$ rpki-client -vvf repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa File: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (raw, json) Hash identifier: +T0r2N2JsODZcz6yVxBAruEfSzS5sBjYBXLPk3rRakY= Subject key identifier: 74:E2:CE:FE:DD:7B:C8:66:8A:D6:6E:AE:CE:D6:75:7A:44:F0:71:E3 Certificate issuer: /CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Certificate serial: 1C905BD4D5CDDF09BB19ACB9BA30282C974ECFBD Authority key identifier: 74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa Signing time: Mon 20 May 2024 04:00:00 +0000 ROA not before: Mon 20 May 2024 03:55:00 +0000 ROA not after: Mon 19 May 2025 04:00:00 +0000 asID: 140443 IP address blocks: 103.149.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 06:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:90:5b:d4:d5:cd:df:09:bb:19:ac:b9:ba:30:28:2c:97:4e:cf:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Validity Not Before: May 20 03:55:00 2024 GMT Not After : May 19 04:00:00 2025 GMT Subject: CN=74E2CEFEDD7BC8668AD66EAECED6757A44F071E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:a3:d2:f5:33:b6:a3:d0:73:1a:13:a4:93: 86:b8:ca:50:c8:f5:0a:8e:9e:84:18:d6:a8:80:0b: 6a:db:22:af:e5:15:97:f2:9c:69:50:a1:76:6c:60: 3e:18:21:d8:cb:1e:6e:3e:96:7a:c2:fe:a2:ae:b4: 6c:16:be:ec:12:a1:4a:82:1c:44:47:f8:15:8f:2d: b1:a2:23:cd:9d:b8:38:3a:53:29:dd:42:12:10:8f: 7b:df:60:c2:7d:6d:a0:11:c3:b6:e1:d4:02:20:95: 97:d7:ca:c9:22:2e:f1:59:c2:8e:9b:b7:61:6e:57: 0a:ca:20:3f:b8:1e:0a:9f:af:e2:8e:96:a0:9a:cc: f6:c9:16:40:e0:2b:ad:21:71:63:c2:23:02:b8:ff: 18:7c:c7:96:d9:d3:78:b1:23:44:f9:c2:01:8c:e4: 94:82:5f:69:b7:9c:9b:2f:0d:c8:3a:1b:60:cd:9f: 57:44:f2:aa:dc:dd:97:94:fd:3d:d7:0e:90:92:1d: 20:3c:9f:37:60:31:1f:e9:77:22:56:5a:ad:39:c7: f1:6b:53:6a:35:7c:ce:76:6a:8e:46:fb:75:21:49: 85:32:86:5e:74:26:78:fa:72:5c:15:cd:02:b8:d1: 4c:44:e8:1e:4e:ed:c7:67:6a:df:75:d9:44:85:57: 7d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E2:CE:FE:DD:7B:C8:66:8A:D6:6E:AE:CE:D6:75:7A:44:F0:71:E3 X509v3 Authority Key Identifier: keyid:74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.176.0/24 Signature Algorithm: sha256WithRSAEncryption a9:a0:8a:4c:85:41:67:1b:ad:15:e7:89:28:90:5c:87:0d:b1: 93:6c:65:a3:f9:17:8b:d1:91:a9:ac:de:94:9c:47:c8:9f:b3: e8:6c:9a:b5:87:a7:ed:4f:81:90:07:4c:c2:98:21:64:df:4c: f5:cb:31:70:d2:57:47:38:24:a9:20:27:21:09:fb:dc:fc:e3: e7:d0:53:5a:f4:a8:fc:56:ea:6a:36:e5:79:33:1f:ef:d6:a7: 60:03:7a:21:59:53:06:fa:42:7f:63:25:37:d4:74:db:15:d4: 40:93:5e:15:27:e6:ea:18:80:a7:0d:5a:b6:10:e8:17:b9:47: a0:6d:1d:ce:34:82:f3:c7:12:6a:64:cf:22:c1:1c:bc:0f:3b: 14:20:0a:bd:dd:ba:62:19:d7:4a:5e:5f:34:5d:28:52:f5:d2: e0:d5:9c:02:bf:d4:f2:0e:f9:9d:8b:89:5e:d5:e1:f9:11:6d: 71:d1:da:eb:00:8d:17:23:3f:c8:df:fc:29:25:65:f7:fe:80: f2:a5:46:b9:ec:d0:18:aa:22:37:04:5d:66:95:e2:a3:00:ac: e8:f8:af:c8:a5:06:b2:7f:81:c3:f6:f8:f0:4f:95:f9:71:ea: d3:7f:de:0c:7d:2d:c4:a5:56:d4:ed:1f:7d:8f:87:31:63:d1: 80:c0:fb:8d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHJBb1NXN3wm7Gay5ujAoLJdOz70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNF QTI3NjM1QzAeFw0yNDA1MjAwMzU1MDBaFw0yNTA1MTkwNDAwMDBaMDMxMTAvBgNV BAMTKDc0RTJDRUZFREQ3QkM4NjY4QUQ2NkVBRUNFRDY3NTdBNDRGMDcxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIg6PS9TO2o9BzGhOkk4a4ylDI 9QqOnoQY1qiAC2rbIq/lFZfynGlQoXZsYD4YIdjLHm4+lnrC/qKutGwWvuwSoUqC HERH+BWPLbGiI82duDg6UyndQhIQj3vfYMJ9baARw7bh1AIglZfXyskiLvFZwo6b t2FuVwrKID+4Hgqfr+KOlqCazPbJFkDgK60hcWPCIwK4/xh8x5bZ03ixI0T5wgGM 5JSCX2m3nJsvDcg6G2DNn1dE8qrc3ZeU/T3XDpCSHSA8nzdgMR/pdyJWWq05x/Fr U2o1fM52ao5G+3UhSYUyhl50Jnj6clwVzQK40UxE6B5O7cdnat912USFV309AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUdOLO/t17yGaK1m6uztZ1ekTwceMwHwYDVR0j BBgwFoAUdJ6PbF8i0YpwtoL4bGXs0+onY1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWU4ZGIzOC02M2E4LTQxM2MtYTlmNi1jYzIyM2FmYTRhNzUvMC83NDlFOEY2QzVG MjJEMThBNzBCNjgyRjg2QzY1RUNEM0VBMjc2MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNFQTI3 NjM1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhZThkYjM4LTYzYTgtNDEzYy1h OWY2LWNjMjIzYWZhNGE3NS8wLzMxMzAzMzJlMzEzNDM5MmUzMTM3MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlbAwDQYJ KoZIhvcNAQELBQADggEBAKmgikyFQWcbrRXniSiQXIcNsZNsZaP5F4vRkams3pSc R8ifs+hsmrWHp+1PgZAHTMKYIWTfTPXLMXDSV0c4JKkgJyEJ+9z84+fQU1r0qPxW 6mo25XkzH+/Wp2ADeiFZUwb6Qn9jJTfUdNsV1ECTXhUn5uoYgKcNWrYQ6Be5R6Bt Hc40gvPHEmpkzyLBHLwPOxQgCr3dumIZ10peXzRdKFL10uDVnAK/1PIO+Z2LiV7V 4fkRbXHR2usAjRcjP8jf/CklZff+gPKlRrns0BiqIjcEXWaV4qMArOj4r8ilBrJ/ gcP2+PBPlflx6tN/3gx9LcSlVtTtH32PhzFj0YDA+40= -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:01 2024 by rpki-client on console-ams.rpki-client.org