$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131312e302f32342d3234203d3e203138303539.roa File: 3135302e3130372e3131312e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: G/tTC+jC2HS8tURbx4IX9eCJLZCP9jp2RXscwl8CdgA= Subject key identifier: 22:F7:ED:80:65:8F:60:EE:89:97:F1:C2:5F:10:9F:0A:01:D3:0B:F9 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 42C51FE08B79E92C86E91B70258143D02328F714 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131312e302f32342d3234203d3e203138303539.roa Signing time: Fri 24 Nov 2023 04:05:05 +0000 ROA not before: Fri 24 Nov 2023 04:00:05 +0000 ROA not after: Fri 22 Nov 2024 04:05:05 +0000 asID: 18059 IP address blocks: 150.107.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 04:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c5:1f:e0:8b:79:e9:2c:86:e9:1b:70:25:81:43:d0:23:28:f7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Nov 24 04:00:05 2023 GMT Not After : Nov 22 04:05:05 2024 GMT Subject: CN=22F7ED80658F60EE8997F1C25F109F0A01D30BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:1b:32:dc:f6:ed:de:7d:b2:dd:70:d6:57: 2d:96:71:d4:d1:04:91:fd:7e:90:81:a1:7d:b9:72: ea:82:3c:d0:ff:5d:88:30:8e:6e:ab:7f:91:6f:14: 2e:39:0d:7b:24:42:48:6d:d6:77:8b:b1:db:ae:3d: 5c:62:ab:84:b0:c8:a5:f4:dc:76:2f:06:17:6a:8d: d7:e6:b7:98:85:bb:fb:53:72:f4:5c:a5:1f:9f:72: ee:74:e8:00:2e:16:86:20:0c:87:cf:74:69:2e:35: ef:4b:83:c9:12:01:69:89:b4:11:76:96:3c:09:d9: 67:f5:85:db:c5:77:18:96:75:59:6c:04:aa:ee:23: e1:a8:dd:73:29:28:c0:94:56:a7:fd:74:74:36:98: 7f:0e:76:3d:00:73:1c:82:ca:89:0c:fd:7c:1f:82: b7:38:f9:54:a7:f8:85:d5:34:a7:a0:b8:02:74:4d: 3c:70:79:45:10:aa:a1:c2:52:d2:ed:61:83:a2:87: 73:94:3f:8a:7a:4a:7b:73:af:28:8b:cf:5e:91:d8: fb:de:36:37:c0:19:2e:1e:ee:4d:7c:2a:68:68:c1: b4:1f:2a:ba:d3:10:68:11:df:84:22:8b:b2:8e:7b: dc:df:40:10:a6:bf:b6:3a:45:c0:52:19:9b:f0:44: 65:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F7:ED:80:65:8F:60:EE:89:97:F1:C2:5F:10:9F:0A:01:D3:0B:F9 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131312e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.111.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:9e:c6:d3:f4:67:e1:47:bc:99:6a:e0:9b:35:99:6c:1e:a2: bf:22:58:2f:e3:21:1d:a5:9e:8c:8c:78:8f:56:ee:33:0d:d6: a2:7b:24:85:53:be:8f:38:4d:a2:a1:74:74:ef:ac:8c:07:09: 7f:f3:7e:c6:d0:a3:ea:a5:91:5d:d9:f3:57:78:c1:89:30:77: 64:b6:e8:2a:74:8d:9a:11:0d:c7:84:c6:cb:f9:86:45:fc:b9: ae:00:77:b9:c7:aa:c5:d7:3d:a8:a3:57:27:d8:e8:3b:f2:e7: 8c:9e:8f:e2:bc:02:0c:53:56:6b:d4:50:1e:f7:8a:de:04:1f: 66:d5:ae:7e:64:e0:f0:5c:37:2a:44:e0:2b:b8:ea:ae:dc:37: de:0f:35:39:67:83:5b:6a:62:73:4e:01:86:65:30:29:45:80: 10:e0:bc:fa:d4:3f:92:c0:ee:f3:bb:f1:d8:c7:7b:11:9c:ca: e7:24:f2:62:eb:13:57:25:b2:1e:1c:94:de:2b:b5:ba:7d:a6: e4:a2:cf:b1:ab:21:da:be:6e:26:82:a7:5c:46:5c:11:2a:50: f8:f8:17:b9:20:4e:09:42:ac:26:a9:7f:76:78:93:47:4d:8c: 51:87:c2:97:e8:8c:70:e1:84:8c:cb:f2:f6:42:18:95:3d:d4: af:4d:3e:22 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQsUf4It56SyG6RtwJYFD0CMo9xQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yMzExMjQwNDAwMDVaFw0yNDExMjIwNDA1MDVaMDMxMTAvBgNV BAMTKDIyRjdFRDgwNjU4RjYwRUU4OTk3RjFDMjVGMTA5RjBBMDFEMzBCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLhsy3Pbt3n2y3XDWVy2WcdTR BJH9fpCBoX25cuqCPND/XYgwjm6rf5FvFC45DXskQkht1neLsduuPVxiq4SwyKX0 3HYvBhdqjdfmt5iFu/tTcvRcpR+fcu506AAuFoYgDIfPdGkuNe9Lg8kSAWmJtBF2 ljwJ2Wf1hdvFdxiWdVlsBKruI+Go3XMpKMCUVqf9dHQ2mH8Odj0AcxyCyokM/Xwf grc4+VSn+IXVNKeguAJ0TTxweUUQqqHCUtLtYYOih3OUP4p6SntzryiLz16R2Pve NjfAGS4e7k18KmhowbQfKrrTEGgR34Qii7KOe9zfQBCmv7Y6RcBSGZvwRGWRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIvftgGWPYO6Jl/HCXxCfCgHTC/kwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzUzMDJlMzEzMDM3MmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmtvMA0GCSqG SIb3DQEBCwUAA4IBAQBcnsbT9GfhR7yZauCbNZlsHqK/Ilgv4yEdpZ6MjHiPVu4z DdaieySFU76POE2ioXR076yMBwl/837G0KPqpZFd2fNXeMGJMHdktugqdI2aEQ3H hMbL+YZF/LmuAHe5x6rF1z2oo1cn2Og78ueMno/ivAIMU1Zr1FAe94reBB9m1a5+ ZODwXDcqROAruOqu3DfeDzU5Z4NbamJzTgGGZTApRYAQ4Lz61D+SwO7zu/HYx3sR nMrnJPJi6xNXJbIeHJTeK7W6fabkos+xqyHavm4mgqdcRlwRKlD4+Be5IE4JQqwm qX92eJNHTYxRh8KX6Ixw4YSMy/L2QhiVPdSvTT4i -----END CERTIFICATE-----Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org