$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa File: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (raw, json) Hash identifier: 71o4NMVLOynETBTiYsgexul5r47ijyMZ1uwVfIn2FfI= Subject key identifier: 78:6A:88:20:C5:D9:C3:4D:50:15:D6:4A:61:8C:B6:2F:9D:F0:B4:D5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 5AB14361CB0D4F2D5E465901DEE71590D3D98946 Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa Signing time: Mon 31 Jul 2023 00:03:18 +0000 ROA not before: Sun 30 Jul 2023 23:58:18 +0000 ROA not after: Mon 29 Jul 2024 00:03:18 +0000 asID: 140401 IP address blocks: 103.150.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 00:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b1:43:61:cb:0d:4f:2d:5e:46:59:01:de:e7:15:90:d3:d9:89:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Jul 30 23:58:18 2023 GMT Not After : Jul 29 00:03:18 2024 GMT Subject: CN=786A8820C5D9C34D5015D64A618CB62F9DF0B4D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:a5:7b:55:e7:4d:0d:83:7e:fd:de:38:ad: 51:3e:89:87:5e:a7:81:ab:e3:a5:57:70:ac:eb:94: 34:7d:d1:01:e9:53:4b:7c:6f:92:f0:a6:ed:bf:34: c5:7c:08:e2:e5:e3:66:31:d4:e3:8b:1d:a7:3d:05: d6:ec:10:97:a7:fa:78:59:2a:15:90:60:59:e1:2f: cd:cf:ea:5a:5a:bb:b8:1a:85:a3:41:a5:c3:a3:66: 26:d6:88:3e:b5:b7:7d:f8:cd:06:20:61:11:01:b5: 08:cf:fc:12:b4:e2:c8:6f:65:17:28:cf:25:a9:b0: 52:69:e2:1c:b8:70:84:3d:08:f7:f1:10:2e:fd:0f: a1:ae:8d:e9:26:19:66:11:67:52:81:e0:91:1b:a3: 15:f2:1e:fe:39:a2:fe:61:1e:d0:e0:37:6c:4c:fd: 0e:f9:34:7b:20:d8:fa:cb:cc:6a:b1:3f:68:82:1f: 6b:53:db:97:42:8e:50:17:2a:c2:3e:af:93:7e:33: 1a:e9:69:08:fe:67:63:04:87:20:5f:29:14:b8:ec: 2a:a9:26:6f:ab:9f:98:16:06:f8:61:a9:15:22:c7: 5c:7e:ed:98:2c:4a:b4:88:27:26:2d:82:ed:59:db: bc:c0:de:3f:c8:62:33:ae:6d:2e:5b:25:41:fb:1f: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6A:88:20:C5:D9:C3:4D:50:15:D6:4A:61:8C:B6:2F:9D:F0:B4:D5 X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.218.0/23 Signature Algorithm: sha256WithRSAEncryption 75:43:d3:1e:95:4d:45:45:08:5a:fd:65:91:ca:04:87:89:e8: d5:94:04:72:1d:6f:90:32:44:ce:b0:4b:56:cd:f9:b9:8d:68: 10:25:44:35:a2:b3:0b:c0:cb:d1:3b:6b:e4:22:47:86:be:d0: ec:c9:7a:a9:35:41:51:1c:d9:78:b0:89:c6:66:8f:c5:7e:3e: 22:de:d1:ef:f8:30:29:23:5f:6a:7b:f2:b7:5b:69:ec:c5:0c: 46:8e:23:23:48:80:9b:c8:2a:8b:75:80:51:e8:a3:79:af:a9: f9:50:4d:86:80:46:ca:2f:0f:0d:d9:06:c2:02:1b:f5:fa:e0: 36:33:0c:f9:5b:44:9b:c1:f5:7e:ac:cd:fe:68:7e:fc:0a:66: 3f:8f:7b:98:d7:5d:81:27:a7:e0:1b:37:c8:41:d7:80:aa:f6: 6d:49:c8:61:51:2e:25:1f:83:89:a5:20:ec:df:4e:5a:a0:d2: d5:98:e0:e7:3d:3c:9c:8a:3b:db:91:52:41:a4:b5:f0:1c:cd: ae:96:e8:84:dd:45:28:9c:f7:05:9e:50:83:48:a2:9b:bf:1a: c4:d8:e2:41:9d:6f:9a:ae:66:8b:03:77:66:f7:1d:ff:4c:c8: 95:63:54:47:03:dc:8c:38:60:25:c6:8f:51:e3:15:45:9a:40: 1d:9f:88:28 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWrFDYcsNTy1eRlkB3ucVkNPZiUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yMzA3MzAyMzU4MThaFw0yNDA3MjkwMDAzMThaMDMxMTAvBgNV BAMTKDc4NkE4ODIwQzVEOUMzNEQ1MDE1RDY0QTYxOENCNjJGOURGMEI0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKKV7VedNDYN+/d44rVE+iYde p4Gr46VXcKzrlDR90QHpU0t8b5Lwpu2/NMV8COLl42Yx1OOLHac9BdbsEJen+nhZ KhWQYFnhL83P6lpau7gahaNBpcOjZibWiD61t334zQYgYREBtQjP/BK04shvZRco zyWpsFJp4hy4cIQ9CPfxEC79D6GujekmGWYRZ1KB4JEboxXyHv45ov5hHtDgN2xM /Q75NHsg2PrLzGqxP2iCH2tT25dCjlAXKsI+r5N+MxrpaQj+Z2MEhyBfKRS47Cqp Jm+rn5gWBvhhqRUix1x+7ZgsSrSIJyYtgu1Z27zA3j/IYjOubS5bJUH7H99bAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUeGqIIMXZw01QFdZKYYy2L53wtNUwHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNWQ3MmYzLTJkYjItNGJjYy05 Zjc3LWQxNDQyYjYzMmQwNC8wLzMxMzAzMzJlMzEzNTMwMmUzMjMxMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnltowDQYJ KoZIhvcNAQELBQADggEBAHVD0x6VTUVFCFr9ZZHKBIeJ6NWUBHIdb5AyRM6wS1bN +bmNaBAlRDWiswvAy9E7a+QiR4a+0OzJeqk1QVEc2XiwicZmj8V+PiLe0e/4MCkj X2p78rdbaezFDEaOIyNIgJvIKot1gFHoo3mvqflQTYaARsovDw3ZBsICG/X64DYz DPlbRJvB9X6szf5ofvwKZj+Pe5jXXYEnp+AbN8hB14Cq9m1JyGFRLiUfg4mlIOzf Tlqg0tWY4Oc9PJyKO9uRUkGktfAcza6W6ITdRSic9wWeUINIopu/GsTY4kGdb5qu ZosDd2b3Hf9MyJVjVEcD3Iw4YCXGj1HjFUWaQB2fiCg= -----END CERTIFICATE-----Generated at Tue Apr 23 22:11:07 2024 by rpki-client on console-fra.rpki-client.org