$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa File: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (raw, json) Hash identifier: KY4SXI0Oocib2AJn816rpNQP9csRR3E47fSHep4k6ZY= Subject key identifier: 6B:3A:5C:D9:20:E1:FF:20:99:42:CD:62:B1:0D:E3:24:D3:5C:DE:03 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 1DEC2EA83E1FD9AEB4C236611AEEDB9F81C8257B Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa Signing time: Wed 10 Jan 2024 20:09:31 +0000 ROA not before: Wed 10 Jan 2024 20:04:31 +0000 ROA not after: Wed 08 Jan 2025 20:09:31 +0000 asID: 58485 IP address blocks: 103.173.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ec:2e:a8:3e:1f:d9:ae:b4:c2:36:61:1a:ee:db:9f:81:c8:25:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Jan 10 20:04:31 2024 GMT Not After : Jan 8 20:09:31 2025 GMT Subject: CN=6B3A5CD920E1FF209942CD62B10DE324D35CDE03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8a:fc:4e:a7:50:bf:c0:f2:e1:07:d7:75:8a: 1d:1c:22:46:eb:bd:84:6e:e5:2b:1c:02:7f:28:f5: 4e:a2:f9:29:3d:c2:c3:84:63:9d:df:83:11:0d:eb: 7c:79:15:ec:56:82:44:c3:22:09:db:b7:ff:b4:cc: 06:15:bd:e0:51:ed:50:f8:28:fe:51:1c:e1:4b:e4: dd:3f:4c:46:23:d1:79:9d:4a:b9:86:5e:91:8c:d8: a3:2d:8e:a2:7e:67:12:ea:7e:f8:ca:c8:ac:bb:db: 34:80:36:0a:25:d6:31:16:bf:45:b9:35:54:15:2f: a0:d7:b5:5c:be:36:d5:bc:67:09:8f:d5:08:54:7d: 54:4a:04:6c:87:69:0f:f4:d1:71:10:16:45:d1:4c: 5f:35:e0:bc:ab:89:08:ec:da:6d:10:b1:b9:62:a3: af:36:fb:4b:d6:af:5e:72:30:47:89:88:07:17:e6: 75:c9:54:2d:26:18:6f:31:82:ce:49:57:48:b2:20: 54:dc:4d:30:58:49:0d:32:eb:ba:5c:3e:fb:f0:4c: d0:05:70:36:97:75:ea:3f:54:2c:4c:13:30:87:97: 9d:a6:a1:d6:e7:88:27:d8:cf:fa:fe:39:bb:61:8f: a8:c9:df:8c:09:5f:17:ac:63:18:fa:c6:06:ed:71: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3A:5C:D9:20:E1:FF:20:99:42:CD:62:B1:0D:E3:24:D3:5C:DE:03 X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.141.0/24 Signature Algorithm: sha256WithRSAEncryption a7:28:d1:9b:64:6a:7a:cb:11:5a:d8:fe:02:73:51:a9:57:35: 3a:a4:87:49:d0:90:f2:a9:4d:1d:8e:29:56:51:f9:55:f8:65: 70:b5:11:8a:f4:50:16:94:b9:ff:f1:ef:cc:f7:a2:f2:f0:1d: af:8f:cf:50:ff:d2:51:3d:4b:e6:88:27:f8:b3:75:22:04:bc: f7:1f:9f:1a:75:aa:b5:d1:91:a8:cf:29:f1:4d:8e:41:3e:9d: 9d:e0:66:c1:39:40:a4:13:c9:a9:4e:50:f8:12:b4:3d:b2:af: 3a:69:ef:6c:9b:51:4b:6e:71:cc:a5:85:82:39:3e:98:06:49: 62:8d:fa:af:7c:a7:3d:ff:dd:dd:5a:9b:72:18:1b:08:80:a1: c2:1f:31:56:5a:93:3b:4c:a7:57:c8:05:59:b3:51:53:84:05: 8c:df:2b:8d:c8:97:df:43:8d:f3:61:11:44:16:4d:5b:6b:c2: e7:82:c3:1d:81:22:7b:56:39:48:a0:32:ee:ff:30:1e:c3:48: 0d:83:da:43:be:4b:65:9d:7f:d0:55:09:3a:cc:de:0e:0b:29: e0:eb:e8:d2:f2:dd:24:07:3d:d4:0e:fa:0f:34:e5:13:f8:99: e4:f6:f9:6d:70:cf:3b:a0:ae:d9:14:31:30:54:0c:fd:52:1b: 77:0a:75:fc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHewuqD4f2a60wjZhGu7bn4HIJXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNDAxMTAyMDA0MzFaFw0yNTAxMDgyMDA5MzFaMDMxMTAvBgNV BAMTKDZCM0E1Q0Q5MjBFMUZGMjA5OTQyQ0Q2MkIxMERFMzI0RDM1Q0RFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXivxOp1C/wPLhB9d1ih0cIkbr vYRu5SscAn8o9U6i+Sk9wsOEY53fgxEN63x5FexWgkTDIgnbt/+0zAYVveBR7VD4 KP5RHOFL5N0/TEYj0XmdSrmGXpGM2KMtjqJ+ZxLqfvjKyKy72zSANgol1jEWv0W5 NVQVL6DXtVy+NtW8ZwmP1QhUfVRKBGyHaQ/00XEQFkXRTF814LyriQjs2m0Qsbli o682+0vWr15yMEeJiAcX5nXJVC0mGG8xgs5JV0iyIFTcTTBYSQ0y67pcPvvwTNAF cDaXdeo/VCxMEzCHl52modbniCfYz/r+Obthj6jJ34wJXxesYxj6xgbtcVDvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUazpc2SDh/yCZQs1isQ3jJNNc3gMwHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhYWJiNTc4LWI5ZGItNGE0Ny04 ZDdlLTExYTYzNDI4OTAxOC8wLzMxMzAzMzJlMzEzNzMzMmUzMTM0MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ62NMA0GCSqG SIb3DQEBCwUAA4IBAQCnKNGbZGp6yxFa2P4Cc1GpVzU6pIdJ0JDyqU0djilWUflV +GVwtRGK9FAWlLn/8e/M96Ly8B2vj89Q/9JRPUvmiCf4s3UiBLz3H58adaq10ZGo zynxTY5BPp2d4GbBOUCkE8mpTlD4ErQ9sq86ae9sm1FLbnHMpYWCOT6YBklijfqv fKc9/93dWptyGBsIgKHCHzFWWpM7TKdXyAVZs1FThAWM3yuNyJffQ43zYRFEFk1b a8LngsMdgSJ7VjlIoDLu/zAew0gNg9pDvktlnX/QVQk6zN4OCyng6+jS8t0kBz3U DvoPNOUT+Jnk9vltcM87oK7ZFDEwVAz9Uht3CnX8 -----END CERTIFICATE-----Generated at Fri May 3 17:52:32 2024 by rpki-client on console-fra.rpki-client.org