$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa File: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (raw, json) Hash identifier: KvySnZn8ZMaU+2Ewg58u+2ZQA118MVhPZpEO93CIIOA= Subject key identifier: E1:74:52:10:99:D2:2F:AC:87:65:56:38:62:78:3A:F9:C5:49:98:1F Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 09DB4FDC1D6F155A824F732A65C66304B1DED1CA Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa Signing time: Sun 16 Jul 2023 10:00:28 +0000 ROA not before: Sun 16 Jul 2023 09:55:28 +0000 ROA not after: Sun 14 Jul 2024 10:00:28 +0000 asID: 138866 IP address blocks: 103.140.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:db:4f:dc:1d:6f:15:5a:82:4f:73:2a:65:c6:63:04:b1:de:d1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Jul 16 09:55:28 2023 GMT Not After : Jul 14 10:00:28 2024 GMT Subject: CN=E174521099D22FAC8765563862783AF9C549981F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:b3:b6:24:ba:1e:7d:da:dc:d0:8b:53:13: 9d:50:83:63:c2:e8:74:22:4c:d6:f6:b9:17:71:2f: c1:72:68:0b:10:42:f4:38:64:1b:fd:50:59:fb:0a: fe:ef:3b:e6:56:9f:e1:35:4f:6f:4b:58:9c:fc:3f: 9c:1e:9c:66:db:49:95:93:4f:97:50:fc:a4:8b:99: 77:58:7c:6e:a2:7a:84:6e:72:b8:2f:ad:69:1b:eb: e5:90:05:45:a3:67:55:f7:1d:a1:4c:83:74:0f:3b: 85:59:12:28:81:7f:2b:94:76:35:48:b1:64:2c:9a: a6:9b:e5:1b:2c:84:19:e1:b9:27:88:7e:6b:13:ea: 2e:92:b0:ed:41:3c:b0:71:eb:c1:93:55:48:c5:c5: 11:c3:c0:fd:fa:c1:65:50:74:c9:5d:13:87:75:b1: 28:98:f1:df:ed:9e:26:67:0d:67:9f:fc:71:98:64: e9:ed:4e:0a:eb:f7:9b:09:4d:30:57:41:a9:28:86: 6d:1f:a6:ac:d5:c7:c3:8a:d5:c2:bd:fa:0f:5f:40: 9a:e0:e4:8d:60:29:34:92:95:ab:f5:f9:1e:30:5f: 42:f9:5a:c0:8b:cd:a4:2e:25:95:16:bd:99:87:35: 55:37:7c:d3:91:a6:e4:fb:55:04:c5:b3:02:2e:fb: 52:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:74:52:10:99:D2:2F:AC:87:65:56:38:62:78:3A:F9:C5:49:98:1F X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.131.0/24 Signature Algorithm: sha256WithRSAEncryption 21:41:e0:87:99:05:75:42:cf:25:d6:87:ec:46:5d:ea:22:b0: 1a:a3:04:db:09:ba:7b:db:32:b5:89:bd:f4:44:96:b5:0e:90: ef:0c:42:41:3c:32:25:09:f5:6e:c1:80:5c:db:96:3e:6d:68: a8:0a:de:83:0e:ea:ea:4e:0b:08:a7:4e:7d:3a:60:ce:6b:3e: 5e:93:fb:3d:47:39:4e:a8:57:a4:51:10:5b:d7:5f:c5:f9:eb: aa:0a:a1:26:e3:7f:d9:d6:60:0f:db:51:ae:0f:42:00:a2:24: 0f:03:f7:83:42:e1:6f:c5:c2:55:0e:0a:61:0e:18:d7:20:53: 62:52:34:a9:ee:84:2f:5d:de:8c:f6:40:72:71:4e:b3:f8:50: 06:d4:40:ac:c2:2f:83:93:48:0e:c3:06:f2:4a:71:53:4d:02: 96:e4:3c:ac:08:99:41:90:70:a2:6d:9c:aa:8d:58:11:54:ee: 68:1d:24:41:b4:fc:f0:bc:84:67:f2:dd:16:d3:aa:47:50:8c: e3:6f:76:5d:76:90:73:22:a0:5d:1d:9e:a6:27:c8:31:c0:fa: 2d:81:04:70:34:fc:94:3d:31:51:96:3b:72:2f:55:42:22:90: a5:56:c4:cd:8f:16:24:a8:8a:f1:fe:9c:7a:0b:40:79:44:51: 2c:63:80:39 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCdtP3B1vFVqCT3MqZcZjBLHe0cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yMzA3MTYwOTU1MjhaFw0yNDA3MTQxMDAwMjhaMDMxMTAvBgNV BAMTKEUxNzQ1MjEwOTlEMjJGQUM4NzY1NTYzODYyNzgzQUY5QzU0OTk4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PbO2JLoefdrc0ItTE51Qg2PC 6HQiTNb2uRdxL8FyaAsQQvQ4ZBv9UFn7Cv7vO+ZWn+E1T29LWJz8P5wenGbbSZWT T5dQ/KSLmXdYfG6ieoRucrgvrWkb6+WQBUWjZ1X3HaFMg3QPO4VZEiiBfyuUdjVI sWQsmqab5RsshBnhuSeIfmsT6i6SsO1BPLBx68GTVUjFxRHDwP36wWVQdMldE4d1 sSiY8d/tniZnDWef/HGYZOntTgrr95sJTTBXQakohm0fpqzVx8OK1cK9+g9fQJrg 5I1gKTSSlav1+R4wX0L5WsCLzaQuJZUWvZmHNVU3fNORpuT7VQTFswIu+1KrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU4XRSEJnSL6yHZVY4Yng6+cVJmB8wHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05 NGEwLTBmNDAwZWE2YTM3NS8wLzMxMzAzMzJlMzEzNDMwMmUzMTMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjIMwDQYJ KoZIhvcNAQELBQADggEBACFB4IeZBXVCzyXWh+xGXeoisBqjBNsJunvbMrWJvfRE lrUOkO8MQkE8MiUJ9W7BgFzblj5taKgK3oMO6upOCwinTn06YM5rPl6T+z1HOU6o V6RREFvXX8X566oKoSbjf9nWYA/bUa4PQgCiJA8D94NC4W/FwlUOCmEOGNcgU2JS NKnuhC9d3oz2QHJxTrP4UAbUQKzCL4OTSA7DBvJKcVNNApbkPKwImUGQcKJtnKqN WBFU7mgdJEG0/PC8hGfy3RbTqkdQjONvdl12kHMioF0dnqYnyDHA+i2BBHA0/JQ9 MVGWO3IvVUIikKVWxM2PFiSoivH+nHoLQHlEUSxjgDk= -----END CERTIFICATE-----Generated at Fri May 3 04:42:12 2024 by rpki-client on console-fra.rpki-client.org