$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa File: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (raw, json) Hash identifier: j3wp/CH+fF/TV6bSFjOGMC3Y+s3y8mNW3QfOPMhtK6U= Subject key identifier: 39:85:B6:66:37:69:26:1C:58:90:79:DA:A3:DD:8A:81:5E:35:DA:C4 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 41C9C22201D5D99DEC814690B5C31D40733FB30F Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa Signing time: Mon 31 Jul 2023 00:02:33 +0000 ROA not before: Sun 30 Jul 2023 23:57:33 +0000 ROA not after: Mon 29 Jul 2024 00:02:33 +0000 asID: 45287 IP address blocks: 175.176.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 12:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c9:c2:22:01:d5:d9:9d:ec:81:46:90:b5:c3:1d:40:73:3f:b3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Jul 30 23:57:33 2023 GMT Not After : Jul 29 00:02:33 2024 GMT Subject: CN=3985B6663769261C589079DAA3DD8A815E35DAC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:fa:34:07:24:6d:3c:c7:26:d1:1d:fb:57: 5b:20:76:4c:c4:50:9d:0b:5b:30:d2:11:86:9d:da: 40:4b:0d:a3:3b:fb:e0:e8:6f:81:7d:ea:46:40:95: ff:d3:1e:56:ce:1d:4c:9e:fd:20:bf:d8:da:df:79: 51:bc:6b:86:bf:6e:3f:aa:4c:80:e3:0e:87:fa:e8: fc:53:52:92:86:27:db:99:84:fd:b4:99:8c:a0:6a: 44:26:bd:01:4f:12:be:35:a7:8b:ca:06:3a:85:96: 19:14:11:80:ae:dd:f0:38:ee:42:c7:35:e6:61:a7: 7d:79:fc:fc:d0:36:67:73:5b:38:e6:ba:3e:62:b2: 63:c6:7a:08:dd:7d:38:4c:30:f0:5b:ae:19:67:d4: 85:0c:11:f9:74:57:e7:b8:67:cf:41:9d:9c:00:74: 7e:58:bc:b0:e9:36:7b:2c:73:7d:9a:c3:18:02:95: 81:34:0a:a0:79:a4:d3:92:8e:fd:99:74:68:19:2a: ee:ba:5b:f9:78:57:53:5d:72:25:36:e2:be:3b:f2: eb:34:ab:f5:10:22:2b:7c:35:48:1f:7d:b0:59:71: 40:fe:8b:08:29:d3:50:ac:37:a0:8b:83:44:8a:55: 04:02:77:3d:3a:b1:5e:f7:34:75:7c:ab:f5:da:ed: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:85:B6:66:37:69:26:1C:58:90:79:DA:A3:DD:8A:81:5E:35:DA:C4 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.176.160.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:09:2c:fd:5d:90:a9:b2:69:02:9d:74:25:1d:ed:b6:1a:32: ba:4f:58:81:1e:f4:ad:32:45:c3:8b:d0:3b:61:59:3f:b1:3b: 95:78:b6:39:91:02:ea:ee:97:68:92:ec:b0:9c:0e:b6:34:07: 8e:34:9d:69:a1:4c:64:98:d9:77:f5:9d:2e:fb:8e:ba:ad:19: 18:4f:a6:e0:d5:c8:23:8e:c1:30:15:a3:ca:1b:f8:d6:44:97: 45:f6:fe:15:78:b2:4f:7f:42:bc:32:65:2e:44:4a:cf:d1:30: 99:4c:7f:65:b6:33:24:49:50:e3:27:9d:f7:98:1c:af:c5:27: 53:ed:47:f6:4e:cb:65:99:a6:2b:3d:3e:c8:24:23:36:a1:09: 1a:f4:3c:91:38:5a:f9:46:ed:cf:af:89:af:3e:9c:82:a5:85: 1d:92:3b:c3:ba:36:40:16:9c:7e:45:ee:61:2b:32:16:cc:08: ec:c4:00:14:7a:17:57:e7:87:e3:f7:0a:e3:d0:3b:65:21:54: 53:3d:ea:cd:6d:84:af:49:3c:87:75:b6:a9:98:76:b1:34:81: 99:5a:36:0e:31:cf:37:ea:ea:10:e7:6a:f4:4b:ff:5a:b1:c5: 2a:65:4b:df:52:66:15:c2:ce:91:f6:a1:1e:fa:06:40:7a:41: c3:1d:d2:29 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQcnCIgHV2Z3sgUaQtcMdQHM/sw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yMzA3MzAyMzU3MzNaFw0yNDA3MjkwMDAyMzNaMDMxMTAvBgNV BAMTKDM5ODVCNjY2Mzc2OTI2MUM1ODkwNzlEQUEzREQ4QTgxNUUzNURBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuPo0ByRtPMcm0R37V1sgdkzE UJ0LWzDSEYad2kBLDaM7++Dob4F96kZAlf/THlbOHUye/SC/2NrfeVG8a4a/bj+q TIDjDof66PxTUpKGJ9uZhP20mYygakQmvQFPEr41p4vKBjqFlhkUEYCu3fA47kLH NeZhp315/PzQNmdzWzjmuj5ismPGegjdfThMMPBbrhln1IUMEfl0V+e4Z89BnZwA dH5YvLDpNnssc32awxgClYE0CqB5pNOSjv2ZdGgZKu66W/l4V1NdciU24r478us0 q/UQIit8NUgffbBZcUD+iwgp01CsN6CLg0SKVQQCdz06sV73NHV8q/Xa7X+9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOYW2ZjdpJhxYkHnao92KgV412sQwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i MDY3LWEwYzZhODQwYTNhOS8wLzMxMzczNTJlMzEzNzM2MmUzMTM2MzAyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzNDM1MzIzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDr7CgMA0GCSqG SIb3DQEBCwUAA4IBAQBNCSz9XZCpsmkCnXQlHe22GjK6T1iBHvStMkXDi9A7YVk/ sTuVeLY5kQLq7pdokuywnA62NAeONJ1poUxkmNl39Z0u+466rRkYT6bg1cgjjsEw FaPKG/jWRJdF9v4VeLJPf0K8MmUuRErP0TCZTH9ltjMkSVDjJ533mByvxSdT7Uf2 TstlmaYrPT7IJCM2oQka9DyROFr5Ru3Pr4mvPpyCpYUdkjvDujZAFpx+Re5hKzIW zAjsxAAUehdX54fj9wrj0DtlIVRTPerNbYSvSTyHdbapmHaxNIGZWjYOMc836uoQ 52r0S/9ascUqZUvfUmYVws6R9qEe+gZAekHDHdIp -----END CERTIFICATE-----Generated at Tue Apr 23 18:27:47 2024 by rpki-client on console-fra.rpki-client.org