$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa File: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (raw, json) Hash identifier: dPdN/8Z5J8ZD0ct0U0KZcSI2sI3lVPr3IPGdX9dvsPs= Subject key identifier: 79:92:54:1A:8C:FF:A8:F7:64:3F:80:E2:1D:21:24:4F:B0:7A:C4:CA Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 586F2477CD49BD99E3D2F03CFB932FFDE240EE4C Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa Signing time: Mon 31 Jul 2023 00:06:13 +0000 ROA not before: Mon 31 Jul 2023 00:01:13 +0000 ROA not after: Mon 29 Jul 2024 00:06:13 +0000 asID: 139989 IP address blocks: 103.148.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 17:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6f:24:77:cd:49:bd:99:e3:d2:f0:3c:fb:93:2f:fd:e2:40:ee:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Jul 31 00:01:13 2023 GMT Not After : Jul 29 00:06:13 2024 GMT Subject: CN=7992541A8CFFA8F7643F80E21D21244FB07AC4CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:67:a9:93:28:a8:ee:8d:6f:23:df:5d:a6: 72:d0:ed:59:77:5c:19:5d:f8:c6:f7:e0:27:0d:79: 16:f7:54:95:65:63:0f:96:87:c1:3f:66:48:18:c1: cd:ff:70:d8:17:6e:9a:e2:8b:10:ee:d3:10:b7:b4: 89:fe:3c:96:30:ed:5f:ae:87:d5:77:74:4d:c9:dd: 0b:f3:37:9b:ef:41:9b:b0:31:5b:ee:d2:2d:3a:fb: ea:01:89:e7:f6:7c:af:03:22:0f:69:5a:96:82:24: 9c:2c:29:79:6c:ec:d4:f6:90:46:9d:28:14:4d:0f: c5:2a:1c:e3:df:94:8c:f3:e3:6d:59:a2:7a:1f:85: 61:4c:f5:52:71:f4:f9:cf:fe:9a:5d:8e:2c:89:5f: 6d:13:bd:a3:6b:1d:00:d0:89:d0:e0:1d:e7:48:81: 27:a1:68:38:fe:2d:4c:a5:cb:ab:d0:49:fc:37:2a: 3b:3a:7d:88:bd:c6:7e:7e:e8:e4:78:29:9f:52:a7: f7:d9:fe:64:52:15:1d:ef:4c:e4:2b:3f:c2:f4:de: 03:93:0e:bf:9b:ee:5e:97:f7:51:b2:31:97:ad:c7: 50:f5:95:92:4a:39:d4:7c:e2:bf:87:68:92:0c:5f: 6e:8f:8d:80:8a:58:13:15:2b:0e:40:6d:3b:0c:68: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:92:54:1A:8C:FF:A8:F7:64:3F:80:E2:1D:21:24:4F:B0:7A:C4:CA X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.76.0/24 Signature Algorithm: sha256WithRSAEncryption a2:d4:71:cc:36:af:00:fc:ab:b2:73:df:74:6f:e7:91:ec:5a: 85:32:d6:78:bd:3e:5d:a7:e6:a7:32:71:04:0d:29:ef:bd:a2: d9:ca:ca:84:35:db:93:2e:1c:aa:e4:55:0c:a1:ec:26:92:f0: f1:de:bf:1c:a1:77:5a:2e:a5:ae:33:83:ac:7f:d0:68:25:5a: 28:29:78:24:8a:7e:17:21:6e:db:87:41:94:4f:09:22:4f:3b: 4e:3f:e5:ee:19:a8:d0:da:f2:ba:ca:f8:35:02:94:b2:f2:23: 43:3a:25:17:5c:77:e6:c7:37:b9:88:7a:47:54:eb:89:4d:b5: 82:9f:8d:a3:bb:84:9b:29:88:2e:fd:d4:97:61:95:4c:10:9b: 29:22:7c:a2:14:56:37:c9:16:db:51:71:27:30:51:58:2a:de: a7:5c:1e:e3:da:cc:6c:4c:71:63:2f:44:72:36:74:5f:44:d5: 35:46:3d:e1:4b:bf:13:bf:12:f3:26:0a:1b:08:42:aa:5e:52: 0b:8a:4a:dd:5c:c8:a1:4d:e7:31:5d:40:3e:57:c0:6d:17:c9: 43:2a:9d:10:1d:26:c0:d6:e1:1e:74:0b:38:81:20:be:81:b5: f4:bf:b8:10:dc:ec:3b:c0:85:cf:5f:e4:da:15:3a:7e:1d:23: b1:48:a5:08 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWG8kd81JvZnj0vA8+5Mv/eJA7kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yMzA3MzEwMDAxMTNaFw0yNDA3MjkwMDA2MTNaMDMxMTAvBgNV BAMTKDc5OTI1NDFBOENGRkE4Rjc2NDNGODBFMjFEMjEyNDRGQjA3QUM0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Omepkyio7o1vI99dpnLQ7Vl3 XBld+Mb34CcNeRb3VJVlYw+Wh8E/ZkgYwc3/cNgXbpriixDu0xC3tIn+PJYw7V+u h9V3dE3J3QvzN5vvQZuwMVvu0i06++oBief2fK8DIg9pWpaCJJwsKXls7NT2kEad KBRND8UqHOPflIzz421ZonofhWFM9VJx9PnP/ppdjiyJX20TvaNrHQDQidDgHedI gSehaDj+LUyly6vQSfw3Kjs6fYi9xn5+6OR4KZ9Sp/fZ/mRSFR3vTOQrP8L03gOT Dr+b7l6X91GyMZetx1D1lZJKOdR84r+HaJIMX26PjYCKWBMVKw5AbTsMaAUjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeZJUGoz/qPdkP4DiHSEkT7B6xMowHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMzE3NDZlLWIwZjYtNDgyNy04 YzRlLWI4MTkyZGVjYzM5YS8wLzMxMzAzMzJlMzEzNDM4MmUzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RMMA0GCSqG SIb3DQEBCwUAA4IBAQCi1HHMNq8A/Kuyc990b+eR7FqFMtZ4vT5dp+anMnEEDSnv vaLZysqENduTLhyq5FUMoewmkvDx3r8coXdaLqWuM4Osf9BoJVooKXgkin4XIW7b h0GUTwkiTztOP+XuGajQ2vK6yvg1ApSy8iNDOiUXXHfmxze5iHpHVOuJTbWCn42j u4SbKYgu/dSXYZVMEJspInyiFFY3yRbbUXEnMFFYKt6nXB7j2sxsTHFjL0RyNnRf RNU1Rj3hS78TvxLzJgobCEKqXlILikrdXMihTecxXUA+V8BtF8lDKp0QHSbA1uEe dAs4gSC+gbX0v7gQ3Ow7wIXPX+TaFTp+HSOxSKUI -----END CERTIFICATE-----Generated at Thu Apr 18 11:19:52 2024 by rpki-client on console-ams.rpki-client.org