$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39382e302f32342d3234203d3e203538343737.roa File: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: 0vpdE6DHegrqNT+/Qsn3DBQqx5M0mPohxF+mKaNGZ3U= Subject key identifier: 19:80:9D:61:51:64:7C:4E:6C:41:32:79:B5:C1:F5:9C:B4:5D:C3:01 Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 5606F52C9720A597EFD660032240DF28CB900AA3 Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39382e302f32342d3234203d3e203538343737.roa Signing time: Mon 31 Jul 2023 00:09:30 +0000 ROA not before: Mon 31 Jul 2023 00:04:30 +0000 ROA not after: Mon 29 Jul 2024 00:09:30 +0000 asID: 58477 IP address blocks: 45.64.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 10:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:06:f5:2c:97:20:a5:97:ef:d6:60:03:22:40:df:28:cb:90:0a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jul 31 00:04:30 2023 GMT Not After : Jul 29 00:09:30 2024 GMT Subject: CN=19809D6151647C4E6C413279B5C1F59CB45DC301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:8e:6b:38:a7:e4:9f:6b:56:51:17:de:33: 4a:fe:89:c4:82:f4:c9:c0:a4:3f:a8:c9:4c:07:62: b5:c5:7a:8a:b9:d6:2e:18:d7:00:4f:b7:c7:db:9f: 51:1b:58:16:a1:98:1b:bd:10:40:a1:44:5e:14:7b: 9b:97:3e:e7:e5:93:2b:1d:a6:ab:0f:dd:c7:65:b1: c9:5d:25:e0:91:6b:8a:36:11:4f:d3:a4:2f:43:65: 65:3f:8c:a6:c4:b1:a3:d7:9c:44:5b:7c:63:43:d5: a0:82:c9:6b:93:bb:ee:fa:7e:ba:9f:f2:a5:2c:2e: 15:b0:bd:8b:1d:36:6e:a6:e0:59:2e:24:85:d2:8f: 0e:22:dc:2f:45:ad:57:3c:e5:70:9a:50:3a:32:62: 43:9d:2a:e6:42:60:ee:ac:58:45:66:00:88:3f:1b: d6:2d:9c:b5:e1:66:fe:ae:a8:cc:84:2f:35:3b:25: a2:27:4d:a6:ae:79:7c:cd:05:6e:14:bc:84:4c:43: b9:52:75:69:f7:4f:b7:b5:dd:ce:5d:50:d7:4f:16: a5:f3:74:f8:0c:14:0f:bf:ec:ca:40:bc:ef:e0:e4: cf:60:b3:e0:90:0f:57:47:a0:ef:8d:c5:28:f0:f0: 48:f6:e1:fb:b1:25:2c:1b:2c:28:25:a2:0d:2c:52: 94:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:80:9D:61:51:64:7C:4E:6C:41:32:79:B5:C1:F5:9C:B4:5D:C3:01 X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39382e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.98.0/24 Signature Algorithm: sha256WithRSAEncryption 63:0f:2d:d3:48:ea:df:27:be:6f:54:92:f6:3b:bf:cc:c5:a9: 0e:7a:39:f9:e4:e6:11:6f:68:f5:7f:57:c3:5b:c8:f6:af:d2: 6b:a4:da:7c:21:ad:cf:43:ff:4b:14:d0:b6:22:87:9a:b6:f9: 09:2f:c5:77:d0:c3:28:95:90:9b:f5:c0:8b:76:c8:ee:f3:22: 8f:27:ac:a4:aa:87:64:1c:d7:61:10:4e:6f:96:6a:04:9c:ef: f8:ba:5c:c5:33:ff:c4:1c:05:13:1c:45:aa:e7:a6:04:32:3e: b6:f3:2c:66:a1:92:b2:69:54:ea:d5:4d:73:a4:4e:89:fa:69: 46:19:5f:90:48:c0:20:1f:98:80:d9:f2:cd:e9:18:67:89:92: db:1c:dc:9d:43:45:be:e1:b4:11:5b:38:28:d9:54:71:27:1b: 80:53:40:fd:ae:c8:0a:79:b2:31:de:b1:7e:cc:bf:2b:a6:9d: cd:d2:73:66:0d:cc:83:62:8f:51:1d:02:06:7d:96:0b:63:23: e5:01:81:c0:b2:ce:fb:d2:5d:83:0c:18:3a:8e:13:94:b2:80: 7f:c3:e6:60:1f:17:5f:b1:79:27:9d:ca:61:2b:a0:87:06:2e: 16:7e:29:69:c9:ef:36:0a:51:ac:f6:af:7d:30:0a:f0:50:92: 59:18:a9:a7 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUVgb1LJcgpZfv1mADIkDfKMuQCqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yMzA3MzEwMDA0MzBaFw0yNDA3MjkwMDA5MzBaMDMxMTAvBgNV BAMTKDE5ODA5RDYxNTE2NDdDNEU2QzQxMzI3OUI1QzFGNTlDQjQ1REMzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6I5rOKfkn2tWURfeM0r+icSC 9MnApD+oyUwHYrXFeoq51i4Y1wBPt8fbn1EbWBahmBu9EEChRF4Ue5uXPuflkysd pqsP3cdlscldJeCRa4o2EU/TpC9DZWU/jKbEsaPXnERbfGND1aCCyWuTu+76frqf 8qUsLhWwvYsdNm6m4FkuJIXSjw4i3C9FrVc85XCaUDoyYkOdKuZCYO6sWEVmAIg/ G9YtnLXhZv6uqMyELzU7JaInTaaueXzNBW4UvIRMQ7lSdWn3T7e13c5dUNdPFqXz dPgMFA+/7MpAvO/g5M9gs+CQD1dHoO+NxSjw8Ej24fuxJSwbLCglog0sUpQ/AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUGYCdYVFkfE5sQTJ5tcH1nLRdwwEwHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvMzQzNTJlMzYzNDJlMzkzODJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtQGIwDQYJKoZIhvcNAQEL BQADggEBAGMPLdNI6t8nvm9UkvY7v8zFqQ56Ofnk5hFvaPV/V8NbyPav0muk2nwh rc9D/0sU0LYih5q2+QkvxXfQwyiVkJv1wIt2yO7zIo8nrKSqh2Qc12EQTm+WagSc 7/i6XMUz/8QcBRMcRarnpgQyPrbzLGahkrJpVOrVTXOkTon6aUYZX5BIwCAfmIDZ 8s3pGGeJktsc3J1DRb7htBFbOCjZVHEnG4BTQP2uyAp5sjHesX7Mvyumnc3Sc2YN zINij1EdAgZ9lgtjI+UBgcCyzvvSXYMMGDqOE5SygH/D5mAfF1+xeSedymEroIcG LhZ+KWnJ7zYKUaz2r30wCvBQklkYqac= -----END CERTIFICATE-----Generated at Fri Apr 19 03:47:33 2024 by rpki-client on console-fra.rpki-client.org