$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa File: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (raw, json) Hash identifier: WWdZOAOuhcF0EudE1vG2xPCC/Y1nTtXizwc34RRp27g= Subject key identifier: AF:57:FD:72:EC:BE:B8:69:E5:42:D2:D5:32:28:39:90:13:F6:98:84 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 639808A5D1B9306CE52DF681EEABEC849E3C6C98 Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa Signing time: Mon 10 Jun 2024 05:34:53 +0000 ROA not before: Mon 10 Jun 2024 05:29:53 +0000 ROA not after: Mon 09 Jun 2025 05:34:53 +0000 asID: 150521 IP address blocks: 103.75.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:98:08:a5:d1:b9:30:6c:e5:2d:f6:81:ee:ab:ec:84:9e:3c:6c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Jun 10 05:29:53 2024 GMT Not After : Jun 9 05:34:53 2025 GMT Subject: CN=AF57FD72ECBEB869E542D2D53228399013F69884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1f:37:b5:90:5d:37:44:d6:f8:46:79:74:07: c4:69:37:bd:41:10:29:86:6d:52:6e:c2:78:63:c4: 60:72:29:46:ee:13:42:33:4e:27:d4:17:64:9a:e7: 1f:14:f1:87:98:9e:f0:64:d1:36:57:53:5b:9e:16: aa:97:0a:25:11:7f:82:ba:5f:65:17:80:51:e9:5e: f9:00:a0:d9:0e:e6:ef:c8:60:32:33:58:9d:bf:75: df:26:0c:06:15:0b:f4:f5:28:56:68:d4:0c:e1:ba: 94:03:30:70:50:1c:3c:46:ed:bf:c2:78:7a:83:b3: 43:b0:28:41:94:a1:96:02:46:80:b5:aa:79:bb:d3: b7:b0:78:7c:5b:dc:dc:a3:51:d0:7b:93:d5:b0:60: 3d:00:34:d4:92:33:49:64:66:1f:fd:c1:f8:2f:fa: 62:e6:4c:80:38:6e:5f:67:e5:61:68:0e:d1:0c:92: 09:f8:b6:e2:d6:ed:9a:7e:21:e4:89:51:b5:f5:c7: 84:bc:02:22:03:30:07:64:44:0a:b9:5c:5d:24:a4: 52:b7:9b:ac:26:4d:de:b9:7f:65:ab:6b:2b:a3:a5: 0a:d1:36:7b:30:5c:c4:fd:ab:dd:f1:ac:5c:f1:d2: a3:98:f6:ea:5c:b4:2a:4d:11:52:6b:c8:ff:bd:37: c7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:57:FD:72:EC:BE:B8:69:E5:42:D2:D5:32:28:39:90:13:F6:98:84 X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.66.0/23 Signature Algorithm: sha256WithRSAEncryption 45:8c:bd:a6:c7:71:fd:e3:18:d8:20:e2:cd:06:bd:9d:84:23: 3a:b0:76:04:1b:18:71:06:b1:28:d9:ae:86:33:76:d8:0d:b0: 07:e5:d7:dc:c5:d9:a8:1c:0a:75:f5:26:86:4e:95:c5:38:e7: 30:9d:b1:d0:ff:5a:f5:33:62:26:ca:b6:45:fa:7b:d6:55:46: cc:3f:ed:0a:c0:71:d3:56:c2:3c:69:57:aa:9d:57:db:40:56: ac:a9:73:e9:93:e4:4f:af:7b:1a:ce:7a:c9:c8:61:1a:88:4b: d8:83:f2:25:b6:99:3d:4f:e3:d3:56:4e:9b:42:dc:bb:cd:1a: df:0b:c5:7e:01:26:1f:48:ec:9a:15:94:66:1a:81:0d:6e:da: 2c:40:18:29:f0:44:fe:04:be:ca:3c:80:7f:8c:36:1d:78:87: 77:c6:a2:33:bd:ef:2f:d4:2d:22:f0:8f:eb:0d:a9:40:ff:c2: d0:2e:1c:bf:54:06:1f:1e:12:e6:34:f9:ce:3c:b9:fc:99:46: c7:89:b5:ff:12:b1:1e:0f:0b:6f:35:2d:1c:e2:34:12:de:bb: b6:46:79:52:f3:b3:2b:f3:17:e3:63:c1:b9:65:1b:4b:10:2f: 7a:3e:1d:7c:63:c8:99:74:03:06:80:2f:06:1d:ce:da:ad:20: f4:5c:8e:b2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUY5gIpdG5MGzlLfaB7qvshJ48bJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNDA2MTAwNTI5NTNaFw0yNTA2MDkwNTM0NTNaMDMxMTAvBgNV BAMTKEFGNTdGRDcyRUNCRUI4NjlFNTQyRDJENTMyMjgzOTkwMTNGNjk4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Hze1kF03RNb4Rnl0B8RpN71B ECmGbVJuwnhjxGByKUbuE0IzTifUF2Sa5x8U8YeYnvBk0TZXU1ueFqqXCiURf4K6 X2UXgFHpXvkAoNkO5u/IYDIzWJ2/dd8mDAYVC/T1KFZo1AzhupQDMHBQHDxG7b/C eHqDs0OwKEGUoZYCRoC1qnm707eweHxb3NyjUdB7k9WwYD0ANNSSM0lkZh/9wfgv +mLmTIA4bl9n5WFoDtEMkgn4tuLW7Zp+IeSJUbX1x4S8AiIDMAdkRAq5XF0kpFK3 m6wmTd65f2WrayujpQrRNnswXMT9q93xrFzx0qOY9upctCpNEVJryP+9N8cLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUr1f9cuy+uGnlQtLVMig5kBP2mIQwHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZjc2YzZkLWY4NTAtNGM0OS04 NTRjLTU1ZjM4Mjg0NGM5Ny8wLzMxMzAzMzJlMzczNTJlMzYzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdLQjANBgkqhkiG 9w0BAQsFAAOCAQEARYy9psdx/eMY2CDizQa9nYQjOrB2BBsYcQaxKNmuhjN22A2w B+XX3MXZqBwKdfUmhk6VxTjnMJ2x0P9a9TNiJsq2Rfp71lVGzD/tCsBx01bCPGlX qp1X20BWrKlz6ZPkT697Gs56ychhGohL2IPyJbaZPU/j01ZOm0Lcu80a3wvFfgEm H0jsmhWUZhqBDW7aLEAYKfBE/gS+yjyAf4w2HXiHd8aiM73vL9QtIvCP6w2pQP/C 0C4cv1QGHx4S5jT5zjy5/JlGx4m1/xKxHg8LbzUtHOI0Et67tkZ5UvOzK/MX42PB uWUbSxAvej4dfGPImXQDBoAvBh3O2q0g9FyOsg== -----END CERTIFICATE-----Generated at Mon Nov 25 06:03:22 2024 by rpki-client on console-fra.rpki-client.org