:89:e2:48:00:48:bd:6f:1d: 60:9d:a2:e7:04:b3:46:72:57:00:a5:a8:51:96:97: 11:d8:d8:de:b6:9d:58:39:4c:aa:59:07:99:46:d2: 33:b9:70:17:b5:74:63:b5:83:5a:89:5a:a3:85:9d: 04:2a:97:e0:57:f1:e0:5d:d2:d5:f8:b2:92:60:e3: 29:e7:72:c1:36:2e:ac:42:67:fa:62:f5:30:b3:3b: 9e:e9:15:47:a8:f2:15:7d:5e:25:ee:aa:26:f6:4f: 0a:d0:16:64:7e:67:c8:23:99:99:cd:ea:a3:92:e0: 96:3b:e3:59:bc:01:14:2f:62:58:9c:53:96:25:bc: f2:d0:a4:ef:70:55:68:0f:ca:7d:2d:22:e8:02:0f: 3a:2f:d4:41:69:8a:aa:83:a8:83:d1:65:14:f5:cd: f7:e5:52:1f:59:0e:21:08:eb:62:c8:4c:dd:f6:7c: b7:fc:26:4f:75:91:47:f2:62:00:2f:15:0a:0b:b5: 49:62:72:72:80:51:62:b0:29:ca:e8:71:1a:e8:41: f9:4b:4f:b3:56:e8:f8:81:1d:63:2b:bf:0b:2a:4b: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:89:23:FF:23:25:E3:5E:2F:D6:F6:79:09:50:0A:64:FC:EF:0E:E3 X509v3 Authority Key Identifier: keyid:09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.146.0/23 Signature Algorithm: sha256WithRSAEncryption 67:64:ea:7d:e6:25:ec:1a:2c:93:35:a1:e5:f3:57:59:37:1a: 6a:6c:88:ef:1e:e7:bb:05:d9:06:fa:bf:35:a8:10:f6:88:99: 42:0e:fd:50:48:b0:58:40:1e:64:b5:f1:c9:57:45:08:6b:0f: b2:c5:ce:36:92:45:c4:e4:81:e6:c8:14:31:96:74:d9:42:bd: a6:dd:6c:1a:56:40:bf:65:b2:2b:6e:96:76:d7:76:6f:f8:a2: 9a:87:64:b4:84:bd:9a:ac:5b:00:25:05:30:54:ac:39:7d:92: 42:8b:3a:ee:6f:35:6e:53:1b:c8:90:8c:d5:3c:20:ed:01:fc: 16:7c:78:60:93:da:45:82:49:09:ae:92:ee:0f:6c:30:ef:cf: 5a:56:6e:70:7b:68:81:d5:7d:98:18:e6:85:bf:e6:33:f8:2e: e7:e8:f2:6c:22:53:bf:fe:03:2f:d6:cb:7b:66:35:21:2c:56: 57:7a:e8:4d:a0:50:3a:9e:f1:00:55:eb:e2:fa:52:db:d3:42: cf:4e:7b:79:c4:e5:00:c5:49:b9:5d:95:46:77:e5:bb:64:cd: 12:22:8c:39:18:a7:46:e9:3b:4e:93:e2:af:6f:c8:ee:7f:03: 16:93:e1:01:2a:58:b6:5a:b9:27:03:bf:31:1b:9d:10:3c:cf: d5:6f:67:f7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAtbupoJle+9QaTdcF9PiH7KLzWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1 QTM3MTVDMDAeFw0yMzEwMzEwMjU2NTRaFw0yNDEwMjkwMzAxNTRaMDMxMTAvBgNV BAMTKEQwODkyM0ZGMjMyNUUzNUUyRkQ2RjY3OTA5NTAwQTY0RkNFRjBFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZAi1uOK8+Jh+P0wJ0kcjI5Gc eYj8/MSoCYvSLVf3kJvtrwuJ4kgASL1vHWCdoucEs0ZyVwClqFGWlxHY2N62nVg5 TKpZB5lG0jO5cBe1dGO1g1qJWqOFnQQql+BX8eBd0tX4spJg4ynncsE2LqxCZ/pi 9TCzO57pFUeo8hV9XiXuqib2TwrQFmR+Z8gjmZnN6qOS4JY741m8ARQvYlicU5Yl vPLQpO9wVWgPyn0tIugCDzov1EFpiqqDqIPRZRT1zfflUh9ZDiEI62LITN32fLf8 Jk91kUfyYgAvFQoLtUlicnKAUWKwKcrocRroQflLT7NW6PiBHWMrvwsqS2sDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0Ikj/yMl414v1vZ5CVAKZPzvDuMwHwYDVR0j BBgwFoAUCUYfhdV373neBy7syh4SE1o3FcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzNiOTU5ZS1mZjUyLTQwMjgtYjUzNC0xZDYwNWZhM2E4MGIvMC8wOTQ2MUY4NUQ1 NzdFRjc5REUwNzJFRUNDQTFFMTIxMzVBMzcxNUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1QTM3 MTVDMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3M2I5NTllLWZmNTItNDAyOC1i NTM0LTFkNjA1ZmEzYTgwYi8wLzMxMzAzMzJlMzEzNDM3MmUzMTM0MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzczNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5OSMA0GCSqG SIb3DQEBCwUAA4IBAQBnZOp95iXsGiyTNaHl81dZNxpqbIjvHue7BdkG+r81qBD2 iJlCDv1QSLBYQB5ktfHJV0UIaw+yxc42kkXE5IHmyBQxlnTZQr2m3WwaVkC/ZbIr bpZ213Zv+KKah2S0hL2arFsAJQUwVKw5fZJCizrubzVuUxvIkIzVPCDtAfwWfHhg k9pFgkkJrpLuD2ww789aVm5we2iB1X2YGOaFv+Yz+C7n6PJsIlO//gMv1st7ZjUh LFZXeuhNoFA6nvEAVevi+lLb00LPTnt5xOUAxUm5XZVGd+W7ZM0SIow5GKdG6TtO k+Kvb8jufwMWk+EBKli2WrknA78xG50QPM/Vb2f3 -----END CERTIFICATE-----Generated at Wed May 1 19:11:08 2024 by rpki-client on console-fra.rpki-client.org