$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3139302e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3139302e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 9qLc07V9/tNJN0o9LXmaT6rMmas3zjZTDwEm1/YrW4g= Subject key identifier: 5B:9A:9B:BC:9A:54:EA:6E:55:20:C9:EC:0D:1C:A2:F4:A7:86:9E:E4 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 74A2081F3B892847B9D9B1AA1E000D5367113CEB Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3139302e302f32342d3234203d3e203633383539.roa Signing time: Sun 10 Sep 2023 09:00:02 +0000 ROA not before: Sun 10 Sep 2023 08:55:02 +0000 ROA not after: Sun 08 Sep 2024 09:00:02 +0000 asID: 63859 IP address blocks: 158.140.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a2:08:1f:3b:89:28:47:b9:d9:b1:aa:1e:00:0d:53:67:11:3c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Sep 10 08:55:02 2023 GMT Not After : Sep 8 09:00:02 2024 GMT Subject: CN=5B9A9BBC9A54EA6E5520C9EC0D1CA2F4A7869EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:70:66:61:5e:c1:3e:e7:9b:e3:84:96:7b:1a: 6d:d6:ae:26:a1:a8:a5:b1:f2:9e:19:1f:6e:9f:21: c2:f4:74:df:31:54:49:31:46:03:e4:97:9f:c9:b7: 54:42:4a:8b:ae:dc:23:63:ff:1d:e7:f7:af:4b:c6: ef:f1:32:53:6d:05:b3:2e:a5:98:d0:80:19:9d:4a: 20:59:44:77:19:ee:ae:9c:73:69:33:0a:78:e9:8c: 76:9a:80:f0:98:08:f9:9e:77:53:fb:4e:ba:e4:95: 5a:ba:91:22:bb:7f:61:bf:85:3d:65:a9:b5:d2:8e: ff:77:10:7c:a3:a1:4c:ab:ad:55:dc:44:e9:7f:0e: 9d:d2:bc:d6:d2:a6:9e:40:99:9d:85:c7:24:3e:0b: 22:c5:db:69:78:9e:00:fa:fc:68:06:26:56:69:bf: d9:74:0c:c7:28:0b:9c:89:cc:37:a3:c7:24:55:f5: 0d:cb:f6:d9:fc:20:c6:e6:6d:7a:bd:a0:83:7a:aa: 2b:57:71:b6:c1:12:0b:56:c2:22:c8:23:c6:4a:a6: 37:9a:87:f3:d7:eb:29:bf:85:34:d0:52:38:4b:57: c6:5e:43:1c:06:9b:d3:6a:fb:cd:ba:58:d6:a1:db: 82:a9:ca:da:b2:b9:34:ec:c4:4d:91:e7:37:f8:b6: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9A:9B:BC:9A:54:EA:6E:55:20:C9:EC:0D:1C:A2:F4:A7:86:9E:E4 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3139302e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.190.0/24 Signature Algorithm: sha256WithRSAEncryption 40:e0:08:f9:ff:c0:68:bc:c7:52:6a:cc:55:d3:4f:84:3b:32: 99:58:3f:5a:10:4e:53:3b:2f:8d:71:81:67:5c:aa:85:0d:da: 1e:5a:bd:6f:82:9d:d8:8d:8b:ab:39:a8:4a:02:2f:eb:6a:f1: ab:72:ac:f7:d7:d2:37:3e:ce:d9:2b:ce:2e:ad:a4:4d:71:4e: a7:78:f5:59:f2:51:f8:a7:de:1c:8f:19:9f:12:45:5f:6c:0c: e4:47:a2:ba:32:23:b3:dc:5e:10:bb:20:2e:98:78:24:18:75: 65:ec:c7:98:40:62:b2:28:57:96:5f:7a:54:a7:11:63:32:f2: f9:72:db:48:4b:da:0f:b1:8c:6b:cb:d7:92:62:cc:ce:a7:73: 2c:15:6d:8d:07:69:ec:aa:e5:30:ac:db:5e:30:0b:01:2e:1b: 7d:3d:93:ec:30:c5:6c:1e:a7:2d:ca:ce:80:78:79:b8:e7:c1: 47:ab:4e:d4:f2:05:b9:a5:ea:9a:34:8a:11:b3:bd:ed:9e:55: ad:b1:13:7d:44:8a:37:8a:a4:b6:0c:1b:f7:b7:35:5d:b9:12: 28:f5:6f:cf:b4:b8:be:fd:2e:f6:66:bb:1c:40:cb:20:5a:e2: bf:6b:77:02:67:2d:67:ea:06:bb:30:c1:5c:73:6d:01:7a:41: cc:ed:3c:a1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdKIIHzuJKEe52bGqHgANU2cRPOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yMzA5MTAwODU1MDJaFw0yNDA5MDgwOTAwMDJaMDMxMTAvBgNV BAMTKDVCOUE5QkJDOUE1NEVBNkU1NTIwQzlFQzBEMUNBMkY0QTc4NjlFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzcGZhXsE+55vjhJZ7Gm3Wriah qKWx8p4ZH26fIcL0dN8xVEkxRgPkl5/Jt1RCSouu3CNj/x3n969Lxu/xMlNtBbMu pZjQgBmdSiBZRHcZ7q6cc2kzCnjpjHaagPCYCPmed1P7TrrklVq6kSK7f2G/hT1l qbXSjv93EHyjoUyrrVXcROl/Dp3SvNbSpp5AmZ2FxyQ+CyLF22l4ngD6/GgGJlZp v9l0DMcoC5yJzDejxyRV9Q3L9tn8IMbmbXq9oIN6qitXcbbBEgtWwiLII8ZKpjea h/PX6ym/hTTQUjhLV8ZeQxwGm9Nq+826WNah24KpytqyuTTsxE2R5zf4tpcnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUW5qbvJpU6m5VIMnsDRyi9KeGnuQwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM5MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoy+MA0GCSqG SIb3DQEBCwUAA4IBAQBA4Aj5/8BovMdSasxV00+EOzKZWD9aEE5TOy+NcYFnXKqF DdoeWr1vgp3YjYurOahKAi/ravGrcqz319I3Ps7ZK84uraRNcU6nePVZ8lH4p94c jxmfEkVfbAzkR6K6MiOz3F4QuyAumHgkGHVl7MeYQGKyKFeWX3pUpxFjMvL5cttI S9oPsYxry9eSYszOp3MsFW2NB2nsquUwrNteMAsBLht9PZPsMMVsHqctys6AeHm4 58FHq07U8gW5peqaNIoRs73tnlWtsRN9RIo3iqS2DBv3tzVduRIo9W/PtLi+/S72 ZrscQMsgWuK/a3cCZy1n6ga7MMFcc20BekHM7Tyh -----END CERTIFICATE-----Generated at Fri Apr 19 01:15:57 2024 by rpki-client on console-fra.rpki-client.org