$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa File: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (raw, json) Hash identifier: Haq+urxoHujdJEKNTlbGe3YJuf+c1/Gnlks9VtxgPhk= Subject key identifier: FD:67:CC:9E:4D:DC:8E:EE:B6:5A:F3:A6:BD:CD:7C:47:46:7C:D7:8F Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 495DCFDF34B14B978E5B20F993A8ACF9478CBA3C Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa Signing time: Mon 01 Jul 2024 01:05:55 +0000 ROA not before: Mon 01 Jul 2024 01:00:55 +0000 ROA not after: Mon 30 Jun 2025 01:05:55 +0000 asID: 139958 IP address blocks: 103.147.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5d:cf:df:34:b1:4b:97:8e:5b:20:f9:93:a8:ac:f9:47:8c:ba:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Jul 1 01:00:55 2024 GMT Not After : Jun 30 01:05:55 2025 GMT Subject: CN=FD67CC9E4DDC8EEEB65AF3A6BDCD7C47467CD78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:8f:1b:16:73:2d:ea:98:34:7e:4f:bf:b2: f2:cf:9a:58:9d:2e:46:fd:51:31:71:10:c7:45:8d: 3d:b0:c4:32:b3:86:80:82:1b:fa:90:06:a8:e0:7f: e8:67:f6:22:0f:a3:e5:85:ca:da:d6:da:3d:12:06: d9:ea:08:f3:83:a7:89:36:f1:71:26:c2:f6:bf:9d: ad:4a:f6:b7:a0:98:b3:8f:f7:6b:91:bf:07:d1:10: ea:96:b1:69:7e:a8:cd:e2:d2:aa:7f:e0:95:b5:15: 3c:f5:c5:12:ee:8d:7f:5e:30:0a:c8:c4:78:16:db: 8f:7d:90:2e:0e:eb:69:91:c9:f1:44:f5:85:f7:47: 5c:96:c7:3e:67:77:05:b9:63:ab:d1:e5:87:4a:6b: 70:1a:1b:54:90:b2:cd:af:7a:68:10:6d:7d:7b:8b: 87:47:cc:a8:c7:e5:3f:15:5a:69:01:c5:0b:77:c4: b5:d3:84:6d:8f:05:bf:79:6a:4e:82:5a:36:e3:d3: 61:1d:b5:b1:bc:03:43:38:81:a9:54:a9:ce:39:a2: f4:3f:41:bb:34:fe:5d:c8:53:ce:90:3a:b1:ef:ab: 22:18:49:94:9f:b9:71:f0:f8:5f:5a:5c:d7:54:05: 17:39:39:60:ad:47:a0:1f:15:b0:55:de:fd:5a:6a: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:67:CC:9E:4D:DC:8E:EE:B6:5A:F3:A6:BD:CD:7C:47:46:7C:D7:8F X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.82.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:60:3f:ef:bf:6b:e5:15:30:27:ae:1c:75:f1:16:3b:be:21: fc:f7:b9:0f:a6:6a:c0:a1:04:57:af:00:6b:96:44:15:c7:b1: 0d:d7:38:b7:56:f3:98:72:d1:0a:6b:27:ef:a3:9b:0b:e9:67: 64:8f:d8:4a:12:5c:e1:a6:b8:95:26:07:12:7b:94:88:86:33: b0:c0:43:92:77:b8:9f:77:71:be:7c:58:ab:ba:05:9c:01:45: e8:31:85:53:5f:bf:28:bc:08:26:da:b0:04:85:04:89:d8:13: b3:85:9e:11:fa:09:4d:5e:3b:1b:fb:34:bb:43:4d:d5:60:ad: a4:ba:46:99:2d:e4:d3:dc:50:aa:f1:50:e0:1c:11:14:55:a6: a0:6b:f7:fe:92:91:54:09:ad:d0:2a:4a:18:70:fc:0c:dc:44: 4f:bd:13:e0:8a:58:44:18:0d:60:bd:67:37:c6:34:a3:03:3d: 60:72:b9:6a:3e:57:8d:f5:b4:5e:77:5c:76:24:03:11:11:f0: 99:98:d8:3c:bf:43:e8:ba:fc:fc:f9:5c:24:6c:d1:e9:58:10: e9:76:71:d5:18:41:c1:ca:b7:01:28:c0:0c:39:49:fc:7d:22: 86:70:b7:d3:39:d0:ba:00:3c:e5:61:be:12:eb:e0:3a:71:d9: 4c:3f:a4:81 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSV3P3zSxS5eOWyD5k6is+UeMujwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNDA3MDEwMTAwNTVaFw0yNTA2MzAwMTA1NTVaMDMxMTAvBgNV BAMTKEZENjdDQzlFNEREQzhFRUVCNjVBRjNBNkJEQ0Q3QzQ3NDY3Q0Q3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQo8bFnMt6pg0fk+/svLPmlid Lkb9UTFxEMdFjT2wxDKzhoCCG/qQBqjgf+hn9iIPo+WFytrW2j0SBtnqCPODp4k2 8XEmwva/na1K9regmLOP92uRvwfREOqWsWl+qM3i0qp/4JW1FTz1xRLujX9eMArI xHgW2499kC4O62mRyfFE9YX3R1yWxz5ndwW5Y6vR5YdKa3AaG1SQss2vemgQbX17 i4dHzKjH5T8VWmkBxQt3xLXThG2PBb95ak6CWjbj02EdtbG8A0M4galUqc45ovQ/ Qbs0/l3IU86QOrHvqyIYSZSfuXHw+F9aXNdUBRc5OWCtR6AfFbBV3v1aanLXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/WfMnk3cju62WvOmvc18R0Z8148wHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhYTVhYzY1LTYwNzEtNDZlMi1i YjlkLWQ3NzBkMTE3YzRiNC8wLzMxMzAzMzJlMzEzNDM3MmUzODMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5NSMA0GCSqG SIb3DQEBCwUAA4IBAQBbYD/vv2vlFTAnrhx18RY7viH897kPpmrAoQRXrwBrlkQV x7EN1zi3VvOYctEKayfvo5sL6Wdkj9hKElzhpriVJgcSe5SIhjOwwEOSd7ifd3G+ fFirugWcAUXoMYVTX78ovAgm2rAEhQSJ2BOzhZ4R+glNXjsb+zS7Q03VYK2kukaZ LeTT3FCq8VDgHBEUVaaga/f+kpFUCa3QKkoYcPwM3ERPvRPgilhEGA1gvWc3xjSj Az1gcrlqPleN9bRed1x2JAMREfCZmNg8v0Pouvz8+VwkbNHpWBDpdnHVGEHByrcB KMAMOUn8fSKGcLfTOdC6ADzlYb4S6+A6cdlMP6SB -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org