$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa File: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: MpHOToxaZFJCjw2k5H3oUXqKj/fG2hglRtV60kyYteg= Subject key identifier: D6:E9:D7:9C:6B:51:36:CF:7F:9B:80:3C:80:A4:9F:D2:D1:10:6E:F5 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 413CD40FDB700D2C644FF3243F51F2B781EAF2B9 Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa Signing time: Fri 02 Aug 2024 10:03:49 +0000 ROA not before: Fri 02 Aug 2024 09:58:49 +0000 ROA not after: Fri 01 Aug 2025 10:03:49 +0000 asID: 17995 IP address blocks: 103.164.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3c:d4:0f:db:70:0d:2c:64:4f:f3:24:3f:51:f2:b7:81:ea:f2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Aug 2 09:58:49 2024 GMT Not After : Aug 1 10:03:49 2025 GMT Subject: CN=D6E9D79C6B5136CF7F9B803C80A49FD2D1106EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c9:be:2b:1d:44:60:a8:89:fe:4f:2b:0c:b7: 97:b4:93:f6:d2:62:e4:5a:12:4e:ec:dc:52:34:50: b5:60:59:6d:83:6d:2a:68:dd:ab:da:7a:4b:20:51: f9:dd:b0:35:58:b4:2c:7f:c3:42:a2:57:44:83:83: 08:85:34:d0:e0:d8:01:11:f4:9b:d1:d8:ea:35:9e: 62:a2:88:81:2c:19:2f:43:fb:56:61:e4:17:ad:e8: a3:1c:49:69:f4:78:d0:e4:80:66:d8:a0:94:ca:c0: ed:13:aa:97:41:d0:40:ea:e1:c6:b9:b4:09:75:7e: 63:b3:46:63:b4:b7:1a:a9:78:5c:43:b4:d8:7d:cb: 0b:f3:f7:49:14:c5:6a:77:d8:81:53:11:3d:af:f0: 79:c7:98:09:3a:39:0f:bd:c5:36:07:51:fb:8f:39: 6e:85:f0:e3:8d:38:42:14:52:70:84:97:11:bc:1e: 0d:92:ed:13:c1:4c:20:26:02:a7:ee:3c:46:58:ab: 4c:1e:e8:92:66:77:7c:38:74:a8:b2:48:b1:c3:87: 9c:b3:e8:e1:11:8c:cf:1f:94:2f:39:fb:84:a6:f0: 8e:3f:b5:74:32:a2:04:d3:72:36:c9:58:c5:ae:f9: 9f:91:5b:f0:7e:0b:90:24:e7:b2:0b:50:2b:6f:b6: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E9:D7:9C:6B:51:36:CF:7F:9B:80:3C:80:A4:9F:D2:D1:10:6E:F5 X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.170.0/23 Signature Algorithm: sha256WithRSAEncryption 84:9c:74:c6:fc:cc:17:51:03:d0:87:a2:f8:24:5f:9e:58:fb: 94:a0:81:58:3b:9e:6b:67:bf:9c:46:a9:74:14:88:50:5a:9d: 5b:cb:80:2f:69:ce:64:b6:f6:e4:ef:86:79:f2:1d:ac:17:d1: 4d:98:5b:47:f9:31:7d:d0:8a:b4:8f:2d:0b:63:c8:f0:a3:32: 11:6f:98:77:c5:74:0f:9a:6b:b4:c4:18:1c:eb:32:27:ac:39: 19:06:bd:af:4f:dd:9e:d4:fd:d4:82:bd:45:fa:77:c6:27:6c: fa:a3:c1:82:75:a4:92:bc:aa:ed:95:3f:07:ca:6b:ed:bd:9b: ab:6c:96:19:d7:50:99:87:c0:71:57:d1:af:86:ae:0b:8f:29: c9:ad:7a:4d:c3:28:fd:56:3c:37:4e:e1:e6:44:4a:0f:68:9c: 7b:71:3e:45:35:a3:c6:56:39:b3:ee:11:9a:42:c5:23:e4:3a: 24:61:62:54:dd:05:a7:79:c9:08:7e:c3:b0:ce:d1:7c:4d:b5: e1:fc:df:df:a8:56:49:eb:95:0d:df:41:e1:d2:3a:bb:00:3e: eb:38:43:94:24:e1:9a:9c:c0:05:82:2c:03:39:d4:bc:71:2f: 0a:75:bf:a3:2e:f8:88:e9:69:b8:a9:4c:45:9c:2d:e2:f4:4a: c4:d7:11:1d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQTzUD9twDSxkT/MkP1Hyt4Hq8rkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNDA4MDIwOTU4NDlaFw0yNTA4MDExMDAzNDlaMDMxMTAvBgNV BAMTKEQ2RTlENzlDNkI1MTM2Q0Y3RjlCODAzQzgwQTQ5RkQyRDExMDZFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsyb4rHURgqIn+TysMt5e0k/bS YuRaEk7s3FI0ULVgWW2DbSpo3avaeksgUfndsDVYtCx/w0KiV0SDgwiFNNDg2AER 9JvR2Oo1nmKiiIEsGS9D+1Zh5Bet6KMcSWn0eNDkgGbYoJTKwO0TqpdB0EDq4ca5 tAl1fmOzRmO0txqpeFxDtNh9ywvz90kUxWp32IFTET2v8HnHmAk6OQ+9xTYHUfuP OW6F8OONOEIUUnCElxG8Hg2S7RPBTCAmAqfuPEZYq0we6JJmd3w4dKiySLHDh5yz 6OERjM8flC85+4Sm8I4/tXQyogTTcjbJWMWu+Z+RW/B+C5Ak57ILUCtvtnRpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1unXnGtRNs9/m4A8gKSf0tEQbvUwHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkODdiZWVkLTYzMzAtNGYzMy05 MTA1LTg3NzIyY2RmMmRkMC8wLzMxMzAzMzJlMzEzNjM0MmUzMTM3MzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6SqMA0GCSqG SIb3DQEBCwUAA4IBAQCEnHTG/MwXUQPQh6L4JF+eWPuUoIFYO55rZ7+cRql0FIhQ Wp1by4Avac5ktvbk74Z58h2sF9FNmFtH+TF90Iq0jy0LY8jwozIRb5h3xXQPmmu0 xBgc6zInrDkZBr2vT92e1P3Ugr1F+nfGJ2z6o8GCdaSSvKrtlT8HymvtvZurbJYZ 11CZh8BxV9Gvhq4LjynJrXpNwyj9Vjw3TuHmREoPaJx7cT5FNaPGVjmz7hGaQsUj 5DokYWJU3QWneckIfsOwztF8TbXh/N/fqFZJ65UN30Hh0jq7AD7rOEOUJOGanMAF giwDOdS8cS8Kdb+jLviI6Wm4qUxFnC3i9ErE1xEd -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:50 2024 by rpki-client on console-ams.rpki-client.org