$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa File: 3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa (raw, json) Hash identifier: ywcWZ2QSllvdqwdv6QS4Jfv+4yKe5cWV8h2StFfAigY= Subject key identifier: 5B:37:7A:FA:7C:BD:43:7E:8A:20:4B:9D:C1:1F:0D:39:85:0D:0A:FA Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 492784ECF783EF7EF2D4EFF716A9C4FFF74B1A35 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa Signing time: Fri 24 Nov 2023 05:00:01 +0000 ROA not before: Fri 24 Nov 2023 04:55:01 +0000 ROA not after: Fri 22 Nov 2024 05:00:01 +0000 asID: 63859 IP address blocks: 158.140.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 23:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:27:84:ec:f7:83:ef:7e:f2:d4:ef:f7:16:a9:c4:ff:f7:4b:1a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Nov 24 04:55:01 2023 GMT Not After : Nov 22 05:00:01 2024 GMT Subject: CN=5B377AFA7CBD437E8A204B9DC11F0D39850D0AFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:76:0d:aa:7a:4b:ce:c4:74:82:ba:78:15: d6:d8:44:cc:93:1e:15:0d:c0:12:bd:f8:5b:f2:b2: 3c:02:7a:69:5f:96:a9:ee:20:1b:eb:13:82:20:d4: dc:54:00:6a:41:be:ed:f5:8c:8e:28:e7:49:92:99: 5e:1b:d4:f5:54:d6:ce:00:e6:70:47:7f:9c:f2:2a: 2d:07:87:48:ac:24:3a:51:b5:9a:66:77:96:ed:73: 76:18:c2:66:ea:df:78:e0:2b:de:4b:5a:d5:d7:c2: 44:08:1d:75:c7:11:cc:7d:d5:06:eb:d2:96:5c:64: 5d:b2:72:49:5c:c1:b1:04:49:36:9a:71:c4:94:a7: 1c:94:d7:7c:27:10:db:52:9b:a3:9b:1d:59:b9:3f: 2e:6f:9e:71:4e:2e:47:b2:3a:2e:38:eb:1a:ca:35: 25:80:b4:7f:58:5b:59:c9:25:f5:c5:89:e0:72:7b: c1:3c:97:31:a5:3f:43:43:0b:28:d2:15:71:e2:ea: ea:36:69:ff:93:92:d4:1e:2b:86:4c:40:5c:42:d8: b9:17:87:d8:6f:69:f1:ac:73:32:a0:5b:d4:e3:84: 37:69:4b:11:e5:8b:c7:3d:0b:40:fa:e7:18:c0:b2: 61:f0:34:a7:31:ef:d7:f9:00:0e:37:cd:28:17:92: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:37:7A:FA:7C:BD:43:7E:8A:20:4B:9D:C1:1F:0D:39:85:0D:0A:FA X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.184.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:d3:09:fb:a2:37:fc:50:17:f5:6b:6a:7c:9a:8e:af:cb:9d: 91:cd:df:b4:6b:28:65:ee:ee:a8:9c:27:2b:14:8d:e8:65:60: da:66:75:78:3b:6f:7b:b4:cf:94:05:02:64:57:0d:cf:24:d6: 9d:27:3b:7e:45:5a:e1:58:22:21:4a:82:2d:84:e2:cb:4e:7b: e9:5f:2e:27:f0:20:75:2e:0f:e7:1b:df:b3:e5:c5:ed:3a:34: 74:82:0a:36:92:d6:de:63:7f:d7:22:41:09:47:03:77:fa:06: d1:d3:97:97:5c:78:e5:19:31:4f:2f:1c:77:51:7c:1f:89:69: 11:6b:3b:c5:0a:b4:1b:2b:84:0b:73:ae:75:24:83:c0:96:ad: a8:57:41:48:19:30:2e:10:4a:4d:f4:a7:cd:b2:bf:fb:88:9f: a8:12:ac:42:24:3c:11:09:93:ff:b3:fc:6e:22:f4:66:f2:6c: 4f:d0:c6:db:56:02:72:30:32:70:95:0d:7e:b2:80:54:4e:ba: 04:05:38:4d:5e:59:6b:45:1f:0c:80:bc:2b:09:ec:aa:23:ee: b1:3d:86:99:fb:50:0d:6f:fd:2b:14:3f:77:62:78:70:d1:19: b6:0e:8a:6f:dd:ea:36:ff:17:a8:4c:10:75:13:df:bb:26:8a: bd:46:e8:3d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSSeE7PeD737y1O/3FqnE//dLGjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yMzExMjQwNDU1MDFaFw0yNDExMjIwNTAwMDFaMDMxMTAvBgNV BAMTKDVCMzc3QUZBN0NCRDQzN0U4QTIwNEI5REMxMUYwRDM5ODUwRDBBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZH3YNqnpLzsR0grp4FdbYRMyT HhUNwBK9+FvysjwCemlflqnuIBvrE4Ig1NxUAGpBvu31jI4o50mSmV4b1PVU1s4A 5nBHf5zyKi0Hh0isJDpRtZpmd5btc3YYwmbq33jgK95LWtXXwkQIHXXHEcx91Qbr 0pZcZF2ycklcwbEESTaaccSUpxyU13wnENtSm6ObHVm5Py5vnnFOLkeyOi446xrK NSWAtH9YW1nJJfXFieBye8E8lzGlP0NDCyjSFXHi6uo2af+TktQeK4ZMQFxC2LkX h9hvafGsczKgW9TjhDdpSxHli8c9C0D65xjAsmHwNKcx79f5AA43zSgXkhhJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWzd6+ny9Q36KIEudwR8NOYUNCvowHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM4MzQyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnoy4MA0GCSqG SIb3DQEBCwUAA4IBAQCc0wn7ojf8UBf1a2p8mo6vy52Rzd+0ayhl7u6onCcrFI3o ZWDaZnV4O297tM+UBQJkVw3PJNadJzt+RVrhWCIhSoIthOLLTnvpXy4n8CB1Lg/n G9+z5cXtOjR0ggo2ktbeY3/XIkEJRwN3+gbR05eXXHjlGTFPLxx3UXwfiWkRazvF CrQbK4QLc651JIPAlq2oV0FIGTAuEEpN9KfNsr/7iJ+oEqxCJDwRCZP/s/xuIvRm 8mxP0MbbVgJyMDJwlQ1+soBUTroEBThNXllrRR8MgLwrCeyqI+6xPYaZ+1ANb/0r FD93Ynhw0Rm2Dopv3eo2/xeoTBB1E9+7Joq9Rug9 -----END CERTIFICATE-----Generated at Tue Apr 23 18:27:36 2024 by rpki-client on console-fra.rpki-client.org