$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37362e302f32322d3232203d3e20313336313331.roa File: 3130332e39372e37362e302f32322d3232203d3e20313336313331.roa (raw, json) Hash identifier: CEuSN+9p/71cltnnHYROyqOn5DsENUHF7kurIvalcfs= Subject key identifier: D5:C1:F8:F6:4F:0B:AB:CB:8F:19:D2:BB:AE:BD:CB:4D:0E:85:E8:00 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 0CD104210FBAC50560EF932F80134A0BAC99BDA5 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37362e302f32322d3232203d3e20313336313331.roa Signing time: Fri 14 Jun 2024 14:00:40 +0000 ROA not before: Fri 14 Jun 2024 13:55:40 +0000 ROA not after: Fri 13 Jun 2025 14:00:40 +0000 asID: 136131 IP address blocks: 103.97.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 07:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d1:04:21:0f:ba:c5:05:60:ef:93:2f:80:13:4a:0b:ac:99:bd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Jun 14 13:55:40 2024 GMT Not After : Jun 13 14:00:40 2025 GMT Subject: CN=D5C1F8F64F0BABCB8F19D2BBAEBDCB4D0E85E800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:5f:f4:87:c2:2f:7c:03:4e:cc:65:46:50: af:66:0f:76:ed:19:99:e4:f3:38:8e:b1:ed:79:73: 92:ab:63:b8:37:c4:b9:ef:da:68:dc:5b:54:e8:6e: 66:6a:3e:13:41:10:92:09:96:a2:73:05:ed:93:18: 85:55:50:9d:c8:d7:5b:18:7a:ab:1e:2a:88:24:0d: a3:16:e5:07:33:bd:2a:fb:3b:7f:39:b8:62:7e:f1: fa:16:8b:25:5c:22:e3:bc:4a:e1:fe:3d:11:29:fe: 26:32:49:ce:df:b4:09:96:48:68:15:c5:68:51:2d: 5d:4f:b6:42:34:ea:4f:e4:42:53:68:12:6e:be:30: e1:d4:11:98:fd:44:7c:cf:8d:7b:80:b7:e7:ff:43: 19:63:9a:92:ea:32:5b:dd:79:6d:71:8c:29:69:45: 90:cd:ea:02:b5:77:cd:20:5b:fb:d2:94:97:61:33: 82:b7:f9:07:38:23:c9:30:00:5c:47:b6:8f:79:1e: 0e:a7:7c:ef:01:10:6e:8c:9c:11:c6:cd:54:ba:e8: 4e:d8:95:99:6a:c1:d4:a7:99:16:79:8d:0a:15:95: a5:3f:af:ee:2f:52:9e:19:05:cf:44:70:b1:3d:c8: c1:60:69:94:88:06:c5:08:53:c6:e0:7c:8e:b6:3b: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C1:F8:F6:4F:0B:AB:CB:8F:19:D2:BB:AE:BD:CB:4D:0E:85:E8:00 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37362e302f32322d3232203d3e20313336313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.76.0/22 Signature Algorithm: sha256WithRSAEncryption b2:c4:20:fb:85:a3:9b:63:80:6e:f6:7b:88:08:1e:39:82:db: 02:16:17:40:7c:3e:50:db:e4:8b:3a:58:ba:17:2d:44:45:6c: a9:2e:61:fe:84:e1:34:2a:d4:26:9a:01:30:d0:1f:15:23:f3: 1c:1c:8f:ae:68:ff:83:30:14:eb:df:45:37:a4:9a:86:1a:21: 71:29:dd:a4:6a:0b:2c:2e:dc:3c:7b:87:94:c0:ed:68:56:fa: d0:ce:4a:e6:75:46:84:96:de:48:02:84:08:a9:97:f1:c7:84: 6d:39:db:42:82:02:ee:d2:02:90:47:fb:06:26:85:b9:21:b5: 9b:a6:a2:18:2d:c4:c0:50:9d:20:f9:26:e2:ff:a4:60:98:46: 04:58:10:b6:77:9c:1d:d7:c1:b3:0c:13:67:5d:09:1a:9f:49: 9b:4d:47:0e:f6:99:5d:43:5f:54:a1:39:49:9a:77:2b:92:5a: 20:fe:8d:ad:33:b2:6e:8c:16:e3:de:30:73:9e:db:dd:15:ca: 26:29:3e:49:61:db:6c:0d:28:a6:55:19:56:06:ea:a2:09:e1: b8:70:cf:19:3b:83:15:82:a6:76:30:de:1b:9c:4f:38:27:9d: 49:04:c5:00:52:dd:c3:df:40:60:2c:62:e6:1b:ab:9f:e8:74: 9b:5c:c1:df -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDNEEIQ+6xQVg75MvgBNKC6yZvaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNDA2MTQxMzU1NDBaFw0yNTA2MTMxNDAwNDBaMDMxMTAvBgNV BAMTKEQ1QzFGOEY2NEYwQkFCQ0I4RjE5RDJCQkFFQkRDQjREMEU4NUU4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKl/0h8IvfANOzGVGUK9mD3bt GZnk8ziOse15c5KrY7g3xLnv2mjcW1TobmZqPhNBEJIJlqJzBe2TGIVVUJ3I11sY eqseKogkDaMW5QczvSr7O385uGJ+8foWiyVcIuO8SuH+PREp/iYySc7ftAmWSGgV xWhRLV1PtkI06k/kQlNoEm6+MOHUEZj9RHzPjXuAt+f/QxljmpLqMlvdeW1xjClp RZDN6gK1d80gW/vSlJdhM4K3+Qc4I8kwAFxHto95Hg6nfO8BEG6MnBHGzVS66E7Y lZlqwdSnmRZ5jQoVlaU/r+4vUp4ZBc9EcLE9yMFgaZSIBsUIU8bgfI62O0gjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1cH49k8Lq8uPGdK7rr3LTQ6F6AAwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h YjIwLThjN2YyZDViZTY5Zi8wLzMxMzAzMzJlMzkzNzJlMzczNjJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMxMzMzNjMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdhTDANBgkqhkiG 9w0BAQsFAAOCAQEAssQg+4Wjm2OAbvZ7iAgeOYLbAhYXQHw+UNvkizpYuhctREVs qS5h/oThNCrUJpoBMNAfFSPzHByPrmj/gzAU699FN6SahhohcSndpGoLLC7cPHuH lMDtaFb60M5K5nVGhJbeSAKECKmX8ceEbTnbQoIC7tICkEf7BiaFuSG1m6aiGC3E wFCdIPkm4v+kYJhGBFgQtnecHdfBswwTZ10JGp9Jm01HDvaZXUNfVKE5SZp3K5Ja IP6NrTOybowW494wc57b3RXKJik+SWHbbA0oplUZVgbqognhuHDPGTuDFYKmdjDe G5xPOCedSQTFAFLdw99AYCxi5hurn+h0m1zB3w== -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org