$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa File: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: Tr8KoztX4g1WXnF+96HqpgOulMvRhy41cuaQJFwuUXc= Subject key identifier: B7:AD:C2:A4:D4:87:30:28:A5:2B:A5:64:89:27:9F:D0:52:1E:AB:7A Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 01E2DD04E8F1E9B14F701C214CD07E73BF451945 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa Signing time: Sat 20 Jul 2024 12:00:00 +0000 ROA not before: Sat 20 Jul 2024 11:55:00 +0000 ROA not after: Sat 19 Jul 2025 12:00:00 +0000 asID: 24534 IP address blocks: 58.147.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e2:dd:04:e8:f1:e9:b1:4f:70:1c:21:4c:d0:7e:73:bf:45:19:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Jul 20 11:55:00 2024 GMT Not After : Jul 19 12:00:00 2025 GMT Subject: CN=B7ADC2A4D4873028A52BA56489279FD0521EAB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:b5:88:34:3d:11:e9:6c:a5:e7:30:6e:cd: d0:20:3b:3a:3a:e1:df:b9:f5:d6:35:bb:cd:65:3a: d0:81:35:84:6d:aa:48:93:c2:b0:22:87:f5:56:bc: 26:3d:79:e6:23:cd:76:d3:49:c6:44:e0:53:fa:31: 27:ec:26:de:7c:c0:6b:2d:47:87:22:d5:2d:ce:51: 04:40:0a:54:29:13:87:58:df:40:0c:f7:ab:00:a7: 2a:c3:09:fc:5a:cd:3b:d5:64:86:dc:9b:3a:23:5e: b5:5f:c0:0f:bf:73:fa:15:07:63:ec:34:70:42:53: 9c:06:6e:82:51:ce:d7:93:32:d9:2f:0b:a2:96:54: b5:01:b9:6b:91:82:10:53:aa:c2:86:af:a2:8e:06: de:e0:58:16:08:c9:e9:64:62:18:68:d2:2b:4a:1c: 5f:ca:dc:e4:93:53:0b:56:1c:1b:38:1d:8d:f2:86: d9:82:9e:ef:bb:a8:57:38:a6:c4:92:d5:75:6f:e5: 86:5c:ba:7e:dc:3a:f1:ef:23:8d:63:3b:51:ad:7d: 45:15:03:fc:8c:f8:94:21:1b:d0:14:88:56:2a:1e: 4e:05:83:2c:60:b5:3c:c3:65:fc:fe:bc:42:10:22: 79:78:9d:5d:15:61:a4:10:f3:e7:93:db:cf:77:a2: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AD:C2:A4:D4:87:30:28:A5:2B:A5:64:89:27:9F:D0:52:1E:AB:7A X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.147.188.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:53:f8:bb:05:8c:cd:4c:c9:d7:ed:63:fb:2e:19:0c:5c:75: 4e:2c:ee:8f:e6:7c:ea:98:88:95:72:ed:4a:10:04:ac:ee:21: 41:d3:fa:67:89:2f:20:0e:e4:31:41:80:a2:da:1f:c0:64:24: 43:61:60:51:b8:21:99:47:98:16:93:4a:81:74:ae:6c:5d:4e: c0:3d:67:69:e9:3e:90:af:6d:09:63:88:07:f4:ec:21:29:e6: 64:42:fe:7e:24:af:2d:37:46:54:a4:c4:d3:7e:7f:78:f5:54: 45:84:e7:c7:9b:ea:c3:2d:0f:4f:4b:f1:68:08:96:ce:b9:68: 59:46:85:82:64:b6:86:a8:3c:a9:92:c8:bb:b5:24:f7:3d:d9: 4b:ec:ac:5b:f6:50:10:ef:12:29:30:7b:5b:60:2c:fd:67:a2: a6:ec:19:1b:79:b0:c1:00:42:e5:bc:5c:24:8d:40:c5:85:62: 81:eb:33:5b:6f:2a:e6:8b:0d:a4:5e:73:34:f2:70:4d:78:2b: a6:36:aa:61:d3:02:15:8d:21:cf:27:2c:bd:ab:d5:ee:6f:5a: 10:dd:0c:69:41:90:06:e0:27:8a:07:51:05:8b:14:4f:d2:02: 9c:a0:92:ac:47:ea:80:aa:4d:23:58:a9:7f:84:f4:b4:b7:35: e7:ae:a0:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAeLdBOjx6bFPcBwhTNB+c79FGUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNDA3MjAxMTU1MDBaFw0yNTA3MTkxMjAwMDBaMDMxMTAvBgNV BAMTKEI3QURDMkE0RDQ4NzMwMjhBNTJCQTU2NDg5Mjc5RkQwNTIxRUFCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDacbWIND0R6Wyl5zBuzdAgOzo6 4d+59dY1u81lOtCBNYRtqkiTwrAih/VWvCY9eeYjzXbTScZE4FP6MSfsJt58wGst R4ci1S3OUQRAClQpE4dY30AM96sApyrDCfxazTvVZIbcmzojXrVfwA+/c/oVB2Ps NHBCU5wGboJRzteTMtkvC6KWVLUBuWuRghBTqsKGr6KOBt7gWBYIyelkYhho0itK HF/K3OSTUwtWHBs4HY3yhtmCnu+7qFc4psSS1XVv5YZcun7cOvHvI41jO1GtfUUV A/yM+JQhG9AUiFYqHk4FgyxgtTzDZfz+vEIQInl4nV0VYaQQ8+eT2893otG3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUt63CpNSHMCilK6VkiSef0FIeq3owHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzM1MzgyZTMxMzQzNzJlMzEzODM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqTvDANBgkqhkiG 9w0BAQsFAAOCAQEAjFP4uwWMzUzJ1+1j+y4ZDFx1Tizuj+Z86piIlXLtShAErO4h QdP6Z4kvIA7kMUGAotofwGQkQ2FgUbghmUeYFpNKgXSubF1OwD1naek+kK9tCWOI B/TsISnmZEL+fiSvLTdGVKTE035/ePVURYTnx5vqwy0PT0vxaAiWzrloWUaFgmS2 hqg8qZLIu7Uk9z3ZS+ysW/ZQEO8SKTB7W2As/WeipuwZG3mwwQBC5bxcJI1AxYVi geszW28q5osNpF5zNPJwTXgrpjaqYdMCFY0hzycsvavV7m9aEN0MaUGQBuAnigdR BYsUT9ICnKCSrEfqgKpNI1ipf4T0tLc1566gqg== -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:50 2024 by rpki-client on console-ams.rpki-client.org