$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136312e302f32342d3234203d3e203536323432.roa File: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (raw, json) Hash identifier: Wb0IX2AKVYqw0WQT9sMcOETd5yYJEprT3xxqs/JF81E= Subject key identifier: 9F:EB:D9:5A:01:0E:30:BE:A3:28:15:78:CA:19:E8:34:89:29:9F:90 Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 026280F08C21E47871BEAC380608CD2B1417F98D Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136312e302f32342d3234203d3e203536323432.roa Signing time: Sat 10 Feb 2024 07:00:00 +0000 ROA not before: Sat 10 Feb 2024 06:55:00 +0000 ROA not after: Sat 08 Feb 2025 07:00:00 +0000 asID: 56242 IP address blocks: 137.59.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:62:80:f0:8c:21:e4:78:71:be:ac:38:06:08:cd:2b:14:17:f9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Feb 10 06:55:00 2024 GMT Not After : Feb 8 07:00:00 2025 GMT Subject: CN=9FEBD95A010E30BEA3281578CA19E83489299F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:69:ed:10:71:2d:79:8f:82:48:42:7d:e6:6b: 40:fc:ee:ea:0a:cb:fb:9d:62:f9:81:1d:a2:d8:bb: 8b:ea:21:58:18:77:7e:d4:8e:7e:27:4f:e0:c9:d6: 75:9c:a5:ed:61:b8:85:8c:08:c0:56:f5:71:d8:b6: 60:da:3e:69:bc:bf:61:eb:57:a5:30:b3:dd:61:dc: c6:3b:61:73:85:fb:af:4a:56:32:5c:49:ff:bd:70: ab:43:18:8f:90:21:20:66:ee:20:aa:07:f4:80:1b: 50:aa:49:69:a4:14:1b:89:16:12:88:9b:98:a4:34: 06:b0:ed:36:da:7b:27:75:a4:9c:44:55:24:d0:3a: 55:39:af:8f:0f:a8:a9:71:8d:e8:a1:26:f0:32:13: 6e:94:a0:c4:bf:77:bf:dc:f2:21:64:6e:55:59:2a: fe:91:48:c1:18:9b:8a:56:c2:b4:4e:98:ee:ea:23: a4:07:52:aa:75:dd:b5:3b:7b:21:6d:23:1f:57:81: 49:09:27:b4:b5:89:76:93:f8:a6:1f:b9:6f:c1:69: f0:dd:bc:44:d8:62:d3:6c:cb:08:b5:03:77:8b:40: cf:72:5e:5b:c2:ba:3c:62:f1:ba:3b:61:58:91:8c: 96:1a:8f:f0:4d:db:59:4b:55:ba:97:bf:d9:d9:02: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EB:D9:5A:01:0E:30:BE:A3:28:15:78:CA:19:E8:34:89:29:9F:90 X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136312e302f32342d3234203d3e203536323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.59.161.0/24 Signature Algorithm: sha256WithRSAEncryption 19:22:95:bd:4f:bb:73:6c:c2:cf:1d:c0:dc:3a:1a:2f:93:cb: e7:f5:c3:6f:22:d5:11:ed:ed:b9:f2:40:0d:84:96:54:5d:ca: 17:f6:5c:50:75:d3:97:33:1b:60:2f:6d:7b:41:99:c5:6b:63: 39:9e:44:47:b1:16:52:33:21:90:aa:c6:5b:df:38:0c:42:b3: 56:9f:53:1e:eb:f7:17:62:95:ff:ed:37:bf:20:78:d0:ce:6c: f4:44:c0:a6:16:b7:64:89:a9:08:04:c4:3c:39:f2:0b:d2:6c: 01:62:63:1c:e7:f7:5e:83:f2:08:05:ed:15:ca:90:66:a9:6d: 94:e6:77:8f:5b:45:e1:37:fa:8a:6e:db:88:bd:9e:34:2f:49: c2:ce:fa:82:87:7d:64:c9:14:79:bd:a0:a5:85:f2:ff:cb:6c: 9e:d2:70:af:c7:ca:44:c8:57:aa:72:3a:df:36:83:de:80:39: b6:e8:9d:35:f2:fa:fe:82:34:c3:00:ef:ec:43:12:d4:a0:40: 97:97:e3:13:fd:e7:5c:c3:3b:40:c3:db:17:9c:91:a7:5c:58: fb:ff:ac:8a:5c:07:e6:c5:2e:31:1f:fc:52:26:a0:4b:91:4c: e1:a8:47:b8:a7:ef:75:76:31:86:50:73:26:88:56:fe:88:85: 5c:11:cb:ab -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAmKA8Iwh5Hhxvqw4BgjNKxQX+Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNDAyMTAwNjU1MDBaFw0yNTAyMDgwNzAwMDBaMDMxMTAvBgNV BAMTKDlGRUJEOTVBMDEwRTMwQkVBMzI4MTU3OENBMTlFODM0ODkyOTlGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpae0QcS15j4JIQn3ma0D87uoK y/udYvmBHaLYu4vqIVgYd37Ujn4nT+DJ1nWcpe1huIWMCMBW9XHYtmDaPmm8v2Hr V6Uws91h3MY7YXOF+69KVjJcSf+9cKtDGI+QISBm7iCqB/SAG1CqSWmkFBuJFhKI m5ikNAaw7Tbaeyd1pJxEVSTQOlU5r48PqKlxjeihJvAyE26UoMS/d7/c8iFkblVZ Kv6RSMEYm4pWwrROmO7qI6QHUqp13bU7eyFtIx9XgUkJJ7S1iXaT+KYfuW/BafDd vETYYtNsywi1A3eLQM9yXlvCujxi8bo7YViRjJYaj/BN21lLVbqXv9nZAvchAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUn+vZWgEOML6jKBV4yhnoNIkpn5AwHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05 ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzMzNzJlMzUzOTJlMzEzNjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIk7oTANBgkqhkiG 9w0BAQsFAAOCAQEAGSKVvU+7c2zCzx3A3DoaL5PL5/XDbyLVEe3tufJADYSWVF3K F/ZcUHXTlzMbYC9te0GZxWtjOZ5ER7EWUjMhkKrGW984DEKzVp9THuv3F2KV/+03 vyB40M5s9ETApha3ZImpCATEPDnyC9JsAWJjHOf3XoPyCAXtFcqQZqltlOZ3j1tF 4Tf6im7biL2eNC9Jws76god9ZMkUeb2gpYXy/8tsntJwr8fKRMhXqnI63zaD3oA5 tuidNfL6/oI0wwDv7EMS1KBAl5fjE/3nXMM7QMPbF5yRp1xY+/+silwH5sUuMR/8 UiagS5FM4ahHuKfvdXYxhlBzJohW/oiFXBHLqw== -----END CERTIFICATE-----Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org