$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136322e302f32342d3234203d3e203536323436.roa File: 3131362e36382e3136322e302f32342d3234203d3e203536323436.roa (raw, json) Hash identifier: Bi6qMG+pWCVDf/+33K3mCRONkbZxjYqdpYV5FDtMp+E= Subject key identifier: 4E:34:88:13:EC:0B:E9:93:79:29:B6:39:2C:E7:11:1D:67:30:78:A2 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 381EDBE2EB130E4B532374A99945CB277CC61CAB Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136322e302f32342d3234203d3e203536323436.roa Signing time: Mon 31 Jul 2023 00:03:58 +0000 ROA not before: Sun 30 Jul 2023 23:58:58 +0000 ROA not after: Mon 29 Jul 2024 00:03:58 +0000 asID: 56246 IP address blocks: 116.68.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 18:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1e:db:e2:eb:13:0e:4b:53:23:74:a9:99:45:cb:27:7c:c6:1c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 30 23:58:58 2023 GMT Not After : Jul 29 00:03:58 2024 GMT Subject: CN=4E348813EC0BE9937929B6392CE7111D673078A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:7c:be:30:6d:bb:59:f7:af:c5:d1:ee:0a: 06:1e:64:7f:e3:78:f8:9b:c6:84:03:88:79:b2:24: 33:00:f8:c5:94:4f:36:fa:cb:6d:ab:76:24:fc:ad: bf:be:ec:ef:38:5c:10:c1:86:11:89:4d:4f:ed:8a: 96:b9:b8:60:14:3c:9b:71:c0:c2:2d:5f:d3:8e:a9: fe:f9:8e:88:04:cb:44:90:64:90:61:72:91:fb:f0: 42:86:19:42:12:11:6a:fe:6c:41:59:d3:32:b3:68: 63:4c:d2:8c:a6:54:2e:ed:29:6a:5e:81:e8:b4:c8: 11:54:86:95:16:7c:26:33:ee:51:58:87:28:30:28: 24:c8:d9:5c:de:3c:5c:11:d7:a8:a7:93:bf:d2:12: 8f:a6:2d:09:63:cd:3f:c9:eb:dd:49:4d:71:4e:53: 71:cb:ba:2c:04:d4:44:11:3f:b4:8a:77:4b:88:ba: c4:99:3a:ab:12:f1:bc:70:ed:90:40:98:82:c3:7e: 74:ea:39:13:cb:c8:a3:ed:7d:f6:8b:f5:d4:fe:83: b0:1f:a4:27:d3:20:fb:ba:1c:ca:15:83:7d:97:b9: 84:3d:a3:b9:b9:47:5e:4e:71:56:ad:7b:93:44:a0: f5:d6:df:f5:03:48:18:f5:bb:4f:8c:b5:54:66:db: 12:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:34:88:13:EC:0B:E9:93:79:29:B6:39:2C:E7:11:1D:67:30:78:A2 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136322e302f32342d3234203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.68.162.0/24 Signature Algorithm: sha256WithRSAEncryption 02:7a:2c:92:5c:b7:81:a7:f5:d7:5c:77:9c:16:a7:cd:ac:bb: f6:c8:55:44:6c:14:78:fc:93:76:ef:fe:97:57:bf:28:4b:fd: d6:f9:a7:25:c6:b5:fd:16:69:ef:0f:de:a0:89:87:6e:12:6c: 44:90:b5:e8:bc:36:b9:ff:50:8c:8e:b1:5f:40:b1:31:7c:4e: 01:39:d9:98:42:5f:d9:fd:52:6c:c8:2e:5f:55:4d:12:49:e6: dd:79:7d:b0:00:14:0b:60:ba:09:79:a7:90:e9:4b:cd:40:93: 4d:f8:ef:e0:5e:04:eb:c1:72:47:b4:64:4b:45:35:bf:fb:d1: fc:9f:68:3f:41:2e:53:77:ba:65:50:75:3f:a2:6e:c9:53:5c: 62:bf:e7:f7:4d:43:29:09:99:8d:75:14:1c:75:6e:3f:eb:dc: 7e:0a:04:55:d6:77:d1:0c:13:8f:4f:82:e9:76:33:0b:ab:a3: 38:7d:50:ec:64:f2:b6:c5:37:05:b4:8d:f2:86:a1:34:25:36: a1:70:45:24:ed:ad:da:5e:26:1f:65:02:3b:46:27:d6:3e:1a: 87:19:dc:3d:55:fb:26:33:1f:0b:e3:c6:c7:55:75:9a:80:fa: 72:b5:04:99:3b:ed:e6:a4:ea:27:86:b9:8e:8b:9d:a0:0e:e2: 90:74:e8:b1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOB7b4usTDktTI3SpmUXLJ3zGHKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NThaFw0yNDA3MjkwMDAzNThaMDMxMTAvBgNV BAMTKDRFMzQ4ODEzRUMwQkU5OTM3OTI5QjYzOTJDRTcxMTFENjczMDc4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSHy+MG27WfevxdHuCgYeZH/j ePibxoQDiHmyJDMA+MWUTzb6y22rdiT8rb++7O84XBDBhhGJTU/tipa5uGAUPJtx wMItX9OOqf75jogEy0SQZJBhcpH78EKGGUISEWr+bEFZ0zKzaGNM0oymVC7tKWpe gei0yBFUhpUWfCYz7lFYhygwKCTI2VzePFwR16ink7/SEo+mLQljzT/J691JTXFO U3HLuiwE1EQRP7SKd0uIusSZOqsS8bxw7ZBAmILDfnTqORPLyKPtffaL9dT+g7Af pCfTIPu6HMoVg32XuYQ9o7m5R15OcVate5NEoPXW3/UDSBj1u0+MtVRm2xJpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTjSIE+wL6ZN5KbY5LOcRHWcweKIwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzEzNjJlMzYzODJlMzEzNjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHREojANBgkqhkiG 9w0BAQsFAAOCAQEAAnoskly3gaf111x3nBanzay79shVRGwUePyTdu/+l1e/KEv9 1vmnJca1/RZp7w/eoImHbhJsRJC16Lw2uf9QjI6xX0CxMXxOATnZmEJf2f1SbMgu X1VNEknm3Xl9sAAUC2C6CXmnkOlLzUCTTfjv4F4E68FyR7RkS0U1v/vR/J9oP0Eu U3e6ZVB1P6JuyVNcYr/n901DKQmZjXUUHHVuP+vcfgoEVdZ30QwTj0+C6XYzC6uj OH1Q7GTytsU3BbSN8oahNCU2oXBFJO2t2l4mH2UCO0Yn1j4ahxncPVX7JjMfC+PG x1V1moD6crUEmTvt5qTqJ4a5joudoA7ikHTosQ== -----END CERTIFICATE-----Generated at Fri Apr 19 11:24:28 2024 by rpki-client on console-fra.rpki-client.org