$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/3135372e32302e39382e302f32332d3234203d3e20313532343335.roa File: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (raw, json) Hash identifier: ITWrfeJDp0fwFBA4IaXmJBukJZtkza2QyRgZRaZccug= Subject key identifier: 23:C7:96:60:73:8B:32:EC:E1:17:AA:FD:05:E8:3E:70:47:A5:49:41 Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 6DB42F9CFF2D5EF7C948F5632389F5FAF0723D7C Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/3135372e32302e39382e302f32332d3234203d3e20313532343335.roa Signing time: Wed 11 Sep 2024 08:56:12 +0000 ROA not before: Wed 11 Sep 2024 08:51:12 +0000 ROA not after: Wed 10 Sep 2025 08:56:12 +0000 asID: 152435 IP address blocks: 157.20.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b4:2f:9c:ff:2d:5e:f7:c9:48:f5:63:23:89:f5:fa:f0:72:3d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Sep 11 08:51:12 2024 GMT Not After : Sep 10 08:56:12 2025 GMT Subject: CN=23C79660738B32ECE117AAFD05E83E7047A54941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:f2:20:ab:6a:4a:30:c9:a9:8b:8a:af:56: 86:d4:bc:49:16:6c:81:a5:24:9a:db:09:e4:e5:99: 45:18:35:f0:55:25:11:36:60:f3:b7:3c:a5:87:b6: f2:2b:cb:92:45:a0:33:4a:5e:36:04:6f:42:d4:03: f7:24:3e:4d:83:62:14:a6:d0:61:fe:4e:47:2f:bf: 96:2d:91:c0:ae:43:be:df:72:ba:c2:06:6c:ae:c4: 8b:d0:fa:c1:55:19:19:cb:75:dc:1c:4b:43:d4:58: f7:dc:47:69:4a:ac:4b:f5:94:1b:96:2b:87:58:99: 1c:16:c0:a9:69:e1:30:30:72:b6:18:f4:cf:2e:c0: c6:e7:e0:2b:b2:6a:b3:5b:3c:6a:f4:48:4b:77:07: e3:8e:1d:02:9c:c3:ad:08:e5:5a:17:99:22:02:3d: 2e:17:f6:57:c3:28:b9:ed:30:49:b4:31:8d:cb:57: 97:9b:f7:5e:34:9c:76:31:61:93:d6:93:eb:64:fa: a7:fe:21:f9:3e:1b:29:cd:9c:79:5c:17:a5:e8:0f: 70:70:bf:72:d2:78:42:8d:19:e0:3e:30:51:8e:33: f7:89:5d:9c:4b:cc:e7:09:dd:fb:ef:91:0b:da:41: b8:d1:b2:c2:a5:4a:80:3e:59:4b:01:8f:3e:63:d3: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C7:96:60:73:8B:32:EC:E1:17:AA:FD:05:E8:3E:70:47:A5:49:41 X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/3135372e32302e39382e302f32332d3234203d3e20313532343335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.98.0/23 Signature Algorithm: sha256WithRSAEncryption af:82:01:82:cf:94:2a:89:f1:3e:4c:27:f2:33:15:7a:2d:b8: 14:70:54:a7:4c:f5:28:30:0d:55:d4:66:b3:dc:48:de:51:a6: bb:40:c4:fc:34:cb:76:af:84:46:fe:cf:5e:46:15:55:76:9f: a2:ca:9b:87:d1:d6:ef:f5:5d:d0:b8:64:ff:ae:d8:8f:fd:67: b0:62:82:1b:d0:0c:9c:37:81:7e:98:00:bb:0a:c4:12:6f:b3: 65:42:4d:e4:b8:66:b7:55:6f:b9:a1:a9:7d:1a:af:8d:92:0a: 68:37:35:26:67:01:fb:63:1c:5c:98:77:5e:84:0b:9a:4e:27: a5:4c:e0:2d:53:63:04:61:bd:a9:58:5f:b0:72:6f:83:93:df: ef:b6:db:0f:87:cf:11:10:57:c9:80:7f:a0:63:04:5d:19:d6: dd:25:18:b7:c7:c9:5a:81:54:ab:50:6b:88:78:8b:a5:ea:6e: e4:4c:27:df:21:b7:a8:5a:c1:65:cc:9a:71:b7:cc:67:0c:c7: 39:bc:ee:62:07:60:6e:fa:ef:43:9c:3c:d4:38:12:0c:47:38: 57:97:a0:07:a8:8c:8a:0a:0e:a1:70:84:aa:02:8e:35:ba:ba: 75:74:a2:21:71:47:0b:99:04:58:91:f1:cc:46:c7:dd:ac:4c: 65:32:8e:7e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbbQvnP8tXvfJSPVjI4n1+vByPXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNDA5MTEwODUxMTJaFw0yNTA5MTAwODU2MTJaMDMxMTAvBgNV BAMTKDIzQzc5NjYwNzM4QjMyRUNFMTE3QUFGRDA1RTgzRTcwNDdBNTQ5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIfIgq2pKMMmpi4qvVobUvEkW bIGlJJrbCeTlmUUYNfBVJRE2YPO3PKWHtvIry5JFoDNKXjYEb0LUA/ckPk2DYhSm 0GH+Tkcvv5YtkcCuQ77fcrrCBmyuxIvQ+sFVGRnLddwcS0PUWPfcR2lKrEv1lBuW K4dYmRwWwKlp4TAwcrYY9M8uwMbn4CuyarNbPGr0SEt3B+OOHQKcw60I5VoXmSIC PS4X9lfDKLntMEm0MY3LV5eb9140nHYxYZPWk+tk+qf+Ifk+GynNnHlcF6XoD3Bw v3LSeEKNGeA+MFGOM/eJXZxLzOcJ3fvvkQvaQbjRssKlSoA+WUsBjz5j04VdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUI8eWYHOLMuzhF6r9Beg+cEelSUEwHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzNDZjMGUyLTgxOTQtNDAyNC1i Y2IzLWQwMjk1NmNlM2E5OS8wLzMxMzUzNzJlMzIzMDJlMzkzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM0MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0UYjANBgkqhkiG 9w0BAQsFAAOCAQEAr4IBgs+UKonxPkwn8jMVei24FHBUp0z1KDANVdRms9xI3lGm u0DE/DTLdq+ERv7PXkYVVXafosqbh9HW7/Vd0Lhk/67Yj/1nsGKCG9AMnDeBfpgA uwrEEm+zZUJN5Lhmt1VvuaGpfRqvjZIKaDc1JmcB+2McXJh3XoQLmk4npUzgLVNj BGG9qVhfsHJvg5Pf77bbD4fPERBXyYB/oGMEXRnW3SUYt8fJWoFUq1BriHiLpepu 5Ewn3yG3qFrBZcyacbfMZwzHObzuYgdgbvrvQ5w81DgSDEc4V5egB6iMigoOoXCE qgKONbq6dXSiIXFHC5kEWJHxzEbH3axMZTKOfg== -----END CERTIFICATE-----Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org