$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133332e302f32342d3234203d3e203538343737.roa File: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: Jc3zACOb+ky7qQSyk3vJI1VtDyon2NtViYt8zo/dIcc= Subject key identifier: 2C:4B:1C:5B:BC:87:52:B0:80:21:9F:D2:F4:F9:3B:A4:4F:D0:A9:63 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 35506038DC0CF338AD91218C0D8F7CC19723ED66 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133332e302f32342d3234203d3e203538343737.roa Signing time: Mon 31 Jul 2023 00:14:33 +0000 ROA not before: Mon 31 Jul 2023 00:09:33 +0000 ROA not after: Mon 29 Jul 2024 00:14:33 +0000 asID: 58477 IP address blocks: 45.127.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:50:60:38:dc:0c:f3:38:ad:91:21:8c:0d:8f:7c:c1:97:23:ed:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jul 31 00:09:33 2023 GMT Not After : Jul 29 00:14:33 2024 GMT Subject: CN=2C4B1C5BBC8752B080219FD2F4F93BA44FD0A963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:4e:dc:db:c7:a8:45:3d:47:6c:19:98:6b: 1e:10:0c:ed:cb:19:33:dd:47:d2:2b:2f:99:dd:3a: 3c:2b:27:ba:29:83:22:ae:d9:ac:43:50:28:cd:83: 0e:cf:b6:85:88:e5:42:3d:f9:cb:42:f6:98:6f:75: 40:51:95:0a:b4:64:39:b8:44:cf:5d:a3:45:cb:69: c3:20:36:8b:71:d7:84:42:82:8a:f4:3c:1a:3b:f2: 52:e0:44:b1:8c:82:1c:f2:78:2e:3c:04:8c:00:a1: 73:05:cd:fd:37:96:6f:02:29:ec:13:88:33:a6:3f: 8e:65:ff:a3:f4:a3:e5:23:d7:04:df:34:27:6c:ee: 47:17:8e:07:9a:c8:2a:11:44:d7:24:05:56:dd:a4: b2:e8:b0:e4:6a:da:44:b0:5d:7d:4c:52:24:dc:14: 28:9f:7e:4a:22:50:27:9c:06:46:eb:72:a0:68:ce: b1:7e:d3:72:aa:26:c1:d2:94:58:b9:bb:e7:5a:7e: f7:c8:87:03:4b:66:ce:a8:2b:ef:0b:3b:62:c4:e7: f6:47:b4:8f:5e:a2:97:39:0b:40:ac:c4:6d:16:2b: 77:1e:7b:b1:98:83:81:c8:09:02:0f:d2:1c:94:04: 87:74:05:b4:36:6c:9b:5a:13:d0:f3:65:6c:11:54: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4B:1C:5B:BC:87:52:B0:80:21:9F:D2:F4:F9:3B:A4:4F:D0:A9:63 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133332e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.127.133.0/24 Signature Algorithm: sha256WithRSAEncryption 82:a6:40:94:83:a7:f6:cd:54:5f:49:8a:17:e5:b7:81:07:63: 4a:b0:c5:31:51:33:ce:c7:6a:30:d6:9c:7b:72:20:71:e4:b1: d1:e8:39:c3:1d:18:0e:d1:2c:4c:49:db:62:41:17:a2:94:f2: 5c:4b:0f:9d:30:73:e3:f4:62:60:6e:f5:00:33:52:52:fa:86: af:63:75:b3:03:32:66:8b:34:c3:37:80:dc:22:98:9c:56:cb: fc:b4:6c:d2:c7:3e:04:f7:fa:8d:82:cc:29:74:60:a3:01:2b: fc:ba:f8:01:eb:b2:3d:f4:8f:63:39:dd:28:09:33:93:7b:83: d5:2d:22:9b:81:8d:4c:69:8e:ef:f5:b1:f7:b6:3e:67:7f:c9: 43:ab:38:02:e9:dd:63:f3:62:45:f1:ef:5b:6b:49:9b:14:6a: 7f:80:c7:85:a4:83:5e:c4:19:e6:3b:7e:dd:ac:f7:05:03:7a: 5d:13:d1:06:66:13:94:47:d0:ea:c0:8c:ed:ee:5e:71:4b:7a: e0:62:5c:51:db:dd:d8:27:79:e1:fd:ca:d0:fe:c4:b4:64:7d: ce:11:f3:2e:f1:74:12:f8:3a:45:c5:26:d0:db:7a:d3:94:00: 22:10:81:3c:e1:06:1f:8a:71:1d:07:1a:30:a6:1b:15:0d:2a: 2a:99:58:6f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNVBgONwM8zitkSGMDY98wZcj7WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yMzA3MzEwMDA5MzNaFw0yNDA3MjkwMDE0MzNaMDMxMTAvBgNV BAMTKDJDNEIxQzVCQkM4NzUyQjA4MDIxOUZEMkY0RjkzQkE0NEZEMEE5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhk7c28eoRT1HbBmYax4QDO3L GTPdR9IrL5ndOjwrJ7opgyKu2axDUCjNgw7PtoWI5UI9+ctC9phvdUBRlQq0ZDm4 RM9do0XLacMgNotx14RCgor0PBo78lLgRLGMghzyeC48BIwAoXMFzf03lm8CKewT iDOmP45l/6P0o+Uj1wTfNCds7kcXjgeayCoRRNckBVbdpLLosORq2kSwXX1MUiTc FCiffkoiUCecBkbrcqBozrF+03KqJsHSlFi5u+dafvfIhwNLZs6oK+8LO2LE5/ZH tI9eopc5C0CsxG0WK3cee7GYg4HICQIP0hyUBId0BbQ2bJtaE9DzZWwRVPojAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULEscW7yHUrCAIZ/S9Pk7pE/QqWMwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzM0MzUyZTMxMzIzNzJlMzEzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1/hTANBgkqhkiG 9w0BAQsFAAOCAQEAgqZAlIOn9s1UX0mKF+W3gQdjSrDFMVEzzsdqMNace3IgceSx 0eg5wx0YDtEsTEnbYkEXopTyXEsPnTBz4/RiYG71ADNSUvqGr2N1swMyZos0wzeA 3CKYnFbL/LRs0sc+BPf6jYLMKXRgowEr/Lr4AeuyPfSPYzndKAkzk3uD1S0im4GN TGmO7/Wx97Y+Z3/JQ6s4AundY/NiRfHvW2tJmxRqf4DHhaSDXsQZ5jt+3az3BQN6 XRPRBmYTlEfQ6sCM7e5ecUt64GJcUdvd2Cd54f3K0P7EtGR9zhHzLvF0Evg6RcUm 0Nt605QAIhCBPOEGH4pxHQcaMKYbFQ0qKplYbw== -----END CERTIFICATE-----Generated at Mon May 6 15:04:05 2024 by rpki-client on console-ams.rpki-client.org