$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa File: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: KgjDRBaTzfFY7ynerTEb+2VCWhn64do32R4bwf4i4r4= Subject key identifier: 67:D2:A1:1B:BE:89:CF:CA:83:DB:4A:A0:7B:F7:E7:64:F6:DD:93:0B Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 1C0C7DAFE68BEA96E5260FCC6C0F77040E4C6020 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa Signing time: Mon 01 Jul 2024 01:03:30 +0000 ROA not before: Mon 01 Jul 2024 00:58:30 +0000 ROA not after: Mon 30 Jun 2025 01:03:30 +0000 asID: 38150 IP address blocks: 180.214.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 06:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0c:7d:af:e6:8b:ea:96:e5:26:0f:cc:6c:0f:77:04:0e:4c:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jul 1 00:58:30 2024 GMT Not After : Jun 30 01:03:30 2025 GMT Subject: CN=67D2A11BBE89CFCA83DB4AA07BF7E764F6DD930B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:2c:92:f9:23:06:9e:01:7c:9f:e0:04:4b: 0e:64:6d:92:fc:92:d5:3a:66:66:e4:1f:90:1a:7c: 8d:b3:df:90:d4:6e:2e:f7:17:71:ac:2f:6b:e1:26: ec:a2:5e:65:03:ad:f7:8b:fe:a2:c2:64:60:5a:0d: 1a:d3:2a:8b:e0:bb:e5:f0:f3:5c:92:05:08:9a:b7: f1:e4:76:63:96:6b:e0:57:8e:27:1e:2d:17:2f:fc: 51:e6:0a:e3:02:39:9c:57:b9:a3:28:b9:02:7d:15: fb:4f:0d:e4:36:4d:b5:c8:d2:4d:ee:49:b8:b4:b9: 22:c0:5e:8b:60:2b:ae:30:0c:48:e3:e6:71:be:c3: 6b:3d:e5:ce:03:15:a4:7f:bb:9a:4e:d7:78:b9:a2: 44:db:e0:62:04:dc:92:f0:9f:e0:d2:c0:2a:62:26: e2:ed:dd:90:fb:cf:8b:cc:c5:c1:e3:0b:f1:30:bd: 8f:a7:3d:d1:ee:c2:d9:d5:84:d6:21:d9:04:63:d0: 00:f6:54:4f:ec:3b:2d:44:71:91:74:57:b5:c1:92: db:6d:39:b3:6b:cc:8c:01:63:d4:f2:9d:2c:98:ca: 77:96:27:cf:ff:cb:4b:f1:e9:3a:c4:13:a3:4e:43: eb:b3:67:41:36:8a:83:2d:32:c1:a3:af:24:e3:89: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:A1:1B:BE:89:CF:CA:83:DB:4A:A0:7B:F7:E7:64:F6:DD:93:0B X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.254.0/24 Signature Algorithm: sha256WithRSAEncryption 06:53:c6:ab:18:7b:4c:3a:4e:be:07:15:03:1e:16:29:89:27: 6c:50:39:8a:76:a1:97:88:ee:9f:5f:90:e6:81:a5:04:de:4b: 69:61:67:65:2f:d2:05:4e:56:46:9d:21:a4:75:74:be:cf:2b: dd:e7:16:26:ff:19:57:ae:76:bf:eb:7d:1a:d5:8b:19:34:ce: 81:48:14:d4:59:fe:8b:d7:63:bc:a7:98:58:0b:b0:2e:b8:b7: 85:21:b5:0b:0c:72:c9:a8:01:c0:db:c2:c0:86:b9:8b:80:e5: 61:3b:c9:69:fd:79:75:0e:e1:82:e9:37:b9:5f:75:c3:86:e1: 43:bd:a6:2e:11:98:4d:a4:fc:25:29:3a:d9:5a:4f:a2:2d:c5: 4b:62:1f:79:9f:7d:c7:91:1b:de:72:73:70:65:1a:8d:ce:cb: ee:5e:46:17:2f:66:7c:e2:b4:7d:aa:57:d4:ae:f1:34:1f:e5: 60:e8:77:78:7a:56:52:53:75:c9:9f:2d:d9:c1:df:67:ad:d6: 75:08:69:f1:80:19:db:91:1f:54:ce:07:81:a5:ec:3f:48:12: a9:95:97:e3:ab:32:22:ad:f8:03:3d:25:ce:c6:4d:91:45:9a: b1:14:a8:ef:c3:68:41:02:f3:d0:3c:2d:66:9a:4d:29:a7:3a: f7:35:b7:9b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHAx9r+aL6pblJg/MbA93BA5MYCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNDA3MDEwMDU4MzBaFw0yNTA2MzAwMTAzMzBaMDMxMTAvBgNV BAMTKDY3RDJBMTFCQkU4OUNGQ0E4M0RCNEFBMDdCRjdFNzY0RjZERDkzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmyyS+SMGngF8n+AESw5kbZL8 ktU6ZmbkH5AafI2z35DUbi73F3GsL2vhJuyiXmUDrfeL/qLCZGBaDRrTKovgu+Xw 81ySBQiat/HkdmOWa+BXjiceLRcv/FHmCuMCOZxXuaMouQJ9FftPDeQ2TbXI0k3u Sbi0uSLAXotgK64wDEjj5nG+w2s95c4DFaR/u5pO13i5okTb4GIE3JLwn+DSwCpi JuLt3ZD7z4vMxcHjC/EwvY+nPdHuwtnVhNYh2QRj0AD2VE/sOy1EcZF0V7XBkttt ObNrzIwBY9TynSyYyneWJ8//y0vx6TrEE6NOQ+uzZ0E2ioMtMsGjryTjibkxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZ9KhG76Jz8qD20qge/fnZPbdkwswHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNb+MA0GCSqG SIb3DQEBCwUAA4IBAQAGU8arGHtMOk6+BxUDHhYpiSdsUDmKdqGXiO6fX5DmgaUE 3ktpYWdlL9IFTlZGnSGkdXS+zyvd5xYm/xlXrna/630a1YsZNM6BSBTUWf6L12O8 p5hYC7AuuLeFIbULDHLJqAHA28LAhrmLgOVhO8lp/Xl1DuGC6Te5X3XDhuFDvaYu EZhNpPwlKTrZWk+iLcVLYh95n33HkRvecnNwZRqNzsvuXkYXL2Z84rR9qlfUrvE0 H+Vg6Hd4elZSU3XJny3Zwd9nrdZ1CGnxgBnbkR9UzgeBpew/SBKplZfjqzIirfgD PSXOxk2RRZqxFKjvw2hBAvPQPC1mmk0ppzr3Nbeb -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org