$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa File: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (raw, json) Hash identifier: 4fxeQutAHCIlBP4cv0mvnjFbleyvOk9Tizufv+tSvQo= Subject key identifier: 00:F6:72:91:AE:A3:D1:4F:CE:22:25:5E:6B:53:40:4B:6E:4E:BA:D9 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 75DF0288E02255952FFCC8F237A7310B42023F8F Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa Signing time: Tue 23 Apr 2024 09:02:02 +0000 ROA not before: Tue 23 Apr 2024 08:57:02 +0000 ROA not after: Tue 22 Apr 2025 09:02:02 +0000 asID: 135483 IP address blocks: 103.76.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:df:02:88:e0:22:55:95:2f:fc:c8:f2:37:a7:31:0b:42:02:3f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Apr 23 08:57:02 2024 GMT Not After : Apr 22 09:02:02 2025 GMT Subject: CN=00F67291AEA3D14FCE22255E6B53404B6E4EBAD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:17:84:1f:40:ac:cb:a2:3b:bc:68:fb:5d: a6:22:55:ab:ad:dd:d4:2e:1e:c5:e0:a3:7b:42:16: df:f5:94:fd:f4:8c:00:cd:07:58:1f:4f:6c:86:b5: eb:cf:9d:c5:0f:c8:57:5c:4c:38:3b:85:a1:c6:b0: eb:c1:30:9e:63:19:4b:7c:ce:d1:1d:f4:50:50:ea: a3:d5:5a:35:fc:1d:40:38:28:59:9b:12:35:cd:e5: 16:13:4c:9a:d1:78:38:7f:1b:d6:e7:5f:de:bf:93: 1e:47:60:9b:6a:96:5a:e8:48:62:33:25:89:d1:ec: 53:2b:c5:d2:ce:b8:62:f6:56:68:c3:f8:c9:c1:41: 49:81:08:17:2d:0a:e3:3e:72:37:6b:6f:bf:42:41: 9c:98:23:9f:6b:42:a2:fe:0b:d3:36:3f:d9:69:7c: 40:2a:60:d4:dc:97:a8:58:48:0b:06:b3:52:8d:78: 7d:97:29:c3:07:42:31:88:91:11:6a:61:77:e6:2e: 94:eb:b9:9b:5a:dd:7f:5f:94:1d:76:38:fe:4e:10: 49:eb:1e:11:e4:0b:9f:9f:e1:c4:18:bb:57:db:90: 3b:28:f9:d5:0a:5d:d7:65:59:7a:90:6c:ce:b9:ce: de:45:ab:1b:46:36:bf:c5:2f:0c:79:2d:64:f0:96: a1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F6:72:91:AE:A3:D1:4F:CE:22:25:5E:6B:53:40:4B:6E:4E:BA:D9 X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.204.0/24 Signature Algorithm: sha256WithRSAEncryption 51:8d:9c:3e:3d:25:ca:90:bd:fe:d4:38:25:af:f7:de:11:c5: 75:cd:fd:1f:7f:da:1b:21:a8:7d:d3:3a:05:be:34:6d:76:c6: a5:39:a3:d2:19:0b:cf:c9:de:a0:dd:61:10:db:18:25:24:1d: b8:4a:64:dc:cd:32:2f:58:0b:bd:bd:5b:85:e4:ba:38:e9:51: 0a:94:d3:74:2c:0c:cd:a5:a1:16:81:47:e8:df:60:09:6c:27: da:7c:a8:ad:2c:1a:74:c6:8f:5a:31:f8:65:40:0d:fb:b0:fc: 18:17:d7:07:38:0f:17:00:1a:0c:1e:46:12:14:21:24:86:a5: 0e:b2:15:ed:42:8f:0e:8d:8e:bf:b8:f2:c7:5b:4f:b9:8f:25: 23:73:b5:75:f3:af:65:1a:51:03:8f:82:c8:ac:65:9c:4f:85: 62:8d:22:7d:50:83:2c:79:a1:b8:31:62:f6:c7:ca:c0:04:1c: f0:7e:07:82:42:87:84:a3:d4:a3:a2:5d:0f:b8:65:bd:db:34: 4a:54:34:26:f4:fa:d7:d1:88:31:7e:eb:ab:d7:fb:9d:e9:ab: f5:c2:a3:ee:e3:a0:63:f6:87:a6:ae:95:99:21:67:06:0e:8e: d7:8f:fd:f4:cf:8e:97:57:fe:09:b5:75:60:0e:b4:8a:49:c4: 91:54:d7:1a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdd8CiOAiVZUv/MjyN6cxC0ICP48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNDA0MjMwODU3MDJaFw0yNTA0MjIwOTAyMDJaMDMxMTAvBgNV BAMTKDAwRjY3MjkxQUVBM0QxNEZDRTIyMjU1RTZCNTM0MDRCNkU0RUJBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZReEH0Csy6I7vGj7XaYiVaut 3dQuHsXgo3tCFt/1lP30jADNB1gfT2yGtevPncUPyFdcTDg7haHGsOvBMJ5jGUt8 ztEd9FBQ6qPVWjX8HUA4KFmbEjXN5RYTTJrReDh/G9bnX96/kx5HYJtqllroSGIz JYnR7FMrxdLOuGL2VmjD+MnBQUmBCBctCuM+cjdrb79CQZyYI59rQqL+C9M2P9lp fEAqYNTcl6hYSAsGs1KNeH2XKcMHQjGIkRFqYXfmLpTruZta3X9flB12OP5OEEnr HhHkC5+f4cQYu1fbkDso+dUKXddlWXqQbM65zt5FqxtGNr/FLwx5LWTwlqHTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAPZyka6j0U/OIiVea1NAS25OutkwHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1YTczZDA0LTIxNGYtNDZiOC05 NzQ2LTYyY2RlODU1ODhmYS8wLzMxMzAzMzJlMzczNjJlMzIzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0zMMA0GCSqG SIb3DQEBCwUAA4IBAQBRjZw+PSXKkL3+1Dglr/feEcV1zf0ff9obIah90zoFvjRt dsalOaPSGQvPyd6g3WEQ2xglJB24SmTczTIvWAu9vVuF5Lo46VEKlNN0LAzNpaEW gUfo32AJbCfafKitLBp0xo9aMfhlQA37sPwYF9cHOA8XABoMHkYSFCEkhqUOshXt Qo8OjY6/uPLHW0+5jyUjc7V1869lGlEDj4LIrGWcT4VijSJ9UIMseaG4MWL2x8rA BBzwfgeCQoeEo9Sjol0PuGW92zRKVDQm9PrX0Ygxfuur1/ud6av1wqPu46Bj9oem rpWZIWcGDo7Xj/30z46XV/4JtXVgDrSKScSRVNca -----END CERTIFICATE-----Generated at Thu Jun 20 10:14:07 2024 by rpki-client on console-ams.rpki-client.org