$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa File: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (raw, json) Hash identifier: zY6MeVih11oEA5Y6wZpVQeAXzh1zZ/fzkIYHt+si4VA= Subject key identifier: 5D:DD:B4:06:77:50:22:34:02:93:F9:80:B9:8B:ED:97:42:00:52:F4 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 7474E2F95E35B23FD62F9A54E90084FEE22E1ACA Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa Signing time: Sat 15 Jun 2024 12:00:01 +0000 ROA not before: Sat 15 Jun 2024 11:55:01 +0000 ROA not after: Sat 14 Jun 2025 12:00:01 +0000 asID: 136820 IP address blocks: 103.98.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 08:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:74:e2:f9:5e:35:b2:3f:d6:2f:9a:54:e9:00:84:fe:e2:2e:1a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Jun 15 11:55:01 2024 GMT Not After : Jun 14 12:00:01 2025 GMT Subject: CN=5DDDB406775022340293F980B98BED97420052F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:d8:a2:04:67:90:b4:63:51:aa:97:8e:d1: 02:7d:9a:e8:84:a9:1f:1c:db:84:0b:8b:87:aa:bd: c9:25:dc:3d:ec:78:c3:07:31:1e:ff:cc:3d:d3:fc: 8c:0f:00:ec:6c:8c:04:4e:a4:37:ad:bc:20:bc:c7: ef:fd:b8:95:5e:7a:97:0c:05:26:1d:68:84:b4:88: ca:d0:e8:ca:84:3e:59:d3:f3:bd:51:f7:9d:d1:8b: 66:86:be:c1:64:07:fc:c5:41:49:51:c5:69:a3:ce: d4:f9:f8:4a:d5:5a:78:5f:5b:27:5a:19:26:41:fc: 38:69:2c:75:2a:7b:7b:0a:ff:76:a1:43:28:6d:44: b8:ba:21:29:84:34:47:c5:d4:6d:c3:ed:42:f2:d1: 23:32:00:73:ff:d0:59:1f:d1:50:4c:a5:6a:14:24: 56:5f:70:6a:d3:09:ed:98:56:96:e9:c9:b8:93:6d: 0a:81:0a:0c:bf:ed:03:84:46:68:c9:9a:6d:a4:7d: 90:49:a2:73:ea:45:3f:2e:37:f6:32:7e:ea:ad:0c: ef:4e:6c:ce:96:92:84:f9:da:5b:03:46:68:79:c2: 5a:04:bf:34:a7:36:94:92:2f:09:c0:d3:8a:40:7e: 9e:fe:7f:03:59:cf:c6:ff:55:5c:5e:4e:20:d3:d5: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DD:B4:06:77:50:22:34:02:93:F9:80:B9:8B:ED:97:42:00:52:F4 X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.116.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:06:cb:68:da:86:fb:22:90:cd:75:9e:b1:1b:d2:26:aa:2d: 9a:00:1f:2b:c9:ba:3d:96:1b:88:d9:f9:1c:90:bc:ea:f8:e4: d9:7e:0a:e9:bb:80:7c:50:62:cd:cc:fb:9a:02:fa:ac:b2:f3: 71:ff:75:5f:13:66:ee:6c:e2:64:90:45:21:40:7e:c1:27:59: 64:39:d2:e3:f8:39:3b:87:05:ba:76:21:d4:a5:ab:e5:0b:b6: 01:c7:75:43:8e:32:d2:b2:1a:79:53:5f:ef:72:6a:a8:c7:06: bb:67:92:2c:e1:79:ff:bb:32:91:bf:21:49:42:02:bc:86:a7: 0c:6f:34:5c:d5:10:a4:5c:76:2c:9d:61:22:da:44:95:cd:03: 2b:87:bd:99:e2:50:27:12:69:84:87:73:3a:3f:ce:1e:7d:97: 87:c7:94:fd:55:42:b8:e4:a4:33:14:f0:6f:97:3d:fb:3b:78: c0:f9:31:40:8f:71:eb:7f:97:8b:4a:d7:7f:fb:45:c8:32:54: ac:cd:6a:5b:06:55:0a:1f:dd:07:f9:89:cd:ac:98:e9:aa:c1: a3:94:78:c4:a9:98:e2:40:6e:26:60:28:64:5d:8a:44:2e:c3: cc:e5:51:55:5e:25:83:42:b3:5e:36:e6:b6:ab:c6:78:06:f3: 23:93:d0:8e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdHTi+V41sj/WL5pU6QCE/uIuGsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNDA2MTUxMTU1MDFaFw0yNTA2MTQxMjAwMDFaMDMxMTAvBgNV BAMTKDVERERCNDA2Nzc1MDIyMzQwMjkzRjk4MEI5OEJFRDk3NDIwMDUyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIy9iiBGeQtGNRqpeO0QJ9muiE qR8c24QLi4eqvckl3D3seMMHMR7/zD3T/IwPAOxsjAROpDetvCC8x+/9uJVeepcM BSYdaIS0iMrQ6MqEPlnT871R953Ri2aGvsFkB/zFQUlRxWmjztT5+ErVWnhfWyda GSZB/DhpLHUqe3sK/3ahQyhtRLi6ISmENEfF1G3D7ULy0SMyAHP/0Fkf0VBMpWoU JFZfcGrTCe2YVpbpybiTbQqBCgy/7QOERmjJmm2kfZBJonPqRT8uN/YyfuqtDO9O bM6WkoT52lsDRmh5wloEvzSnNpSSLwnA04pAfp7+fwNZz8b/VVxeTiDT1dfvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUXd20BndQIjQCk/mAuYvtl0IAUvQwHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjZDUzOTQ4LWRkZjMtNDQ5YS1i ZjJiLWNmM2Y3YWUxNzZkMy8wLzMxMzAzMzJlMzkzODJlMzEzMTM2MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzEzMzM2MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2J0MA0GCSqG SIb3DQEBCwUAA4IBAQCaBsto2ob7IpDNdZ6xG9Imqi2aAB8rybo9lhuI2fkckLzq +OTZfgrpu4B8UGLNzPuaAvqssvNx/3VfE2bubOJkkEUhQH7BJ1lkOdLj+Dk7hwW6 diHUpavlC7YBx3VDjjLSshp5U1/vcmqoxwa7Z5Is4Xn/uzKRvyFJQgK8hqcMbzRc 1RCkXHYsnWEi2kSVzQMrh72Z4lAnEmmEh3M6P84efZeHx5T9VUK45KQzFPBvlz37 O3jA+TFAj3Hrf5eLStd/+0XIMlSszWpbBlUKH90H+YnNrJjpqsGjlHjEqZjiQG4m YChkXYpELsPM5VFVXiWDQrNeNua2q8Z4BvMjk9CO -----END CERTIFICATE-----Generated at Thu Nov 28 08:42:37 2024 by rpki-client on console-fra.rpki-client.org