$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e37322e3131302e302f32342d3234203d3e203538343736.roa File: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (raw, json) Hash identifier: Yv4+NRKJwpBIb5C/fQENX05YPDaaZFFcSmuPMbCb62c= Subject key identifier: 6B:C4:10:E9:49:F3:D5:27:14:C3:D6:0A:D6:81:E6:AC:85:B5:D5:19 Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 13FFDB8B7722093201D1F0E454DB60C6DA4C7AA4 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e37322e3131302e302f32342d3234203d3e203538343736.roa Signing time: Mon 31 Jul 2023 00:09:24 +0000 ROA not before: Mon 31 Jul 2023 00:04:24 +0000 ROA not after: Mon 29 Jul 2024 00:09:24 +0000 asID: 58476 IP address blocks: 103.72.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ff:db:8b:77:22:09:32:01:d1:f0:e4:54:db:60:c6:da:4c:7a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Jul 31 00:04:24 2023 GMT Not After : Jul 29 00:09:24 2024 GMT Subject: CN=6BC410E949F3D52714C3D60AD681E6AC85B5D519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:09:11:ff:fe:0d:6f:f0:d3:cc:82:5c:04:d8: 35:3d:53:27:db:bd:87:bf:ae:ff:fb:0f:81:d3:c7: cf:6b:a0:93:2d:c4:10:e0:5c:09:a6:dc:6b:45:8b: 49:7c:7b:be:e9:ec:9b:44:4c:44:5e:a3:ea:9c:00: b3:6c:fb:18:fa:23:fd:e5:2b:75:0a:45:9f:78:b1: 7c:0f:ec:47:67:d2:9d:e2:b2:27:18:c5:89:7c:8f: 31:42:5b:4e:52:57:fd:7e:5d:0a:25:74:cb:04:fb: fd:f5:d7:0d:60:1d:df:1d:bd:de:8b:ba:7f:a0:6e: 88:99:fb:45:bf:ae:4c:42:69:7a:c1:8e:3d:ef:7b: f6:02:0d:ae:21:2e:c1:33:92:d2:28:74:e8:49:cc: 5a:b3:fb:2d:e8:de:41:73:2c:f1:6e:9d:19:12:5f: fd:62:88:6a:35:7c:bd:8c:03:52:d7:c1:7e:21:f1: 76:a9:dc:02:d2:14:45:49:81:2f:c1:0a:38:fc:89: 3e:3a:49:47:80:68:90:2c:b5:c4:dc:95:01:13:cc: 85:65:12:18:3f:ec:74:01:24:9b:d0:91:9c:31:3b: 99:fb:51:91:8e:96:66:b2:0c:f1:66:e8:75:f5:dd: 01:d2:65:66:8d:71:ce:ce:85:c3:f1:5a:c9:1c:f4: 60:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C4:10:E9:49:F3:D5:27:14:C3:D6:0A:D6:81:E6:AC:85:B5:D5:19 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e37322e3131302e302f32342d3234203d3e203538343736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.72.110.0/24 Signature Algorithm: sha256WithRSAEncryption 75:d7:46:7c:4a:73:2c:2a:1c:43:25:62:f2:b4:9e:d6:4e:83: ce:e6:50:c5:c7:af:c2:7d:e0:7b:c3:77:41:35:7b:cf:5b:fd: e9:1b:b4:a0:48:de:65:2e:0e:71:40:d1:89:b5:fd:f9:15:70: f0:b9:2d:9c:0b:37:c2:d1:0b:8f:ce:98:68:2a:d1:7c:bb:b8: b9:39:66:42:92:63:3a:9c:06:f8:7c:f0:71:cc:40:68:df:58: a3:bb:54:fc:ea:7e:06:17:50:af:11:44:be:84:6d:a9:ba:c1: 4c:28:80:6d:45:cd:2b:e4:4a:ee:aa:7e:f5:24:b0:81:d0:f6: b9:b7:e5:2f:e3:df:cc:83:ec:a3:3e:47:3e:e9:dc:48:b9:b5: 3a:e0:3a:bd:ce:32:76:a7:56:cf:ee:59:21:97:a3:66:ac:27: 21:23:4b:84:1e:e0:86:de:a9:52:50:af:6b:ad:14:9b:10:8c: 92:34:57:f9:49:c1:60:96:6b:16:4b:82:87:c0:4a:33:67:f1: c0:9b:72:9f:34:c8:23:6a:f9:0b:ea:b6:7d:b7:3c:5b:e6:1b: 57:c2:fd:f9:c0:3d:bf:1f:79:3d:f1:b3:bd:57:3a:a6:cc:c4: 89:af:84:33:56:7f:da:07:25:fb:47:2f:1c:08:e4:c1:03:8d: 43:49:3d:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUE//bi3ciCTIB0fDkVNtgxtpMeqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yMzA3MzEwMDA0MjRaFw0yNDA3MjkwMDA5MjRaMDMxMTAvBgNV BAMTKDZCQzQxMEU5NDlGM0Q1MjcxNEMzRDYwQUQ2ODFFNkFDODVCNUQ1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCRH//g1v8NPMglwE2DU9Uyfb vYe/rv/7D4HTx89roJMtxBDgXAmm3GtFi0l8e77p7JtETEReo+qcALNs+xj6I/3l K3UKRZ94sXwP7Edn0p3isicYxYl8jzFCW05SV/1+XQoldMsE+/311w1gHd8dvd6L un+gboiZ+0W/rkxCaXrBjj3ve/YCDa4hLsEzktIodOhJzFqz+y3o3kFzLPFunRkS X/1iiGo1fL2MA1LXwX4h8Xap3ALSFEVJgS/BCjj8iT46SUeAaJAstcTclQETzIVl Ehg/7HQBJJvQkZwxO5n7UZGOlmayDPFm6HX13QHSZWaNcc7OhcPxWskc9GB9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUa8QQ6Unz1ScUw9YK1oHmrIW11RkwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3ZjQ5MDY4LWMwY2EtNGEyMS05 YThhLWVlZDI2ZmNkZDFhYS8wLzMxMzAzMzJlMzczMjJlMzEzMTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdIbjANBgkqhkiG 9w0BAQsFAAOCAQEAdddGfEpzLCocQyVi8rSe1k6DzuZQxcevwn3ge8N3QTV7z1v9 6Ru0oEjeZS4OcUDRibX9+RVw8LktnAs3wtELj86YaCrRfLu4uTlmQpJjOpwG+Hzw ccxAaN9Yo7tU/Op+BhdQrxFEvoRtqbrBTCiAbUXNK+RK7qp+9SSwgdD2ubflL+Pf zIPsoz5HPuncSLm1OuA6vc4ydqdWz+5ZIZejZqwnISNLhB7ght6pUlCva60UmxCM kjRX+UnBYJZrFkuCh8BKM2fxwJtynzTII2r5C+q2fbc8W+YbV8L9+cA9vx95PfGz vVc6pszEia+EM1Z/2gcl+0cvHAjkwQONQ0k9qg== -----END CERTIFICATE-----Generated at Sat Jun 1 01:40:18 2024 by rpki-client on console-fra.rpki-client.org