$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa File: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (raw, json) Hash identifier: S4P5IQeGPISm8AAMMW7Ln274SMZv0cJIlnYH2lAvE0o= Subject key identifier: AF:37:3C:D5:37:3A:ED:BB:2D:BE:70:18:7E:90:3B:9A:BC:B4:D1:93 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 50A1264366AE5D444BA26D44E74028CBFE81F8DB Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa Signing time: Wed 07 Feb 2024 04:03:08 +0000 ROA not before: Wed 07 Feb 2024 03:58:08 +0000 ROA not after: Wed 05 Feb 2025 04:03:08 +0000 asID: 136841 IP address blocks: 103.79.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a1:26:43:66:ae:5d:44:4b:a2:6d:44:e7:40:28:cb:fe:81:f8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Feb 7 03:58:08 2024 GMT Not After : Feb 5 04:03:08 2025 GMT Subject: CN=AF373CD5373AEDBB2DBE70187E903B9ABCB4D193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:10:04:b4:bf:de:6f:c1:ef:c5:0e:89:35: 27:94:4e:16:22:74:da:9e:eb:a9:7f:9c:6c:9a:b4: d6:51:1e:11:75:33:36:e6:01:f8:63:6e:79:23:13: 1e:4b:5e:f6:81:d5:aa:5f:eb:51:e4:fc:d6:47:73: 8e:ef:45:6a:af:95:d8:54:92:f6:a7:5e:4d:74:9a: 49:2c:5c:e0:de:9a:10:5f:af:82:c9:5f:74:89:af: 63:13:6e:42:66:55:48:3f:11:8c:cf:6c:4c:d7:39: 55:1f:6b:bf:1b:82:21:52:95:f1:5c:70:4c:05:cc: 15:9e:0f:f5:44:f8:73:87:f6:d4:71:3b:14:fc:b1: 1d:6c:eb:7b:7c:f4:9c:ca:52:b4:4b:a8:c8:f0:99: 0a:16:61:cd:e6:0b:a9:4b:3d:3d:2d:97:ab:dc:f7: 2b:35:0c:ba:8a:09:bd:61:f1:b5:20:65:24:d0:cd: 3d:93:c4:80:f5:46:44:4d:35:f8:5e:dd:49:ae:22: e7:2c:39:bc:4d:1a:0d:4d:5d:77:6c:ab:d4:f5:66: 21:75:30:47:5c:dc:e5:17:ca:4d:93:ad:5b:17:4f: 2b:1d:eb:06:70:b5:89:1b:6e:0e:99:bf:01:b9:8d: fd:d7:64:45:6e:87:dc:81:55:f8:fc:c4:7f:80:63: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:37:3C:D5:37:3A:ED:BB:2D:BE:70:18:7E:90:3B:9A:BC:B4:D1:93 X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.239.0/24 Signature Algorithm: sha256WithRSAEncryption 89:9a:d0:9f:44:a1:e0:fd:be:56:b1:ca:76:aa:e4:0b:d2:ed: 2f:be:68:d7:04:13:00:16:92:13:5e:44:b8:1d:67:49:d6:f1: 59:b1:eb:28:b1:f5:aa:63:67:95:b1:69:14:f6:4c:55:ac:36: 25:de:7b:be:33:f1:09:42:be:b5:97:48:6d:4f:d0:e0:73:50: 52:b4:58:5d:3f:d3:f7:8a:d4:b1:42:69:64:30:fb:01:49:cc: 3e:16:a3:11:af:60:66:ae:e2:db:b6:01:99:aa:3b:60:d2:05: 33:7c:d6:65:d3:a3:a6:87:82:c6:a8:1d:59:84:6c:60:8d:bc: 31:06:29:c4:a5:ce:04:b6:e5:59:51:a2:e9:63:b5:f8:67:0c: 06:8c:05:a7:25:3d:5e:f3:b2:70:7c:43:cd:93:46:d7:d8:a5: 48:6d:55:5e:f3:13:02:3c:70:ba:a5:14:1b:d4:68:4d:07:2a: 3b:6b:59:a2:69:bc:28:26:91:a1:7f:48:2c:d0:01:5f:fb:00: 79:74:9f:05:32:f1:e0:65:1a:73:92:a5:ac:2d:ae:4a:37:02: 90:34:47:92:fa:f1:a7:62:c1:6a:f6:75:40:88:d9:ad:60:98: 60:8f:69:c1:3a:ec:67:18:a9:ac:e7:c0:78:cf:47:5a:92:79: 41:98:79:9f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUKEmQ2auXURLom1E50Aoy/6B+NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNDAyMDcwMzU4MDhaFw0yNTAyMDUwNDAzMDhaMDMxMTAvBgNV BAMTKEFGMzczQ0Q1MzczQUVEQkIyREJFNzAxODdFOTAzQjlBQkNCNEQxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXhAEtL/eb8HvxQ6JNSeUThYi dNqe66l/nGyatNZRHhF1MzbmAfhjbnkjEx5LXvaB1apf61Hk/NZHc47vRWqvldhU kvanXk10mkksXODemhBfr4LJX3SJr2MTbkJmVUg/EYzPbEzXOVUfa78bgiFSlfFc cEwFzBWeD/VE+HOH9tRxOxT8sR1s63t89JzKUrRLqMjwmQoWYc3mC6lLPT0tl6vc 9ys1DLqKCb1h8bUgZSTQzT2TxID1RkRNNfhe3UmuIucsObxNGg1NXXdsq9T1ZiF1 MEdc3OUXyk2TrVsXTysd6wZwtYkbbg6ZvwG5jf3XZEVuh9yBVfj8xH+AYxpRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrzc81Tc67bstvnAYfpA7mry00ZMwHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2ZGYyNjkxLWRiNjItNDNiOS04 YTU3LTBlMDZkYTFhY2M2NC8wLzMxMzAzMzJlMzczOTJlMzIzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0/vMA0GCSqG SIb3DQEBCwUAA4IBAQCJmtCfRKHg/b5Wscp2quQL0u0vvmjXBBMAFpITXkS4HWdJ 1vFZsesosfWqY2eVsWkU9kxVrDYl3nu+M/EJQr61l0htT9Dgc1BStFhdP9P3itSx QmlkMPsBScw+FqMRr2BmruLbtgGZqjtg0gUzfNZl06Omh4LGqB1ZhGxgjbwxBinE pc4EtuVZUaLpY7X4ZwwGjAWnJT1e87JwfEPNk0bX2KVIbVVe8xMCPHC6pRQb1GhN Byo7a1miabwoJpGhf0gs0AFf+wB5dJ8FMvHgZRpzkqWsLa5KNwKQNEeS+vGnYsFq 9nVAiNmtYJhgj2nBOuxnGKms58B4z0daknlBmHmf -----END CERTIFICATE-----Generated at Sun May 5 09:49:49 2024 by rpki-client on console-fra.rpki-client.org