$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa File: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (raw, json) Hash identifier: TvX5alwAkygDG9mtc84ZvWFXvtuvRWJmPKN/WDkOyYo= Subject key identifier: 90:EA:40:04:71:43:91:96:3A:2F:F1:7E:B1:68:B6:62:18:7D:19:B9 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 058CD39DE50E35CB17FC5D7C02CA62135082285D Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa Signing time: Fri 01 Mar 2024 07:02:25 +0000 ROA not before: Fri 01 Mar 2024 06:57:25 +0000 ROA not after: Fri 28 Feb 2025 07:02:25 +0000 asID: 139432 IP address blocks: 103.225.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8c:d3:9d:e5:0e:35:cb:17:fc:5d:7c:02:ca:62:13:50:82:28:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Mar 1 06:57:25 2024 GMT Not After : Feb 28 07:02:25 2025 GMT Subject: CN=90EA4004714391963A2FF17EB168B662187D19B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:27:af:85:9d:8f:06:6f:9f:28:65:ff:bd: 6c:bd:80:a4:6f:1d:0d:ca:2b:5b:90:b6:45:ad:d8: 13:5d:f9:da:1a:82:7a:74:5b:0a:a5:7e:72:a9:ec: 25:13:f5:63:31:7f:2e:36:fd:56:1c:61:04:9d:20: 44:33:20:63:58:8f:4e:d4:e8:e4:8d:f8:36:b1:dc: e8:93:95:51:4c:b3:1d:9a:48:19:cc:95:6c:d7:c8: c4:ab:e2:ba:06:bc:ef:97:e1:8f:2d:8d:80:ab:8f: 60:45:b0:4e:8f:6b:e5:e9:b0:37:c3:6c:b7:03:db: be:7d:24:19:de:3b:d4:a7:93:6a:92:68:ab:b8:21: 5e:44:e8:d9:73:01:ad:ad:d4:24:7b:f8:e2:0d:3e: 4a:a4:fd:b0:3e:9b:91:67:78:2b:f3:30:11:6e:72: cf:82:0c:83:f6:ee:76:4d:df:8d:52:74:d1:ce:63: a6:8b:e1:72:13:2f:20:a7:ea:0f:6b:ba:60:f8:63: 76:49:1f:cf:67:92:fc:f9:48:a8:8c:39:9c:eb:8a: c8:45:51:6b:7d:b2:5d:4a:dc:e8:20:00:e0:6a:d2: 8d:80:45:44:b6:c4:d1:23:86:13:7a:48:d6:64:50: 3b:1b:af:b5:e8:98:10:01:62:7b:ee:e4:1c:b4:42: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:40:04:71:43:91:96:3A:2F:F1:7E:B1:68:B6:62:18:7D:19:B9 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.97.0/24 Signature Algorithm: sha256WithRSAEncryption 35:05:51:06:f4:05:34:7f:ce:66:9e:51:1c:1d:57:73:80:ed: b2:ae:bb:dd:20:80:ee:31:08:13:1f:96:4a:85:00:b7:88:0d: 8a:91:15:59:36:cc:cf:d3:bc:ab:e3:6b:53:20:fa:d1:09:c9: 76:e3:f5:30:85:30:70:bb:03:70:77:17:3b:ef:61:30:65:2e: 4b:ee:31:8f:3c:da:30:79:28:98:16:c0:84:af:41:48:4d:a8: a4:26:f6:71:9f:56:33:69:eb:f1:f8:af:67:e1:89:1f:55:cf: b8:51:ab:7f:02:47:fc:57:94:79:c7:96:38:a9:cc:6d:1b:3e: 0c:4d:60:8d:f8:d8:34:9e:13:d7:f4:43:b5:e6:4d:50:be:80: 5b:82:bd:42:3f:ef:65:5f:52:74:6a:f3:68:cc:ce:fe:5b:50: 9f:ff:02:3f:df:a6:df:9f:ea:35:49:ef:eb:e3:d9:43:14:ff: ba:6d:c5:7d:9a:f4:d2:83:1b:5b:ff:08:ba:44:74:b6:21:27: 6b:d9:c6:73:90:7f:61:e1:c7:8f:4b:1b:94:27:ea:d1:47:f0: 1c:7d:9c:92:eb:ba:23:3d:df:7a:39:b4:43:d6:0b:b8:27:e3: 05:1a:31:2d:6f:68:dd:7f:cb:8c:22:51:a6:55:63:18:bb:89: c8:1b:59:3e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBYzTneUONcsX/F18AspiE1CCKF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNDAzMDEwNjU3MjVaFw0yNTAyMjgwNzAyMjVaMDMxMTAvBgNV BAMTKDkwRUE0MDA0NzE0MzkxOTYzQTJGRjE3RUIxNjhCNjYyMTg3RDE5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVSevhZ2PBm+fKGX/vWy9gKRv HQ3KK1uQtkWt2BNd+doagnp0WwqlfnKp7CUT9WMxfy42/VYcYQSdIEQzIGNYj07U 6OSN+Dax3OiTlVFMsx2aSBnMlWzXyMSr4roGvO+X4Y8tjYCrj2BFsE6Pa+XpsDfD bLcD2759JBneO9Snk2qSaKu4IV5E6NlzAa2t1CR7+OINPkqk/bA+m5FneCvzMBFu cs+CDIP27nZN341SdNHOY6aL4XITLyCn6g9rumD4Y3ZJH89nkvz5SKiMOZzrishF UWt9sl1K3OggAOBq0o2ARUS2xNEjhhN6SNZkUDsbr7XomBABYnvu5By0QlKNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkOpABHFDkZY6L/F+sWi2Yhh9GbkwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ODNlZDI4LTU4ODEtNDdkYS1h ZTY2LWUxZGI2Nzk0MmViMS8wLzMxMzAzMzJlMzIzMjM1MmUzOTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+FhMA0GCSqG SIb3DQEBCwUAA4IBAQA1BVEG9AU0f85mnlEcHVdzgO2yrrvdIIDuMQgTH5ZKhQC3 iA2KkRVZNszP07yr42tTIPrRCcl24/UwhTBwuwNwdxc772EwZS5L7jGPPNoweSiY FsCEr0FITaikJvZxn1Yzaevx+K9n4YkfVc+4Uat/Akf8V5R5x5Y4qcxtGz4MTWCN +Ng0nhPX9EO15k1QvoBbgr1CP+9lX1J0avNozM7+W1Cf/wI/36bfn+o1Se/r49lD FP+6bcV9mvTSgxtb/wi6RHS2ISdr2cZzkH9h4cePSxuUJ+rRR/AcfZyS67ojPd96 ObRD1gu4J+MFGjEtb2jdf8uMIlGmVWMYu4nIG1k+ -----END CERTIFICATE-----Generated at Sat Jun 22 10:10:56 2024 by rpki-client on console-fra.rpki-client.org