$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa File: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (raw, json) Hash identifier: uAd0JDcy4hpWuoEBSRUvaHCaFXVpe2sxWabbA6bZmhw= Subject key identifier: 7B:B1:2B:2F:DD:76:DE:C4:5A:A9:CB:04:FA:26:F7:F3:59:CE:25:49 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 4FF33617ECFA87830A998EBCE93CBA280323F3D9 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa Signing time: Wed 21 Aug 2024 06:00:00 +0000 ROA not before: Wed 21 Aug 2024 05:55:00 +0000 ROA not after: Wed 20 Aug 2025 06:00:00 +0000 asID: 140407 IP address blocks: 103.122.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f3:36:17:ec:fa:87:83:0a:99:8e:bc:e9:3c:ba:28:03:23:f3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Aug 21 05:55:00 2024 GMT Not After : Aug 20 06:00:00 2025 GMT Subject: CN=7BB12B2FDD76DEC45AA9CB04FA26F7F359CE2549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:9a:5c:65:c8:b7:8f:32:b9:ba:f7:ca:6b: 55:fc:71:50:d9:17:70:15:62:ac:03:4b:a1:3c:7a: e2:69:7d:ce:2f:8c:2f:1d:70:fa:52:93:ea:57:6d: 30:0e:04:59:5a:98:c8:60:3c:9e:5d:7f:2c:77:fe: b0:7b:d0:18:e9:a9:0c:9d:45:f5:a0:f3:dc:c8:a1: 07:28:27:69:02:45:25:00:07:a7:f5:47:d9:ff:09: 4f:9a:67:9e:5c:2b:e9:88:a4:29:be:a1:f9:c6:25: f8:a1:5f:6d:93:26:0d:af:e4:bf:1f:6b:82:50:43: 4e:ef:b9:80:68:4a:13:ae:05:b9:92:fe:1f:e1:d1: 80:34:4b:a9:3d:43:5d:1d:79:e9:52:5d:19:93:f6: 08:bc:a7:f4:79:16:c2:c2:c0:9d:f7:07:08:8a:cf: 9f:53:ef:c5:39:a6:96:f7:ad:68:48:02:7f:a4:83: 61:66:07:89:53:42:fd:dc:b1:1b:7a:8e:77:fd:98: 6d:98:7c:60:2f:68:53:75:e4:65:78:9a:03:d2:6a: 78:e3:1a:24:d9:aa:6e:cb:4d:d0:ff:32:a4:41:89: 75:ba:c1:7f:13:71:5c:b4:a2:0e:c9:38:d2:db:1a: 9c:b2:8d:e5:9e:ef:cc:7a:e3:6a:0d:88:a2:d3:9d: a0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B1:2B:2F:DD:76:DE:C4:5A:A9:CB:04:FA:26:F7:F3:59:CE:25:49 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.152.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:2d:fb:58:ca:c8:a9:bc:83:b9:f4:36:c2:e7:2e:90:d8:34: ad:97:ec:bb:ee:f2:7f:97:4b:61:88:90:e8:44:8d:0f:53:18: 12:77:6f:af:9a:2a:d1:e8:23:cb:51:77:76:34:0e:3d:10:99: 3d:2f:13:ba:ca:85:a3:67:a9:cb:c4:c0:fa:ea:a4:1c:98:43: 62:fc:46:88:7e:2a:0c:21:c0:04:91:61:50:5f:bc:72:10:64: 7e:d8:07:15:57:9a:9a:1c:22:cd:f7:bb:a3:3e:6b:0b:97:a8: f2:a1:39:bf:d7:ba:2c:a3:86:87:e9:88:49:bd:a6:7e:c9:10: a4:ee:eb:36:36:37:07:13:e8:7e:ec:b9:11:2c:81:4e:b2:e0: df:38:d4:1a:45:87:7a:46:84:74:7e:b6:60:72:5e:be:86:8c: 46:de:74:63:61:cc:80:6f:ee:7d:b2:47:91:6c:a9:22:77:ed: 9b:fb:2e:99:14:b7:be:b5:aa:e4:9c:17:98:c0:b4:7a:a7:52: 55:22:a5:d2:19:06:3c:26:4b:7f:f5:93:cf:50:65:89:12:5d: b6:24:6a:a3:a4:a3:57:df:c3:95:10:15:f0:01:7b:c9:be:af: 7e:7b:43:7a:2e:5e:1a:43:cd:6c:84:5a:e8:5e:69:0b:55:8e: 25:53:d2:1a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUT/M2F+z6h4MKmY686Ty6KAMj89kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNDA4MjEwNTU1MDBaFw0yNTA4MjAwNjAwMDBaMDMxMTAvBgNV BAMTKDdCQjEyQjJGREQ3NkRFQzQ1QUE5Q0IwNEZBMjZGN0YzNTlDRTI1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGJpcZci3jzK5uvfKa1X8cVDZ F3AVYqwDS6E8euJpfc4vjC8dcPpSk+pXbTAOBFlamMhgPJ5dfyx3/rB70BjpqQyd RfWg89zIoQcoJ2kCRSUAB6f1R9n/CU+aZ55cK+mIpCm+ofnGJfihX22TJg2v5L8f a4JQQ07vuYBoShOuBbmS/h/h0YA0S6k9Q10deelSXRmT9gi8p/R5FsLCwJ33BwiK z59T78U5ppb3rWhIAn+kg2FmB4lTQv3csRt6jnf9mG2YfGAvaFN15GV4mgPSanjj GiTZqm7LTdD/MqRBiXW6wX8TcVy0og7JONLbGpyyjeWe78x642oNiKLTnaAlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUe7ErL9123sRaqcsE+ib381nOJUkwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyMjk3ODFhLThhYzktNDQ1Mi1i MjVmLTU0ZTdlZGY3ZDRhNC8wLzMxMzAzMzJlMzEzMjMyMmUzMTM1MzIyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMTM0MzAzNDMwMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnepgwDQYJ KoZIhvcNAQELBQADggEBAF8t+1jKyKm8g7n0NsLnLpDYNK2X7Lvu8n+XS2GIkOhE jQ9TGBJ3b6+aKtHoI8tRd3Y0Dj0QmT0vE7rKhaNnqcvEwPrqpByYQ2L8Roh+Kgwh wASRYVBfvHIQZH7YBxVXmpocIs33u6M+awuXqPKhOb/XuiyjhofpiEm9pn7JEKTu 6zY2NwcT6H7suREsgU6y4N841BpFh3pGhHR+tmByXr6GjEbedGNhzIBv7n2yR5Fs qSJ37Zv7LpkUt761quScF5jAtHqnUlUipdIZBjwmS3/1k89QZYkSXbYkaqOko1ff w5UQFfABe8m+r357Q3ouXhpDzWyEWuheaQtVjiVT0ho= -----END CERTIFICATE-----Generated at Mon Nov 25 00:59:33 2024 by rpki-client on console-ams.rpki-client.org