$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132312e302f32342d3234203d3e203338353135.roa File: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (raw, json) Hash identifier: /XhHIwHo8WnEV+sB4ldQhjTnjYB+oajEU2P1xcI+hO0= Subject key identifier: 96:42:DA:A8:A4:6F:86:AD:78:FA:5C:10:5D:65:A2:AD:A7:46:6A:C9 Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 7BC2DE3D40180EC76514B737C5BF09104CB9CA0A Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132312e302f32342d3234203d3e203338353135.roa Signing time: Mon 31 Jul 2023 00:04:26 +0000 ROA not before: Sun 30 Jul 2023 23:59:26 +0000 ROA not after: Mon 29 Jul 2024 00:04:26 +0000 asID: 38515 IP address blocks: 117.74.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 19:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c2:de:3d:40:18:0e:c7:65:14:b7:37:c5:bf:09:10:4c:b9:ca:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Jul 30 23:59:26 2023 GMT Not After : Jul 29 00:04:26 2024 GMT Subject: CN=9642DAA8A46F86AD78FA5C105D65A2ADA7466AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:20:02:92:0e:80:50:9a:03:41:43:2c:3d:2b: 06:95:e0:71:be:34:9c:ba:ec:db:b4:95:a3:8c:be: b6:4d:4c:fb:02:7a:d3:ff:f2:44:2d:07:b1:e9:9f: 63:49:a4:74:b5:df:b8:b2:98:32:9f:52:c8:7a:9c: e1:2a:b0:15:59:7d:09:a5:fe:c4:5e:06:bf:49:28: a8:b9:87:ed:61:5c:47:83:cd:94:48:4f:3f:2f:8a: 64:8a:76:b8:41:ee:06:b3:da:32:b2:7d:f3:fe:7a: 0e:21:92:7b:1a:58:b3:ee:c8:cd:33:b6:b0:57:8b: c9:42:0c:dc:d9:a6:d3:b8:f1:6b:6f:81:3b:5a:b8: 21:dc:2e:69:2a:dd:61:05:ec:de:4a:1c:0b:b1:19: e8:84:20:c6:d4:a3:fb:4d:2f:ac:cc:58:e5:17:c7: d9:ff:a8:17:ed:c4:d1:63:6e:1c:79:96:c5:8c:33: be:ff:8e:47:18:ab:fd:e0:77:59:1b:70:c3:ed:3e: 20:5a:96:86:b6:ce:9f:d3:4e:32:0c:e1:d5:a1:93: 9b:0f:d4:4a:46:29:b7:b2:75:f9:48:e8:99:6e:02: 49:4c:fe:a6:2c:34:d7:81:5f:25:2f:2a:3b:e5:5c: d4:09:cb:13:8b:6c:b5:0d:39:d9:91:7a:f4:50:46: 78:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:42:DA:A8:A4:6F:86:AD:78:FA:5C:10:5D:65:A2:AD:A7:46:6A:C9 X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132312e302f32342d3234203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.121.0/24 Signature Algorithm: sha256WithRSAEncryption 51:15:d8:83:30:c2:c1:f4:1f:ec:01:8b:cf:60:53:b7:c8:5c: a7:7b:b6:7c:15:ee:f6:8a:16:8b:2a:4a:a3:a1:e3:34:a7:87: 15:8c:7b:c5:43:83:e3:d2:ed:b3:65:a5:97:0a:72:a0:81:63: 35:7c:1b:1c:15:bd:65:a6:13:81:45:2a:e6:01:d2:c9:6b:00: b2:2c:c7:e7:df:9f:24:dc:4a:a0:53:70:bc:f2:59:ab:1d:80: 7d:6a:9a:ab:91:d1:5f:e7:52:60:c9:df:08:a7:c9:6c:46:2d: de:f1:da:c8:44:24:18:5f:e1:fc:1c:8c:13:66:70:80:f9:ee: 8c:89:6b:7a:8d:0d:72:e3:05:8b:ba:30:c7:14:aa:01:3b:4a: 08:c0:08:d3:b3:86:0d:40:62:c5:7e:07:75:49:0c:52:f0:f5: 61:38:f9:a0:78:f2:4e:35:ae:68:82:2d:43:27:e6:7b:41:e1: 3e:75:87:e2:af:5e:1e:04:bc:e7:ef:5d:1f:f1:07:2e:04:83: ff:0e:6a:78:30:17:7c:df:6d:4f:4e:e3:9c:32:4b:84:24:51: aa:75:22:f2:6f:61:d5:35:f1:61:b0:95:58:50:c5:7f:29:0b: a9:81:a9:ea:a9:9f:d8:01:0d:8f:f8:c0:a5:71:4e:94:93:c2: 83:a8:2d:0a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUe8LePUAYDsdlFLc3xb8JEEy5ygowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yMzA3MzAyMzU5MjZaFw0yNDA3MjkwMDA0MjZaMDMxMTAvBgNV BAMTKDk2NDJEQUE4QTQ2Rjg2QUQ3OEZBNUMxMDVENjVBMkFEQTc0NjZBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgIAKSDoBQmgNBQyw9KwaV4HG+ NJy67Nu0laOMvrZNTPsCetP/8kQtB7Hpn2NJpHS137iymDKfUsh6nOEqsBVZfQml /sReBr9JKKi5h+1hXEeDzZRITz8vimSKdrhB7gaz2jKyffP+eg4hknsaWLPuyM0z trBXi8lCDNzZptO48WtvgTtauCHcLmkq3WEF7N5KHAuxGeiEIMbUo/tNL6zMWOUX x9n/qBftxNFjbhx5lsWMM77/jkcYq/3gd1kbcMPtPiBaloa2zp/TTjIM4dWhk5sP 1EpGKbeydflI6JluAklM/qYsNNeBXyUvKjvlXNQJyxOLbLUNOdmRevRQRnh/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUlkLaqKRvhq14+lwQXWWiradGaskwHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKeTANBgkqhkiG 9w0BAQsFAAOCAQEAURXYgzDCwfQf7AGLz2BTt8hcp3u2fBXu9ooWiypKo6HjNKeH FYx7xUOD49Lts2WllwpyoIFjNXwbHBW9ZaYTgUUq5gHSyWsAsizH59+fJNxKoFNw vPJZqx2AfWqaq5HRX+dSYMnfCKfJbEYt3vHayEQkGF/h/ByME2ZwgPnujIlreo0N cuMFi7owxxSqATtKCMAI07OGDUBixX4HdUkMUvD1YTj5oHjyTjWuaIItQyfme0Hh PnWH4q9eHgS85+9dH/EHLgSD/w5qeDAXfN9tT07jnDJLhCRRqnUi8m9h1TXxYbCV WFDFfykLqYGp6qmf2AENj/jApXFOlJPCg6gtCg== -----END CERTIFICATE-----Generated at Fri Apr 19 16:11:06 2024 by rpki-client on console-ams.rpki-client.org