$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32322d3234203d3e203535363835.roa File: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (raw, json) Hash identifier: StKm/EBjyCtOBBqyOJASJhUXfaj5Ik+i6XQwhkj3F9Y= Subject key identifier: 4C:97:CE:97:7B:67:72:97:FD:D2:D3:29:11:EE:9A:FB:AD:A4:06:BA Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 23031B4CF68F2106F2C479C65BC66DAC81B8A733 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32322d3234203d3e203535363835.roa Signing time: Wed 01 May 2024 02:00:00 +0000 ROA not before: Wed 01 May 2024 01:55:00 +0000 ROA not after: Wed 30 Apr 2025 02:00:00 +0000 asID: 55685 IP address blocks: 103.247.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 16:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:03:1b:4c:f6:8f:21:06:f2:c4:79:c6:5b:c6:6d:ac:81:b8:a7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: May 1 01:55:00 2024 GMT Not After : Apr 30 02:00:00 2025 GMT Subject: CN=4C97CE977B677297FDD2D32911EE9AFBADA406BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:d8:e5:e2:81:54:28:10:ad:c7:eb:44:13: 09:5a:08:d9:88:e2:66:2f:76:71:e3:cf:25:c3:6a: 75:0a:41:2c:b5:d0:5f:f4:32:e9:4e:5c:49:7d:1d: 97:e9:a7:bc:99:f9:ee:73:84:10:d8:7a:00:d2:70: c1:57:71:18:8c:7c:b5:a6:e1:d3:00:3c:37:f6:6d: 94:9d:29:85:35:0c:44:56:be:93:be:a2:89:46:cd: 61:0c:a6:ba:a2:48:1e:3f:98:37:48:a5:48:f3:e4: fa:d3:e8:2d:9a:b9:6d:a3:16:b7:0e:f0:62:1b:ba: a2:5a:01:42:13:43:4c:f8:cb:ae:c7:7e:f7:f8:6a: 81:a8:65:50:bc:6f:5a:61:32:44:38:4a:1a:31:70: ab:85:f2:23:8e:f7:0c:37:ed:aa:6d:e8:b4:86:23: 9a:b5:7b:3d:51:38:28:2f:a0:5d:8c:de:a3:8e:8a: 60:12:89:81:f8:a9:c2:85:39:b1:7c:b2:4c:f5:1f: ca:b3:eb:04:65:d8:74:41:53:4a:8e:ab:2b:45:cc: de:f9:d7:52:c4:5c:3f:5f:a3:e7:21:fd:f0:e1:ec: e1:5b:fc:9b:de:67:e1:c0:e4:7e:2c:ed:0a:97:c7: fe:8b:9f:b2:6a:93:5a:44:49:dc:f5:8a:0f:54:91: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:97:CE:97:7B:67:72:97:FD:D2:D3:29:11:EE:9A:FB:AD:A4:06:BA X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32322d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.40.0/22 Signature Algorithm: sha256WithRSAEncryption 34:76:e7:34:14:cb:97:1d:56:1d:49:4b:0a:35:5d:6f:f7:46: f8:a0:a0:f2:eb:d9:94:13:97:da:94:fc:52:d0:3c:aa:72:20: 68:73:92:e1:80:c4:7e:ce:c4:f0:de:b1:f5:87:73:be:4b:66: 58:17:c1:17:5a:54:67:9a:39:23:cd:1a:1d:11:c1:e0:d9:b3: 64:08:42:a6:f8:5f:5f:95:eb:79:e4:4e:65:23:4d:95:2d:6c: 9e:bb:07:df:7d:89:8c:4f:ce:7b:68:4c:54:42:55:96:70:98: 31:e7:e3:6b:f4:23:78:4e:26:54:e6:4b:2a:93:81:97:17:03: 06:43:47:54:cd:95:12:c3:71:2c:bf:94:b6:67:3c:79:6f:3c: 07:d8:4c:75:c8:b2:f0:0a:ef:37:77:f7:c3:c9:e7:3d:f3:2d: bc:22:ae:9a:74:5b:8c:ab:0a:00:d7:1d:38:07:a7:af:80:d1: a0:2b:e9:ab:fb:6d:ba:bc:c1:7a:af:1b:84:84:98:65:93:13: 0b:00:dd:a2:c5:f8:25:5b:bb:1f:8c:eb:2b:a9:2e:f3:2f:ff: b2:a1:4e:5f:2e:bd:f5:45:de:9a:b0:01:31:3b:d4:6d:f0:15: 82:3c:2e:a1:aa:63:f8:7e:ee:f4:9a:06:2a:ab:73:6a:4e:39: 02:5b:e2:03 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIwMbTPaPIQbyxHnGW8ZtrIG4pzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNDA1MDEwMTU1MDBaFw0yNTA0MzAwMjAwMDBaMDMxMTAvBgNV BAMTKDRDOTdDRTk3N0I2NzcyOTdGREQyRDMyOTExRUU5QUZCQURBNDA2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQtjl4oFUKBCtx+tEEwlaCNmI 4mYvdnHjzyXDanUKQSy10F/0MulOXEl9HZfpp7yZ+e5zhBDYegDScMFXcRiMfLWm 4dMAPDf2bZSdKYU1DERWvpO+oolGzWEMprqiSB4/mDdIpUjz5PrT6C2auW2jFrcO 8GIbuqJaAUITQ0z4y67Hfvf4aoGoZVC8b1phMkQ4ShoxcKuF8iOO9ww37apt6LSG I5q1ez1ROCgvoF2M3qOOimASiYH4qcKFObF8skz1H8qz6wRl2HRBU0qOqytFzN75 11LEXD9fo+ch/fDh7OFb/JveZ+HA5H4s7QqXx/6Ln7Jqk1pESdz1ig9UkeqrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTJfOl3tncpf90tMpEe6a+62kBrowHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzIzNDM3MmUzNDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmf3KDANBgkqhkiG 9w0BAQsFAAOCAQEANHbnNBTLlx1WHUlLCjVdb/dG+KCg8uvZlBOX2pT8UtA8qnIg aHOS4YDEfs7E8N6x9YdzvktmWBfBF1pUZ5o5I80aHRHB4NmzZAhCpvhfX5XreeRO ZSNNlS1snrsH332JjE/Oe2hMVEJVlnCYMefja/QjeE4mVOZLKpOBlxcDBkNHVM2V EsNxLL+Utmc8eW88B9hMdciy8ArvN3f3w8nnPfMtvCKumnRbjKsKANcdOAenr4DR oCvpq/tturzBeq8bhISYZZMTCwDdosX4JVu7H4zrK6ku8y//sqFOXy699UXemrAB MTvUbfAVgjwuoapj+H7u9JoGKqtzak45AlviAw== -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org