$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa File: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (raw, json) Hash identifier: voYv4pdjdoMvrYli8vyCGRPuSZc9oZPszt/fWVSTbM8= Subject key identifier: DB:3D:A6:05:35:1A:20:8F:1D:5A:84:D8:C7:A2:C2:CE:38:6C:89:B9 Certificate issuer: /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7 Certificate serial: 1ACFEF55704387CF4E703D8BAFD83454C3EF4996 Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa Signing time: Thu 21 Dec 2023 05:00:02 +0000 ROA not before: Thu 21 Dec 2023 04:55:02 +0000 ROA not after: Thu 19 Dec 2024 05:00:02 +0000 asID: 131743 IP address blocks: 103.227.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 04:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cf:ef:55:70:43:87:cf:4e:70:3d:8b:af:d8:34:54:c3:ef:49:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7 Validity Not Before: Dec 21 04:55:02 2023 GMT Not After : Dec 19 05:00:02 2024 GMT Subject: CN=DB3DA605351A208F1D5A84D8C7A2C2CE386C89B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:4c:86:6b:e3:86:8e:b8:9e:8f:63:ad:42: f2:5b:9e:a4:40:3b:53:23:85:e8:3f:5b:3d:2d:47: 63:78:5d:a6:9f:39:a1:c6:fa:c2:26:0f:dc:65:29: a9:63:07:27:fa:a2:8c:ca:a3:2d:6b:2c:45:8b:98: 0d:51:b0:f4:58:9e:bf:2e:c0:5f:bc:00:44:5d:4f: e8:4b:63:46:67:50:7c:57:bb:da:ad:cf:1d:8e:dc: b8:e0:f4:5a:f9:4f:87:af:d0:98:c0:6e:83:8f:47: 10:d3:41:fd:c7:4e:52:7d:d6:39:08:54:d4:62:08: 7f:2c:8f:58:51:88:a0:91:31:0d:1f:35:7e:4d:76: 0b:57:aa:d3:ea:64:b6:ce:29:e9:21:3e:29:e0:70: 0b:5b:62:28:95:4f:bb:d9:71:3f:40:d6:56:1e:02: c7:03:3d:4b:c2:92:4f:dd:d4:c9:ca:43:cc:54:8e: f8:8a:09:98:5b:89:f3:1d:55:cc:54:67:48:2a:e8: de:a2:d1:ac:61:cf:ac:2a:6e:75:20:f4:ec:ee:aa: 57:27:61:8e:ae:cd:98:05:7f:a5:e1:02:c4:40:d6: da:83:88:19:9c:88:7e:3d:fc:54:47:1a:99:77:0d: 64:c1:ac:c6:e3:1d:c0:c7:37:4e:c2:d5:f0:f2:0e: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3D:A6:05:35:1A:20:8F:1D:5A:84:D8:C7:A2:C2:CE:38:6C:89:B9 X509v3 Authority Key Identifier: keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.143.0/24 Signature Algorithm: sha256WithRSAEncryption 09:39:bc:e3:97:8a:d2:5a:20:ca:3b:6b:08:14:47:98:c1:06: ed:a8:cc:1b:8d:af:7f:b4:6a:54:ad:b5:3a:65:c7:85:07:d2: 2b:6a:10:c7:44:d6:d0:2a:aa:6b:b4:40:b3:6d:f6:36:71:57: 9e:7b:59:45:cc:94:f2:01:91:83:76:09:ec:89:d1:94:8a:9c: 76:c6:da:ba:60:eb:3a:ec:87:e1:65:f3:f0:e0:ee:e4:19:58: 03:e2:5a:65:be:ec:46:b3:92:a3:7e:5d:39:87:55:56:11:c4: f2:d1:dd:77:a7:4e:36:5f:de:28:98:72:70:3a:8b:42:b5:ea: 17:6f:be:63:c6:c5:f8:e6:4e:67:ab:da:8b:e8:6b:49:04:1d: 68:99:c4:ea:4e:de:fb:c6:b9:6d:65:06:c5:fd:8b:f9:c7:e3: 6c:3b:4a:94:6f:69:dd:90:37:56:70:90:46:89:df:17:05:4b: 15:e8:f6:d1:f4:5d:b4:b7:29:db:cb:82:09:f3:6d:27:61:2a: f0:ae:c3:15:f8:cf:91:64:45:8a:9e:4e:6d:2f:26:fd:ff:a4: e1:3c:03:91:3d:d4:76:12:bc:c1:d8:4c:b7:fc:13:0e:87:55: 04:46:d3:91:e0:7e:92:f8:cf:07:63:f9:1a:8c:f9:e0:bf:24: 3b:88:87:ec -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGs/vVXBDh89OcD2Lr9g0VMPvSZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5 NThERUZGNzAeFw0yMzEyMjEwNDU1MDJaFw0yNDEyMTkwNTAwMDJaMDMxMTAvBgNV BAMTKERCM0RBNjA1MzUxQTIwOEYxRDVBODREOEM3QTJDMkNFMzg2Qzg5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVUyGa+OGjriej2OtQvJbnqRA O1Mjheg/Wz0tR2N4XaafOaHG+sImD9xlKaljByf6oozKoy1rLEWLmA1RsPRYnr8u wF+8AERdT+hLY0ZnUHxXu9qtzx2O3Ljg9Fr5T4ev0JjAboOPRxDTQf3HTlJ91jkI VNRiCH8sj1hRiKCRMQ0fNX5NdgtXqtPqZLbOKekhPingcAtbYiiVT7vZcT9A1lYe AscDPUvCkk/d1MnKQ8xUjviKCZhbifMdVcxUZ0gq6N6i0axhz6wqbnUg9Ozuqlcn YY6uzZgFf6XhAsRA1tqDiBmciH49/FRHGpl3DWTBrMbjHcDHN07C1fDyDlnNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU2z2mBTUaII8dWoTYx6LCzjhsibkwHwYDVR0j BBgwFoAUxipUHHMj9s0jj1SbH4c27ZWN7/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc0ODU2Zi03NDUzLTRkMDItYmMzNS0zNDgyZWI1NjQ2YTIvMC9DNjJBNTQxQzcz MjNGNkNEMjM4RjU0OUIxRjg3MzZFRDk1OERFRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5NThE RUZGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3NzQ4NTZmLTc0NTMtNGQwMi1i YzM1LTM0ODJlYjU2NDZhMi8wLzMxMzAzMzJlMzIzMjM3MmUzMTM0MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn448wDQYJ KoZIhvcNAQELBQADggEBAAk5vOOXitJaIMo7awgUR5jBBu2ozBuNr3+0alSttTpl x4UH0itqEMdE1tAqqmu0QLNt9jZxV557WUXMlPIBkYN2CeyJ0ZSKnHbG2rpg6zrs h+Fl8/Dg7uQZWAPiWmW+7EazkqN+XTmHVVYRxPLR3XenTjZf3iiYcnA6i0K16hdv vmPGxfjmTmer2ovoa0kEHWiZxOpO3vvGuW1lBsX9i/nH42w7SpRvad2QN1ZwkEaJ 3xcFSxXo9tH0XbS3KdvLggnzbSdhKvCuwxX4z5FkRYqeTm0vJv3/pOE8A5E91HYS vMHYTLf8Ew6HVQRG05HgfpL4zwdj+RqM+eC/JDuIh+w= -----END CERTIFICATE-----Generated at Fri Sep 27 03:15:06 2024 by rpki-client on console-fra.rpki-client.org