$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134392e302f32342d3234203d3e203538343737.roa File: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: reN04t0gV2lp+6zZN5d0RWMbvDY2OURdiLu4ml495SA= Subject key identifier: 5E:DD:44:D2:06:E0:CD:20:ED:7F:59:C3:93:02:63:8B:A6:70:0E:00 Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 1F6A00B9D1CDE37E33B2D1B1F443026E04873FF3 Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134392e302f32342d3234203d3e203538343737.roa Signing time: Mon 31 Jul 2023 00:09:32 +0000 ROA not before: Mon 31 Jul 2023 00:04:32 +0000 ROA not after: Mon 29 Jul 2024 00:09:32 +0000 asID: 58477 IP address blocks: 103.28.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 12:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6a:00:b9:d1:cd:e3:7e:33:b2:d1:b1:f4:43:02:6e:04:87:3f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jul 31 00:04:32 2023 GMT Not After : Jul 29 00:09:32 2024 GMT Subject: CN=5EDD44D206E0CD20ED7F59C39302638BA6700E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:57:2b:1a:66:08:b2:39:44:83:ca:76:ba: 9d:5a:5b:56:06:d3:5c:ce:97:cc:18:ba:fd:7b:07: 4f:43:19:73:36:74:81:56:78:6e:55:a8:98:f8:0f: 3c:fd:6f:9d:7f:8c:a5:38:ac:bc:e7:a6:c5:ee:95: 6e:89:d8:32:ad:64:8d:75:55:b1:cf:e3:24:b2:05: 86:d8:1c:69:2e:57:a4:e8:c2:86:d0:45:13:02:27: 54:8d:12:a7:df:d7:42:14:1c:39:ec:e2:65:91:58: 94:6e:60:80:ff:e4:d8:aa:07:b8:ff:f3:96:7d:f1: c4:98:01:a0:75:03:2c:1c:c5:2b:1e:21:6f:83:20: d1:e1:15:5a:f8:20:87:3e:a4:a9:e4:6f:31:94:b0: 47:cb:cd:c6:fb:40:ca:f4:02:87:33:1c:54:e6:1d: 62:43:66:ef:e6:b4:54:ae:16:f5:f9:b1:01:ce:eb: 70:af:0b:ab:e7:0f:99:84:12:c7:50:1e:6d:8a:f3: 46:6e:9b:60:bb:4c:4d:03:ae:02:aa:e5:68:a4:f8: 2e:32:dc:bc:f4:7b:89:d6:2f:e4:41:4c:a4:da:af: 9f:6e:64:a1:36:08:d4:d9:dd:08:15:cb:17:03:5d: 9b:30:f5:03:6c:87:08:4b:cf:1c:7d:d9:b6:2c:dc: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DD:44:D2:06:E0:CD:20:ED:7F:59:C3:93:02:63:8B:A6:70:0E:00 X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134392e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.149.0/24 Signature Algorithm: sha256WithRSAEncryption 14:db:98:62:da:f8:1f:62:45:96:ab:05:8a:18:6f:71:1d:f5: 8e:5c:1c:f6:2e:32:b3:7e:1f:eb:a0:63:9a:d0:03:f1:ee:be: 33:de:4c:f0:c6:e6:a7:53:5c:4b:f3:74:1b:e3:b6:2d:8d:8e: 13:d1:d6:df:16:0f:7f:8a:5d:97:f1:3e:f3:5b:4d:bc:69:00: 43:c1:7f:3c:25:a1:49:08:f1:50:f0:e1:69:c2:f7:d0:4c:b7: d6:0c:ae:01:0a:27:7a:5f:99:b9:23:a7:8c:93:2f:82:18:9b: 43:4c:c0:58:12:bb:d4:9f:db:c6:75:a4:9f:97:11:23:c7:71: 35:34:00:b0:46:4a:02:a2:25:c3:56:cc:52:cb:7f:8a:47:7a: 16:d0:87:59:a9:d8:97:79:3a:01:26:af:4a:62:b4:39:6b:aa: 85:49:a0:db:9b:31:68:5f:6c:b4:f2:90:cb:e5:01:cf:9d:dc: e4:cf:21:d9:31:47:3b:f3:6d:f1:8d:19:2f:22:f2:c9:f6:a9: 6f:6a:5a:f7:c7:b2:05:b3:a6:07:67:4c:45:53:a5:d0:82:75: e7:ec:af:9b:32:f1:48:6d:70:cb:06:6f:b5:b5:b0:dd:4f:ff: 04:48:39:76:dc:f3:1f:f0:aa:1a:50:42:fe:9d:68:ae:34:86: c8:5b:5d:ae -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUH2oAudHN434zstGx9EMCbgSHP/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yMzA3MzEwMDA0MzJaFw0yNDA3MjkwMDA5MzJaMDMxMTAvBgNV BAMTKDVFREQ0NEQyMDZFMENEMjBFRDdGNTlDMzkzMDI2MzhCQTY3MDBFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMplcrGmYIsjlEg8p2up1aW1YG 01zOl8wYuv17B09DGXM2dIFWeG5VqJj4Dzz9b51/jKU4rLznpsXulW6J2DKtZI11 VbHP4ySyBYbYHGkuV6TowobQRRMCJ1SNEqff10IUHDns4mWRWJRuYID/5NiqB7j/ 85Z98cSYAaB1AywcxSseIW+DINHhFVr4IIc+pKnkbzGUsEfLzcb7QMr0AoczHFTm HWJDZu/mtFSuFvX5sQHO63CvC6vnD5mEEsdQHm2K80Zum2C7TE0DrgKq5Wik+C4y 3Lz0e4nWL+RBTKTar59uZKE2CNTZ3QgVyxcDXZsw9QNshwhLzxx92bYs3DSlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXt1E0gbgzSDtf1nDkwJji6ZwDgAwHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzZhYTAzLTFiNGQtNDM4ZS1h OWYzLWVmZWFhZTZiMDkyMS8wLzMxMzAzMzJlMzIzODJlMzEzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcclTANBgkqhkiG 9w0BAQsFAAOCAQEAFNuYYtr4H2JFlqsFihhvcR31jlwc9i4ys34f66BjmtAD8e6+ M95M8Mbmp1NcS/N0G+O2LY2OE9HW3xYPf4pdl/E+81tNvGkAQ8F/PCWhSQjxUPDh acL30Ey31gyuAQonel+ZuSOnjJMvghibQ0zAWBK71J/bxnWkn5cRI8dxNTQAsEZK AqIlw1bMUst/ikd6FtCHWanYl3k6ASavSmK0OWuqhUmg25sxaF9stPKQy+UBz53c 5M8h2TFHO/Nt8Y0ZLyLyyfapb2pa98eyBbOmB2dMRVOl0IJ15+yvmzLxSG1wywZv tbWw3U//BEg5dtzzH/CqGlBC/p1orjSGyFtdrg== -----END CERTIFICATE-----Generated at Fri Apr 19 06:15:07 2024 by rpki-client on console-ams.rpki-client.org