$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136372e302f32342d3234203d3e203538353532.roa File: 3131362e36382e3136372e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: 9N85wiWHO8DEVTIUZb3gNlOazLmkU8hO7MyJtsVRbUA= Subject key identifier: 3E:69:69:93:60:3B:D4:1B:FA:4C:DE:28:2E:75:45:9D:61:1D:40:F8 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 0A53C8B2BC70D10E03D515F97841D3D1FE50832D Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136372e302f32342d3234203d3e203538353532.roa Signing time: Mon 31 Jul 2023 00:03:57 +0000 ROA not before: Sun 30 Jul 2023 23:58:57 +0000 ROA not after: Mon 29 Jul 2024 00:03:57 +0000 asID: 58552 IP address blocks: 116.68.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:53:c8:b2:bc:70:d1:0e:03:d5:15:f9:78:41:d3:d1:fe:50:83:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 30 23:58:57 2023 GMT Not After : Jul 29 00:03:57 2024 GMT Subject: CN=3E696993603BD41BFA4CDE282E75459D611D40F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:b8:bc:a6:05:41:55:2c:1a:0c:60:91:69: 6e:9f:ad:c7:34:64:a3:93:29:ec:32:5b:a7:ae:4c: 1b:0c:68:b1:a7:32:35:86:60:45:78:e9:d9:87:88: a3:1f:d1:80:b9:e3:5a:eb:9f:df:c8:91:94:65:c0: 46:b3:51:9f:79:17:df:ad:db:47:cb:07:ee:15:3c: 73:37:a9:a1:3f:89:fc:3b:39:99:84:56:bc:1e:1f: ea:b9:85:ff:b6:3e:3a:8a:8f:1e:05:06:32:82:29: 94:21:ff:1e:bf:75:77:d0:56:e9:a3:8f:06:76:e3: a7:70:83:60:cf:bb:b3:0c:43:cd:42:be:6e:24:cc: 2a:62:06:16:45:b9:b7:28:c4:5b:80:cd:d9:3a:58: 9b:9c:d2:b8:6f:6c:91:5b:27:47:e5:c2:48:70:38: e8:bb:28:d9:ec:b6:5a:b7:dc:11:9b:19:fb:ba:16: 74:10:7a:06:55:d8:2d:c8:f9:40:08:32:e3:a3:de: e3:60:d0:e5:a1:c0:dd:42:65:53:46:b2:52:4d:41: ff:8a:27:b9:6f:0f:3a:d4:46:dd:67:d1:ce:05:0d: ab:92:ee:2e:4b:1e:d2:0f:9f:12:10:66:a3:92:d1: 39:b2:02:6b:f9:48:a7:64:18:df:0c:90:e1:75:19: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:69:69:93:60:3B:D4:1B:FA:4C:DE:28:2E:75:45:9D:61:1D:40:F8 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136372e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.68.167.0/24 Signature Algorithm: sha256WithRSAEncryption 71:71:64:7d:c6:53:75:b4:60:d4:da:8b:06:1e:a5:56:c8:f3: f5:36:19:be:9f:2b:37:e1:63:18:2e:0d:2d:9f:9f:11:c6:ec: 95:0e:65:ae:bd:a7:cc:fe:d7:5b:9e:81:53:a9:56:66:4f:71: 4e:9a:fc:6e:48:91:48:cf:e9:71:8f:ad:28:e2:21:4d:c2:25: f3:4a:52:29:da:c9:53:f3:e8:ab:50:e0:78:fe:5f:22:35:22: 74:80:13:42:65:c2:41:32:f3:85:a2:e2:1c:b7:2b:12:91:4a: 3c:d1:f0:18:4b:cf:85:6b:93:33:9a:3d:43:08:7a:0c:ec:89: e8:05:b7:ca:c1:a5:7f:33:53:9f:15:00:b4:e9:5c:c9:50:b3: 6a:9e:60:33:cd:45:24:ab:62:a8:7b:f3:85:57:5c:21:3d:7a: 5e:72:cd:cb:f7:80:11:f5:f0:35:23:86:9b:99:6e:77:81:91: bd:4c:fd:47:04:74:a6:bb:bc:9c:4c:b9:ce:43:5d:fa:07:0b: 19:24:3a:84:80:6c:81:a0:a1:40:26:aa:fe:b7:70:a5:d7:b6: 5a:c0:f0:f4:cf:c4:a5:41:a1:87:54:1b:c2:e3:32:e7:32:a5: ce:d5:69:e7:54:9d:ef:f3:3b:5f:12:af:ff:fc:f9:62:36:47: cf:6b:47:ca -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUClPIsrxw0Q4D1RX5eEHT0f5Qgy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NTdaFw0yNDA3MjkwMDAzNTdaMDMxMTAvBgNV BAMTKDNFNjk2OTkzNjAzQkQ0MUJGQTRDREUyODJFNzU0NTlENjExRDQwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CLi8pgVBVSwaDGCRaW6frcc0 ZKOTKewyW6euTBsMaLGnMjWGYEV46dmHiKMf0YC541rrn9/IkZRlwEazUZ95F9+t 20fLB+4VPHM3qaE/ifw7OZmEVrweH+q5hf+2PjqKjx4FBjKCKZQh/x6/dXfQVumj jwZ246dwg2DPu7MMQ81Cvm4kzCpiBhZFubcoxFuAzdk6WJuc0rhvbJFbJ0flwkhw OOi7KNnstlq33BGbGfu6FnQQegZV2C3I+UAIMuOj3uNg0OWhwN1CZVNGslJNQf+K J7lvDzrURt1n0c4FDauS7i5LHtIPnxIQZqOS0TmyAmv5SKdkGN8MkOF1GYulAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPmlpk2A71Bv6TN4oLnVFnWEdQPgwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzEzNjJlMzYzODJlMzEzNjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHREpzANBgkqhkiG 9w0BAQsFAAOCAQEAcXFkfcZTdbRg1NqLBh6lVsjz9TYZvp8rN+FjGC4NLZ+fEcbs lQ5lrr2nzP7XW56BU6lWZk9xTpr8bkiRSM/pcY+tKOIhTcIl80pSKdrJU/Poq1Dg eP5fIjUidIATQmXCQTLzhaLiHLcrEpFKPNHwGEvPhWuTM5o9Qwh6DOyJ6AW3ysGl fzNTnxUAtOlcyVCzap5gM81FJKtiqHvzhVdcIT16XnLNy/eAEfXwNSOGm5lud4GR vUz9RwR0pru8nEy5zkNd+gcLGSQ6hIBsgaChQCaq/rdwpde2WsDw9M/EpUGhh1Qb wuMy5zKlztVp51Sd7/M7XxKv//z5YjZHz2tHyg== -----END CERTIFICATE-----Generated at Thu Apr 25 23:29:15 2024 by rpki-client on console-ams.rpki-client.org