$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa File: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: ummcd32J2PfVvp+R69LzxbIEO8p+ckqksmqTcY62DdQ= Subject key identifier: 4B:79:E3:94:DB:0B:81:60:F4:7C:93:72:C3:1F:BA:12:41:B3:18:D7 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 45CB2FAF358BA04C375FD35632DFC542DB070BD7 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa Signing time: Mon 15 Jul 2024 03:08:13 +0000 ROA not before: Mon 15 Jul 2024 03:03:13 +0000 ROA not after: Mon 14 Jul 2025 03:08:13 +0000 asID: 48465 IP address blocks: 103.150.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cb:2f:af:35:8b:a0:4c:37:5f:d3:56:32:df:c5:42:db:07:0b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Jul 15 03:03:13 2024 GMT Not After : Jul 14 03:08:13 2025 GMT Subject: CN=4B79E394DB0B8160F47C9372C31FBA1241B318D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:b0:19:6a:36:d9:57:9d:6e:fe:60:90:d6: 4d:04:34:95:6d:7a:84:08:0c:60:91:d2:74:91:cf: 0a:f3:65:df:f1:45:d8:c3:57:a8:d5:9d:63:22:62: ef:0a:cb:b1:7c:25:47:d4:90:1f:4e:27:33:d2:26: 64:d4:68:2a:02:46:7b:f5:46:25:2d:3f:42:42:48: 53:a0:b9:61:60:df:9a:52:13:81:fd:4d:81:f6:33: 7d:6e:1a:10:cb:07:b8:45:cf:71:a8:7b:1b:36:3f: 34:07:f4:ad:db:84:1e:eb:a6:37:51:09:0e:f4:92: 6e:28:fd:23:9b:75:23:4e:4e:f1:6a:0b:ee:44:4c: 63:69:bc:2a:7d:55:3e:6f:33:01:94:19:74:8b:99: 1a:23:12:99:56:1e:b3:46:ad:9d:2c:50:9d:19:82: 7a:2a:00:ab:e6:ba:7a:7a:d3:a8:98:35:4d:75:23: 9e:8c:39:c9:3d:26:4e:6d:2b:6f:7b:cd:6e:3a:4c: 76:0f:26:bd:f5:a4:51:34:2b:e8:c3:16:17:0e:f5: d2:0b:b9:a1:18:67:4c:88:f1:6c:2d:62:03:0e:5f: e7:b5:2b:00:25:92:bf:97:87:ea:39:2b:78:6a:26: 0f:87:49:35:ea:a9:55:13:c4:0d:99:ca:b8:ca:be: 42:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:E3:94:DB:0B:81:60:F4:7C:93:72:C3:1F:BA:12:41:B3:18:D7 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.149.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:b5:e6:46:78:eb:e5:76:ee:1a:76:34:75:1b:5e:1b:0b:db: 8e:09:9e:cc:4d:9c:ee:e8:cb:17:52:c3:10:0d:b4:5f:8e:bb: 5c:74:d1:7e:ce:1d:4a:e7:99:72:0d:3a:e0:7c:cb:86:8c:32: 6e:4b:18:94:fb:d7:ae:8c:0a:e7:1d:1d:8d:92:57:d9:f1:ad: c0:68:92:d5:82:c3:3d:e5:f8:50:9a:88:f8:b4:9c:b6:51:d2: a0:63:23:e1:b6:70:58:36:e0:77:ed:70:09:59:72:97:f6:54: a4:3c:78:fe:14:2e:d3:95:2f:5f:8f:73:a4:91:83:45:f4:88: f8:ca:1f:9a:29:03:ba:6f:a1:8e:f1:af:bb:3c:2c:4e:9d:eb: 81:15:ef:18:70:4d:3a:f0:19:8f:ff:d0:01:da:79:31:f3:ca: 5f:a8:0a:d3:f1:96:19:03:0a:c9:a5:34:3b:fb:74:a6:f8:24: c4:68:37:62:2d:eb:7a:d1:19:55:3d:a4:42:72:db:80:65:30: 8d:09:f3:a4:5a:b9:f7:69:2d:86:82:93:3b:5a:a4:2c:1f:ee: a3:75:c6:a4:8a:03:cb:5d:c7:67:b7:3a:14:a9:68:e5:d4:7d: b2:b1:1d:01:a5:dd:fb:72:c4:b8:7b:2d:6a:d0:a2:e1:49:e8: 17:83:82:ac -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURcsvrzWLoEw3X9NWMt/FQtsHC9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNDA3MTUwMzAzMTNaFw0yNTA3MTQwMzA4MTNaMDMxMTAvBgNV BAMTKDRCNzlFMzk0REIwQjgxNjBGNDdDOTM3MkMzMUZCQTEyNDFCMzE4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQLAZajbZV51u/mCQ1k0ENJVt eoQIDGCR0nSRzwrzZd/xRdjDV6jVnWMiYu8Ky7F8JUfUkB9OJzPSJmTUaCoCRnv1 RiUtP0JCSFOguWFg35pSE4H9TYH2M31uGhDLB7hFz3Goexs2PzQH9K3bhB7rpjdR CQ70km4o/SObdSNOTvFqC+5ETGNpvCp9VT5vMwGUGXSLmRojEplWHrNGrZ0sUJ0Z gnoqAKvmunp606iYNU11I56MOck9Jk5tK297zW46THYPJr31pFE0K+jDFhcO9dIL uaEYZ0yI8WwtYgMOX+e1KwAlkr+Xh+o5K3hqJg+HSTXqqVUTxA2ZyrjKvkIJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUS3njlNsLgWD0fJNywx+6EkGzGNcwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZGU5MzZiLTUzY2YtNGIwOC1i NWY3LTJiOTBkZTIxZmU5NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5aVMA0GCSqG SIb3DQEBCwUAA4IBAQAdteZGeOvldu4adjR1G14bC9uOCZ7MTZzu6MsXUsMQDbRf jrtcdNF+zh1K55lyDTrgfMuGjDJuSxiU+9eujArnHR2NklfZ8a3AaJLVgsM95fhQ moj4tJy2UdKgYyPhtnBYNuB37XAJWXKX9lSkPHj+FC7TlS9fj3OkkYNF9Ij4yh+a KQO6b6GO8a+7PCxOneuBFe8YcE068BmP/9AB2nkx88pfqArT8ZYZAwrJpTQ7+3Sm +CTEaDdiLet60RlVPaRCctuAZTCNCfOkWrn3aS2GgpM7WqQsH+6jdcakigPLXcdn tzoUqWjl1H2ysR0Bpd37csS4ey1q0KLhSegXg4Ks -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org