$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31372e302f32342d3234203d3e20313335343632.roa File: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (raw, json) Hash identifier: cYSH2vn92qbrcEWKMz2fC0jHljokBUi4MArcwakpwcQ= Subject key identifier: 7C:EA:51:9F:14:FC:15:8F:D2:FC:AC:20:0C:90:B8:97:97:33:77:B7 Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 2F571AC92479040DD0ACDF33897B88D6508CAEB9 Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31372e302f32342d3234203d3e20313335343632.roa Signing time: Sat 30 Mar 2024 04:00:37 +0000 ROA not before: Sat 30 Mar 2024 03:55:37 +0000 ROA not after: Sat 29 Mar 2025 04:00:37 +0000 asID: 135462 IP address blocks: 103.70.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:57:1a:c9:24:79:04:0d:d0:ac:df:33:89:7b:88:d6:50:8c:ae:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: Mar 30 03:55:37 2024 GMT Not After : Mar 29 04:00:37 2025 GMT Subject: CN=7CEA519F14FC158FD2FCAC200C90B897973377B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:bc:fb:86:ba:49:f2:cd:d1:b5:f1:e0:23: a2:45:2e:c1:2b:56:81:de:da:0b:63:f9:da:0a:6f: dd:ea:96:30:ff:09:29:4b:4e:00:e3:93:b2:c3:4b: 84:8b:10:65:01:a2:01:8e:d7:59:a3:bc:5c:f6:90: 80:ab:c7:18:37:1c:ae:a9:ce:64:b7:52:24:90:ee: 39:6a:d4:f8:06:82:d6:04:bb:be:e6:28:68:eb:4c: 0f:49:b2:4c:c1:bb:22:6c:6f:79:39:b8:f7:f6:0e: 01:59:27:e8:2f:9a:11:ea:6c:17:39:45:37:f9:3c: 25:00:15:43:2f:f4:8f:7c:d5:a0:dc:66:bb:af:92: 5a:fb:f0:7d:c3:a2:97:1b:9c:0b:2c:0f:fe:59:33: d9:70:92:e2:45:1c:31:e9:ac:ce:ce:15:8b:94:fe: 15:51:1e:b9:95:d7:2f:58:85:28:71:47:65:63:21: 03:41:14:f4:15:4a:57:08:62:ef:47:e7:7d:a9:ce: 4e:b4:99:2c:d8:ec:37:56:94:98:0b:8e:3d:56:22: 61:39:23:f1:ee:70:61:93:23:47:31:16:d2:d4:d6: 81:21:6c:f4:10:89:8b:86:da:da:18:c9:95:c6:50: f2:5b:8a:09:84:fd:7d:90:73:bc:5c:b1:8a:22:d3: 45:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EA:51:9F:14:FC:15:8F:D2:FC:AC:20:0C:90:B8:97:97:33:77:B7 X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31372e302f32342d3234203d3e20313335343632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.70.17.0/24 Signature Algorithm: sha256WithRSAEncryption 94:f5:40:87:68:43:7f:2d:65:fa:cb:49:ed:d6:6f:10:ae:73: 59:bd:20:61:a1:b2:10:42:92:7e:8e:f1:c5:8f:c5:01:21:ec: 4a:ad:97:61:45:9d:18:87:ca:8d:30:11:16:5e:91:ea:93:fe: 1a:46:f1:66:53:d5:2c:22:d7:8b:e0:f5:60:a8:5c:22:8b:01: 84:b9:7a:a5:d3:1b:25:15:03:24:3a:d7:92:63:3e:c7:2e:9c: 14:d8:bf:95:db:e2:73:cd:e1:d3:e8:03:e2:80:21:41:4d:1f: fd:5b:23:e8:89:5c:b6:8a:52:ad:24:4c:b0:5a:96:f4:73:60: 2e:06:7b:0e:85:26:ac:c3:65:3c:a0:99:82:f6:a6:58:23:f5: bb:d4:60:d7:f6:cf:03:d5:a5:cc:1f:6c:f1:2c:7e:a5:1e:a5: c5:fe:74:86:41:4b:99:be:3a:13:66:3d:5f:c0:dc:a5:30:50: cc:fb:69:33:99:6b:29:16:25:78:f4:6b:fc:42:04:c8:b7:c5: 98:e9:d6:f8:e8:ce:7c:d8:a1:0b:56:d2:72:b4:a4:4d:bb:59: 1b:8e:96:5f:4b:34:de:77:87:8a:1a:f8:c9:d8:51:2f:46:ed: 56:bc:f3:47:52:58:f6:f8:71:c5:4e:ae:c0:65:57:6d:b3:25: 4d:4f:da:11 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUL1caySR5BA3QrN8ziXuI1lCMrrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNDAzMzAwMzU1MzdaFw0yNTAzMjkwNDAwMzdaMDMxMTAvBgNV BAMTKDdDRUE1MTlGMTRGQzE1OEZEMkZDQUMyMDBDOTBCODk3OTczMzc3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88rz7hrpJ8s3RtfHgI6JFLsEr VoHe2gtj+doKb93qljD/CSlLTgDjk7LDS4SLEGUBogGO11mjvFz2kICrxxg3HK6p zmS3UiSQ7jlq1PgGgtYEu77mKGjrTA9JskzBuyJsb3k5uPf2DgFZJ+gvmhHqbBc5 RTf5PCUAFUMv9I981aDcZruvklr78H3DopcbnAssD/5ZM9lwkuJFHDHprM7OFYuU /hVRHrmV1y9YhShxR2VjIQNBFPQVSlcIYu9H532pzk60mSzY7DdWlJgLjj1WImE5 I/HucGGTI0cxFtLU1oEhbPQQiYuG2toYyZXGUPJbigmE/X2Qc7xcsYoi00UFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfOpRnxT8FY/S/KwgDJC4l5czd7cwHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2ZjRkNGYxLWIzNmMtNGE0Ni04 ODQ0LTRlNmM3YTNjOTdkOS8wLzMxMzAzMzJlMzczMDJlMzEzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdGETANBgkqhkiG 9w0BAQsFAAOCAQEAlPVAh2hDfy1l+stJ7dZvEK5zWb0gYaGyEEKSfo7xxY/FASHs Sq2XYUWdGIfKjTARFl6R6pP+GkbxZlPVLCLXi+D1YKhcIosBhLl6pdMbJRUDJDrX kmM+xy6cFNi/ldvic83h0+gD4oAhQU0f/Vsj6IlctopSrSRMsFqW9HNgLgZ7DoUm rMNlPKCZgvamWCP1u9Rg1/bPA9WlzB9s8Sx+pR6lxf50hkFLmb46E2Y9X8DcpTBQ zPtpM5lrKRYlePRr/EIEyLfFmOnW+OjOfNihC1bScrSkTbtZG46WX0s03neHihr4 ydhRL0btVrzzR1JY9vhxxU6uwGVXbbMlTU/aEQ== -----END CERTIFICATE-----Generated at Sun Jun 23 20:53:52 2024 by rpki-client on console-ams.rpki-client.org