$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: +MTJJ4Yd0YyYDSelJywoke+UHPUUk+vbNAOW+JZkYws= Subject key identifier: E7:91:2A:3C:63:32:DC:96:7F:C2:19:7D:D6:11:07:11:85:80:D7:CC Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 7085D0F8B5361F172FCB52E8062F4EBFB6A73BFE Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa Signing time: Sun 10 Sep 2023 10:00:06 +0000 ROA not before: Sun 10 Sep 2023 09:55:06 +0000 ROA not after: Sun 08 Sep 2024 10:00:06 +0000 asID: 63859 IP address blocks: 158.140.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 23:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:85:d0:f8:b5:36:1f:17:2f:cb:52:e8:06:2f:4e:bf:b6:a7:3b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Sep 10 09:55:06 2023 GMT Not After : Sep 8 10:00:06 2024 GMT Subject: CN=E7912A3C6332DC967FC2197DD61107118580D7CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:60:12:c0:98:fe:d9:88:1d:bd:e3:97:47: 72:56:c9:0e:5f:7b:bf:25:8f:aa:d4:73:20:8f:53: da:8c:98:7d:e1:bb:c8:4c:2f:b5:53:cf:bd:a6:c7: b3:63:03:5f:9b:4b:c8:23:01:bf:72:1a:67:54:fa: 52:89:a7:fa:ef:b7:dc:ba:9f:45:93:36:82:e4:36: 64:b7:83:22:9d:90:fc:53:8e:bb:72:80:cb:7f:96: 13:f1:f2:43:56:d1:d3:6f:b5:55:9f:d8:87:11:d1: 51:9d:51:ad:16:9a:15:e4:a5:84:bc:53:3b:94:ed: 9f:89:c5:56:7f:d1:a9:e0:6e:1b:59:84:55:1b:f2: 6d:54:2f:08:4a:38:d6:f6:11:17:e4:20:c1:8a:f9: c9:18:47:f6:4f:ef:d2:0b:e6:02:de:74:72:40:6b: 0d:87:ea:71:b9:c4:22:a9:83:79:06:98:01:99:85: ca:8d:20:dd:8a:11:eb:6d:12:f1:c2:03:47:0b:fb: cf:0f:4d:a7:c3:17:90:ea:69:58:b6:a1:5e:49:d0: b0:54:7e:ec:0a:63:38:76:3b:bc:21:2f:71:1c:30: c2:f3:9b:24:8d:20:22:f8:62:a1:9d:80:f6:77:01: 8f:60:20:16:8c:c0:18:e8:fc:1b:f4:22:ef:85:e7: 09:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:91:2A:3C:63:32:DC:96:7F:C2:19:7D:D6:11:07:11:85:80:D7:CC X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.187.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:7f:a7:df:32:fd:8f:d3:99:51:7c:d0:d7:4c:2e:58:d1:be: 4a:6a:27:6a:da:04:e9:c5:35:ce:fc:ac:de:a0:cf:81:63:0f: 12:87:0e:2d:0a:94:21:ce:d5:d7:dd:34:97:52:d8:67:c4:26: 30:9b:54:8d:a7:1e:6d:c4:55:2c:2a:b7:21:61:d1:a4:1b:8b: b0:5a:47:f9:04:69:40:c6:41:d0:c0:25:33:c5:49:64:76:42: 41:38:8c:30:5f:86:28:e0:dc:96:5b:78:60:09:f2:bf:f5:2d: 8c:7d:a4:cd:f0:ed:a7:23:71:2f:f7:f3:3b:87:34:49:67:e4: c2:de:fb:bd:5e:f8:4c:87:1c:5b:b3:8f:86:a5:e6:2f:54:eb: 44:1f:95:37:aa:b7:91:27:7c:78:49:b9:7e:94:78:4a:33:99: d8:54:97:cb:14:61:4b:b0:1e:a1:b4:69:0d:2f:ce:ae:86:6b: 39:53:67:3a:7f:35:8e:8c:7d:a6:ed:66:ba:e1:50:2a:89:61: dc:00:af:e3:3b:29:27:87:cd:e6:d0:b3:dc:55:13:c7:22:20: 0d:ff:46:85:ec:48:fa:66:d0:2e:47:d4:53:c7:95:d4:32:fa: 28:b8:90:64:be:99:61:15:1c:41:ba:2d:8b:d6:e0:5b:82:19: dd:25:1b:e0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcIXQ+LU2Hxcvy1LoBi9Ov7anO/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yMzA5MTAwOTU1MDZaFw0yNDA5MDgxMDAwMDZaMDMxMTAvBgNV BAMTKEU3OTEyQTNDNjMzMkRDOTY3RkMyMTk3REQ2MTEwNzExODU4MEQ3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4mASwJj+2YgdveOXR3JWyQ5f e78lj6rUcyCPU9qMmH3hu8hML7VTz72mx7NjA1+bS8gjAb9yGmdU+lKJp/rvt9y6 n0WTNoLkNmS3gyKdkPxTjrtygMt/lhPx8kNW0dNvtVWf2IcR0VGdUa0WmhXkpYS8 UzuU7Z+JxVZ/0angbhtZhFUb8m1ULwhKONb2ERfkIMGK+ckYR/ZP79IL5gLedHJA aw2H6nG5xCKpg3kGmAGZhcqNIN2KEettEvHCA0cL+88PTafDF5DqaVi2oV5J0LBU fuwKYzh2O7whL3EcMMLzmySNICL4YqGdgPZ3AY9gIBaMwBjo/Bv0Iu+F5wlJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU55EqPGMy3JZ/whl91hEHEYWA18wwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM4MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoy7MA0GCSqG SIb3DQEBCwUAA4IBAQA9f6ffMv2P05lRfNDXTC5Y0b5Kaidq2gTpxTXO/KzeoM+B Yw8Shw4tCpQhztXX3TSXUthnxCYwm1SNpx5txFUsKrchYdGkG4uwWkf5BGlAxkHQ wCUzxUlkdkJBOIwwX4Yo4NyWW3hgCfK/9S2MfaTN8O2nI3Ev9/M7hzRJZ+TC3vu9 XvhMhxxbs4+GpeYvVOtEH5U3qreRJ3x4Sbl+lHhKM5nYVJfLFGFLsB6htGkNL86u hms5U2c6fzWOjH2m7Wa64VAqiWHcAK/jOyknh83m0LPcVRPHIiAN/0aF7Ej6ZtAu R9RTx5XUMvoouJBkvplhFRxBui2L1uBbghndJRvg -----END CERTIFICATE-----Generated at Tue Apr 23 18:35:58 2024 by rpki-client on console-ams.rpki-client.org