$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa File: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (raw, json) Hash identifier: wSYZIy/Q8ccBsJqK4uM7q0oCtCAJQMxXc4OdmK06W68= Subject key identifier: 99:5E:5D:A8:70:76:52:C7:94:D6:95:C7:BD:3D:19:CA:CE:F4:14:1F Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 496B07D16A363F6AD45A973AA0490DFD016E67BF Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa Signing time: Fri 02 Aug 2024 18:00:02 +0000 ROA not before: Fri 02 Aug 2024 17:55:02 +0000 ROA not after: Fri 01 Aug 2025 18:00:02 +0000 asID: 149976 IP address blocks: 103.157.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6b:07:d1:6a:36:3f:6a:d4:5a:97:3a:a0:49:0d:fd:01:6e:67:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Aug 2 17:55:02 2024 GMT Not After : Aug 1 18:00:02 2025 GMT Subject: CN=995E5DA8707652C794D695C7BD3D19CACEF4141F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:ee:23:83:e8:0d:45:2c:b8:cd:e0:a0:14: 2e:e2:8b:b9:27:14:62:d9:de:0f:c5:c7:5d:46:ab: f1:ec:f6:be:e3:0e:d7:4b:ac:75:03:6c:e1:f9:74: f8:a6:78:7b:dd:83:5b:f4:39:75:8e:bd:bc:ff:91: 00:5e:9d:1e:95:90:7d:be:c6:ad:27:13:85:50:08: 1c:80:cb:df:08:35:74:b0:50:3a:9f:2e:37:92:87: 33:ce:d7:f9:f3:36:fa:8c:f9:f5:96:f3:fb:00:41: b7:ee:65:21:3a:80:11:89:2d:2b:77:0d:3a:3a:ae: e8:39:c3:04:d8:ed:26:65:4e:0b:fe:c6:e7:69:fa: 7f:be:72:47:f2:71:77:58:b0:19:00:b1:9d:ac:28: e3:82:1e:92:9b:c1:f5:ea:c0:51:3f:b6:82:92:58: a8:20:0b:50:48:b8:7d:56:66:de:c4:40:86:25:89: 3d:12:9d:82:12:30:08:80:25:ea:3a:0d:46:ac:8b: 82:8f:96:44:2d:11:55:6c:8e:1a:9b:6d:c1:45:fa: 8e:00:0c:c6:82:c7:33:39:9f:79:bc:91:49:bc:e6: 41:25:56:06:6d:62:00:ca:ec:66:04:c6:1c:21:8d: 88:cb:01:6b:2b:d4:2d:a0:0e:7c:50:01:bf:58:a6: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5E:5D:A8:70:76:52:C7:94:D6:95:C7:BD:3D:19:CA:CE:F4:14:1F X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.63.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:8f:1d:13:9d:7d:81:e1:c1:7b:7e:62:89:8c:8b:5e:7c:07: 73:dd:4e:d4:e5:ef:3a:55:ff:96:12:1a:c0:68:06:95:ab:2e: 84:e9:66:bb:d1:89:93:1d:b9:9d:fd:25:1a:b1:73:55:02:b8: da:76:41:2b:7e:cb:83:e1:21:21:8a:13:ed:18:81:21:2c:22: b2:f7:31:2b:ac:d0:2e:87:d2:b4:e4:a0:8b:8a:59:9e:a4:c5: ce:65:68:dd:38:53:74:90:93:9a:b6:7a:19:5a:87:0d:0b:c1: 86:3d:e2:fc:54:52:6e:da:f0:a9:df:dc:6b:f0:c3:7e:9c:cc: 43:84:9e:9d:48:17:6c:e9:20:36:77:a3:72:17:8f:05:7f:a5: 28:5b:da:e0:0e:76:75:02:31:c6:61:e2:56:78:77:d2:f1:88: aa:7a:f7:e0:01:60:f0:e9:b5:25:3f:87:b1:16:17:86:c5:f2: e2:00:ba:eb:66:12:d1:3d:a5:c7:8b:44:6e:65:0d:67:63:c1: 38:da:7b:9a:ac:82:da:25:af:dc:f9:37:57:bb:1d:15:95:b9: 67:52:7e:34:9c:a0:85:c2:73:7c:32:1f:0e:11:f6:d8:9b:77: 03:88:d1:33:36:e5:58:71:86:25:83:a9:a5:94:8e:3d:12:88: 6b:2f:28:5e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSWsH0Wo2P2rUWpc6oEkN/QFuZ78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNDA4MDIxNzU1MDJaFw0yNTA4MDExODAwMDJaMDMxMTAvBgNV BAMTKDk5NUU1REE4NzA3NjUyQzc5NEQ2OTVDN0JEM0QxOUNBQ0VGNDE0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kO4jg+gNRSy4zeCgFC7ii7kn FGLZ3g/Fx11Gq/Hs9r7jDtdLrHUDbOH5dPimeHvdg1v0OXWOvbz/kQBenR6VkH2+ xq0nE4VQCByAy98INXSwUDqfLjeShzPO1/nzNvqM+fWW8/sAQbfuZSE6gBGJLSt3 DTo6rug5wwTY7SZlTgv+xudp+n++ckfycXdYsBkAsZ2sKOOCHpKbwfXqwFE/toKS WKggC1BIuH1WZt7EQIYliT0SnYISMAiAJeo6DUasi4KPlkQtEVVsjhqbbcFF+o4A DMaCxzM5n3m8kUm85kElVgZtYgDK7GYExhwhjYjLAWsr1C2gDnxQAb9YpmR9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmV5dqHB2UseU1pXHvT0Zys70FB8wHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiZDMwNTg3LWE3Y2EtNDE5NS1h MzU5LTBjMGY2MjdhZjhkYS8wLzMxMzAzMzJlMzEzNTM3MmUzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ50/MA0GCSqG SIb3DQEBCwUAA4IBAQBqjx0TnX2B4cF7fmKJjItefAdz3U7U5e86Vf+WEhrAaAaV qy6E6Wa70YmTHbmd/SUasXNVArjadkErfsuD4SEhihPtGIEhLCKy9zErrNAuh9K0 5KCLilmepMXOZWjdOFN0kJOatnoZWocNC8GGPeL8VFJu2vCp39xr8MN+nMxDhJ6d SBds6SA2d6NyF48Ff6UoW9rgDnZ1AjHGYeJWeHfS8YiqevfgAWDw6bUlP4exFheG xfLiALrrZhLRPaXHi0RuZQ1nY8E42nuarILaJa/c+TdXux0VlblnUn40nKCFwnN8 Mh8OEfbYm3cDiNEzNuVYcYYlg6mllI49EohrLyhe -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org