$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136332e302f32342d3234203d3e203536323432.roa File: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (raw, json) Hash identifier: VlOFDYaF+6K5xQwNUDZ4ugYrL6LilzBGtw50jjaQNLM= Subject key identifier: B0:6D:94:FF:9D:C4:1D:AA:88:30:F0:C7:AA:BB:FD:A3:A7:C3:DC:91 Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 6D76F2357BAE22489346AB03B52CB1178F8E45B9 Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136332e302f32342d3234203d3e203536323432.roa Signing time: Sat 10 Feb 2024 09:00:00 +0000 ROA not before: Sat 10 Feb 2024 08:55:00 +0000 ROA not after: Sat 08 Feb 2025 09:00:00 +0000 asID: 56242 IP address blocks: 137.59.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:76:f2:35:7b:ae:22:48:93:46:ab:03:b5:2c:b1:17:8f:8e:45:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Feb 10 08:55:00 2024 GMT Not After : Feb 8 09:00:00 2025 GMT Subject: CN=B06D94FF9DC41DAA8830F0C7AABBFDA3A7C3DC91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:d8:00:e5:9d:19:32:32:7a:ff:24:5d:55: ab:0a:bb:7b:38:21:ca:d0:38:71:b4:94:8b:3c:5f: 90:48:ae:77:bb:33:aa:12:bf:14:71:70:4c:29:ed: 81:94:cd:a2:43:c4:d3:cc:a6:bf:73:7e:3b:f3:78: 33:c5:70:5e:d7:f7:fe:a4:8a:4f:bc:53:57:6f:0c: e2:41:b1:3d:35:37:31:68:43:f3:9b:44:68:be:3c: 52:21:1e:8e:9d:1d:dd:94:99:f2:30:95:1e:3a:e3: 1d:10:75:f1:17:cb:1f:b2:22:ff:f2:dc:6d:63:65: 67:6b:82:56:79:eb:39:e2:84:01:35:d3:ee:cd:0a: 82:26:8d:ad:c1:63:18:11:d9:b8:b3:92:dd:aa:0c: f3:93:e5:cd:06:2d:e2:bb:c3:4d:8a:83:03:38:e6: cb:51:93:ef:01:7c:37:30:40:74:eb:d5:2b:a2:eb: 77:42:b9:7f:dd:af:3d:8c:63:de:f8:08:8f:49:2a: bc:84:8f:b1:fa:5a:45:eb:48:f4:74:f3:4f:2b:7b: 90:84:2c:17:f6:2e:a0:14:7d:8d:f2:a6:f3:cb:54: ce:17:1c:08:dd:57:d5:11:13:57:89:a6:95:2a:4c: 22:dc:d6:7d:50:3a:4c:78:40:41:a6:5d:98:42:f5: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6D:94:FF:9D:C4:1D:AA:88:30:F0:C7:AA:BB:FD:A3:A7:C3:DC:91 X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136332e302f32342d3234203d3e203536323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.59.163.0/24 Signature Algorithm: sha256WithRSAEncryption 45:69:b7:0e:20:f9:22:83:7e:74:41:32:37:94:ba:8b:98:61: 30:92:ce:ca:70:b7:76:4c:42:c2:a8:b7:6a:ea:17:4a:f3:06: 27:8f:66:5f:03:60:12:f1:14:15:5e:78:1e:43:26:88:bf:01: 61:c5:d9:5f:bd:11:1a:b9:bb:1d:bf:35:e6:8a:46:38:65:b7: 40:d7:95:1b:67:42:e8:3d:26:1e:68:1f:aa:c8:db:8f:2f:15: 7c:76:ce:f3:bd:f5:57:5d:d2:57:34:ea:68:bd:a4:9c:d7:24: 9b:a5:d9:b5:82:0e:30:b8:40:42:b0:9a:4d:13:f7:59:da:6e: dd:83:17:eb:9a:c9:4f:ec:85:87:e6:95:05:21:90:9e:ac:77: 7d:9c:47:f7:ed:ae:ff:27:72:a0:3e:38:fb:35:2f:af:17:3c: ba:a1:bb:ab:d0:44:09:31:2a:34:7e:05:c5:7f:0f:a2:68:45: 66:09:c9:47:d1:d9:98:b8:29:0f:72:49:db:a7:fb:10:fc:8e: 16:bd:1a:e7:50:2c:ec:01:e6:48:c5:b7:30:9a:25:2f:ca:d4: 33:39:10:c7:aa:51:5a:20:17:fc:6b:20:8a:f4:4c:5e:78:6e: b6:62:8c:f5:b3:c8:f9:80:48:5f:af:02:de:3e:78:78:69:0a: 86:90:2b:90 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbXbyNXuuIkiTRqsDtSyxF4+ORbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNDAyMTAwODU1MDBaFw0yNTAyMDgwOTAwMDBaMDMxMTAvBgNV BAMTKEIwNkQ5NEZGOURDNDFEQUE4ODMwRjBDN0FBQkJGREEzQTdDM0RDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCdgA5Z0ZMjJ6/yRdVasKu3s4 IcrQOHG0lIs8X5BIrne7M6oSvxRxcEwp7YGUzaJDxNPMpr9zfjvzeDPFcF7X9/6k ik+8U1dvDOJBsT01NzFoQ/ObRGi+PFIhHo6dHd2UmfIwlR464x0QdfEXyx+yIv/y 3G1jZWdrglZ56znihAE10+7NCoImja3BYxgR2bizkt2qDPOT5c0GLeK7w02KgwM4 5stRk+8BfDcwQHTr1Sui63dCuX/drz2MY974CI9JKryEj7H6WkXrSPR0808re5CE LBf2LqAUfY3ypvPLVM4XHAjdV9URE1eJppUqTCLc1n1QOkx4QEGmXZhC9fvpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsG2U/53EHaqIMPDHqrv9o6fD3JEwHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05 ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzMzNzJlMzUzOTJlMzEzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIk7ozANBgkqhkiG 9w0BAQsFAAOCAQEARWm3DiD5IoN+dEEyN5S6i5hhMJLOynC3dkxCwqi3auoXSvMG J49mXwNgEvEUFV54HkMmiL8BYcXZX70RGrm7Hb815opGOGW3QNeVG2dC6D0mHmgf qsjbjy8VfHbO8731V13SVzTqaL2knNckm6XZtYIOMLhAQrCaTRP3Wdpu3YMX65rJ T+yFh+aVBSGQnqx3fZxH9+2u/ydyoD44+zUvrxc8uqG7q9BECTEqNH4FxX8PomhF ZgnJR9HZmLgpD3JJ26f7EPyOFr0a51As7AHmSMW3MJolL8rUMzkQx6pRWiAX/Gsg ivRMXnhutmKM9bPI+YBIX68C3j54eGkKhpArkA== -----END CERTIFICATE-----Generated at Wed May 1 02:06:09 2024 by rpki-client on console-fra.rpki-client.org