$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa File: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (raw, json) Hash identifier: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs= Subject key identifier: 13:DC:67:8D:90:7D:9B:CF:2F:23:FC:AE:16:4D:58:7C:07:1F:8D:AA Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 18A624FF9DA352842E1154A73C830D055CE436F9 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa Signing time: Mon 11 Nov 2024 02:58:06 +0000 ROA not before: Mon 11 Nov 2024 02:53:06 +0000 ROA not after: Mon 10 Nov 2025 02:58:06 +0000 asID: 4787 IP address blocks: 103.148.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a6:24:ff:9d:a3:52:84:2e:11:54:a7:3c:83:0d:05:5c:e4:36:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Nov 11 02:53:06 2024 GMT Not After : Nov 10 02:58:06 2025 GMT Subject: CN=13DC678D907D9BCF2F23FCAE164D587C071F8DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:ac:f7:be:64:a2:cb:fa:e5:c9:c6:f2:0d: 91:e2:bf:20:a1:99:97:21:93:9e:ab:06:33:7e:c6: c6:01:72:31:7a:8f:6f:6f:ec:82:15:0b:a7:d9:7c: a7:d6:a6:bd:dc:b3:b6:b5:a0:cc:0a:f8:be:e1:72: 48:ee:22:52:05:79:cc:11:0e:b6:22:ac:24:5e:cc: e3:ba:2e:fa:3f:f8:53:09:47:2f:46:e2:6a:d7:3b: a5:e0:b2:72:c9:43:4e:49:63:41:5f:4a:df:22:c0: f6:d1:0b:3a:12:13:0b:c0:dc:e4:b6:69:4c:95:d3: 99:e3:30:3a:a9:de:a1:7a:8d:c5:9f:40:6a:18:47: 17:0d:75:71:e3:48:b9:0e:7a:b8:2c:48:03:03:2c: 07:7c:98:ff:f9:13:eb:bc:9d:3b:24:ed:cb:b9:eb: 46:b8:3a:81:68:70:34:58:eb:14:1b:36:af:60:c8: d5:d2:8e:13:09:0e:69:3a:82:b2:bc:96:1a:d9:b6: 03:86:35:e1:ad:60:1f:8e:95:3f:14:2d:bd:14:17: 8f:0a:b3:d6:b3:1b:a7:7d:29:9d:ea:c8:5b:d6:e4: 19:0f:aa:25:2f:a9:b1:17:21:09:b4:a2:1c:fb:bb: 0f:c6:f8:6e:3a:e6:ff:4c:2e:cd:3c:64:5e:e7:88: 81:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DC:67:8D:90:7D:9B:CF:2F:23:FC:AE:16:4D:58:7C:07:1F:8D:AA X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.199.0/24 Signature Algorithm: sha256WithRSAEncryption 46:c6:38:de:be:3a:66:f2:54:cf:5f:81:80:94:30:9a:3d:e2: 64:dd:f4:03:14:47:03:99:10:70:54:39:b4:bd:0b:df:05:df: 62:a8:75:72:33:e2:df:03:5f:5a:6e:1f:cc:93:fb:35:2a:8d: 22:1b:d2:8d:72:be:4a:fc:49:48:3f:6e:51:53:e2:05:cb:c5: 60:a2:bb:31:35:c3:62:4c:6a:ad:90:99:ea:f4:fa:af:bf:6b: dc:21:d0:dd:ce:f6:0d:39:b3:02:89:87:19:25:76:7e:5c:20: e3:dc:8f:25:6a:de:71:bb:25:33:8c:7f:5e:c6:64:56:34:b2: 69:2a:fe:0f:56:43:fa:73:22:d2:8f:78:13:ff:99:a4:e6:a4: 76:48:0f:85:0a:51:53:d4:93:0d:77:6a:83:b3:d6:15:e7:c3: fd:26:09:e7:69:71:12:66:66:1c:dd:e1:be:94:2f:d3:d4:c6: 1f:9b:81:f7:a8:fe:77:0f:8c:b4:33:6c:0b:3c:11:f9:31:01: 78:4b:ee:88:82:f7:7e:d2:07:29:1a:6b:41:f8:5e:22:89:27: ac:97:2d:cb:3a:23:f2:2a:b2:99:00:61:ef:69:e2:d6:30:20: d8:f8:fb:79:69:5b:fc:6b:1c:99:4c:81:9d:16:28:25:d3:23: 11:2c:c6:59 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGKYk/52jUoQuEVSnPIMNBVzkNvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNDExMTEwMjUzMDZaFw0yNTExMTAwMjU4MDZaMDMxMTAvBgNV BAMTKDEzREM2NzhEOTA3RDlCQ0YyRjIzRkNBRTE2NEQ1ODdDMDcxRjhEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ9Kz3vmSiy/rlycbyDZHivyCh mZchk56rBjN+xsYBcjF6j29v7IIVC6fZfKfWpr3cs7a1oMwK+L7hckjuIlIFecwR DrYirCRezOO6Lvo/+FMJRy9G4mrXO6XgsnLJQ05JY0FfSt8iwPbRCzoSEwvA3OS2 aUyV05njMDqp3qF6jcWfQGoYRxcNdXHjSLkOergsSAMDLAd8mP/5E+u8nTsk7cu5 60a4OoFocDRY6xQbNq9gyNXSjhMJDmk6grK8lhrZtgOGNeGtYB+OlT8ULb0UF48K s9azG6d9KZ3qyFvW5BkPqiUvqbEXIQm0ohz7uw/G+G465v9MLs08ZF7niIEJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUE9xnjZB9m88vI/yuFk1YfAcfjaowHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNiLTFmNDAtNGMwMy1i YzM1LWY2OTYxNTE2ZDRkOS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM5MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeUxzANBgkqhkiG 9w0BAQsFAAOCAQEARsY43r46ZvJUz1+BgJQwmj3iZN30AxRHA5kQcFQ5tL0L3wXf Yqh1cjPi3wNfWm4fzJP7NSqNIhvSjXK+SvxJSD9uUVPiBcvFYKK7MTXDYkxqrZCZ 6vT6r79r3CHQ3c72DTmzAomHGSV2flwg49yPJWrecbslM4x/XsZkVjSyaSr+D1ZD +nMi0o94E/+ZpOakdkgPhQpRU9STDXdqg7PWFefD/SYJ52lxEmZmHN3hvpQv09TG H5uB96j+dw+MtDNsCzwR+TEBeEvuiIL3ftIHKRprQfheIoknrJctyzoj8iqymQBh 72ni1jAg2Pj7eWlb/GscmUyBnRYoJdMjESzGWQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org