$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa File: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (raw, json) Hash identifier: rlpUy9KxOQCAU68Gj2PHyllhVWbJ//IdXedh4ylgdB4= Subject key identifier: D8:76:F9:AB:E2:EC:EB:21:49:36:EF:60:32:6A:7A:66:2C:D2:88:A8 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 6A3CE2173FD3005AC850F414464415CE458F3E65 Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa Signing time: Sun 24 Sep 2023 09:00:00 +0000 ROA not before: Sun 24 Sep 2023 08:55:00 +0000 ROA not after: Sun 22 Sep 2024 09:00:00 +0000 asID: 138064 IP address blocks: 103.175.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 01:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3c:e2:17:3f:d3:00:5a:c8:50:f4:14:46:44:15:ce:45:8f:3e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Sep 24 08:55:00 2023 GMT Not After : Sep 22 09:00:00 2024 GMT Subject: CN=D876F9ABE2ECEB214936EF60326A7A662CD288A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:e0:be:c6:19:e5:80:58:bb:3a:b3:aa:9c: d5:82:b9:c7:cd:2e:44:f8:50:58:34:d3:e8:4e:fd: 4f:00:f5:47:bd:9d:2d:54:1f:b8:ac:f3:ba:17:8e: 00:c3:53:44:d5:ef:36:32:c2:37:82:3f:61:bf:b8: 2f:96:dc:0d:6e:a4:a8:f1:bf:e7:59:b4:7c:d7:ae: cf:02:a1:28:34:13:01:d4:72:c8:c2:87:1b:90:b7: ce:3f:74:3c:f8:1c:56:d7:21:72:dc:8f:81:ae:cf: 1a:6e:fe:df:64:4d:fd:29:93:00:c1:39:8b:cf:3f: 25:ee:99:8f:9b:77:0e:ca:39:d6:c1:88:77:51:f1: 6c:c8:ad:88:fd:97:d6:11:7e:ae:3e:c4:10:6a:68: d1:6a:ec:fa:ae:0e:bc:a0:7a:73:fe:5a:63:26:cf: fd:bd:62:c4:ce:74:f6:2a:92:fc:61:08:60:41:e5: 05:a0:1e:a1:fd:6c:3b:b9:28:a0:7e:f5:9e:77:10: 7a:12:55:ec:3d:cd:51:42:27:5c:09:21:3c:11:8c: 56:53:56:05:a4:3b:50:05:8d:40:f8:cf:3a:44:79: 91:7a:14:10:78:21:ff:e7:2b:d3:83:bd:1a:e7:41: fe:b4:18:5d:cb:50:15:a8:47:f6:8f:c9:34:f6:fe: b8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:76:F9:AB:E2:EC:EB:21:49:36:EF:60:32:6A:7A:66:2C:D2:88:A8 X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.82.0/23 Signature Algorithm: sha256WithRSAEncryption cf:bf:c4:23:55:60:f9:9d:bc:3e:e7:be:3c:7c:5d:95:84:a0: c6:0c:1f:07:8d:5f:70:c7:bd:af:2f:b7:08:06:58:67:e9:8f: e5:a1:91:8e:7f:83:62:01:b5:a4:fa:c1:86:8e:71:2d:e0:ad: 14:6e:50:80:a8:9f:ba:18:34:c0:db:af:33:35:84:d4:80:58: 68:b7:c5:cb:16:0a:28:a5:38:b3:bd:ef:81:97:3f:e0:5a:27: ec:44:7d:b1:2c:f7:51:66:38:7f:13:22:c4:99:7e:8b:a2:a6: e7:cf:e4:94:12:bf:9e:d2:0e:ca:63:97:7f:61:21:0b:10:da: 31:52:33:f2:d0:95:61:6b:f6:d1:e2:9d:9d:31:16:bc:0a:e8: 2f:0e:c0:9e:33:41:ff:75:a5:14:04:8e:75:99:32:dc:ca:40: 56:f5:c5:2d:d4:7a:03:7d:02:a2:f0:3b:16:77:99:a9:fd:6d: 84:b3:4d:a1:85:f0:5e:75:6e:9b:21:57:54:f5:c8:b3:8a:d3: 4b:77:4c:40:36:55:4b:1b:09:a0:75:0c:05:89:6d:17:56:f3: ff:72:e4:b5:0d:a8:8c:a2:d4:cc:75:11:61:c9:c1:23:2a:6c: ad:f7:e3:46:8e:e9:5a:55:a9:7e:fe:0f:31:3f:4d:cd:62:2e: 4c:22:04:f3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUajziFz/TAFrIUPQURkQVzkWPPmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yMzA5MjQwODU1MDBaFw0yNDA5MjIwOTAwMDBaMDMxMTAvBgNV BAMTKEQ4NzZGOUFCRTJFQ0VCMjE0OTM2RUY2MDMyNkE3QTY2MkNEMjg4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7puC+xhnlgFi7OrOqnNWCucfN LkT4UFg00+hO/U8A9Ue9nS1UH7is87oXjgDDU0TV7zYywjeCP2G/uC+W3A1upKjx v+dZtHzXrs8CoSg0EwHUcsjChxuQt84/dDz4HFbXIXLcj4Guzxpu/t9kTf0pkwDB OYvPPyXumY+bdw7KOdbBiHdR8WzIrYj9l9YRfq4+xBBqaNFq7PquDrygenP+WmMm z/29YsTOdPYqkvxhCGBB5QWgHqH9bDu5KKB+9Z53EHoSVew9zVFCJ1wJITwRjFZT VgWkO1AFjUD4zzpEeZF6FBB4If/nK9ODvRrnQf60GF3LUBWoR/aPyTT2/rhpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2Hb5q+Ls6yFJNu9gMmp6ZizSiKgwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjYTU0NzgxLTk2NzgtNDc1Yy1h YzFiLWNkNGJmY2Y1ZDBlYS8wLzMxMzAzMzJlMzEzNzM1MmUzODMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ69SMA0GCSqG SIb3DQEBCwUAA4IBAQDPv8QjVWD5nbw+5748fF2VhKDGDB8HjV9wx72vL7cIBlhn 6Y/loZGOf4NiAbWk+sGGjnEt4K0UblCAqJ+6GDTA268zNYTUgFhot8XLFgoopTiz ve+Blz/gWifsRH2xLPdRZjh/EyLEmX6Loqbnz+SUEr+e0g7KY5d/YSELENoxUjPy 0JVha/bR4p2dMRa8CugvDsCeM0H/daUUBI51mTLcykBW9cUt1HoDfQKi8DsWd5mp /W2Es02hhfBedW6bIVdU9cizitNLd0xANlVLGwmgdQwFiW0XVvP/cuS1DaiMotTM dRFhycEjKmyt9+NGjulaVal+/g8xP03NYi5MIgTz -----END CERTIFICATE-----Generated at Sat Apr 27 10:13:29 2024 by rpki-client on console-ams.rpki-client.org