$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138352e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3138352e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: zClgJu2wE1q/XVcTpk9VnFgFIVO0jwCs6yThox31Ols= Subject key identifier: 1D:90:91:A9:F8:CC:62:97:E5:0A:7C:7B:5B:53:0A:CD:07:12:46:12 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 44C85B6E75EA3FE9DB96ACC1283B006A50E02860 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138352e302f32342d3234203d3e203633383539.roa Signing time: Sun 10 Sep 2023 10:00:06 +0000 ROA not before: Sun 10 Sep 2023 09:55:06 +0000 ROA not after: Sun 08 Sep 2024 10:00:06 +0000 asID: 63859 IP address blocks: 158.140.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c8:5b:6e:75:ea:3f:e9:db:96:ac:c1:28:3b:00:6a:50:e0:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Sep 10 09:55:06 2023 GMT Not After : Sep 8 10:00:06 2024 GMT Subject: CN=1D9091A9F8CC6297E50A7C7B5B530ACD07124612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:96:1f:91:14:a6:20:f7:8f:dd:ac:56:ab:ed: ab:0c:52:ca:13:ec:fa:c4:c4:df:22:70:9d:ad:d8: cf:48:a2:79:69:26:fa:28:61:db:02:e7:de:70:54: 84:53:21:4e:9c:83:4e:f8:6a:f0:70:51:d5:31:26: 67:e4:45:0a:a7:64:8b:18:01:9f:41:be:c4:66:47: 07:a6:df:3f:47:7a:91:4c:37:5c:78:10:99:6b:8d: 45:1e:4f:71:70:be:25:a6:df:f5:47:3d:7b:cc:d1: 16:fb:46:01:f0:53:ca:90:87:60:30:3a:48:b8:72: a6:ff:f9:4a:24:86:ca:94:66:3a:4e:65:e9:9c:2b: fb:c2:13:5d:5a:e3:98:a5:b2:5f:51:f5:e8:4a:3f: 0a:40:e2:db:e2:e5:99:20:67:ce:72:7e:69:9d:11: 43:6a:07:eb:14:ce:6e:f5:89:70:21:dc:2b:ec:23: f3:03:56:69:60:f6:6c:a0:18:4f:b6:5e:03:45:ef: 03:fc:57:c0:b5:95:38:0d:f9:10:69:18:78:e9:84: 9e:bc:46:a0:7f:d8:f6:cc:c9:cb:4e:b8:d4:c5:01: 65:92:e6:46:96:e3:d3:fd:a9:6c:f0:00:42:e6:5a: 9f:c9:8f:e2:61:d7:4b:df:5b:9c:7a:f3:52:40:57: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:90:91:A9:F8:CC:62:97:E5:0A:7C:7B:5B:53:0A:CD:07:12:46:12 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138352e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.185.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:da:d9:26:78:f4:bd:bc:10:a8:7b:ee:e1:84:61:af:ca:84: ea:b2:81:f9:98:fb:6f:96:75:b8:ef:bd:51:44:e2:e2:2b:c3: 34:6c:b9:be:86:e2:17:51:83:90:6a:8a:1d:32:7e:ae:71:0c: 28:5f:e1:ef:18:23:83:6f:07:80:ae:3c:6c:14:a4:17:61:3f: 44:59:08:27:d9:e0:11:27:b4:86:ab:a7:16:61:47:92:6c:58: 0f:24:5f:34:c3:6e:6d:2e:07:8e:e0:75:f6:46:90:91:22:64: f4:2c:4f:51:20:f0:cc:68:f1:54:6e:5b:71:92:2d:15:24:6a: f1:47:67:c4:c8:13:cf:fa:29:5c:a3:e6:00:77:db:e1:16:2b: 60:1c:39:58:f3:96:22:d9:c9:fb:8a:b5:a2:0d:02:09:0e:32: b2:b7:b5:be:99:78:fe:53:7b:42:ff:59:ce:16:fc:44:70:d5: 39:a6:fc:59:74:91:08:12:0e:16:74:2d:65:61:33:6c:5b:b6: 22:53:d0:48:9f:58:63:42:bd:26:65:14:a4:0c:4d:d8:7f:60: fd:17:0c:f5:8d:0e:fa:aa:3c:ac:5d:98:ca:25:3b:a3:42:4d: c3:ee:e8:1d:ea:94:9a:7f:3a:8a:31:2a:35:d5:3d:90:b4:25: 9d:5b:ce:e9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURMhbbnXqP+nblqzBKDsAalDgKGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yMzA5MTAwOTU1MDZaFw0yNDA5MDgxMDAwMDZaMDMxMTAvBgNV BAMTKDFEOTA5MUE5RjhDQzYyOTdFNTBBN0M3QjVCNTMwQUNEMDcxMjQ2MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlh+RFKYg94/drFar7asMUsoT 7PrExN8icJ2t2M9IonlpJvooYdsC595wVIRTIU6cg074avBwUdUxJmfkRQqnZIsY AZ9BvsRmRwem3z9HepFMN1x4EJlrjUUeT3FwviWm3/VHPXvM0Rb7RgHwU8qQh2Aw Oki4cqb/+UokhsqUZjpOZemcK/vCE11a45ilsl9R9ehKPwpA4tvi5ZkgZ85yfmmd EUNqB+sUzm71iXAh3CvsI/MDVmlg9mygGE+2XgNF7wP8V8C1lTgN+RBpGHjphJ68 RqB/2PbMyctOuNTFAWWS5kaW49P9qWzwAELmWp/Jj+Jh10vfW5x681JAVwsLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHZCRqfjMYpflCnx7W1MKzQcSRhIwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM4MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoy5MA0GCSqG SIb3DQEBCwUAA4IBAQCa2tkmePS9vBCoe+7hhGGvyoTqsoH5mPtvlnW4771RROLi K8M0bLm+huIXUYOQaoodMn6ucQwoX+HvGCODbweArjxsFKQXYT9EWQgn2eARJ7SG q6cWYUeSbFgPJF80w25tLgeO4HX2RpCRImT0LE9RIPDMaPFUbltxki0VJGrxR2fE yBPP+ilco+YAd9vhFitgHDlY85Yi2cn7irWiDQIJDjKyt7W+mXj+U3tC/1nOFvxE cNU5pvxZdJEIEg4WdC1lYTNsW7YiU9BIn1hjQr0mZRSkDE3Yf2D9Fwz1jQ76qjys XZjKJTujQk3D7ugd6pSafzqKMSo11T2QtCWdW87p -----END CERTIFICATE-----Generated at Fri Apr 19 01:15:57 2024 by rpki-client on console-fra.rpki-client.org