$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203536323436.roa File: 3131362e36382e3136392e302f32342d3234203d3e203536323436.roa (raw, json) Hash identifier: wDw9gcGI1FgUjeZkhCjepzk8IMi5fTNwwrAA7htMJ+A= Subject key identifier: CF:37:69:06:C2:35:45:45:5A:C1:7E:B4:09:40:8D:B4:17:37:72:33 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 265FC03E368FBD626D2B2F5BE08C27ABF0CEC774 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203536323436.roa Signing time: Mon 31 Jul 2023 00:03:56 +0000 ROA not before: Sun 30 Jul 2023 23:58:56 +0000 ROA not after: Mon 29 Jul 2024 00:03:56 +0000 asID: 56246 IP address blocks: 116.68.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Mar 2024 18:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5f:c0:3e:36:8f:bd:62:6d:2b:2f:5b:e0:8c:27:ab:f0:ce:c7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 30 23:58:56 2023 GMT Not After : Jul 29 00:03:56 2024 GMT Subject: CN=CF376906C23545455AC17EB409408DB417377233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:2a:76:8e:b2:e0:1c:ea:15:6b:50:76:05: f2:a2:74:45:86:7e:ad:4a:05:a2:89:26:23:57:15: 19:c2:6d:ea:70:19:10:ba:7d:4f:0b:c0:71:5e:91: 97:05:3c:93:1b:ff:06:09:78:bc:bb:ad:fb:a9:4d: d3:1a:46:67:d0:db:94:d8:ac:6d:3e:06:99:63:75: e5:d1:dd:19:b5:ae:e5:aa:5b:68:9c:43:c9:65:d9: 54:6b:52:10:b3:14:bd:d2:e8:ec:9e:d3:7a:45:20: a5:9d:c3:f9:2b:65:65:dd:b4:52:e1:64:e6:3f:79: 1a:7e:6e:70:13:8a:f7:7f:da:13:28:ca:f4:7e:39: 3e:27:a1:4a:8c:e4:bb:0e:05:e7:23:83:05:c6:de: 33:0b:09:9a:3c:e6:89:d4:51:78:63:ea:18:d8:00: b3:d4:97:e1:bd:f6:d6:29:7b:14:7e:de:d1:08:7b: c5:51:0c:57:6f:7c:85:9d:57:b6:c1:d1:fa:b9:89: d6:95:b2:04:75:59:41:66:ec:c2:4a:6b:c5:e9:57: 65:12:90:95:87:32:9d:51:e8:74:55:3a:1b:0f:f4: 88:d7:43:67:30:14:25:dc:63:7f:b1:0e:e0:92:73: f4:5d:92:04:77:a2:01:ac:8c:3a:f9:b0:b6:c2:df: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:37:69:06:C2:35:45:45:5A:C1:7E:B4:09:40:8D:B4:17:37:72:33 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.68.169.0/24 Signature Algorithm: sha256WithRSAEncryption 26:13:e3:25:ef:58:64:a4:9f:56:16:f9:73:bf:43:e6:7c:a6: c0:6d:cb:28:18:0b:12:f9:09:f7:a4:57:e5:15:60:36:9d:48: 58:9f:9e:ff:49:3c:89:86:ce:b0:48:b9:aa:40:e7:f6:7a:a7: da:6e:27:46:3e:f1:2e:ec:bf:be:0a:be:7d:57:57:d6:78:39: d9:c2:d6:63:55:46:47:0d:11:a5:4c:ce:ca:22:a7:ce:7e:77: 04:cb:2b:e8:1d:ed:ff:7c:a2:28:b9:83:4d:ce:f2:96:a4:40: a1:cc:65:e1:01:dd:0b:5b:97:2d:6f:50:79:a2:e3:0b:77:ff: 15:9a:ec:1d:53:1b:49:6b:27:fb:da:99:0b:66:87:2f:c1:d3: 05:24:eb:41:2f:cd:7d:75:64:f4:38:b8:67:63:e7:06:09:db: ea:1c:45:3e:2d:2b:2e:60:cd:75:2c:8c:aa:62:d8:99:e6:48: b6:74:47:a6:20:1d:c9:dc:9d:68:e1:f5:5e:8d:7b:a6:77:48: eb:e7:e6:37:6b:0b:f4:df:67:4b:8c:1e:09:02:cf:5e:4a:d3: b4:92:9b:cc:8d:1e:67:6e:3c:5f:92:ac:1d:1d:e7:d0:fd:eb: 1c:20:f4:b8:87:fb:5e:54:e1:8a:15:3d:f4:91:04:63:27:d0: 0d:35:af:39 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJl/APjaPvWJtKy9b4Iwnq/DOx3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NTZaFw0yNDA3MjkwMDAzNTZaMDMxMTAvBgNV BAMTKENGMzc2OTA2QzIzNTQ1NDU1QUMxN0VCNDA5NDA4REI0MTczNzcyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllip2jrLgHOoVa1B2BfKidEWG fq1KBaKJJiNXFRnCbepwGRC6fU8LwHFekZcFPJMb/wYJeLy7rfupTdMaRmfQ25TY rG0+BpljdeXR3Rm1ruWqW2icQ8ll2VRrUhCzFL3S6Oye03pFIKWdw/krZWXdtFLh ZOY/eRp+bnATivd/2hMoyvR+OT4noUqM5LsOBecjgwXG3jMLCZo85onUUXhj6hjY ALPUl+G99tYpexR+3tEIe8VRDFdvfIWdV7bB0fq5idaVsgR1WUFm7MJKa8XpV2US kJWHMp1R6HRVOhsP9IjXQ2cwFCXcY3+xDuCSc/RdkgR3ogGsjDr5sLbC38VPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzzdpBsI1RUVawX60CUCNtBc3cjMwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzEzNjJlMzYzODJlMzEzNjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHREqTANBgkqhkiG 9w0BAQsFAAOCAQEAJhPjJe9YZKSfVhb5c79D5nymwG3LKBgLEvkJ96RX5RVgNp1I WJ+e/0k8iYbOsEi5qkDn9nqn2m4nRj7xLuy/vgq+fVdX1ng52cLWY1VGRw0RpUzO yiKnzn53BMsr6B3t/3yiKLmDTc7ylqRAocxl4QHdC1uXLW9QeaLjC3f/FZrsHVMb SWsn+9qZC2aHL8HTBSTrQS/NfXVk9Di4Z2PnBgnb6hxFPi0rLmDNdSyMqmLYmeZI tnRHpiAdydydaOH1Xo17pndI6+fmN2sL9N9nS4weCQLPXkrTtJKbzI0eZ248X5Ks HR3n0P3rHCD0uIf7XlThihU99JEEYyfQDTWvOQ== -----END CERTIFICATE-----Generated at Wed Mar 27 15:54:32 2024 by rpki-client on console-fra.rpki-client.org