$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa File: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: 645ltWiUY0bql53JMSKTbQIP9Pojy50xGihwyYwC65Q= Subject key identifier: AC:D9:A4:96:41:83:1D:58:08:FB:00:3E:8A:1A:DF:85:24:2E:1E:F8 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 41CDE4FD786B8D90439F8C11CADCAB79E869869C Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa Signing time: Mon 31 Jul 2023 00:05:04 +0000 ROA not before: Mon 31 Jul 2023 00:00:04 +0000 ROA not after: Mon 29 Jul 2024 00:05:04 +0000 asID: 38150 IP address blocks: 180.214.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 19:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cd:e4:fd:78:6b:8d:90:43:9f:8c:11:ca:dc:ab:79:e8:69:86:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jul 31 00:00:04 2023 GMT Not After : Jul 29 00:05:04 2024 GMT Subject: CN=ACD9A49641831D5808FB003E8A1ADF85242E1EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:6a:2c:0d:f5:06:45:2f:d1:fa:91:ad:61: 78:8e:2c:27:46:0b:c0:13:65:a6:45:56:6c:40:3f: 5b:d8:c3:08:46:ce:d8:be:4c:a8:26:c7:a6:83:a1: fa:15:5e:5f:23:09:6a:4e:dc:fb:16:63:ce:cd:27: b8:47:1b:e9:01:c1:17:e4:48:f4:ee:7f:94:78:34: 95:f3:46:69:c3:65:e8:0e:87:de:ce:08:82:e4:98: f1:8e:96:72:ad:80:dd:98:cb:7a:b4:d6:82:4b:fe: 91:78:70:1c:07:95:4b:48:ab:a2:a6:ae:af:0d:2e: d4:16:87:38:ca:59:44:33:87:7f:4b:1c:f5:7f:40: e2:93:22:88:02:54:0e:b7:80:84:dc:b6:ee:85:93: da:07:21:4c:6b:bc:16:44:23:27:28:af:81:e9:b6: ef:67:65:f9:69:7a:9a:8d:39:86:2a:67:c1:f1:bd: 71:c5:24:0c:d7:e7:f0:98:a2:84:e4:a0:4a:3a:9e: 8e:5d:97:55:f8:9b:7f:c0:d2:c4:0b:1d:a2:4e:7b: 5c:f5:9e:d9:4e:09:91:18:7c:01:50:e5:40:96:c0: 9c:a1:61:35:5f:4d:74:b3:16:ce:d3:35:fe:2f:c2: d3:99:67:4f:dd:57:3c:28:2d:80:90:28:99:c3:08: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D9:A4:96:41:83:1D:58:08:FB:00:3E:8A:1A:DF:85:24:2E:1E:F8 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.242.0/24 Signature Algorithm: sha256WithRSAEncryption 39:55:f0:d0:cf:07:e7:5b:96:c4:e1:c0:e5:2e:ae:cc:ad:56: ce:6e:da:57:e5:a4:3f:5f:81:a2:75:9e:70:8c:ee:02:7d:6a: 75:bb:e1:42:b6:31:85:ce:1b:77:61:85:03:8f:78:ba:e9:59: 08:0f:f2:9c:ba:03:0a:5d:ba:eb:3a:f9:58:06:db:15:9b:83: e6:1b:60:98:f7:1f:d1:79:c5:1c:4f:d3:7c:b0:24:7b:87:12: bc:2e:6d:80:0b:82:45:02:88:6b:09:a7:08:76:65:9c:99:e3: dc:e0:f1:43:3f:7b:7d:0c:ff:01:f7:37:92:96:98:93:cb:36: c8:b9:4d:69:40:2c:61:97:6d:22:6e:db:ce:a8:96:d0:da:02: 2c:07:97:6e:8f:97:d5:b6:fb:91:7a:ad:87:41:ee:02:15:f8: 81:17:c5:2d:cf:ed:24:41:aa:fc:3c:92:49:94:0f:b4:01:51: 73:11:d1:2d:ce:ec:fb:96:4b:f1:f1:88:2a:a3:c7:b5:da:be: 0a:83:8f:5c:21:0a:bc:6d:bf:d5:be:f3:5d:ef:5d:55:fc:26: b9:a4:02:b2:4f:2b:26:8b:9e:e0:26:36:2c:bd:01:76:7e:c0: ce:e8:af:86:51:3b:65:1c:0d:d0:19:68:42:26:14:a2:cc:94: 8a:88:ea:85 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQc3k/XhrjZBDn4wRytyreehphpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yMzA3MzEwMDAwMDRaFw0yNDA3MjkwMDA1MDRaMDMxMTAvBgNV BAMTKEFDRDlBNDk2NDE4MzFENTgwOEZCMDAzRThBMUFERjg1MjQyRTFFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rGosDfUGRS/R+pGtYXiOLCdG C8ATZaZFVmxAP1vYwwhGzti+TKgmx6aDofoVXl8jCWpO3PsWY87NJ7hHG+kBwRfk SPTuf5R4NJXzRmnDZegOh97OCILkmPGOlnKtgN2Yy3q01oJL/pF4cBwHlUtIq6Km rq8NLtQWhzjKWUQzh39LHPV/QOKTIogCVA63gITctu6Fk9oHIUxrvBZEIycor4Hp tu9nZflpepqNOYYqZ8HxvXHFJAzX5/CYooTkoEo6no5dl1X4m3/A0sQLHaJOe1z1 ntlOCZEYfAFQ5UCWwJyhYTVfTXSzFs7TNf4vwtOZZ0/dVzwoLYCQKJnDCP2bAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrNmklkGDHVgI+wA+ihrfhSQuHvgwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM0MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNbyMA0GCSqG SIb3DQEBCwUAA4IBAQA5VfDQzwfnW5bE4cDlLq7MrVbObtpX5aQ/X4GidZ5wjO4C fWp1u+FCtjGFzht3YYUDj3i66VkID/KcugMKXbrrOvlYBtsVm4PmG2CY9x/RecUc T9N8sCR7hxK8Lm2AC4JFAohrCacIdmWcmePc4PFDP3t9DP8B9zeSlpiTyzbIuU1p QCxhl20ibtvOqJbQ2gIsB5duj5fVtvuReq2HQe4CFfiBF8Utz+0kQar8PJJJlA+0 AVFzEdEtzuz7lkvx8Ygqo8e12r4Kg49cIQq8bb/VvvNd711V/Ca5pAKyTysmi57g JjYsvQF2fsDO6K+GUTtlHA3QGWhCJhSizJSKiOqF -----END CERTIFICATE-----Generated at Thu Apr 18 14:05:47 2024 by rpki-client on console-ams.rpki-client.org