$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32332d3233203d3e20313431313236.roa File: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (raw, json) Hash identifier: PsnUWGdXsyxieyzG/92mflGbYlhRk/S8RUEhaVSKn3w= Subject key identifier: DF:66:18:10:B2:36:50:B2:93:E2:00:FD:D2:98:09:3A:C1:AC:40:ED Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 6497AD2585A6BE5E13C5749D240F36BD24F17635 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32332d3233203d3e20313431313236.roa Signing time: Thu 03 Aug 2023 04:00:00 +0000 ROA not before: Thu 03 Aug 2023 03:55:00 +0000 ROA not after: Thu 01 Aug 2024 04:00:00 +0000 asID: 141126 IP address blocks: 103.172.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:97:ad:25:85:a6:be:5e:13:c5:74:9d:24:0f:36:bd:24:f1:76:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Aug 3 03:55:00 2023 GMT Not After : Aug 1 04:00:00 2024 GMT Subject: CN=DF661810B23650B293E200FDD298093AC1AC40ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ae:26:b0:9b:6d:1c:82:43:61:dd:ff:c8:61: ff:b0:d0:cb:45:5c:e7:49:c8:1a:d9:fb:d7:8d:f3: 2b:cc:85:8a:36:cc:e4:6c:7c:6b:ea:cd:b7:fc:60: 58:7b:79:94:8c:06:d2:0c:38:5a:5c:d4:a2:b0:a8: ce:0e:c1:a3:03:e8:7d:0c:61:44:6d:42:bd:10:a3: 83:e4:fd:9b:b8:26:fc:f4:0b:cc:f0:aa:99:c3:85: 29:e6:9f:f9:ab:2c:d1:9c:34:e1:14:22:1c:bf:94: 42:50:61:08:05:50:08:a0:44:5c:5b:af:7f:95:9a: 2b:cc:9e:77:1b:4c:82:f3:19:21:59:1e:bc:e9:74: 90:32:c3:34:d8:6d:e8:1b:ec:02:7f:c0:de:54:72: 0b:64:33:b3:05:a5:2c:07:be:0d:63:d7:ef:b6:89: 9d:be:3b:e8:a0:0d:f6:d6:71:50:d1:d1:25:0e:36: c0:4d:d7:5b:19:ea:ab:87:52:4d:99:73:96:27:f8: 9f:a7:ee:c3:2c:30:80:73:6f:3e:de:1f:60:23:61: 60:8d:fa:c3:28:75:d6:40:d4:be:bf:78:dc:6b:5f: ec:ae:95:54:c5:f7:09:13:a0:fa:aa:d9:2c:ca:a5: 24:7d:d5:cc:1c:36:9f:8a:30:a6:26:37:82:07:54: 0b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:66:18:10:B2:36:50:B2:93:E2:00:FD:D2:98:09:3A:C1:AC:40:ED X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32332d3233203d3e20313431313236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.0.0/23 Signature Algorithm: sha256WithRSAEncryption de:6b:91:a3:33:c1:6b:88:86:96:7c:cd:ea:22:8b:b8:2d:51: 13:74:b4:a8:e5:2e:9a:7a:6d:82:56:71:b7:6c:54:75:30:e4: aa:9a:93:40:13:de:3b:76:89:20:3a:6d:7d:3d:da:b0:08:e4: 6d:41:65:12:b2:79:0f:10:c3:d4:cf:7c:52:06:18:5b:e2:0b: 55:29:76:1d:5f:49:45:da:c8:79:52:63:e9:3c:af:2a:4b:2a: 7e:0b:71:95:05:2d:70:1e:0c:5b:29:f7:94:e9:ba:77:cf:fe: 53:fa:fd:3b:fc:ad:07:b5:44:8a:63:69:04:e8:6d:7e:84:ab: 4d:86:37:70:ce:75:e6:58:59:f5:ed:51:02:24:1b:80:90:fb: 52:0c:81:cf:81:47:97:e7:63:15:a7:6d:9b:63:d0:b3:f2:cf: 23:bb:e2:59:61:d5:78:9a:dc:11:67:3f:00:44:de:ba:c1:9f: 5b:cd:01:23:21:f5:e7:64:28:37:f7:08:d0:af:66:40:2f:09: 8b:cd:97:cf:d1:6e:37:4c:b1:ef:65:d5:e4:d8:56:c5:95:02: 40:5e:6b:88:3b:4e:5c:87:68:40:10:bc:1c:23:54:ff:ff:ba: 11:55:7f:54:7f:50:bf:5d:d8:b4:90:2d:26:21:ce:00:42:30: 92:77:00:0f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZJetJYWmvl4TxXSdJA82vSTxdjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yMzA4MDMwMzU1MDBaFw0yNDA4MDEwNDAwMDBaMDMxMTAvBgNV BAMTKERGNjYxODEwQjIzNjUwQjI5M0UyMDBGREQyOTgwOTNBQzFBQzQwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwriawm20cgkNh3f/IYf+w0MtF XOdJyBrZ+9eN8yvMhYo2zORsfGvqzbf8YFh7eZSMBtIMOFpc1KKwqM4OwaMD6H0M YURtQr0Qo4Pk/Zu4Jvz0C8zwqpnDhSnmn/mrLNGcNOEUIhy/lEJQYQgFUAigRFxb r3+VmivMnncbTILzGSFZHrzpdJAywzTYbegb7AJ/wN5UcgtkM7MFpSwHvg1j1++2 iZ2+O+igDfbWcVDR0SUONsBN11sZ6quHUk2Zc5Yn+J+n7sMsMIBzbz7eH2AjYWCN +sModdZA1L6/eNxrX+yulVTF9wkToPqq2SzKpSR91cwcNp+KMKYmN4IHVAu5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU32YYELI2ULKT4gD90pgJOsGsQO0wHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNTIyNGM2LTMzNGQtNGYzZC05 ODM3LTFiYWNjYTVhMDIyYi8wLzMxMzAzMzJlMzEzNzMyMmUzMDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzQzMTMxMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWesADANBgkqhkiG 9w0BAQsFAAOCAQEA3muRozPBa4iGlnzN6iKLuC1RE3S0qOUumnptglZxt2xUdTDk qpqTQBPeO3aJIDptfT3asAjkbUFlErJ5DxDD1M98UgYYW+ILVSl2HV9JRdrIeVJj 6TyvKksqfgtxlQUtcB4MWyn3lOm6d8/+U/r9O/ytB7VEimNpBOhtfoSrTYY3cM51 5lhZ9e1RAiQbgJD7UgyBz4FHl+djFadtm2PQs/LPI7viWWHVeJrcEWc/AETeusGf W80BIyH152QoN/cI0K9mQC8Ji82Xz9FuN0yx72XV5NhWxZUCQF5riDtOXIdoQBC8 HCNU//+6EVV/VH9Qv13YtJAtJiHOAEIwkncADw== -----END CERTIFICATE-----Generated at Mon May 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org