$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313336313331.roa File: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (raw, json) Hash identifier: odj5ObQKBXyWG5KNSHmaKnAHcAaCYk1VBnAzqzzeWp4= Subject key identifier: DF:5C:A0:77:F4:49:81:9A:A8:35:63:D7:E6:A0:A9:F1:07:E0:62:FC Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 1E417F81A3103FE5B1979FE804AB2D7B3D47EFF6 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313336313331.roa Signing time: Thu 19 Oct 2023 10:00:00 +0000 ROA not before: Thu 19 Oct 2023 09:55:00 +0000 ROA not after: Thu 17 Oct 2024 10:00:00 +0000 asID: 136131 IP address blocks: 103.97.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 23:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:41:7f:81:a3:10:3f:e5:b1:97:9f:e8:04:ab:2d:7b:3d:47:ef:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Oct 19 09:55:00 2023 GMT Not After : Oct 17 10:00:00 2024 GMT Subject: CN=DF5CA077F449819AA83563D7E6A0A9F107E062FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:36:0e:a0:9f:f3:62:9b:e0:84:de:c2:af: 55:b0:ba:81:f3:4c:57:7f:31:de:67:9d:f5:01:1c: 0b:0d:3b:c0:f9:5d:99:12:eb:8d:90:3c:96:3a:fe: 93:35:a2:c5:e1:e3:e9:d9:5e:81:8b:af:72:4b:bf: c7:44:c5:db:37:b2:42:87:2d:9e:e1:6a:5e:1e:68: 36:fb:ad:bb:23:69:d7:f2:aa:ac:c0:e9:2d:f7:d3: 84:dc:c2:e7:66:e9:2c:f5:e0:b5:b4:ed:e4:63:0a: 48:b4:83:eb:d1:5d:7a:98:c8:b1:da:d5:8d:09:42: f2:50:62:f9:5c:38:15:17:4c:94:b1:d8:92:c2:72: fd:25:74:bd:ac:bb:18:22:24:0a:e4:c2:0a:7d:9d: 43:3a:b8:9b:7d:b4:bc:59:7e:a3:5d:ca:19:ab:37: 66:37:e6:d5:26:5a:5d:0c:d2:bf:ea:f4:b5:7d:73: 2a:38:3d:44:c4:69:aa:a6:9b:92:99:dc:69:84:13: 17:ca:0d:18:23:66:6b:b3:3a:b2:d2:5d:8b:2f:72: 01:04:a7:53:29:19:54:bf:52:c0:33:f4:f1:15:32: 12:94:f6:70:2e:75:ba:e4:60:d6:f9:7d:62:05:54: de:ac:25:2d:04:85:b4:32:3d:1c:a3:86:e8:e6:62: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5C:A0:77:F4:49:81:9A:A8:35:63:D7:E6:A0:A9:F1:07:E0:62:FC X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313336313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.77.0/24 Signature Algorithm: sha256WithRSAEncryption 71:09:3b:74:98:45:09:6e:d0:c1:6d:ab:b1:ad:fe:fa:e4:52: f8:13:98:7b:8a:b6:0f:fd:83:33:11:05:14:a5:a6:4e:db:42: 94:f9:f9:9f:24:cd:c1:ea:4f:b0:4c:df:c4:f9:b0:83:ab:68: 2d:b0:43:b6:5a:b7:49:da:b4:47:5e:ce:0d:9f:5b:ce:fa:59: 20:0a:35:9b:01:16:29:df:1d:d1:00:c4:84:72:ba:79:97:66: 6b:35:ef:0c:08:66:c2:01:f6:c8:c2:f4:1c:00:77:74:a5:4b: 0b:42:50:70:9e:6a:0d:e0:6d:56:74:01:47:58:08:f5:31:67: 2e:1e:b9:3f:64:24:02:1c:c0:94:34:50:35:43:7b:7d:c0:10: 25:37:24:fa:03:83:22:65:4c:9b:04:e1:d5:d5:04:14:44:59: 66:7d:90:87:8a:2e:90:d0:33:fc:d4:15:14:ce:e3:7b:b4:07: ab:6f:5a:82:cb:16:2d:09:e2:d0:fe:7c:a3:a1:0d:4c:4c:fb: df:eb:fd:d1:0b:86:00:13:d6:25:5a:40:10:2e:97:d7:c2:3a: ca:00:c5:9d:fa:8e:6d:35:d7:0e:aa:31:31:f9:01:61:93:76: 14:e5:76:e6:fd:be:b3:cf:3f:7a:a0:13:c5:68:fc:b6:7b:ad: ae:d6:55:f3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHkF/gaMQP+Wxl5/oBKstez1H7/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yMzEwMTkwOTU1MDBaFw0yNDEwMTcxMDAwMDBaMDMxMTAvBgNV BAMTKERGNUNBMDc3RjQ0OTgxOUFBODM1NjNEN0U2QTBBOUYxMDdFMDYyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPDYOoJ/zYpvghN7Cr1WwuoHz TFd/Md5nnfUBHAsNO8D5XZkS642QPJY6/pM1osXh4+nZXoGLr3JLv8dExds3skKH LZ7hal4eaDb7rbsjadfyqqzA6S3304Tcwudm6Sz14LW07eRjCki0g+vRXXqYyLHa 1Y0JQvJQYvlcOBUXTJSx2JLCcv0ldL2suxgiJArkwgp9nUM6uJt9tLxZfqNdyhmr N2Y35tUmWl0M0r/q9LV9cyo4PUTEaaqmm5KZ3GmEExfKDRgjZmuzOrLSXYsvcgEE p1MpGVS/UsAz9PEVMhKU9nAudbrkYNb5fWIFVN6sJS0EhbQyPRyjhujmYuU9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU31ygd/RJgZqoNWPX5qCp8QfgYvwwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h YjIwLThjN2YyZDViZTY5Zi8wLzMxMzAzMzJlMzkzNzJlMzczNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNjMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdhTTANBgkqhkiG 9w0BAQsFAAOCAQEAcQk7dJhFCW7QwW2rsa3++uRS+BOYe4q2D/2DMxEFFKWmTttC lPn5nyTNwepPsEzfxPmwg6toLbBDtlq3Sdq0R17ODZ9bzvpZIAo1mwEWKd8d0QDE hHK6eZdmazXvDAhmwgH2yML0HAB3dKVLC0JQcJ5qDeBtVnQBR1gI9TFnLh65P2Qk AhzAlDRQNUN7fcAQJTck+gODImVMmwTh1dUEFERZZn2Qh4oukNAz/NQVFM7je7QH q29agssWLQni0P58o6ENTEz73+v90QuGABPWJVpAEC6X18I6ygDFnfqObTXXDqox MfkBYZN2FOV25v2+s88/eqATxWj8tnutrtZV8w== -----END CERTIFICATE-----Generated at Fri Jun 21 00:18:58 2024 by rpki-client on console-ams.rpki-client.org