$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa File: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (raw, json) Hash identifier: wcbyMQo3dSE6LlLAPDliAWajR3kYGitb4KP+ZPgV1VI= Subject key identifier: D3:DC:ED:47:6B:EF:23:E3:9F:58:3F:3B:AA:10:DE:89:A9:A5:63:40 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 441AB7E4603CD7CB94791761C7BCD9BD2CC5745F Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa Signing time: Mon 31 Jul 2023 00:02:36 +0000 ROA not before: Sun 30 Jul 2023 23:57:36 +0000 ROA not after: Mon 29 Jul 2024 00:02:36 +0000 asID: 46026 IP address blocks: 175.111.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 07:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1a:b7:e4:60:3c:d7:cb:94:79:17:61:c7:bc:d9:bd:2c:c5:74:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jul 30 23:57:36 2023 GMT Not After : Jul 29 00:02:36 2024 GMT Subject: CN=D3DCED476BEF23E39F583F3BAA10DE89A9A56340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:26:64:1a:8e:94:db:60:0a:25:4f:ec:9b: c8:c1:d2:39:e6:8a:94:04:01:23:83:c5:7d:3a:85: 80:5d:09:51:ea:b0:73:7d:a4:08:00:79:66:e9:b9: e7:05:a4:4e:30:d4:04:b9:30:4b:fb:6e:28:d7:c1: d1:10:02:2a:ab:79:7d:2c:3e:23:d9:ad:00:ff:81: ec:90:5c:b9:16:96:7b:67:e8:cf:6c:3e:bf:c3:0b: b1:14:45:11:35:82:a1:7d:eb:e1:31:26:13:0d:9c: a2:a3:c6:d3:b3:51:de:a0:8c:9c:68:e4:bb:8a:c7: 68:da:1f:4c:4b:fc:1c:af:dc:cb:d9:1e:48:e1:0a: ee:36:9d:43:fc:1f:f4:63:b3:f5:54:3a:50:d4:dd: 1f:d0:8b:c9:0e:53:de:b6:d0:63:20:bf:47:9f:71: d0:70:d7:fb:03:5c:aa:e2:d4:d5:cb:30:3b:cf:51: fb:19:46:0a:0f:26:a9:58:5a:1f:a6:7c:4b:7b:d0: 07:17:17:f8:07:44:b6:36:cc:e9:7b:38:b7:02:ae: ee:b3:fa:2c:f8:fb:f9:c4:b2:2e:aa:ed:e8:14:0a: ee:16:cd:75:b6:6f:14:fb:3a:84:8e:ad:bf:a6:03: d7:c0:40:5a:fe:00:a7:93:c4:ec:2c:b0:ea:95:82: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DC:ED:47:6B:EF:23:E3:9F:58:3F:3B:AA:10:DE:89:A9:A5:63:40 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.114.0/24 Signature Algorithm: sha256WithRSAEncryption c2:ff:f6:0c:9b:e2:02:94:82:fc:57:d9:a6:6d:f8:ad:f0:c6: 26:89:91:ae:0d:c3:e8:cc:7e:5c:7e:99:1c:ce:48:00:e8:f6: 72:8c:94:43:de:50:6d:7a:2e:43:ca:d4:ad:a6:5a:6c:9c:33: 9a:76:0e:9b:77:11:23:8c:5e:1a:85:c7:b2:0e:86:49:38:f9: cf:98:55:63:3d:cd:d5:10:6a:03:37:45:2a:14:ff:50:7b:f5: 8a:af:72:bf:86:d3:d6:6b:42:df:27:b4:44:8a:b0:55:de:31: 6e:af:67:90:79:86:1d:42:52:06:88:d4:f4:c6:e9:f2:9c:7f: e2:ca:83:82:b3:92:8f:29:a1:f7:b4:5e:19:3d:58:76:15:2c: 4d:01:ad:f9:d3:76:5e:98:ae:f6:e1:2a:83:9b:54:f0:7d:ef: ed:4c:b1:1b:9c:1b:ef:97:a5:7b:d8:72:a5:b9:0b:c9:5d:79: 71:53:6c:79:73:88:44:c9:9b:5b:a9:08:35:13:55:ab:8c:a5: 22:85:64:8d:3e:4f:22:36:0b:df:65:d9:c7:e3:22:89:9e:59: f5:d2:e9:aa:f6:d5:84:c3:ba:ed:f2:24:2d:4d:06:3e:14:7a: de:d7:dd:96:0e:96:d5:eb:cf:84:2e:da:67:39:4b:9f:f5:c1: 82:8f:37:71 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURBq35GA818uUeRdhx7zZvSzFdF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yMzA3MzAyMzU3MzZaFw0yNDA3MjkwMDAyMzZaMDMxMTAvBgNV BAMTKEQzRENFRDQ3NkJFRjIzRTM5RjU4M0YzQkFBMTBERTg5QTlBNTYzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCyZkGo6U22AKJU/sm8jB0jnm ipQEASODxX06hYBdCVHqsHN9pAgAeWbpuecFpE4w1AS5MEv7bijXwdEQAiqreX0s PiPZrQD/geyQXLkWlntn6M9sPr/DC7EURRE1gqF96+ExJhMNnKKjxtOzUd6gjJxo 5LuKx2jaH0xL/Byv3MvZHkjhCu42nUP8H/Rjs/VUOlDU3R/Qi8kOU9620GMgv0ef cdBw1/sDXKri1NXLMDvPUfsZRgoPJqlYWh+mfEt70AcXF/gHRLY2zOl7OLcCru6z +iz4+/nEsi6q7egUCu4WzXW2bxT7OoSOrb+mA9fAQFr+AKeTxOwssOqVgpIfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU09ztR2vvI+OfWD87qhDeiamlY0AwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzczNTJlMzEzMTMxMmUzMTMxMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr29yMA0GCSqG SIb3DQEBCwUAA4IBAQDC//YMm+IClIL8V9mmbfit8MYmiZGuDcPozH5cfpkczkgA 6PZyjJRD3lBtei5DytStplpsnDOadg6bdxEjjF4ahceyDoZJOPnPmFVjPc3VEGoD N0UqFP9Qe/WKr3K/htPWa0LfJ7REirBV3jFur2eQeYYdQlIGiNT0xunynH/iyoOC s5KPKaH3tF4ZPVh2FSxNAa3503ZemK724SqDm1Twfe/tTLEbnBvvl6V72HKluQvJ XXlxU2x5c4hEyZtbqQg1E1WrjKUihWSNPk8iNgvfZdnH4yKJnln10umq9tWEw7rt 8iQtTQY+FHre192WDpbV68+ELtpnOUuf9cGCjzdx -----END CERTIFICATE-----Generated at Wed Apr 24 05:34:30 2024 by rpki-client on console-ams.rpki-client.org