$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa File: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (raw, json) Hash identifier: MUfRn9lbrp81WMx09UFWCA0kG2/2E+bxpD3Uyi4FCjU= Subject key identifier: DE:52:70:34:27:77:CE:A1:89:4A:3E:5D:27:F5:9B:01:0A:D8:09:5E Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 3ABCC7F703B2267CBB2B9B723F215FAED5BD173F Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa Signing time: Wed 21 Aug 2024 05:00:00 +0000 ROA not before: Wed 21 Aug 2024 04:55:00 +0000 ROA not after: Wed 20 Aug 2025 05:00:00 +0000 asID: 140407 IP address blocks: 103.122.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:bc:c7:f7:03:b2:26:7c:bb:2b:9b:72:3f:21:5f:ae:d5:bd:17:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Aug 21 04:55:00 2024 GMT Not After : Aug 20 05:00:00 2025 GMT Subject: CN=DE5270342777CEA1894A3E5D27F59B010AD8095E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:7d:34:b5:0a:bb:25:fa:4a:8d:d4:6b:e6: a3:60:50:bc:33:ec:17:12:0f:ec:34:37:44:60:1a: bb:dc:05:da:70:80:b4:27:13:e0:c0:bd:9d:88:2a: 4e:43:a5:73:bd:9b:66:18:76:83:9c:f0:c5:d1:08: f9:5f:ee:69:0d:e7:09:33:c1:3c:e8:69:1a:24:0b: a5:cd:8e:46:35:4a:25:59:01:46:88:70:c6:8b:46: 3a:d0:f8:59:e3:40:b2:cc:f1:7f:ca:00:77:6c:c8: f2:2f:19:1e:d6:cb:82:34:23:6d:cb:9e:67:3c:3d: e0:4f:b5:93:9d:4a:6d:ff:1f:1a:9e:50:94:12:32: e4:e1:8e:09:82:a7:3c:8a:b3:2b:29:8a:0f:2f:c9: 12:f4:28:d1:7b:ee:2d:24:3f:03:df:09:c8:34:a2: 12:18:5e:78:7b:a1:ea:95:84:1f:ff:72:47:0c:b9: da:2d:ba:09:d5:97:7d:ff:15:8a:8f:fd:33:ec:7c: ee:66:7d:31:fb:5a:24:d3:ad:71:93:b8:29:b9:e9: ca:21:7b:10:78:4c:c5:c5:a7:60:48:41:9d:de:06: ad:46:b3:95:d9:af:1f:e4:16:1f:c5:cb:3c:cb:9a: e8:2c:5a:f1:60:74:5a:6f:0c:ab:4d:2b:8a:e7:93: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:52:70:34:27:77:CE:A1:89:4A:3E:5D:27:F5:9B:01:0A:D8:09:5E X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.153.0/24 Signature Algorithm: sha256WithRSAEncryption 83:77:52:a1:9f:4b:c7:c2:54:f5:ec:62:f1:af:90:0f:fb:90: 69:d2:91:74:44:3e:d7:82:71:8b:2c:0b:76:52:a1:e1:47:36: 55:b6:74:36:fe:6b:36:71:5f:8b:49:fa:7a:9b:0e:74:d8:e2: 08:fc:46:6d:53:b8:7b:1d:e2:88:1e:68:45:8d:27:38:ac:f0: 2b:40:e9:1b:28:f8:6b:97:a0:d6:78:3f:da:f8:82:f0:a6:5d: e8:97:ea:96:f8:04:ae:bf:ab:18:e5:02:45:a7:fd:82:31:fc: 98:6a:df:ef:a9:36:2e:d9:d9:02:51:55:d3:76:31:48:da:cd: cb:aa:4e:67:bd:f0:5c:3a:86:f6:7e:65:5d:cb:c2:0d:4f:42: 2f:05:77:23:07:9c:4b:a2:32:f0:85:2d:4b:00:f9:46:49:0f: 15:a7:8c:52:6d:e5:bf:11:41:81:31:05:99:5d:7a:83:d4:e0: f1:f7:23:fc:a3:a8:1f:31:46:8b:ed:2e:83:8c:65:77:be:e5: 89:67:36:dd:da:64:61:6f:e6:4c:22:32:7b:67:35:05:47:de: 01:a4:57:40:60:3a:28:c2:49:9c:22:6e:8f:9e:2f:db:ca:22: 22:60:31:d5:04:04:b7:0b:cb:8c:45:d5:5f:d0:1a:d3:c6:31: e1:ab:04:88 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOrzH9wOyJny7K5tyPyFfrtW9Fz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNDA4MjEwNDU1MDBaFw0yNTA4MjAwNTAwMDBaMDMxMTAvBgNV BAMTKERFNTI3MDM0Mjc3N0NFQTE4OTRBM0U1RDI3RjU5QjAxMEFEODA5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnH00tQq7JfpKjdRr5qNgULwz 7BcSD+w0N0RgGrvcBdpwgLQnE+DAvZ2IKk5DpXO9m2YYdoOc8MXRCPlf7mkN5wkz wTzoaRokC6XNjkY1SiVZAUaIcMaLRjrQ+FnjQLLM8X/KAHdsyPIvGR7Wy4I0I23L nmc8PeBPtZOdSm3/HxqeUJQSMuThjgmCpzyKsyspig8vyRL0KNF77i0kPwPfCcg0 ohIYXnh7oeqVhB//ckcMudotugnVl33/FYqP/TPsfO5mfTH7WiTTrXGTuCm56coh exB4TMXFp2BIQZ3eBq1Gs5XZrx/kFh/FyzzLmugsWvFgdFpvDKtNK4rnkwKxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU3lJwNCd3zqGJSj5dJ/WbAQrYCV4wHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyMjk3ODFhLThhYzktNDQ1Mi1i MjVmLTU0ZTdlZGY3ZDRhNC8wLzMxMzAzMzJlMzEzMjMyMmUzMTM1MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMwMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnepkwDQYJ KoZIhvcNAQELBQADggEBAIN3UqGfS8fCVPXsYvGvkA/7kGnSkXREPteCcYssC3ZS oeFHNlW2dDb+azZxX4tJ+nqbDnTY4gj8Rm1TuHsd4ogeaEWNJzis8CtA6Rso+GuX oNZ4P9r4gvCmXeiX6pb4BK6/qxjlAkWn/YIx/Jhq3++pNi7Z2QJRVdN2MUjazcuq Tme98Fw6hvZ+ZV3Lwg1PQi8FdyMHnEuiMvCFLUsA+UZJDxWnjFJt5b8RQYExBZld eoPU4PH3I/yjqB8xRovtLoOMZXe+5YlnNt3aZGFv5kwiMntnNQVH3gGkV0BgOijC SZwibo+eL9vKIiJgMdUEBLcLy4xF1V/QGtPGMeGrBIg= -----END CERTIFICATE-----Generated at Mon Nov 25 00:59:33 2024 by rpki-client on console-ams.rpki-client.org