$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136322e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136322e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: vWCDvc3ZQ4zO0V5eptDTVNlP3FFJtyD5UGGYr7c/Ogc= Subject key identifier: A3:DA:69:E6:2E:3E:EE:A2:1C:9E:BC:6A:AA:FC:D4:E4:2C:4A:93:80 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 7E474F274CD474C55A5F50959ED9AC16F8120721 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136322e302f32342d3234203d3e203633383539.roa Signing time: Sun 10 Sep 2023 10:00:07 +0000 ROA not before: Sun 10 Sep 2023 09:55:07 +0000 ROA not after: Sun 08 Sep 2024 10:00:07 +0000 asID: 63859 IP address blocks: 158.140.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:47:4f:27:4c:d4:74:c5:5a:5f:50:95:9e:d9:ac:16:f8:12:07:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Sep 10 09:55:07 2023 GMT Not After : Sep 8 10:00:07 2024 GMT Subject: CN=A3DA69E62E3EEEA21C9EBC6AAAFCD4E42C4A9380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:93:b8:fb:73:a8:8e:cc:d3:9a:3a:f4:b6:8e: 98:d0:9d:cf:4a:a4:10:bb:e0:14:de:39:d3:a7:12: 13:fe:65:9a:e1:27:a3:fc:13:4c:7a:12:e9:4e:a7: 94:0a:d7:bb:8c:f2:ac:82:2d:0a:06:dc:93:82:21: 2e:52:bb:ca:9b:91:40:5f:03:72:8a:cf:db:01:4e: b0:4d:bf:8c:ac:95:76:a1:f1:78:f1:19:0f:5c:c2: 8a:df:d5:41:60:df:2f:5d:95:10:cc:46:d9:de:aa: d5:3d:bf:18:ce:81:de:ef:22:1e:bf:09:75:a9:29: 99:39:e8:d3:82:93:85:87:3e:f2:32:43:9f:19:78: 5f:84:d1:d3:d3:df:01:0f:ad:e1:59:87:be:dc:8c: 91:0f:7e:d9:fa:5c:67:30:98:91:0b:b2:35:16:bd: 2a:67:b8:8c:d4:75:a0:19:68:ba:ae:4f:3f:d5:7e: 6f:90:b1:8a:90:82:5d:62:52:09:cf:c3:c8:65:03: 80:77:fe:7c:45:36:ab:6f:ac:95:d2:5a:55:30:3f: 0c:1a:3b:12:39:17:2e:b9:c9:43:78:55:db:0f:7d: 84:48:90:f9:6f:fa:d6:d0:79:4f:2d:4a:22:3e:13: 66:e7:31:ba:29:a2:15:56:56:7d:87:d1:be:b8:89: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DA:69:E6:2E:3E:EE:A2:1C:9E:BC:6A:AA:FC:D4:E4:2C:4A:93:80 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136322e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.162.0/24 Signature Algorithm: sha256WithRSAEncryption 73:aa:2a:44:ab:33:45:87:6f:be:1a:61:65:c8:1e:72:59:55: 81:cb:4c:c1:1b:30:a7:b2:77:4c:32:8d:fd:62:ee:39:66:56: 99:97:56:34:be:42:3c:c5:3b:b0:56:77:1e:c7:15:87:c4:f7: 03:cb:5f:59:4a:54:0e:b2:78:89:a9:e1:26:0c:b7:fb:5d:3a: 64:39:2a:67:69:9b:e0:1e:55:b8:c4:60:cf:c0:be:01:4a:ee: ba:9d:e8:12:2c:c5:16:05:c5:a0:0b:a4:ca:d5:41:8d:14:a2: 47:22:5a:b3:06:87:26:5e:ea:2e:85:3b:c9:15:e1:39:9d:ca: be:35:66:f4:d4:f5:43:3f:b8:3b:c4:4f:5f:ec:2f:de:7e:75: a0:72:4a:6b:a0:1e:68:db:a4:c1:db:5b:76:38:7b:e2:c7:49: 31:fd:5d:60:14:d4:31:27:ae:b9:ad:bc:b2:50:62:7e:00:41: 33:c8:c7:c2:79:f2:38:15:01:30:c0:32:ff:12:dd:e1:02:67: 30:04:a5:e8:ee:46:41:95:a2:1f:00:44:7f:42:f9:18:1b:57: bd:dd:f0:7d:16:d5:cd:70:72:85:99:b7:bc:42:44:63:67:81: 46:89:d3:1a:e9:11:a5:36:b2:22:9f:d9:61:89:6a:d0:02:12: b0:38:65:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfkdPJ0zUdMVaX1CVntmsFvgSByEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yMzA5MTAwOTU1MDdaFw0yNDA5MDgxMDAwMDdaMDMxMTAvBgNV BAMTKEEzREE2OUU2MkUzRUVFQTIxQzlFQkM2QUFBRkNENEU0MkM0QTkzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNk7j7c6iOzNOaOvS2jpjQnc9K pBC74BTeOdOnEhP+ZZrhJ6P8E0x6EulOp5QK17uM8qyCLQoG3JOCIS5Su8qbkUBf A3KKz9sBTrBNv4yslXah8XjxGQ9cworf1UFg3y9dlRDMRtneqtU9vxjOgd7vIh6/ CXWpKZk56NOCk4WHPvIyQ58ZeF+E0dPT3wEPreFZh77cjJEPftn6XGcwmJELsjUW vSpnuIzUdaAZaLquTz/Vfm+QsYqQgl1iUgnPw8hlA4B3/nxFNqtvrJXSWlUwPwwa OxI5Fy65yUN4VdsPfYRIkPlv+tbQeU8tSiI+E2bnMbopohVWVn2H0b64iST5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUo9pp5i4+7qIcnrxqqvzU5CxKk4AwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM2MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoyiMA0GCSqG SIb3DQEBCwUAA4IBAQBzqipEqzNFh2++GmFlyB5yWVWBy0zBGzCnsndMMo39Yu45 ZlaZl1Y0vkI8xTuwVncexxWHxPcDy19ZSlQOsniJqeEmDLf7XTpkOSpnaZvgHlW4 xGDPwL4BSu66negSLMUWBcWgC6TK1UGNFKJHIlqzBocmXuouhTvJFeE5ncq+NWb0 1PVDP7g7xE9f7C/efnWgckproB5o26TB21t2OHvix0kx/V1gFNQxJ665rbyyUGJ+ AEEzyMfCefI4FQEwwDL/Et3hAmcwBKXo7kZBlaIfAER/QvkYG1e93fB9FtXNcHKF mbe8QkRjZ4FGidMa6RGlNrIin9lhiWrQAhKwOGVR -----END CERTIFICATE-----Generated at Fri Apr 19 01:15:57 2024 by rpki-client on console-fra.rpki-client.org