$ rpki-client -vvf repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa File: 3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa (raw, json) Hash identifier: BSCu8jzBWz84TbkTvBUBIzsfpiF2/VwNGoSbaGrTA9k= Subject key identifier: 6A:CC:C7:E6:A8:47:6B:FD:78:4A:4A:E0:25:42:0A:12:B8:CA:2C:15 Certificate issuer: /CN=26ED4619223C6097B33621E429F958020B6F4624 Certificate serial: 3C260FE172029173C9020C701E6E5CF3634B99E9 Authority key identifier: 26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa Signing time: Sun 13 Aug 2023 12:11:14 +0000 ROA not before: Sun 13 Aug 2023 12:06:14 +0000 ROA not after: Sun 11 Aug 2024 12:11:14 +0000 asID: 149973 IP address blocks: 103.149.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.crl rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 02:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:26:0f:e1:72:02:91:73:c9:02:0c:70:1e:6e:5c:f3:63:4b:99:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ED4619223C6097B33621E429F958020B6F4624 Validity Not Before: Aug 13 12:06:14 2023 GMT Not After : Aug 11 12:11:14 2024 GMT Subject: CN=6ACCC7E6A8476BFD784A4AE025420A12B8CA2C15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4e:9e:ba:e7:67:3d:07:ff:0e:7b:86:97:20: 4e:b7:76:f6:3b:f3:08:97:4f:1b:3f:84:27:79:56: 98:50:a1:c1:79:bc:f9:e5:bd:b5:0f:d3:4a:fb:8a: 30:e6:ad:de:3a:ac:22:ad:82:03:38:eb:cb:8d:97: 51:6a:86:d8:45:2d:1a:c9:28:39:36:d4:40:a4:30: 33:fa:66:ee:3a:9b:72:46:ac:e7:a6:79:06:1e:91: a3:7b:a1:de:11:68:0c:4c:30:80:53:79:72:f1:c2: 75:08:83:4b:4e:99:24:0d:78:c6:d6:47:1b:df:e3: 90:ef:cb:79:e2:11:8f:be:99:5b:1d:b0:ec:0f:b3: 97:a7:e9:3e:bb:29:70:c0:60:f2:4e:4c:d6:8c:b9: ff:a9:18:58:71:b9:0b:77:9e:34:49:73:08:16:66: 28:9e:37:b5:4f:f1:5d:26:60:b6:64:2a:ec:96:e3: e7:a3:3b:ef:01:1f:96:28:99:f7:d3:e9:55:60:b1: a8:a8:d0:f2:d7:b8:b3:f7:2a:62:98:9b:7e:12:6d: 45:2c:dc:10:d0:1a:ac:fd:c0:8b:82:4e:9e:e9:20: 41:3d:64:69:59:ee:0f:9c:c5:53:a7:1c:b8:78:67: 8b:29:20:05:97:20:03:99:d2:48:72:45:6a:dd:ce: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CC:C7:E6:A8:47:6B:FD:78:4A:4A:E0:25:42:0A:12:B8:CA:2C:15 X509v3 Authority Key Identifier: keyid:26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.228.0/23 Signature Algorithm: sha256WithRSAEncryption 89:92:f3:6d:5d:25:c9:02:37:24:fd:34:b6:8a:ec:3b:96:29: 1f:f9:6c:dc:db:ac:86:af:b4:5c:6e:02:60:76:8e:a9:a1:2c: 43:ad:98:4c:d3:c1:c3:cc:cb:4a:50:8f:71:b0:e3:42:1e:bf: 