$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa File: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (raw, json) Hash identifier: +k+13Y0ylRt2Fg2OXXylJcSJL/mMUvqM8aLIqZK/fwk= Subject key identifier: B7:A8:BD:E5:C3:90:A5:17:20:3A:99:41:AF:BF:16:3B:E7:CD:59:19 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 197DC4D65B82191D7834084721F51865C7F4E706 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa Signing time: Mon 26 Feb 2024 00:00:01 +0000 ROA not before: Sun 25 Feb 2024 23:55:01 +0000 ROA not after: Mon 24 Feb 2025 00:00:01 +0000 asID: 140475 IP address blocks: 103.153.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7d:c4:d6:5b:82:19:1d:78:34:08:47:21:f5:18:65:c7:f4:e7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Feb 25 23:55:01 2024 GMT Not After : Feb 24 00:00:01 2025 GMT Subject: CN=B7A8BDE5C390A517203A9941AFBF163BE7CD5919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:95:1d:30:db:47:c0:b0:c2:42:d8:6a:94: ef:1f:8f:e6:f9:12:ba:e0:c0:d1:ba:75:f9:fe:ef: b1:f5:37:37:a9:73:3e:f3:73:23:de:68:db:e8:10: ca:40:91:56:c1:db:6e:e3:47:0d:9e:23:03:09:c0: 87:7f:82:99:a6:ad:25:5b:88:54:45:b8:96:29:f7: 39:6e:49:2d:02:cf:61:1a:a1:5d:d3:95:0a:01:1f: 12:64:6d:4d:5d:5b:cb:ab:9f:e6:7f:4b:78:96:e3: 45:bb:39:51:84:fe:ec:33:23:ed:36:ea:ac:53:3c: c4:52:85:95:25:36:9d:1e:cd:2d:8d:ab:81:23:b8: 1a:36:a6:e1:7b:04:8c:e6:3f:d8:26:32:81:d4:1f: 5f:d4:28:19:4e:63:0e:78:d1:2d:e3:b2:98:16:d2: 42:54:3f:3f:6a:06:22:11:d5:84:e1:cc:38:98:94: 3d:8c:ec:cc:77:35:3c:fb:be:7b:89:1f:39:4e:13: af:01:06:33:71:fd:66:cc:4a:27:b1:84:c9:3a:7f: 41:20:20:d8:3d:f0:ac:10:8f:d7:74:56:fd:53:92: 88:e5:ee:a7:1d:c6:74:2e:0b:33:ac:a2:b7:88:9f: ba:c0:ee:19:42:04:fd:28:2d:a1:4c:c1:48:93:66: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A8:BD:E5:C3:90:A5:17:20:3A:99:41:AF:BF:16:3B:E7:CD:59:19 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.246.0/24 Signature Algorithm: sha256WithRSAEncryption 30:6b:49:3f:f1:00:4a:20:28:92:04:76:eb:98:c5:16:b1:44: f5:4b:3a:6b:7f:fc:0c:7c:4a:32:0b:a9:47:b7:d7:a1:d5:f6: 05:4e:8d:ac:bc:92:b3:c1:c3:55:c7:f9:d1:67:03:06:bf:e6: 4c:91:68:ef:55:20:84:49:25:f0:43:1d:23:0f:7b:8a:8c:09: d6:ec:c1:c6:a7:a7:09:15:4e:0b:ff:21:71:d3:ae:b9:60:66: 5e:b6:99:52:e4:10:5d:20:4c:94:b0:c5:22:d5:6f:d9:95:83: 1d:59:f4:cc:2c:0d:df:60:9d:0c:0b:62:e5:2d:a8:69:be:e5: d0:5d:76:2e:61:f9:90:8a:ac:a2:10:c9:00:ca:cd:3d:aa:ae: 2b:d2:56:4e:98:8a:76:2f:46:61:d7:d1:23:ca:62:10:ad:56: cb:e7:30:a5:f8:9c:4e:48:65:e5:38:f6:8e:fe:2c:9d:cb:24: 0a:fd:39:b6:97:08:12:4c:20:96:5a:5e:a9:f0:34:38:8d:c7: 24:af:4e:44:9a:3a:5d:cb:df:54:61:8d:d9:50:58:76:22:d3: 5c:fa:e7:c5:b4:8b:e9:53:f8:79:d6:de:4f:21:03:6a:07:da: f7:de:b2:43:da:65:e3:60:39:19:a4:4f:fd:d7:54:f2:35:47: 9c:ed:cf:ed -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGX3E1luCGR14NAhHIfUYZcf05wYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNDAyMjUyMzU1MDFaFw0yNTAyMjQwMDAwMDFaMDMxMTAvBgNV BAMTKEI3QThCREU1QzM5MEE1MTcyMDNBOTk0MUFGQkYxNjNCRTdDRDU5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+pUdMNtHwLDCQthqlO8fj+b5 ErrgwNG6dfn+77H1Nzepcz7zcyPeaNvoEMpAkVbB227jRw2eIwMJwId/gpmmrSVb iFRFuJYp9zluSS0Cz2EaoV3TlQoBHxJkbU1dW8urn+Z/S3iW40W7OVGE/uwzI+02 6qxTPMRShZUlNp0ezS2Nq4EjuBo2puF7BIzmP9gmMoHUH1/UKBlOYw540S3jspgW 0kJUPz9qBiIR1YThzDiYlD2M7Mx3NTz7vnuJHzlOE68BBjNx/WbMSiexhMk6f0Eg INg98KwQj9d0Vv1Tkojl7qcdxnQuCzOsoreIn7rA7hlCBP0oLaFMwUiTZiZTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUt6i95cOQpRcgOplBr78WO+fNWRkwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkY2Y0MDY3LWE2OWQtNDkwOC1i ZWU4LWI0NjU1YmRjMTVmOC8wLzMxMzAzMzJlMzEzNTMzMmUzMjM0MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmfYwDQYJ KoZIhvcNAQELBQADggEBADBrST/xAEogKJIEduuYxRaxRPVLOmt//Ax8SjILqUe3 16HV9gVOjay8krPBw1XH+dFnAwa/5kyRaO9VIIRJJfBDHSMPe4qMCdbswcanpwkV Tgv/IXHTrrlgZl62mVLkEF0gTJSwxSLVb9mVgx1Z9MwsDd9gnQwLYuUtqGm+5dBd di5h+ZCKrKIQyQDKzT2qrivSVk6YinYvRmHX0SPKYhCtVsvnMKX4nE5IZeU49o7+ LJ3LJAr9ObaXCBJMIJZaXqnwNDiNxySvTkSaOl3L31RhjdlQWHYi01z658W0i+lT +HnW3k8hA2oH2vfeskPaZeNgORmkT/3XVPI1R5ztz+0= -----END CERTIFICATE-----Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org