$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa File: 3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa (raw, json) Hash identifier: OIslYDsE7cbNj9ngLFKFvRZUw+1VsfV13zpqqJ1jAoQ= Subject key identifier: 76:DF:FD:B8:90:65:17:C0:BC:A3:84:F6:B7:10:FA:FD:25:83:D0:06 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 342B01F79B3CB8058C9D3566B7907DFA6482278B Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa Signing time: Mon 31 Jul 2023 00:13:02 +0000 ROA not before: Mon 31 Jul 2023 00:08:02 +0000 ROA not after: Mon 29 Jul 2024 00:13:02 +0000 asID: 55685 IP address blocks: 124.158.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Mar 2024 20:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2b:01:f7:9b:3c:b8:05:8c:9d:35:66:b7:90:7d:fa:64:82:27:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Jul 31 00:08:02 2023 GMT Not After : Jul 29 00:13:02 2024 GMT Subject: CN=76DFFDB8906517C0BCA384F6B710FAFD2583D006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7a:88:97:f7:06:fc:f0:d2:72:48:d3:1b:59: 50:6d:51:ff:28:2b:fd:16:c6:0a:4d:4a:f0:e4:8f: 45:aa:ef:6c:0b:ca:1b:5b:45:7f:a0:5a:23:a1:ef: 13:0f:12:34:af:20:9d:d0:1e:22:a2:ab:46:8b:88: 18:3f:db:11:dd:1b:d8:1f:f3:c0:7d:00:39:68:ed: 64:bc:5f:0c:31:4b:04:e1:7d:d4:57:96:d2:37:6e: d4:c2:06:a7:ff:f3:17:2a:fe:c4:bb:40:81:87:9c: 75:d3:61:aa:cd:96:16:45:58:94:c0:2d:39:2d:25: 4c:c3:18:13:6a:53:03:41:3c:35:54:0e:b8:48:5d: f3:5a:12:55:93:c6:46:e6:8f:0b:9c:3c:72:9f:68: 61:a3:f8:3a:25:40:2c:d6:e2:a8:6c:4d:c5:12:e8: 05:80:0c:e8:b0:0a:e1:a5:a5:43:b8:c9:e3:23:20: f1:c1:a7:59:3e:ca:8d:0b:a3:3e:ce:70:14:dd:8c: 72:19:cd:1c:1c:4a:17:c8:fc:6b:ba:15:1d:d6:5d: bd:0b:93:c5:9c:f0:98:37:af:d2:b8:91:77:8a:5f: a4:36:f0:41:a5:0c:c0:82:5b:82:85:32:3e:7f:bd: 5b:be:14:47:a8:09:ed:77:66:f6:d2:ca:10:cb:60: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DF:FD:B8:90:65:17:C0:BC:A3:84:F6:B7:10:FA:FD:25:83:D0:06 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.176.0/20 Signature Algorithm: sha256WithRSAEncryption 49:f0:24:28:de:95:85:35:b6:b9:91:e7:d1:1d:3b:58:41:38: ef:2c:03:45:ba:a4:02:00:27:fc:dd:eb:05:15:2d:81:75:07: ce:ca:c8:b1:30:c1:95:aa:e6:0f:fd:d2:47:00:60:09:28:79: 59:a9:ba:e4:12:2b:6b:5a:25:7b:80:80:df:2c:7d:77:f6:eb: b6:0d:78:8d:d5:d5:7a:2e:f7:21:6f:c5:b7:78:18:b4:dd:2a: 72:5c:dc:1e:a8:51:a9:f6:29:60:df:98:5e:b5:aa:19:21:98: 38:fb:5f:eb:e5:ad:5c:56:a2:28:d6:0a:5a:d3:9d:a6:bc:76: 5a:20:b1:ca:70:b3:1c:16:5d:7a:9d:42:e9:4e:4e:d6:f2:84: 15:9e:31:83:90:4b:62:a8:79:06:5d:ab:e3:7a:81:f7:89:98: 7e:88:8d:d9:4b:6e:1b:47:d1:4d:f6:20:b3:6d:1d:f7:c0:0e: db:87:43:2a:32:d1:1f:1b:2a:6a:04:89:2f:f8:2f:31:58:bb: 85:38:6a:37:f8:c2:e7:1f:37:c5:12:43:8c:37:00:57:c3:19: 28:a0:bf:d2:93:54:b4:64:7c:a0:76:c4:96:d7:5a:d5:52:4f: a4:d2:e7:8b:57:dd:d6:a4:13:a3:af:b7:1d:7f:fd:52:91:18: 3d:50:d9:c2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNCsB95s8uAWMnTVmt5B9+mSCJ4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yMzA3MzEwMDA4MDJaFw0yNDA3MjkwMDEzMDJaMDMxMTAvBgNV BAMTKDc2REZGREI4OTA2NTE3QzBCQ0EzODRGNkI3MTBGQUZEMjU4M0QwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVeoiX9wb88NJySNMbWVBtUf8o K/0WxgpNSvDkj0Wq72wLyhtbRX+gWiOh7xMPEjSvIJ3QHiKiq0aLiBg/2xHdG9gf 88B9ADlo7WS8XwwxSwThfdRXltI3btTCBqf/8xcq/sS7QIGHnHXTYarNlhZFWJTA LTktJUzDGBNqUwNBPDVUDrhIXfNaElWTxkbmjwucPHKfaGGj+DolQCzW4qhsTcUS 6AWADOiwCuGlpUO4yeMjIPHBp1k+yo0Loz7OcBTdjHIZzRwcShfI/Gu6FR3WXb0L k8Wc8Jg3r9K4kXeKX6Q28EGlDMCCW4KFMj5/vVu+FEeoCe13ZvbSyhDLYIhXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdt/9uJBlF8C8o4T2txD6/SWD0AYwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzIzNDJlMzEzNTM4MmUzMTM3MzYyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEfJ6wMA0GCSqG SIb3DQEBCwUAA4IBAQBJ8CQo3pWFNba5kefRHTtYQTjvLANFuqQCACf83esFFS2B dQfOysixMMGVquYP/dJHAGAJKHlZqbrkEitrWiV7gIDfLH139uu2DXiN1dV6Lvch b8W3eBi03SpyXNweqFGp9ilg35hetaoZIZg4+1/r5a1cVqIo1gpa052mvHZaILHK cLMcFl16nULpTk7W8oQVnjGDkEtiqHkGXavjeoH3iZh+iI3ZS24bR9FN9iCzbR33 wA7bh0MqMtEfGypqBIkv+C8xWLuFOGo3+MLnHzfFEkOMNwBXwxkooL/Sk1S0ZHyg dsSW11rVUk+k0ueLV93WpBOjr7cdf/1SkRg9UNnC -----END CERTIFICATE-----Generated at Wed Mar 27 18:48:30 2024 by rpki-client on console-fra.rpki-client.org