9f:3e:d9:62:e1:29:c7:39:80:96:a6:28:11:f0:83:da:3c:86: c0:62:ee:a1:a4:1a:4d:73:cc:23:29:53:00:e0:09:17:11:5a: e1:74:8e:a9:dc:82:1f:15:25:45:7c:2f:01:41:8b:04:13:55: b6:49:06:10:ff:29:1d:71:a9:10:03:0b:c7:d7:ab:5d:ac:06: 7a:5e:05:d1:9b:ab:2d:9b:00:b4:c3:a2:91:66:bf:b5:35:8c: d3:97:99:6f:b8:a2:2e:e2:7c:50:66:3e:ce:89:93:af:5c:a4: d2:7e:c5:82:10:2b:b7:c3:72:fa:82:7d:2b:dc:29:27:fd:b8: 19:dc:03:4f:a4:17:0d:ef:a2:45:c1:36:28:36:dd:7d:a6:ab: a5:28:9d:79:39:ee:8e:6a:1e:24:8e:b7:24:3c:fb:53:af:ac: 9c:49:c2:d0:fc:7f:b5:85:70:c1:94:37:e8:d5:0d:2a:34:af: 1b:ff:9b:a9:2f:c7:4c:a1:19:a0:d3:3c:35:77:5a:b1:92:83: ba:fc:8a:bd -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPCYP4XICkXPJAgxwHm5c82NLmekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZFRDQ2MTkyMjNDNjA5N0IzMzYyMUU0MjlGOTU4MDIw QjZGNDYyNDAeFw0yMzA4MTMxMjA2MTRaFw0yNDA4MTExMjExMTRaMDMxMTAvBgNV BAMTKDZBQ0NDN0U2QTg0NzZCRkQ3ODRBNEFFMDI1NDIwQTEyQjhDQTJDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeTp6652c9B/8Oe4aXIE63dvY7 8wiXTxs/hCd5VphQocF5vPnlvbUP00r7ijDmrd46rCKtggM468uNl1FqhthFLRrJ KDk21ECkMDP6Zu46m3JGrOemeQYekaN7od4RaAxMMIBTeXLxwnUIg0tOmSQNeMbW Rxvf45Dvy3niEY++mVsdsOwPs5en6T67KXDAYPJOTNaMuf+pGFhxuQt3njRJcwgW ZiieN7VP8V0mYLZkKuyW4+ejO+8BH5YomffT6VVgsaio0PLXuLP3KmKYm34SbUUs 3BDQGqz9wIuCTp7pIEE9ZGlZ7g+cxVOnHLh4Z4spIAWXIAOZ0khyRWrdzp8DAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUaszH5qhHa/14SkrgJUIKErjKLBUwHwYDVR0j BBgwFoAUJu1GGSI8YJezNiHkKflYAgtvRiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Yzc4NDQwOS0zZjgyLTQ0YzEtYTE0ZS02ODFkZjUxYjAyMzQvMC8yNkVENDYxOTIy M0M2MDk3QjMzNjIxRTQyOUY5NTgwMjBCNkY0NjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZFRDQ2MTkyMjNDNjA5N0IzMzYyMUU0MjlGOTU4MDIwQjZG NDYyNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNzg0NDA5LTNmODItNDRjMS1h MTRlLTY4MWRmNTFiMDIzNC8wLzMxMzAzMzJlMzEzNDM5MmUzMjMyMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnleQwDQYJ KoZIhvcNAQELBQADggEBAImS821dJckCNyT9NLaK7DuWKR/5bNzbrIavtFxuAmB2 jqmhLEOtmEzTwcPMy0pQj3Gw40Iev58+2WLhKcc5gJamKBHwg9o8hsBi7qGkGk1z zCMpUwDgCRcRWuF0jqncgh8VJUV8LwFBiwQTVbZJBhD/KR1xqRADC8fXq12sBnpe BdGbqy2bALTDopFmv7U1jNOXmW+4oi7ifFBmPs6Jk69cpNJ+xYIQK7fDcvqCfSvc KSf9uBncA0+kFw3vokXBNig23X2mq6UonXk57o5qHiSOtyQ8+1OvrJxJwtD8f7WF cMGUN+jVDSo0rxv/m6kvx0yhGaDTPDV3WrGSg7r8ir0= -----END CERTIFICATE-----Generated at Sat Jun 22 00:19:01 2024 by rpki-client on console-ams.rpki-client.org