$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137382e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3137382e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: VWb9YsuA3KTYeRGEC5jrikGkyzkyaQXEw/xUid3ezVI= Subject key identifier: 6D:84:3E:C5:AF:F8:4D:8F:F4:B0:36:84:34:66:92:55:55:24:B2:6F Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 05C685F4358A7184216EAC25809C4729F388DA9A Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137382e302f32342d3234203d3e203633383539.roa Signing time: Sun 10 Sep 2023 10:00:03 +0000 ROA not before: Sun 10 Sep 2023 09:55:03 +0000 ROA not after: Sun 08 Sep 2024 10:00:03 +0000 asID: 63859 IP address blocks: 158.140.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c6:85:f4:35:8a:71:84:21:6e:ac:25:80:9c:47:29:f3:88:da:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Sep 10 09:55:03 2023 GMT Not After : Sep 8 10:00:03 2024 GMT Subject: CN=6D843EC5AFF84D8FF4B03684346692555524B26F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:ca:59:29:f4:1b:08:28:df:75:d5:84:4d: 31:30:e0:38:01:00:b3:0d:1d:86:43:47:7a:e6:29: 75:dc:d4:21:96:4b:9e:4e:b8:16:69:a8:75:6a:04: c9:a0:37:3a:97:b9:d1:af:98:8c:88:ad:90:fe:cd: 2d:13:2f:77:ea:5e:a1:78:81:df:4f:9f:fe:80:b8: 8f:6b:d4:b3:4a:76:6c:61:0c:d6:42:5c:08:38:92: b0:2b:b9:78:ae:5f:26:c6:3e:80:77:c4:fc:d7:d3: 80:1c:26:cc:5f:b1:dd:83:9f:34:8c:a7:5c:d0:84: 4b:3d:04:1e:cf:ff:7b:3d:ed:ae:92:57:52:80:5f: ea:0b:53:69:f7:d4:f9:2c:80:99:6b:d4:ca:97:bf: 87:e1:c6:cb:d8:da:5a:1b:d3:e6:d3:86:59:6d:22: 08:a9:74:3c:bb:cc:06:43:9c:37:8b:54:b7:4d:c4: 62:2d:88:c3:9c:c9:c9:29:5d:fa:9a:7c:86:32:9c: 9f:0c:2f:88:e4:0f:a5:98:3b:8f:7c:a1:4a:58:77: 8e:a0:0c:91:d5:49:22:55:9d:b2:17:dd:8b:55:f0: 22:b5:51:1f:d4:89:e1:15:bb:92:5a:fc:c8:98:48: 16:cd:3a:23:f8:13:78:f6:ef:57:7d:61:3f:94:92: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:84:3E:C5:AF:F8:4D:8F:F4:B0:36:84:34:66:92:55:55:24:B2:6F X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137382e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.178.0/24 Signature Algorithm: sha256WithRSAEncryption a7:60:3c:07:39:54:35:f0:ed:ff:1f:17:aa:3f:63:04:89:c5: d9:53:a1:57:fb:6f:c4:ff:10:50:dd:0e:0a:3f:3f:d0:cb:55: 41:51:37:3e:1d:d9:91:83:16:12:62:cb:30:72:39:23:f7:db: 40:a3:d3:da:ab:25:8a:f3:fc:32:a5:e0:0d:b0:d6:18:0e:2c: 2c:50:12:fe:89:1c:a8:58:02:dc:af:d3:fb:90:83:92:66:30: f9:00:21:6e:e6:66:b4:a2:14:96:28:90:45:ad:5c:09:c9:d5: ec:d7:26:47:98:e2:52:03:9d:af:15:b0:8b:73:51:74:a0:14: b0:a2:2d:29:75:83:21:5c:ef:05:fd:5c:39:16:2e:a4:7b:a2: 75:f9:9c:12:68:e1:85:fe:1c:fe:5e:9b:9e:f2:28:71:94:96: fc:0d:d8:1e:d4:8e:96:e0:67:6a:66:42:fd:fe:73:cc:b7:cc: 76:93:b1:11:2f:05:70:ee:b8:a5:e9:fb:59:fb:be:de:b5:36: 34:dd:8e:d7:6d:37:bb:07:ff:89:a3:d3:4f:62:6e:92:16:17: ae:88:15:43:61:55:d9:0f:5f:a4:76:7f:4f:aa:1e:9b:dd:b0: 5a:8a:21:8b:0f:86:51:ba:e6:1d:bb:26:d8:d2:95:1a:38:45: 62:15:56:9b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBcaF9DWKcYQhbqwlgJxHKfOI2powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yMzA5MTAwOTU1MDNaFw0yNDA5MDgxMDAwMDNaMDMxMTAvBgNV BAMTKDZEODQzRUM1QUZGODREOEZGNEIwMzY4NDM0NjY5MjU1NTUyNEIyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnK8pZKfQbCCjfddWETTEw4DgB ALMNHYZDR3rmKXXc1CGWS55OuBZpqHVqBMmgNzqXudGvmIyIrZD+zS0TL3fqXqF4 gd9Pn/6AuI9r1LNKdmxhDNZCXAg4krAruXiuXybGPoB3xPzX04AcJsxfsd2DnzSM p1zQhEs9BB7P/3s97a6SV1KAX+oLU2n31PksgJlr1MqXv4fhxsvY2lob0+bThllt IgipdDy7zAZDnDeLVLdNxGItiMOcyckpXfqafIYynJ8ML4jkD6WYO498oUpYd46g DJHVSSJVnbIX3YtV8CK1UR/UieEVu5Ja/MiYSBbNOiP4E3j271d9YT+UkjEVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbYQ+xa/4TY/0sDaENGaSVVUksm8wHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM3MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoyyMA0GCSqG SIb3DQEBCwUAA4IBAQCnYDwHOVQ18O3/HxeqP2MEicXZU6FX+2/E/xBQ3Q4KPz/Q y1VBUTc+HdmRgxYSYsswcjkj99tAo9PaqyWK8/wypeANsNYYDiwsUBL+iRyoWALc r9P7kIOSZjD5ACFu5ma0ohSWKJBFrVwJydXs1yZHmOJSA52vFbCLc1F0oBSwoi0p dYMhXO8F/Vw5Fi6ke6J1+ZwSaOGF/hz+Xpue8ihxlJb8Ddge1I6W4GdqZkL9/nPM t8x2k7ERLwVw7ril6ftZ+77etTY03Y7XbTe7B/+Jo9NPYm6SFheuiBVDYVXZD1+k dn9Pqh6b3bBaiiGLD4ZRuuYduybY0pUaOEViFVab -----END CERTIFICATE-----Generated at Fri Apr 19 01:43:22 2024 by rpki-client on console-ams.rpki-client.org