$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa File: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (raw, json) Hash identifier: kC2qM7I8hVuuQY8d0Cgq74WXRL6h6kj3VTJz5FiMr+c= Subject key identifier: FB:4F:1A:EC:F8:8E:F9:CC:0B:3B:7A:94:2C:1A:E3:FB:FF:15:78:96 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 0DACE7BFE2CA793C4882092BB8574768D96436D7 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa Signing time: Fri 01 Nov 2024 04:02:12 +0000 ROA not before: Fri 01 Nov 2024 03:57:12 +0000 ROA not after: Fri 31 Oct 2025 04:02:12 +0000 asID: 140396 IP address blocks: 103.150.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:e7:bf:e2:ca:79:3c:48:82:09:2b:b8:57:47:68:d9:64:36:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Nov 1 03:57:12 2024 GMT Not After : Oct 31 04:02:12 2025 GMT Subject: CN=FB4F1AECF88EF9CC0B3B7A942C1AE3FBFF157896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:94:d0:2d:96:60:02:93:8f:2f:92:ae:8f: a6:41:d8:99:4f:3d:8f:61:a6:5e:a6:c0:d8:09:ae: 2c:f1:6f:51:cc:d5:0b:d8:a9:2f:f8:7f:0e:ce:76: d0:52:02:cf:e5:c4:1c:8e:9d:fc:c0:c1:97:c9:b4: f5:d6:e8:13:a0:bc:59:2b:04:ec:cf:db:98:71:e6: 1b:3f:0e:f6:07:fe:fa:f5:10:73:4a:fb:36:18:f6: 88:a6:16:53:d5:e0:3b:58:d0:a0:8d:d1:ee:ca:de: 01:19:0b:dc:c0:40:ee:00:49:14:a3:93:d8:4f:1a: 7a:8a:34:a0:86:6d:ee:8c:d1:25:08:fd:81:43:a5: 9f:fb:2d:79:73:0a:6d:ec:79:33:aa:6b:5f:2e:fb: 98:3c:d3:3b:d8:0c:dc:98:5e:ae:0b:da:02:63:7f: c6:49:af:73:8e:c4:33:44:0c:a6:b3:c8:34:58:a2: c7:b2:8d:ee:49:26:30:55:22:56:c2:0c:d7:f6:63: 2a:7c:c2:e6:b2:93:43:17:0f:09:50:17:f5:4a:0f: e6:6c:03:6e:ee:d5:d7:12:ba:75:c4:13:b9:ac:2a: bd:89:11:3a:82:85:27:3a:8d:df:09:6a:ed:fa:c8: cb:b5:e3:0a:82:c1:1c:ee:cd:37:b1:8b:40:7c:f7: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4F:1A:EC:F8:8E:F9:CC:0B:3B:7A:94:2C:1A:E3:FB:FF:15:78:96 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.175.0/24 Signature Algorithm: sha256WithRSAEncryption 05:d4:0a:28:75:84:27:f5:87:e8:46:41:30:87:de:88:31:d9: 20:4e:df:bb:9f:c6:66:6f:67:49:a4:29:5c:e5:db:03:09:13: 1b:19:b7:bb:b4:fd:71:3f:1b:ee:06:a4:d8:af:80:39:dd:f6: 89:cf:33:73:38:94:2d:25:b3:ce:63:00:92:72:e0:27:3a:1a: 32:19:65:03:f3:af:66:c5:80:7e:c1:e4:79:3d:c8:ee:f1:94: 32:1e:83:73:7a:63:b9:12:87:7b:94:6b:21:e9:ae:97:23:ac: 10:da:8c:bd:5b:e0:9e:87:94:bf:91:a5:6b:76:63:e4:70:0f: 8c:73:4e:5b:fa:bd:e5:b7:c3:71:b3:eb:a6:d8:bd:f1:c9:38: e2:3f:9a:81:33:50:37:7e:6e:95:e3:5e:71:5c:39:22:67:f3: 11:80:b9:f7:c4:5b:59:36:d5:73:5f:b5:a7:47:a9:ed:30:66: ba:d4:67:e0:9b:16:17:ae:a3:e2:24:15:62:bc:3d:2c:a1:b5: 85:08:18:86:4a:b8:2f:c6:83:ae:6c:13:55:13:d6:d5:62:2a: 80:c4:d5:82:e1:2d:b1:66:08:d8:bf:bc:0b:40:dc:fe:b8:ad: 64:69:b0:04:a5:da:9b:27:dd:d7:3a:67:d6:5c:9c:37:b3:6c: 75:bd:98:36 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDaznv+LKeTxIggkruFdHaNlkNtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNDExMDEwMzU3MTJaFw0yNTEwMzEwNDAyMTJaMDMxMTAvBgNV BAMTKEZCNEYxQUVDRjg4RUY5Q0MwQjNCN0E5NDJDMUFFM0ZCRkYxNTc4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9B5TQLZZgApOPL5Kuj6ZB2JlP PY9hpl6mwNgJrizxb1HM1QvYqS/4fw7OdtBSAs/lxByOnfzAwZfJtPXW6BOgvFkr BOzP25hx5hs/DvYH/vr1EHNK+zYY9oimFlPV4DtY0KCN0e7K3gEZC9zAQO4ASRSj k9hPGnqKNKCGbe6M0SUI/YFDpZ/7LXlzCm3seTOqa18u+5g80zvYDNyYXq4L2gJj f8ZJr3OOxDNEDKazyDRYoseyje5JJjBVIlbCDNf2Yyp8wuayk0MXDwlQF/VKD+Zs A27u1dcSunXEE7msKr2JETqChSc6jd8Jau36yMu14wqCwRzuzTexi0B895JrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU+08a7PiO+cwLO3qULBrj+/8VeJYwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNWVjZDc0LTQ0MjQtNGQ0MC05 NmExLTdmZDc2MzAxMTk0NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlq8wDQYJ KoZIhvcNAQELBQADggEBAAXUCih1hCf1h+hGQTCH3ogx2SBO37ufxmZvZ0mkKVzl 2wMJExsZt7u0/XE/G+4GpNivgDnd9onPM3M4lC0ls85jAJJy4Cc6GjIZZQPzr2bF gH7B5Hk9yO7xlDIeg3N6Y7kSh3uUayHprpcjrBDajL1b4J6HlL+RpWt2Y+RwD4xz Tlv6veW3w3Gz66bYvfHJOOI/moEzUDd+bpXjXnFcOSJn8xGAuffEW1k21XNftadH qe0wZrrUZ+CbFheuo+IkFWK8PSyhtYUIGIZKuC/Gg65sE1UT1tViKoDE1YLhLbFm CNi/vAtA3P64rWRpsASl2psn3dc6Z9ZcnDezbHW9mDY= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org