$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e32382e3130372e302f32342d3234203d3e203538343736.roa File: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (raw, json) Hash identifier: WNerszvd8MTr+p5OB2wZ/C7GZP+ZuKVyIfJm3owcpSw= Subject key identifier: 81:2B:D7:C3:80:C4:D8:CF:E8:C8:F7:A7:27:CE:6B:9E:59:C1:BF:42 Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 1E8B7058B769A7EEB996B7EAACD1782182DD75B3 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e32382e3130372e302f32342d3234203d3e203538343736.roa Signing time: Mon 31 Jul 2023 00:09:23 +0000 ROA not before: Mon 31 Jul 2023 00:04:23 +0000 ROA not after: Mon 29 Jul 2024 00:09:23 +0000 asID: 58476 IP address blocks: 103.28.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8b:70:58:b7:69:a7:ee:b9:96:b7:ea:ac:d1:78:21:82:dd:75:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Jul 31 00:04:23 2023 GMT Not After : Jul 29 00:09:23 2024 GMT Subject: CN=812BD7C380C4D8CFE8C8F7A727CE6B9E59C1BF42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:41:2c:e8:83:29:c5:6c:27:c2:ec:20:fe: 69:a1:14:d8:34:6e:8f:21:a5:9f:79:fd:47:45:df: 67:d0:71:be:66:2b:49:99:2c:ce:b7:61:96:61:89: 30:a3:8c:b8:68:58:d7:3e:86:f6:5e:c7:58:a9:41: 95:2f:f6:bc:83:fb:12:97:00:37:b4:7c:a4:88:bd: 6a:da:54:38:96:4a:b9:3b:71:ba:68:28:60:7e:b6: fe:fe:42:15:a6:f0:f7:56:42:a7:d8:61:78:07:1e: c8:e2:63:24:62:39:ef:2a:7b:2e:ac:2a:1f:c0:8e: 4e:dc:aa:2f:c9:e3:61:a2:d9:a0:1f:38:e3:2f:da: 67:a1:52:30:98:a1:22:b7:98:71:87:3f:08:5f:54: 96:19:28:0a:04:41:e6:ad:ca:73:9f:ea:65:71:7f: 7e:2d:73:f7:26:1c:85:76:f8:ad:34:76:a8:45:04: 44:ca:17:8c:f8:5f:f5:b8:4a:26:ba:13:2c:10:3d: 8a:89:7f:10:6c:7f:f3:9c:f0:fc:cb:a7:55:45:b3: 76:0e:02:09:ff:4a:0a:e1:c5:d4:21:b1:d3:a6:eb: d7:bf:69:64:7f:54:75:2f:56:9f:a1:c0:f8:e8:cb: eb:72:4b:32:92:c0:0b:b7:9c:79:19:56:81:2d:bf: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2B:D7:C3:80:C4:D8:CF:E8:C8:F7:A7:27:CE:6B:9E:59:C1:BF:42 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e32382e3130372e302f32342d3234203d3e203538343736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.107.0/24 Signature Algorithm: sha256WithRSAEncryption 43:62:8b:5a:21:16:39:e5:4d:db:68:26:b2:cf:9d:96:de:a0: aa:72:9a:1d:f9:c4:36:f1:bf:83:4b:e1:a0:07:89:66:a1:c0: d5:3c:0b:d2:bd:11:53:2c:f0:7a:a5:4f:1d:41:6e:83:69:6c: 3b:e5:a0:cd:ff:d5:9a:65:96:db:27:11:a1:ae:33:b9:3e:dd: 77:a3:45:32:c6:1e:12:9a:71:57:4c:22:b9:d3:c3:da:b2:72: e1:7c:39:52:77:50:01:90:60:0a:0e:d6:88:ad:d2:7c:e9:68: 21:8d:00:7e:1b:d9:d3:d2:9a:ba:4f:63:15:ab:42:01:46:36: a0:16:e8:93:10:75:ee:87:03:5d:aa:01:46:8e:5c:9d:ad:be: 2a:4e:20:73:da:6e:eb:92:07:59:a2:de:b2:b6:bf:65:24:8f: 94:c9:24:87:fc:11:93:5f:fe:08:8f:7f:0b:7a:68:8f:29:46: cf:61:fd:cf:81:f6:d6:10:c6:7b:9e:e9:51:d3:5c:c4:61:d4: 80:f1:d9:c7:ce:65:22:7b:7f:5b:d6:b3:f5:c2:09:20:4e:4c: 89:c1:1d:09:95:a3:f2:f7:d9:05:22:d5:b1:40:cb:1e:0c:cb: a6:a7:fe:9a:a9:e3:0c:86:94:c0:21:0c:0d:05:28:a8:d7:67: 31:67:e9:db -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHotwWLdpp+65lrfqrNF4IYLddbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yMzA3MzEwMDA0MjNaFw0yNDA3MjkwMDA5MjNaMDMxMTAvBgNV BAMTKDgxMkJEN0MzODBDNEQ4Q0ZFOEM4RjdBNzI3Q0U2QjlFNTlDMUJGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrUEs6IMpxWwnwuwg/mmhFNg0 bo8hpZ95/UdF32fQcb5mK0mZLM63YZZhiTCjjLhoWNc+hvZex1ipQZUv9ryD+xKX ADe0fKSIvWraVDiWSrk7cbpoKGB+tv7+QhWm8PdWQqfYYXgHHsjiYyRiOe8qey6s Kh/Ajk7cqi/J42Gi2aAfOOMv2mehUjCYoSK3mHGHPwhfVJYZKAoEQeatynOf6mVx f34tc/cmHIV2+K00dqhFBETKF4z4X/W4Sia6EywQPYqJfxBsf/Oc8PzLp1VFs3YO Agn/SgrhxdQhsdOm69e/aWR/VHUvVp+hwPjoy+tySzKSwAu3nHkZVoEtv0CTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgSvXw4DE2M/oyPenJ85rnlnBv0IwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3ZjQ5MDY4LWMwY2EtNGEyMS05 YThhLWVlZDI2ZmNkZDFhYS8wLzMxMzAzMzJlMzIzODJlMzEzMDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGccazANBgkqhkiG 9w0BAQsFAAOCAQEAQ2KLWiEWOeVN22gmss+dlt6gqnKaHfnENvG/g0vhoAeJZqHA 1TwL0r0RUyzweqVPHUFug2lsO+Wgzf/VmmWW2ycRoa4zuT7dd6NFMsYeEppxV0wi udPD2rJy4Xw5UndQAZBgCg7WiK3SfOloIY0AfhvZ09Kauk9jFatCAUY2oBbokxB1 7ocDXaoBRo5cna2+Kk4gc9pu65IHWaLesra/ZSSPlMkkh/wRk1/+CI9/C3pojylG z2H9z4H21hDGe57pUdNcxGHUgPHZx85lInt/W9az9cIJIE5MicEdCZWj8vfZBSLV sUDLHgzLpqf+mqnjDIaUwCEMDQUoqNdnMWfp2w== -----END CERTIFICATE-----Generated at Sat Jun 1 01:58:23 2024 by rpki-client on console-ams.rpki-client.org