$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa File: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (raw, json) Hash identifier: 44mQnudp+URZWssjEVYQtzaZvgwN4521TKT9tJE9Uv8= Subject key identifier: 33:2D:AF:4E:CE:AB:CB:AB:21:84:EA:C2:DC:0A:74:A1:8C:F9:39:02 Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 1F0A3FEEFBE7B95CBE791FE8584D3BB280A28331 Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa Signing time: Tue 13 Feb 2024 04:00:00 +0000 ROA not before: Tue 13 Feb 2024 03:55:00 +0000 ROA not after: Tue 11 Feb 2025 04:00:00 +0000 asID: 38515 IP address blocks: 117.74.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0a:3f:ee:fb:e7:b9:5c:be:79:1f:e8:58:4d:3b:b2:80:a2:83:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Feb 13 03:55:00 2024 GMT Not After : Feb 11 04:00:00 2025 GMT Subject: CN=332DAF4ECEABCBAB2184EAC2DC0A74A18CF93902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:1a:4a:fa:f3:b0:31:c2:fd:99:8a:12:bc: fd:fe:7a:a3:65:2e:fe:5f:be:6d:0e:01:3d:40:69: cb:45:06:66:87:de:0e:61:65:e0:5c:a2:ea:3d:f8: 4e:5a:ed:fe:50:ec:f1:de:d6:86:c1:28:c3:8b:fc: cd:90:ef:62:f4:bd:da:aa:80:4f:e7:3d:6f:25:e2: 05:1f:5f:70:bd:9a:e8:c2:ab:a9:36:67:87:6f:ad: 87:d1:f0:17:84:5b:a3:39:8e:da:a9:10:3c:50:5b: 77:a9:6d:15:6b:04:31:ae:f5:02:26:15:8c:6d:3c: 1f:0c:f7:81:35:07:bf:19:db:60:c0:48:4f:65:3a: 1a:11:03:0c:30:79:3d:32:f5:27:d0:52:49:67:b7: f8:f1:00:fe:7c:4e:36:bf:39:cd:f5:15:d5:83:05: 45:40:af:9c:6a:57:8d:39:69:24:59:17:3a:41:35: ee:27:64:0b:c7:e6:10:d3:30:3d:f9:03:68:03:39: e1:27:31:6e:b9:d1:74:b2:4b:d3:ed:8b:02:d8:48: e2:c9:b0:78:7d:09:b9:10:da:01:34:0a:7a:d0:4f: b7:79:5f:47:69:2b:ca:6c:62:09:98:86:cf:01:31: d2:cf:25:05:85:1c:65:ff:f4:9b:46:34:4c:a2:db: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:AF:4E:CE:AB:CB:AB:21:84:EA:C2:DC:0A:74:A1:8C:F9:39:02 X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.127.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:2a:96:1a:53:01:fe:ef:67:1b:61:d4:14:fe:7b:bf:03:60: 4b:b2:00:e8:84:df:60:a4:88:01:86:29:d5:ed:89:19:e1:91: 01:4a:97:85:0c:88:e7:7e:e0:bb:74:5d:34:86:42:bf:c6:a4: 03:c7:cf:e7:6c:17:5c:73:b3:80:cf:db:70:78:a4:fc:42:78: f0:72:66:dc:ba:46:2a:37:b6:cb:fc:e1:f3:58:5c:5a:64:54: ab:1f:d9:72:03:47:e8:8a:48:ee:35:32:86:70:69:f0:dd:64: ea:be:50:6f:b4:e9:58:47:ba:a8:e0:2a:70:ff:05:a1:e9:10: 1d:d2:80:49:c7:60:6b:58:92:52:8b:22:3f:27:19:a7:13:7c: c3:5b:af:ea:c9:be:4f:3c:f8:65:3c:33:00:df:d1:3f:af:df: 00:c7:69:76:f3:06:e6:04:b4:4e:0a:8b:3a:d4:8a:c7:95:99: f6:0e:f7:a7:98:b0:47:c1:5f:bf:79:f0:2f:71:da:7a:bd:ea: 0f:f8:c8:db:93:82:f1:a2:0c:cf:32:44:5b:5d:89:03:10:dd: f8:2d:b8:ca:45:38:3d:32:0c:de:d2:c6:df:fc:24:e0:88:fd: c5:d3:11:91:9d:4d:61:5d:0d:81:9f:dc:2b:1d:b6:55:c1:56: b1:f0:3a:94 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHwo/7vvnuVy+eR/oWE07soCigzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNDAyMTMwMzU1MDBaFw0yNTAyMTEwNDAwMDBaMDMxMTAvBgNV BAMTKDMzMkRBRjRFQ0VBQkNCQUIyMTg0RUFDMkRDMEE3NEExOENGOTM5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NBpK+vOwMcL9mYoSvP3+eqNl Lv5fvm0OAT1AactFBmaH3g5hZeBcouo9+E5a7f5Q7PHe1obBKMOL/M2Q72L0vdqq gE/nPW8l4gUfX3C9mujCq6k2Z4dvrYfR8BeEW6M5jtqpEDxQW3epbRVrBDGu9QIm FYxtPB8M94E1B78Z22DASE9lOhoRAwwweT0y9SfQUklnt/jxAP58Tja/Oc31FdWD BUVAr5xqV405aSRZFzpBNe4nZAvH5hDTMD35A2gDOeEnMW650XSyS9PtiwLYSOLJ sHh9CbkQ2gE0CnrQT7d5X0dpK8psYgmYhs8BMdLPJQWFHGX/9JtGNEyi21eJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMy2vTs6ry6shhOrC3Ap0oYz5OQIwHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKfzANBgkqhkiG 9w0BAQsFAAOCAQEAfiqWGlMB/u9nG2HUFP57vwNgS7IA6ITfYKSIAYYp1e2JGeGR AUqXhQyI537gu3RdNIZCv8akA8fP52wXXHOzgM/bcHik/EJ48HJm3LpGKje2y/zh 81hcWmRUqx/ZcgNH6IpI7jUyhnBp8N1k6r5Qb7TpWEe6qOAqcP8FoekQHdKAScdg a1iSUosiPycZpxN8w1uv6sm+Tzz4ZTwzAN/RP6/fAMdpdvMG5gS0TgqLOtSKx5WZ 9g73p5iwR8Ffv3nwL3Haer3qD/jI25OC8aIMzzJEW12JAxDd+C24ykU4PTIM3tLG 3/wk4Ij9xdMRkZ1NYV0NgZ/cKx22VcFWsfA6lA== -----END CERTIFICATE-----Generated at Sun May 5 11:44:51 2024 by rpki-client on console-ams.rpki-client.org