$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa File: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (raw, json) Hash identifier: y6jFLQ2FkK/iJQ8dnXVYSbw0BlEqv1RLQrMjG78moNI= Subject key identifier: C7:7B:56:31:F7:54:D8:39:09:BB:81:C6:64:7C:26:C4:FF:D3:FC:DE Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 1A06FF6FB24E5A64AE87BDC29E23AFD65057522B Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa Signing time: Mon 31 Jul 2023 00:03:19 +0000 ROA not before: Sun 30 Jul 2023 23:58:19 +0000 ROA not after: Mon 29 Jul 2024 00:03:19 +0000 asID: 140401 IP address blocks: 103.150.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 00:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:06:ff:6f:b2:4e:5a:64:ae:87:bd:c2:9e:23:af:d6:50:57:52:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Jul 30 23:58:19 2023 GMT Not After : Jul 29 00:03:19 2024 GMT Subject: CN=C77B5631F754D83909BB81C6647C26C4FFD3FCDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:f5:1d:f9:ef:86:6a:ff:79:e3:bf:84:81: 04:19:67:99:08:20:52:ed:7e:12:ce:dc:d3:80:e9: 00:16:d8:91:86:22:fb:26:02:6c:5c:ec:e9:b3:f2: 27:99:62:c0:a0:04:20:44:b9:91:03:a5:b0:a3:26: 70:96:3f:fc:ab:3c:55:a6:fa:46:14:36:1d:ce:4f: f7:d4:83:bd:f3:b9:42:c5:f0:3f:27:db:1c:fb:c7: 42:66:ba:b6:9b:df:b4:d4:a4:0c:27:ae:7d:9f:9b: e0:cb:23:3b:97:8a:3f:34:09:bc:4e:56:b9:43:f4: e6:f2:9d:0c:5e:72:3c:2f:11:33:f1:ea:90:3c:7d: 8f:48:41:28:3f:8f:a3:26:53:3b:c9:28:42:f0:10: 17:fc:09:59:71:a9:86:9a:0f:82:04:06:81:33:cf: 63:dc:24:3e:4d:2d:08:27:3e:67:47:24:16:72:1a: 83:ad:9f:25:f9:8a:39:63:b3:08:7c:a3:bb:7a:2e: 24:06:7e:19:d3:38:ad:22:b8:a9:85:4a:52:ba:cb: 3c:0c:b5:cc:9a:1a:78:c3:d5:b7:17:1a:52:44:a3: 4b:c4:2c:f2:04:95:a5:0c:29:b4:ab:57:c6:42:59: bc:b7:37:a8:20:78:c0:7c:5d:ed:63:9d:a4:d2:4b: 0e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7B:56:31:F7:54:D8:39:09:BB:81:C6:64:7C:26:C4:FF:D3:FC:DE X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.218.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:6f:f3:2f:d0:26:c0:05:b9:3a:70:ef:b5:ec:99:ad:c8:17: 07:87:43:30:96:c1:7c:6b:6b:93:ee:09:dd:81:ce:ca:13:97: 21:d4:bb:5e:47:33:eb:00:bf:a5:f0:7c:cd:36:66:95:2a:65: 91:67:8d:4c:24:3d:5c:c6:11:d8:29:4f:20:cb:d9:a4:ab:47: 5f:f1:60:bc:12:d5:d6:db:f5:2c:2f:be:ea:52:d4:86:e4:4b: 96:bf:88:ed:e5:50:a2:60:f8:79:1a:ff:90:ab:1d:8e:e6:f4: f5:42:88:34:a2:4b:47:85:a6:9e:05:68:b1:db:35:5a:8f:3b: bc:11:11:a8:85:68:65:4b:a9:a3:35:4e:cd:d2:cd:05:26:eb: dc:7d:50:dd:2e:d5:97:b3:d5:d8:b9:39:c4:d4:52:9e:13:1c: eb:87:0f:ff:cf:73:50:8e:21:ff:d2:2d:b2:e1:7a:b6:5f:6a: aa:96:23:27:a7:80:ad:0c:b9:ec:91:5c:92:af:f0:14:c2:e2: b9:17:0d:a7:02:89:cc:02:bf:57:8b:eb:b4:db:ed:e2:e8:e0: 0c:42:f0:d2:ab:54:66:9c:59:9d:ba:60:99:e8:24:89:2c:e6: 48:68:a2:28:27:5b:91:6f:cd:8b:0a:4a:59:51:cd:10:0a:98: d1:91:b1:43 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGgb/b7JOWmSuh73CniOv1lBXUiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yMzA3MzAyMzU4MTlaFw0yNDA3MjkwMDAzMTlaMDMxMTAvBgNV BAMTKEM3N0I1NjMxRjc1NEQ4MzkwOUJCODFDNjY0N0MyNkM0RkZEM0ZDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Z/Ud+e+Gav9547+EgQQZZ5kI IFLtfhLO3NOA6QAW2JGGIvsmAmxc7Omz8ieZYsCgBCBEuZEDpbCjJnCWP/yrPFWm +kYUNh3OT/fUg73zuULF8D8n2xz7x0Jmurab37TUpAwnrn2fm+DLIzuXij80CbxO VrlD9ObynQxecjwvETPx6pA8fY9IQSg/j6MmUzvJKELwEBf8CVlxqYaaD4IEBoEz z2PcJD5NLQgnPmdHJBZyGoOtnyX5ijljswh8o7t6LiQGfhnTOK0iuKmFSlK6yzwM tcyaGnjD1bcXGlJEo0vELPIElaUMKbSrV8ZCWby3N6ggeMB8Xe1jnaTSSw6nAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUx3tWMfdU2DkJu4HGZHwmxP/T/N4wHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNWQ3MmYzLTJkYjItNGJjYy05 Zjc3LWQxNDQyYjYzMmQwNC8wLzMxMzAzMzJlMzEzNTMwMmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnltowDQYJ KoZIhvcNAQELBQADggEBAI1v8y/QJsAFuTpw77Xsma3IFweHQzCWwXxra5PuCd2B zsoTlyHUu15HM+sAv6XwfM02ZpUqZZFnjUwkPVzGEdgpTyDL2aSrR1/xYLwS1dbb 9SwvvupS1IbkS5a/iO3lUKJg+Hka/5CrHY7m9PVCiDSiS0eFpp4FaLHbNVqPO7wR EaiFaGVLqaM1Ts3SzQUm69x9UN0u1Zez1di5OcTUUp4THOuHD//Pc1COIf/SLbLh erZfaqqWIyengK0MueyRXJKv8BTC4rkXDacCicwCv1eL67Tb7eLo4AxC8NKrVGac WZ26YJnoJIks5khooignW5FvzYsKSllRzRAKmNGRsUM= -----END CERTIFICATE-----Generated at Tue Apr 23 22:55:04 2024 by rpki-client on console-ams.rpki-client.org