$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa File: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: 3c5Ja4TgTzrAAShWBJGTlNg+76vMnJ51J59sbambI7E= Subject key identifier: 31:EB:CD:E9:E4:B9:17:15:C4:21:C0:AF:82:AA:7E:21:D4:04:CD:30 Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 72006AC7EF145F6D31E030C38B3CADA0F6B57760 Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa Signing time: Mon 31 Jul 2023 00:09:31 +0000 ROA not before: Mon 31 Jul 2023 00:04:31 +0000 ROA not after: Mon 29 Jul 2024 00:09:31 +0000 asID: 58477 IP address blocks: 45.64.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 10:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:00:6a:c7:ef:14:5f:6d:31:e0:30:c3:8b:3c:ad:a0:f6:b5:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jul 31 00:04:31 2023 GMT Not After : Jul 29 00:09:31 2024 GMT Subject: CN=31EBCDE9E4B91715C421C0AF82AA7E21D404CD30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:92:35:64:80:2c:1d:94:69:60:04:4e:48: ff:54:7b:40:08:56:bd:5a:ff:ac:b6:3f:72:a6:2b: 08:de:87:07:78:e5:45:d7:ab:8f:99:93:f1:1a:fe: 5c:af:f1:7b:9d:e1:6e:c8:40:69:4d:20:18:e1:29: 13:48:17:45:04:c8:5e:a0:15:c6:2d:0f:b7:6b:de: bc:6b:5b:30:31:9f:0c:dc:b2:1e:66:bc:5c:3c:64: 5f:5b:72:eb:96:ae:ab:20:88:2c:3c:e4:88:08:84: 59:37:56:18:41:cb:87:36:b1:0a:e9:08:a0:d8:ba: 73:74:a1:32:f1:88:af:5c:54:91:15:f5:95:ec:76: b0:34:23:7e:11:38:a6:d3:09:b9:d1:a3:36:b2:ad: c6:b6:7e:76:f0:3e:a4:98:27:1d:08:ae:bf:cf:2b: cd:c7:bd:e6:50:3e:d8:05:98:04:68:d3:43:4d:b7: 50:5f:52:37:52:09:7b:4a:0c:e9:52:1b:a9:61:99: 4d:71:62:52:07:b5:21:c1:e2:8a:89:ed:7d:da:9f: 57:c4:66:81:2a:77:cd:bd:92:c3:5d:32:ee:20:e5: dd:b6:ae:5e:a7:46:12:5a:69:99:e2:6d:57:0f:87: bc:01:f3:02:bd:4e:18:52:73:59:e1:7f:05:7a:ae: d8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EB:CD:E9:E4:B9:17:15:C4:21:C0:AF:82:AA:7E:21:D4:04:CD:30 X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.99.0/24 Signature Algorithm: sha256WithRSAEncryption 21:f8:d6:36:02:58:ae:e1:74:92:33:c8:0f:ff:80:08:94:70: 8b:6e:10:47:d5:c4:ba:4e:b6:e4:00:d4:e2:fb:ee:c1:2a:71: 53:4d:15:f3:a0:fd:0e:23:63:7e:93:7b:d8:d9:cc:86:80:8d: aa:f7:1d:49:42:c9:1f:3f:50:48:7c:f3:e1:83:70:c8:70:56: ae:44:af:fe:b3:8f:d2:94:32:51:5b:14:6f:76:35:68:aa:2a: 32:ef:63:43:a7:d6:4f:1a:08:90:67:c2:75:71:ad:a4:65:ec: 9f:9a:d1:9d:eb:7e:f9:c8:54:52:dc:e9:64:a2:66:9c:43:94: ca:db:5a:29:c7:0a:15:7d:27:c4:f9:29:ed:02:e5:2c:fb:c2: af:45:63:72:b8:1b:b9:e5:69:90:92:0a:42:ca:d3:9a:90:c4: 0c:98:40:7f:ff:4d:24:fd:9c:50:3f:b6:ad:f5:ca:e6:82:84: d2:41:71:af:0d:8f:e2:f9:f1:50:ae:f4:65:2a:5c:a8:cd:e6: e2:1b:e0:5d:6d:9d:6c:ee:e5:2e:4f:1c:d3:a1:36:56:15:47: 18:04:30:6b:23:45:9e:a8:10:24:30:fa:5d:9a:81:cb:df:7b: 5d:83:0e:51:04:61:19:ec:dc:47:89:11:19:0a:0e:b9:9f:92: 8f:af:ae:a9 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUcgBqx+8UX20x4DDDizytoPa1d2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yMzA3MzEwMDA0MzFaFw0yNDA3MjkwMDA5MzFaMDMxMTAvBgNV BAMTKDMxRUJDREU5RTRCOTE3MTVDNDIxQzBBRjgyQUE3RTIxRDQwNENEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA75I1ZIAsHZRpYAROSP9Ue0AI Vr1a/6y2P3KmKwjehwd45UXXq4+Zk/Ea/lyv8Xud4W7IQGlNIBjhKRNIF0UEyF6g FcYtD7dr3rxrWzAxnwzcsh5mvFw8ZF9bcuuWrqsgiCw85IgIhFk3VhhBy4c2sQrp CKDYunN0oTLxiK9cVJEV9ZXsdrA0I34ROKbTCbnRozayrca2fnbwPqSYJx0Irr/P K83HveZQPtgFmARo00NNt1BfUjdSCXtKDOlSG6lhmU1xYlIHtSHB4oqJ7X3an1fE ZoEqd829ksNdMu4g5d22rl6nRhJaaZnibVcPh7wB8wK9ThhSc1nhfwV6rtgXAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUMevN6eS5FxXEIcCvgqp+IdQEzTAwHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvMzQzNTJlMzYzNDJlMzkzOTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtQGMwDQYJKoZIhvcNAQEL BQADggEBACH41jYCWK7hdJIzyA//gAiUcItuEEfVxLpOtuQA1OL77sEqcVNNFfOg /Q4jY36Te9jZzIaAjar3HUlCyR8/UEh88+GDcMhwVq5Er/6zj9KUMlFbFG92NWiq KjLvY0On1k8aCJBnwnVxraRl7J+a0Z3rfvnIVFLc6WSiZpxDlMrbWinHChV9J8T5 Ke0C5Sz7wq9FY3K4G7nlaZCSCkLK05qQxAyYQH//TST9nFA/tq31yuaChNJBca8N j+L58VCu9GUqXKjN5uIb4F1tnWzu5S5PHNOhNlYVRxgEMGsjRZ6oECQw+l2agcvf e12DDlEEYRns3EeJERkKDrmfko+vrqk= -----END CERTIFICATE-----Generated at Fri Apr 19 03:47:33 2024 by rpki-client on console-fra.rpki-client.org