$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38382e302f32332d3234203d3e203234353337.roa File: 3131312e36372e38382e302f32332d3234203d3e203234353337.roa (raw, json) Hash identifier: Xp8dn23F5LNZGfBH+DTiopZbUxwAQ2vm+9QTK6RAPsE= Subject key identifier: C9:18:03:6F:A9:08:EA:E3:3D:0F:A5:E0:82:E7:35:D3:83:08:8B:DE Certificate issuer: /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B Certificate serial: 4C8BFD1F955D53ED2EFE7ACB35798EAFE4BA539E Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38382e302f32332d3234203d3e203234353337.roa Signing time: Mon 31 Jul 2023 00:06:14 +0000 ROA not before: Mon 31 Jul 2023 00:01:14 +0000 ROA not after: Mon 29 Jul 2024 00:06:14 +0000 asID: 24537 IP address blocks: 111.67.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 15:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8b:fd:1f:95:5d:53:ed:2e:fe:7a:cb:35:79:8e:af:e4:ba:53:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B Validity Not Before: Jul 31 00:01:14 2023 GMT Not After : Jul 29 00:06:14 2024 GMT Subject: CN=C918036FA908EAE33D0FA5E082E735D383088BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:1a:49:6f:80:5a:48:01:16:88:13:f3:48: a8:67:d1:68:ad:48:46:66:e3:e4:eb:c5:16:20:fe: f1:10:80:c5:c6:a2:07:d8:9f:e7:3d:9a:eb:92:a7: 25:55:f4:f9:94:48:55:3e:ef:09:58:a3:46:8c:c5: 8c:e2:84:23:36:3a:87:19:7c:d1:ff:92:9a:89:9e: 3f:e7:56:cf:2e:08:f6:79:3f:6d:b4:c9:68:21:c6: 90:40:9c:cf:39:4f:5c:55:b7:02:fe:67:36:85:7d: 8c:4e:84:89:fd:b4:76:91:59:59:c2:bf:d4:c4:b5: a8:3d:34:17:37:35:d3:32:c8:34:1e:6b:46:fc:c1: 81:c3:fc:2f:0a:fb:a8:d4:3d:65:90:ce:c1:61:60: 11:18:a7:c7:3a:91:00:0c:65:59:45:2a:f9:c6:c3: 7a:87:d1:ec:66:9e:23:1d:36:6d:ec:c1:db:fb:d5: ae:33:c6:ed:03:35:a9:cb:36:32:53:55:93:fc:33: 0c:7d:63:9d:70:1b:1d:5b:4f:ad:39:e4:fc:df:fd: 26:0c:73:9d:fc:1a:50:57:25:03:b2:17:6c:e2:94: c0:83:58:6e:56:ad:07:47:14:ed:d3:04:88:c1:5c: 12:5d:f1:89:f0:9e:ae:c3:07:27:66:6f:1c:87:7d: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:18:03:6F:A9:08:EA:E3:3D:0F:A5:E0:82:E7:35:D3:83:08:8B:DE X509v3 Authority Key Identifier: keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38382e302f32332d3234203d3e203234353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.67.88.0/23 Signature Algorithm: sha256WithRSAEncryption 71:1c:0e:ef:3f:7d:4c:ba:f7:bf:fa:77:10:84:d3:a8:13:e8: 7b:30:ef:46:38:c4:e3:44:f9:d1:dc:90:b6:76:de:0f:97:a8: a6:02:dc:f1:2d:7e:84:8b:b5:3b:fb:87:f0:43:03:4b:48:97: 62:1e:e8:09:8c:da:4c:ce:0a:e5:da:cc:15:e7:7b:d1:23:95: f8:d4:91:f5:74:56:27:a3:1a:64:11:f5:10:b8:31:6d:2d:9a: 8b:82:b7:82:06:6e:90:ff:7a:7e:7e:2d:cc:ee:cf:54:52:f1: e9:b1:ed:39:e7:49:e7:dd:81:7c:56:5e:31:c8:b5:85:43:29: 60:1f:93:4f:e7:ba:d4:2c:9f:e7:aa:27:a4:8e:4c:f8:a9:2a: d7:f3:4a:45:1a:ef:81:9c:7c:dc:22:6d:0e:4a:e4:40:44:ad: dd:e7:e3:71:30:18:27:8f:02:2f:26:39:c4:73:77:15:c4:dd: f7:12:f7:8b:13:01:8b:c8:01:c4:bc:70:40:ec:e7:c5:a0:08: 2d:fb:dc:ff:b7:ab:f6:92:dd:cc:8f:89:8e:23:61:32:94:e2: 38:36:4e:a2:97:3a:3a:33:87:b9:c5:ea:2c:08:c2:0f:be:b9: 38:cc:10:5e:f6:c4:f9:1a:8e:b0:ef:c4:c7:b7:6c:64:bb:8e: 44:aa:aa:3f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUTIv9H5VdU+0u/nrLNXmOr+S6U54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJB RkU4QUEyQjAeFw0yMzA3MzEwMDAxMTRaFw0yNDA3MjkwMDA2MTRaMDMxMTAvBgNV BAMTKEM5MTgwMzZGQTkwOEVBRTMzRDBGQTVFMDgyRTczNUQzODMwODhCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cBpJb4BaSAEWiBPzSKhn0Wit SEZm4+TrxRYg/vEQgMXGogfYn+c9muuSpyVV9PmUSFU+7wlYo0aMxYzihCM2OocZ fNH/kpqJnj/nVs8uCPZ5P220yWghxpBAnM85T1xVtwL+ZzaFfYxOhIn9tHaRWVnC v9TEtag9NBc3NdMyyDQea0b8wYHD/C8K+6jUPWWQzsFhYBEYp8c6kQAMZVlFKvnG w3qH0exmniMdNm3swdv71a4zxu0DNanLNjJTVZP8Mwx9Y51wGx1bT6055Pzf/SYM c538GlBXJQOyF2zilMCDWG5WrQdHFO3TBIjBXBJd8Ynwnq7DBydmbxyHfdebAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUyRgDb6kI6uM9D6Xgguc104MIi94wHwYDVR0j BBgwFoAUvwduokpozxUsMjx6Pf0/kq/oqiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMC9CRjA3NkVBMjRB NjhDRjE1MkMzMjNDN0EzREZEM0Y5MkFGRThBQTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJBRkU4 QUEyQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MGRhNDQ3LWExMzgtNDYyNS1h NDIwLWE3MTFhYzI0MzUxOS8wLzMxMzEzMTJlMzYzNzJlMzgzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMyMzQzNTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFvQ1gwDQYJKoZIhvcN AQELBQADggEBAHEcDu8/fUy697/6dxCE06gT6Hsw70Y4xONE+dHckLZ23g+XqKYC 3PEtfoSLtTv7h/BDA0tIl2Ie6AmM2kzOCuXazBXne9EjlfjUkfV0ViejGmQR9RC4 MW0tmouCt4IGbpD/en5+Lczuz1RS8emx7TnnSefdgXxWXjHItYVDKWAfk0/nutQs n+eqJ6SOTPipKtfzSkUa74GcfNwibQ5K5EBErd3n43EwGCePAi8mOcRzdxXE3fcS 94sTAYvIAcS8cEDs58WgCC373P+3q/aS3cyPiY4jYTKU4jg2TqKXOjozh7nF6iwI wg++uTjMEF72xPkajrDvxMe3bGS7jkSqqj8= -----END CERTIFICATE-----Generated at Tue May 14 16:24:02 2024 by rpki-client on console-ams.rpki-client.org