$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa File: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (raw, json) Hash identifier: GaOCj9kYh7d6tsfEz6UJgMKi+nAeFQfMzv6ALo0e51A= Subject key identifier: 19:D8:E5:A0:D4:11:F4:A0:BE:07:50:A4:9C:3A:21:DE:54:F8:03:FB Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 33135B12E368A0CF97E9161A3048954EA9032A68 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa Signing time: Fri 01 Nov 2024 04:02:11 +0000 ROA not before: Fri 01 Nov 2024 03:57:11 +0000 ROA not after: Fri 31 Oct 2025 04:02:11 +0000 asID: 140396 IP address blocks: 103.150.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:13:5b:12:e3:68:a0:cf:97:e9:16:1a:30:48:95:4e:a9:03:2a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Nov 1 03:57:11 2024 GMT Not After : Oct 31 04:02:11 2025 GMT Subject: CN=19D8E5A0D411F4A0BE0750A49C3A21DE54F803FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ce:0d:13:33:59:1a:db:03:81:cb:54:72:7b: 76:6d:4d:1f:f8:0d:cb:02:36:88:fe:c3:42:17:19: a6:97:f2:1d:ab:3f:9c:ae:79:ed:6f:ba:91:d1:52: e6:49:35:99:94:72:b5:ed:eb:c0:85:c5:d2:c1:9c: 88:7a:a2:f6:97:b9:d1:f0:9c:69:2e:c0:7a:5e:5b: 3a:8a:16:87:7b:ff:40:51:77:86:ad:2e:fe:52:e0: 56:20:91:7c:d0:65:83:67:0e:66:fe:b3:e6:b3:66: 53:2e:bc:29:07:c5:9b:2e:a3:35:46:41:47:d0:ee: 8b:ca:f8:fe:14:9e:06:c9:02:4f:38:cc:a2:70:bf: 8f:14:ec:0b:26:b6:42:63:8e:13:1a:fc:97:90:98: 9a:cd:99:bf:3f:1e:b3:fa:62:22:d7:7a:a2:24:e7: a7:e3:bd:69:82:90:07:b0:2d:7c:f9:3c:97:2a:35: 67:d9:78:3d:2a:fb:31:ea:f3:50:c0:e0:76:3e:5b: 0d:e5:15:70:d9:1a:d7:79:c3:27:17:82:fa:6b:1d: 63:8d:5e:4d:02:2d:2f:e0:af:57:0d:b4:25:15:f0: 8c:de:24:ef:08:82:3d:8a:f8:b4:ff:64:6d:5a:d7: 87:c3:94:f0:72:23:d2:e2:fa:5a:fc:d8:0c:bb:69: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D8:E5:A0:D4:11:F4:A0:BE:07:50:A4:9C:3A:21:DE:54:F8:03:FB X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.174.0/24 Signature Algorithm: sha256WithRSAEncryption 20:3e:1c:f7:b9:d6:1f:da:8a:5b:f4:14:66:22:fe:73:56:01: bb:aa:f0:27:fc:e4:49:77:e7:e7:df:67:17:22:44:81:6a:6c: 02:ec:08:45:cf:c7:01:f2:a9:88:d6:80:e7:7b:b4:50:4b:2e: c4:ad:09:9d:b1:05:4a:42:e5:93:3e:f4:ed:aa:85:7f:4e:c5: eb:66:8e:b7:23:ea:62:c8:36:69:7f:3b:15:c2:99:4f:b9:04: ae:c3:fe:5a:8e:25:b0:f4:cd:de:6e:ef:09:59:9b:53:76:60: f1:7d:22:af:69:49:6f:fb:27:3d:22:83:f1:6f:4d:5f:00:6f: 5a:98:88:2d:01:72:26:90:88:42:f9:62:69:23:04:95:8d:b4: e0:7e:94:7a:a9:5b:dc:2a:49:40:05:8b:9d:da:4b:05:39:0c: c0:85:0e:95:0f:fb:82:03:4f:ca:5f:08:37:97:d2:dd:1e:61: 9e:f9:0d:46:cc:d7:a4:96:c1:6d:37:49:dc:bf:0f:55:5b:d8: 3c:1c:2f:6d:13:e3:b4:f0:f4:d1:f8:75:5a:34:5c:bb:e4:f5: 7a:08:8c:81:4d:5a:a1:d0:86:c7:d8:a6:69:c7:61:ea:69:7d: eb:18:62:21:cb:3b:16:34:90:1c:f4:15:cf:5d:f0:ce:eb:19: bd:67:26:96 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMxNbEuNooM+X6RYaMEiVTqkDKmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNDExMDEwMzU3MTFaFw0yNTEwMzEwNDAyMTFaMDMxMTAvBgNV BAMTKDE5RDhFNUEwRDQxMUY0QTBCRTA3NTBBNDlDM0EyMURFNTRGODAzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmzg0TM1ka2wOBy1Rye3ZtTR/4 DcsCNoj+w0IXGaaX8h2rP5yuee1vupHRUuZJNZmUcrXt68CFxdLBnIh6ovaXudHw nGkuwHpeWzqKFod7/0BRd4atLv5S4FYgkXzQZYNnDmb+s+azZlMuvCkHxZsuozVG QUfQ7ovK+P4UngbJAk84zKJwv48U7AsmtkJjjhMa/JeQmJrNmb8/HrP6YiLXeqIk 56fjvWmCkAewLXz5PJcqNWfZeD0q+zHq81DA4HY+Ww3lFXDZGtd5wycXgvprHWON Xk0CLS/gr1cNtCUV8IzeJO8Igj2K+LT/ZG1a14fDlPByI9Li+lr82Ay7aW8HAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUGdjloNQR9KC+B1CknDoh3lT4A/swHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNWVjZDc0LTQ0MjQtNGQ0MC05 NmExLTdmZDc2MzAxMTk0NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlq4wDQYJ KoZIhvcNAQELBQADggEBACA+HPe51h/ailv0FGYi/nNWAbuq8Cf85El35+ffZxci RIFqbALsCEXPxwHyqYjWgOd7tFBLLsStCZ2xBUpC5ZM+9O2qhX9Oxetmjrcj6mLI Nml/OxXCmU+5BK7D/lqOJbD0zd5u7wlZm1N2YPF9Iq9pSW/7Jz0ig/FvTV8Ab1qY iC0BciaQiEL5YmkjBJWNtOB+lHqpW9wqSUAFi53aSwU5DMCFDpUP+4IDT8pfCDeX 0t0eYZ75DUbM16SWwW03Sdy/D1Vb2DwcL20T47Tw9NH4dVo0XLvk9XoIjIFNWqHQ hsfYpmnHYeppfesYYiHLOxY0kBz0Fc9d8M7rGb1nJpY= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org