$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32342d3234203d3e203138303539.roa File: 3135302e3130372e3130382e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: sqwvzQks4Z9t3zI1bz762/WjMlbW5UHwWPrydzGBZKE= Subject key identifier: 64:59:E5:10:46:F3:8F:0A:F0:9F:22:81:76:77:26:0D:99:8B:43:81 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 1A0E3FF0AC86D6AC15FA65249A6111A6D8CCE7E7 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32342d3234203d3e203138303539.roa Signing time: Fri 24 Nov 2023 04:01:31 +0000 ROA not before: Fri 24 Nov 2023 03:56:31 +0000 ROA not after: Fri 22 Nov 2024 04:01:31 +0000 asID: 18059 IP address blocks: 150.107.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 04:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0e:3f:f0:ac:86:d6:ac:15:fa:65:24:9a:61:11:a6:d8:cc:e7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Nov 24 03:56:31 2023 GMT Not After : Nov 22 04:01:31 2024 GMT Subject: CN=6459E51046F38F0AF09F22817677260D998B4381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:ee:ab:e2:3a:61:a0:f1:f2:29:ce:7d:a4: 4c:58:74:ed:b0:ca:57:8e:1e:60:14:2c:5d:30:7f: 61:8d:11:06:88:42:00:be:01:ce:37:8b:38:f4:b5: 74:36:93:25:11:aa:6b:65:bc:53:69:9b:8e:ce:98: 09:04:61:ca:ce:0a:f5:03:ed:85:94:42:e4:9d:a6: 20:11:c4:15:c8:4c:5d:3a:0a:57:d2:59:46:d5:25: 88:ac:a6:af:2b:54:3b:f1:a8:ef:0a:4d:15:75:a8: cc:36:61:1f:82:d8:42:8d:ec:85:20:92:a2:34:64: d6:ff:f3:4f:4c:b1:6c:b1:38:96:ed:16:5b:c7:fd: ff:fc:e9:02:e5:ed:58:e6:c8:d2:ca:a7:1c:07:13: 4c:cc:c2:3d:b3:98:99:2b:05:06:5c:99:85:66:dd: f5:5b:52:71:1b:e5:1e:1a:aa:05:5a:58:c0:4a:13: d7:ff:07:89:34:0f:e7:60:5a:af:0e:b8:d8:22:b1: 74:4e:4a:02:8e:c7:08:4f:77:94:52:07:86:dd:e3: be:44:b1:e7:dd:4a:67:a1:f2:0f:e8:fe:08:ed:8c: 2a:82:e9:8e:c1:87:bf:5e:63:b7:66:fa:33:21:4a: 70:1b:43:3e:93:bb:60:f4:de:50:c6:a0:f0:e5:7a: 24:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:59:E5:10:46:F3:8F:0A:F0:9F:22:81:76:77:26:0D:99:8B:43:81 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.108.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:22:cb:4a:51:70:d7:75:1a:16:15:4b:5c:bd:b8:f5:57:cf: 0e:bd:e6:1e:a1:78:10:fa:88:de:87:5d:b0:2b:83:1f:0f:4e: 80:f8:47:32:bf:e5:59:5a:75:e5:ea:51:be:c5:a6:47:aa:f5: 20:0f:cf:18:94:eb:7f:18:79:28:3c:d9:cc:02:e8:15:f8:27: b7:6e:a8:29:ae:cf:a7:da:40:a6:a8:0f:57:c3:be:78:5b:36: 73:65:95:f9:7f:0a:12:ad:b4:7e:37:32:33:1a:44:94:58:71: eb:d5:8c:8e:13:09:02:7a:69:0f:27:f0:24:0b:c6:dd:cd:ef: b9:44:37:9b:d9:b6:df:fd:f2:87:f1:2d:1e:c5:63:4d:f8:5d: 1f:c1:75:da:97:d1:45:67:1f:94:dd:b1:e1:bb:76:93:9d:de: 3f:4d:bd:f7:82:28:68:68:84:38:ed:ed:ae:2c:b2:56:e2:d6: 14:0b:0a:6c:26:2b:97:30:fc:43:29:ba:11:58:2c:b0:a5:c0: c8:95:74:ed:b6:5e:85:56:a2:0d:31:7d:f0:f3:cc:76:01:f3: 8c:6e:ff:e3:ed:78:6a:09:ed:6b:9c:95:15:3b:75:49:51:d2: 02:9e:4e:72:68:58:57:3e:b0:29:80:00:17:60:b0:a0:89:04: 6b:0f:4f:69 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGg4/8KyG1qwV+mUkmmERptjM5+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yMzExMjQwMzU2MzFaFw0yNDExMjIwNDAxMzFaMDMxMTAvBgNV BAMTKDY0NTlFNTEwNDZGMzhGMEFGMDlGMjI4MTc2NzcyNjBEOTk4QjQzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93+6r4jphoPHyKc59pExYdO2w yleOHmAULF0wf2GNEQaIQgC+Ac43izj0tXQ2kyURqmtlvFNpm47OmAkEYcrOCvUD 7YWUQuSdpiARxBXITF06ClfSWUbVJYispq8rVDvxqO8KTRV1qMw2YR+C2EKN7IUg kqI0ZNb/809MsWyxOJbtFlvH/f/86QLl7VjmyNLKpxwHE0zMwj2zmJkrBQZcmYVm 3fVbUnEb5R4aqgVaWMBKE9f/B4k0D+dgWq8OuNgisXROSgKOxwhPd5RSB4bd475E sefdSmeh8g/o/gjtjCqC6Y7Bh79eY7dm+jMhSnAbQz6Tu2D03lDGoPDleiQzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZFnlEEbzjwrwnyKBdncmDZmLQ4EwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzUzMDJlMzEzMDM3MmUzMTMwMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmtsMA0GCSqG SIb3DQEBCwUAA4IBAQCeIstKUXDXdRoWFUtcvbj1V88OveYeoXgQ+ojeh12wK4Mf D06A+Ecyv+VZWnXl6lG+xaZHqvUgD88YlOt/GHkoPNnMAugV+Ce3bqgprs+n2kCm qA9Xw754WzZzZZX5fwoSrbR+NzIzGkSUWHHr1YyOEwkCemkPJ/AkC8bdze+5RDeb 2bbf/fKH8S0exWNN+F0fwXXal9FFZx+U3bHhu3aTnd4/Tb33gihoaIQ47e2uLLJW 4tYUCwpsJiuXMPxDKboRWCywpcDIlXTttl6FVqINMX3w88x2AfOMbv/j7XhqCe1r nJUVO3VJUdICnk5yaFhXPrApgAAXYLCgiQRrD09p -----END CERTIFICATE-----Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org