$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa File: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (raw, json) Hash identifier: 8FyOQikIKGeUxEIT0fPv9QKFM2W9cd3sSB4YXskxGjM= Subject key identifier: 23:34:57:C0:4B:48:3B:D4:A1:7B:E1:03:3E:16:5C:40:B9:B6:A0:2E Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 46B8FBD84113E09BD090B33B8B01FC51F23D0AA3 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa Signing time: Wed 07 Jun 2023 10:19:15 +0000 ROA not before: Wed 07 Jun 2023 10:14:15 +0000 ROA not after: Wed 05 Jun 2024 10:19:15 +0000 asID: 46032 IP address blocks: 118.151.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 12:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b8:fb:d8:41:13:e0:9b:d0:90:b3:3b:8b:01:fc:51:f2:3d:0a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Jun 7 10:14:15 2023 GMT Not After : Jun 5 10:19:15 2024 GMT Subject: CN=233457C04B483BD4A17BE1033E165C40B9B6A02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:62:d0:b6:4f:25:e0:3d:2d:f1:6d:c1:49: 02:28:c6:1c:70:44:2d:58:df:39:51:02:9a:c6:0d: 4c:43:94:58:72:3c:b9:8d:0b:ec:2f:97:e7:1d:a7: 6e:f1:7d:b6:5a:cf:27:a9:85:96:6b:2c:05:a2:bc: be:23:25:0a:9e:d1:3c:97:50:18:00:a8:ab:d7:5c: a9:8f:2a:f3:a7:35:45:25:fb:34:c7:43:39:e7:d3: b9:2f:60:51:82:4e:06:aa:e9:6d:1e:ae:69:a7:9e: 12:98:0b:cd:6e:4f:73:08:e0:32:c8:66:21:7c:9f: c7:e5:c6:56:43:08:1b:30:be:4a:ed:02:92:40:82: 67:b3:02:d6:f0:78:ad:86:c0:6f:68:99:ce:3a:17: 20:a4:17:93:d6:a2:41:ab:da:eb:29:0f:57:0a:70: fe:3e:10:2f:0c:1d:fb:c2:1a:b6:45:ee:ed:36:15: a4:91:0f:c7:56:1c:24:d7:2a:1c:8c:e5:0e:af:18: 99:f1:32:f1:a8:71:75:e0:68:fe:be:fe:ee:21:1c: eb:45:f4:99:26:59:68:d9:dd:0b:95:ce:d7:54:e1: 1b:36:1f:ee:36:bc:cc:a3:9b:b0:3a:27:d7:92:a3: be:61:96:98:ac:0d:3a:4a:3b:76:30:38:e3:b3:67: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:57:C0:4B:48:3B:D4:A1:7B:E1:03:3E:16:5C:40:B9:B6:A0:2E X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.151.223.0/24 Signature Algorithm: sha256WithRSAEncryption 46:4e:73:87:5f:93:c2:93:25:66:3f:41:0f:66:39:9f:a1:88: 29:ca:0e:54:04:f3:53:61:d1:51:53:21:e8:a0:13:19:a6:1c: ab:e5:86:03:a7:28:fb:77:ee:7e:bb:68:76:3a:ac:f2:37:47: e7:cc:b2:2e:17:ce:fe:93:3b:45:b2:43:05:06:78:d5:62:af: 73:fa:6d:04:81:f7:d0:b6:b5:88:67:82:ce:79:6d:05:22:51: e4:1c:17:60:ad:fc:a2:b4:53:65:9a:7e:c2:38:60:42:ac:21: 4d:ff:63:94:7e:ac:e1:b2:60:ee:c6:90:25:90:3f:a1:d3:8b: 62:ef:32:11:b5:38:01:d3:63:d1:c2:de:d9:2b:47:c9:34:83: c0:ff:22:a8:04:68:5c:86:9c:b2:1d:da:dc:be:8e:97:16:5a: 40:dc:06:66:ad:e3:6a:2d:b3:46:d9:38:45:f3:e2:a3:e4:4c: ac:2b:e0:15:99:46:b0:7f:af:3c:00:46:42:c2:64:06:c0:8f: b3:2f:1e:0b:55:6b:59:e7:cf:ba:d7:79:59:50:45:ed:61:1e: 4e:d3:0a:34:e6:51:d7:6e:55:c8:6f:91:7d:1c:55:66:dc:c4: d9:37:6b:89:25:7e:26:64:7c:83:ea:9b:b8:c4:62:f4:15:5f: 5b:5b:69:1c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURrj72EET4JvQkLM7iwH8UfI9CqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yMzA2MDcxMDE0MTVaFw0yNDA2MDUxMDE5MTVaMDMxMTAvBgNV BAMTKDIzMzQ1N0MwNEI0ODNCRDRBMTdCRTEwMzNFMTY1QzQwQjlCNkEwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp82LQtk8l4D0t8W3BSQIoxhxw RC1Y3zlRAprGDUxDlFhyPLmNC+wvl+cdp27xfbZazyephZZrLAWivL4jJQqe0TyX UBgAqKvXXKmPKvOnNUUl+zTHQznn07kvYFGCTgaq6W0ermmnnhKYC81uT3MI4DLI ZiF8n8flxlZDCBswvkrtApJAgmezAtbweK2GwG9omc46FyCkF5PWokGr2uspD1cK cP4+EC8MHfvCGrZF7u02FaSRD8dWHCTXKhyM5Q6vGJnxMvGocXXgaP6+/u4hHOtF 9JkmWWjZ3QuVztdU4Rs2H+42vMyjm7A6J9eSo75hlpisDTpKO3YwOOOzZ+STAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIzRXwEtIO9She+EDPhZcQLm2oC4wHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1N2I5MGNiLThlYmQtNGM3Yi04 YzMxLTEzM2E4YjRlZDY5Yy8wLzMxMzEzODJlMzEzNTMxMmUzMjMyMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdpffMA0GCSqG SIb3DQEBCwUAA4IBAQBGTnOHX5PCkyVmP0EPZjmfoYgpyg5UBPNTYdFRUyHooBMZ phyr5YYDpyj7d+5+u2h2OqzyN0fnzLIuF87+kztFskMFBnjVYq9z+m0EgffQtrWI Z4LOeW0FIlHkHBdgrfyitFNlmn7COGBCrCFN/2OUfqzhsmDuxpAlkD+h04ti7zIR tTgB02PRwt7ZK0fJNIPA/yKoBGhchpyyHdrcvo6XFlpA3AZmreNqLbNG2ThF8+Kj 5EysK+AVmUawf688AEZCwmQGwI+zLx4LVWtZ58+613lZUEXtYR5O0wo05lHXblXI b5F9HFVm3MTZN2uJJX4mZHyD6pu4xGL0FV9bW2kc -----END CERTIFICATE-----Generated at Wed May 1 10:09:33 2024 by rpki-client on console-ams.rpki-client.org