$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa File: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (raw, json) Hash identifier: 3G3cuIsUsC93A5VqDBrlhjA6pHEL2QIiEv1ZbgGfh7c= Subject key identifier: 7B:85:5F:61:4E:28:E1:7B:C8:DC:40:B5:7A:BB:16:5B:A3:9B:AD:1A Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67 Certificate serial: 6CF88E7DFB7F98F70BAE6D9B0D885B9D4016D556 Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa Signing time: Fri 16 Aug 2024 04:00:00 +0000 ROA not before: Fri 16 Aug 2024 03:55:00 +0000 ROA not after: Fri 15 Aug 2025 04:00:00 +0000 asID: 38756 IP address blocks: 103.212.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f8:8e:7d:fb:7f:98:f7:0b:ae:6d:9b:0d:88:5b:9d:40:16:d5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67 Validity Not Before: Aug 16 03:55:00 2024 GMT Not After : Aug 15 04:00:00 2025 GMT Subject: CN=7B855F614E28E17BC8DC40B57ABB165BA39BAD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b6:2c:b8:7f:07:f5:d2:a8:90:c6:fc:f2:e1: 9f:4e:81:1a:c7:dc:4c:f1:c4:5a:85:43:17:14:0a: 3d:56:21:cf:0c:6d:79:74:98:14:c6:22:f6:85:3b: 7c:c3:4c:df:da:c1:35:c4:f7:8a:be:72:52:f2:52: 7d:20:04:f3:21:d9:f6:0a:2b:9c:eb:d6:2b:cf:d1: df:a3:17:35:ed:c6:74:e5:db:ee:79:21:3d:db:05: c4:46:a4:77:bb:fe:69:57:9b:00:ca:d2:91:58:e3: f7:48:96:f1:e1:4b:44:e3:97:84:ef:22:73:15:72: 0c:f4:36:01:9a:86:da:97:6b:5d:ad:75:04:83:2b: 04:99:c2:db:48:ac:10:cb:7e:96:5f:85:9c:39:09: fb:a2:4a:9e:5a:14:9c:d5:08:3e:54:d7:09:44:cb: 1d:ad:f7:ef:ec:77:18:3d:d0:c7:7b:8b:15:09:a5: 7f:8e:42:06:a4:d1:1a:87:a0:5e:e1:7a:8b:fd:fc: ab:50:52:3a:0b:75:74:16:bc:83:91:d1:33:36:5b: 61:28:f3:d5:be:30:0a:dc:58:0d:7e:66:b4:f1:32: cd:00:17:31:f5:04:2e:4d:27:0d:a9:71:89:e2:1c: 72:d2:21:13:26:fc:0f:1d:3c:87:c3:62:d6:25:02: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:85:5F:61:4E:28:E1:7B:C8:DC:40:B5:7A:BB:16:5B:A3:9B:AD:1A X509v3 Authority Key Identifier: keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.212.236.0/23 Signature Algorithm: sha256WithRSAEncryption 52:c3:be:d9:0a:30:05:19:01:b4:d8:6d:78:34:27:db:58:30: b8:7a:20:75:96:c7:67:6b:0f:f1:4b:bb:f9:a6:db:78:af:29: b8:e6:70:76:c9:59:87:79:a2:60:99:7b:6f:5c:26:c2:e1:b8: 0b:2c:8c:b3:a8:44:61:00:fc:ce:46:59:7b:16:5f:2e:f8:25: 56:fa:0f:64:b3:fb:9d:3e:86:71:1d:74:a5:ab:39:48:a6:7e: ac:19:d1:82:5e:0e:2a:8c:2b:d0:3a:a8:7a:7a:24:c3:78:a5: 9d:29:f2:f6:55:a9:b7:d3:ed:c4:77:f9:dc:3f:e2:0f:97:65: 5f:78:19:32:06:61:10:b4:a0:b1:a6:63:e5:4c:00:66:5b:68: 7f:88:9b:24:61:76:3b:02:29:fc:81:fe:a3:05:25:5c:eb:07: f9:67:79:20:56:aa:8d:ae:3a:b8:b0:bf:8c:25:c6:73:7d:3f: fc:0e:9c:00:6b:2f:02:11:a4:05:68:fb:96:a6:b9:61:26:cd: 6c:60:f1:ee:b8:4c:2c:1f:ce:db:d9:6a:4f:8e:b2:d6:97:18: 30:cd:04:8a:b8:19:02:a2:57:0d:b6:76:11:f1:ab:3f:6f:6b: b3:23:47:a0:3e:98:ff:a3:92:2a:4e:86:57:e0:56:b9:1c:08: aa:31:c8:94 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbPiOfft/mPcLrm2bDYhbnUAW1VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3 NDEyNUQ2NzAeFw0yNDA4MTYwMzU1MDBaFw0yNTA4MTUwNDAwMDBaMDMxMTAvBgNV BAMTKDdCODU1RjYxNEUyOEUxN0JDOERDNDBCNTdBQkIxNjVCQTM5QkFEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatiy4fwf10qiQxvzy4Z9OgRrH 3EzxxFqFQxcUCj1WIc8MbXl0mBTGIvaFO3zDTN/awTXE94q+clLyUn0gBPMh2fYK K5zr1ivP0d+jFzXtxnTl2+55IT3bBcRGpHe7/mlXmwDK0pFY4/dIlvHhS0Tjl4Tv InMVcgz0NgGahtqXa12tdQSDKwSZwttIrBDLfpZfhZw5CfuiSp5aFJzVCD5U1wlE yx2t9+/sdxg90Md7ixUJpX+OQgak0RqHoF7heov9/KtQUjoLdXQWvIOR0TM2W2Eo 89W+MArcWA1+ZrTxMs0AFzH1BC5NJw2pcYniHHLSIRMm/A8dPIfDYtYlAteDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUe4VfYU4o4XvI3EC1ersWW6ObrRowHwYDVR0j BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy NUQ2Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5NzJmOWEyLWIwZmYtNDI5OC04 ZGE2LWUyZTM4MzQ4YTA3Yi8wLzMxMzAzMzJlMzIzMTMyMmUzMjMzMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzczNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9TsMA0GCSqG SIb3DQEBCwUAA4IBAQBSw77ZCjAFGQG02G14NCfbWDC4eiB1lsdnaw/xS7v5ptt4 rym45nB2yVmHeaJgmXtvXCbC4bgLLIyzqERhAPzORll7Fl8u+CVW+g9ks/udPoZx HXSlqzlIpn6sGdGCXg4qjCvQOqh6eiTDeKWdKfL2Vam30+3Ed/ncP+IPl2VfeBky BmEQtKCxpmPlTABmW2h/iJskYXY7Ain8gf6jBSVc6wf5Z3kgVqqNrjq4sL+MJcZz fT/8DpwAay8CEaQFaPuWprlhJs1sYPHuuEwsH87b2WpPjrLWlxgwzQSKuBkColcN tnYR8as/b2uzI0egPpj/o5IqToZX4Fa5HAiqMciU -----END CERTIFICATE-----Generated at Sun Nov 24 13:13:45 2024 by rpki-client on console-fra.rpki-client.org