$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa File: 3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (raw, json) Hash identifier: Y4X8pXoytwa3xv/RIME9GqWqnWOkKS5ZMNf7gFOZhhQ= Subject key identifier: 20:80:9A:0D:51:72:4B:D3:F5:36:D1:72:54:06:DC:3F:F2:E7:57:27 Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 1C2041CC6C6150EAAD1C14C5B87F364F9747068A Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa Signing time: Sat 02 Dec 2023 08:00:01 +0000 ROA not before: Sat 02 Dec 2023 07:55:01 +0000 ROA not after: Sat 30 Nov 2024 08:00:01 +0000 asID: 4787 IP address blocks: 175.158.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:20:41:cc:6c:61:50:ea:ad:1c:14:c5:b8:7f:36:4f:97:47:06:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Dec 2 07:55:01 2023 GMT Not After : Nov 30 08:00:01 2024 GMT Subject: CN=20809A0D51724BD3F536D1725406DC3FF2E75727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:8c:11:40:ee:05:d0:b9:78:d1:b0:c0:5d: c7:ca:88:95:72:1b:b9:66:5a:de:3b:6d:a4:b5:80: 8a:23:7e:15:1b:86:9d:6b:ef:9d:5d:b3:d7:e1:31: d0:5c:4c:0e:63:38:08:18:55:52:76:e2:d2:00:50: 73:96:af:9b:a8:45:3b:03:73:c0:e2:f6:d2:18:c8: 1e:cd:f0:65:16:bd:23:51:4f:70:3d:10:ae:0e:29: 8a:ed:83:d9:bb:cb:f4:ab:0f:b6:98:45:47:f2:6c: 0d:a2:0d:65:53:18:5d:08:01:7e:86:c4:c8:9c:40: ae:b4:3e:dc:06:17:cf:17:72:bd:41:92:20:26:2d: 90:56:ab:1f:17:63:76:1c:eb:6c:ab:96:bd:b1:49: a4:3f:28:ba:8a:44:a9:9f:77:8f:aa:4c:40:70:29: 5d:ee:b4:94:3a:27:f7:3a:56:0e:c3:25:57:61:35: 97:9a:7b:a4:e9:0a:15:c6:66:fc:0e:07:0c:a7:9b: 85:7b:56:3f:86:e1:cc:56:62:f2:00:91:46:6e:b4: bf:fe:dd:20:54:2e:8e:cf:e0:7d:7d:4d:78:bd:0f: 6f:8c:fc:21:23:8e:c4:54:13:ea:9e:99:aa:7c:5d: 93:db:04:d2:ea:2e:11:b6:fa:06:9b:ad:e9:7b:0a: ed:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:80:9A:0D:51:72:4B:D3:F5:36:D1:72:54:06:DC:3F:F2:E7:57:27 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.158.32.0/22 Signature Algorithm: sha256WithRSAEncryption 10:dd:d1:60:51:3a:75:cc:4f:8d:8d:ae:ad:e5:e8:97:44:49: 66:44:b2:68:59:58:90:9a:e4:9d:90:51:c2:9a:56:5a:59:25: 75:e8:1a:eb:b2:0d:9a:1c:e3:26:fc:08:73:dd:43:cf:e0:71: 6e:b5:03:bc:c0:f1:45:ae:41:8c:8e:b5:14:5e:8a:dc:32:21: 84:d6:dd:42:a9:17:aa:48:c1:f2:e4:c9:5a:de:de:d7:ff:b1: 7c:b9:be:94:08:ca:6b:d9:ec:f3:1e:c1:06:29:a5:2c:c5:5c: 62:f3:df:de:39:ea:73:78:39:ee:f4:9b:af:d9:05:84:0e:05: c1:93:e6:f2:51:6d:ad:bd:50:63:ee:b8:09:cc:74:d8:a3:67: 60:7c:15:a7:3c:8f:e1:d8:f6:25:65:70:4f:c7:9f:2f:f9:2e: 90:ed:e5:7c:6a:55:05:77:7b:f0:15:a6:a9:47:52:15:4a:3a: d0:a8:a3:98:5e:8f:5f:b9:b1:ef:94:65:5a:e5:cf:d0:27:2e: 35:07:9d:45:92:05:17:9d:2c:0e:ac:a2:db:b3:6b:28:e4:1e: 34:c4:b1:23:84:ee:69:cb:46:15:06:c3:5a:79:e6:11:f2:b5: b2:f1:f5:92:47:58:63:9b:7a:5f:8e:a2:41:06:87:df:62:c3: a8:c6:2b:e7 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHCBBzGxhUOqtHBTFuH82T5dHBoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yMzEyMDIwNzU1MDFaFw0yNDExMzAwODAwMDFaMDMxMTAvBgNV BAMTKDIwODA5QTBENTE3MjRCRDNGNTM2RDE3MjU0MDZEQzNGRjJFNzU3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFG4wRQO4F0Ll40bDAXcfKiJVy G7lmWt47baS1gIojfhUbhp1r751ds9fhMdBcTA5jOAgYVVJ24tIAUHOWr5uoRTsD c8Di9tIYyB7N8GUWvSNRT3A9EK4OKYrtg9m7y/SrD7aYRUfybA2iDWVTGF0IAX6G xMicQK60PtwGF88Xcr1BkiAmLZBWqx8XY3Yc62yrlr2xSaQ/KLqKRKmfd4+qTEBw KV3utJQ6J/c6Vg7DJVdhNZeae6TpChXGZvwOBwynm4V7Vj+G4cxWYvIAkUZutL/+ 3SBULo7P4H19TXi9D2+M/CEjjsRUE+qemap8XZPbBNLqLhG2+gabrel7Cu17AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUIICaDVFyS9P1NtFyVAbcP/LnVycwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04 MGI3LTA2ZmMxMThkZjhlMi8wLzMxMzczNTJlMzEzNTM4MmUzMzMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNzM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKvniAwDQYJKoZIhvcN AQELBQADggEBABDd0WBROnXMT42Nrq3l6JdESWZEsmhZWJCa5J2QUcKaVlpZJXXo GuuyDZoc4yb8CHPdQ8/gcW61A7zA8UWuQYyOtRReitwyIYTW3UKpF6pIwfLkyVre 3tf/sXy5vpQIymvZ7PMewQYppSzFXGLz39456nN4Oe70m6/ZBYQOBcGT5vJRba29 UGPuuAnMdNijZ2B8Fac8j+HY9iVlcE/Hny/5LpDt5XxqVQV3e/AVpqlHUhVKOtCo o5hej1+5se+UZVrlz9AnLjUHnUWSBRedLA6sotuzayjkHjTEsSOE7mnLRhUGw1p5 5hHytbLx9ZJHWGObel+OokEGh99iw6jGK+c= -----END CERTIFICATE-----Generated at Sat May 4 03:05:11 2024 by rpki-client on console-ams.rpki-client.org