$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa File: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: MCayY48jaokp/UrLHAPKrxV+i3KtaHJo7UcYRQc0U04= Subject key identifier: 3C:E0:61:CE:66:C2:7A:D0:33:24:43:A6:AF:59:5E:32:79:6F:BE:E4 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 108CFCF9ADA33254BE83E86AA6DAF823D21D26B8 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa Signing time: Mon 01 Jul 2024 01:03:30 +0000 ROA not before: Mon 01 Jul 2024 00:58:30 +0000 ROA not after: Mon 30 Jun 2025 01:03:30 +0000 asID: 38150 IP address blocks: 180.214.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 06:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8c:fc:f9:ad:a3:32:54:be:83:e8:6a:a6:da:f8:23:d2:1d:26:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jul 1 00:58:30 2024 GMT Not After : Jun 30 01:03:30 2025 GMT Subject: CN=3CE061CE66C27AD0332443A6AF595E32796FBEE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:ce:73:78:7e:f3:08:04:fb:18:e0:79:ce: f3:16:13:a2:e8:aa:63:bd:97:84:b2:c3:1b:4f:d6: 45:21:65:aa:96:a7:13:44:d6:ec:ce:d4:f2:4d:a0: cb:1f:f2:84:cd:86:d8:b8:a8:b6:f8:56:3c:bf:2b: 60:b0:9f:44:71:cd:50:1d:c1:20:36:f0:33:fc:6c: 2d:eb:a2:51:21:e0:13:96:0f:da:12:23:65:70:88: b1:08:91:3e:0e:b6:19:7f:e4:30:34:62:64:48:4d: d6:51:ba:b4:68:c5:e5:29:67:e2:e9:93:7b:27:92: 60:c2:ac:cc:1b:0e:2e:d4:5a:1d:4b:97:60:f7:c1: f3:16:a5:9a:d9:c2:65:8f:d6:92:25:84:e3:d6:39: 51:e6:e8:8f:97:44:9a:cb:34:96:b6:5d:d6:af:0a: c3:61:65:7f:b4:a9:f6:6d:f0:74:2e:3d:f4:90:a1: 76:43:86:7e:da:c5:2c:cb:76:a2:c8:ea:68:a3:96: de:51:0c:c3:1a:41:bc:9a:1f:de:ca:6d:d9:02:1a: f4:eb:e2:1e:52:47:5e:be:7f:3f:6a:a2:13:b7:0f: 0a:0c:b1:ef:54:73:29:71:2e:7a:f7:e3:21:6d:e7: 29:b4:db:6c:dc:69:06:7f:22:3c:f1:96:4c:70:50: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E0:61:CE:66:C2:7A:D0:33:24:43:A6:AF:59:5E:32:79:6F:BE:E4 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.255.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:88:3b:29:04:9e:57:19:67:2d:8b:9b:53:0e:68:de:a0:2a: c9:4c:51:97:46:59:6c:4b:ae:6e:dd:65:eb:c0:9c:d7:45:72: 1d:0d:b4:3a:31:8c:7a:70:de:0a:70:d4:59:af:94:70:a1:fe: c4:e0:88:d6:84:9d:b4:c1:57:05:fe:55:7b:70:da:c6:0a:29: b1:42:0c:b1:70:b8:c8:7a:be:c3:27:e5:03:2d:bb:ef:3c:43: d3:41:ae:9e:d8:e5:ac:a9:97:ae:33:32:f5:48:41:4f:fb:54: bc:2d:da:b9:c8:08:97:c3:9b:15:08:cf:ed:3c:da:35:62:75: c5:d8:ef:7d:1b:0a:73:c3:d8:29:34:5e:20:89:ab:35:92:46: ef:24:84:02:d1:52:46:49:af:7b:ab:1f:6f:14:4e:24:ae:35: d0:67:e1:5f:32:1e:59:f7:8c:59:82:8a:50:fd:45:d1:27:42: f0:26:92:1d:29:65:fd:52:ec:c6:ca:0d:57:42:c0:a5:bf:f9: c6:97:82:4d:fd:a8:65:8f:11:f1:0b:d9:67:e7:bb:02:9a:61: 36:b8:fd:ba:f6:c3:3c:67:f9:b9:6c:10:ba:5c:2e:fc:fd:2e: df:eb:7b:6b:66:4e:c1:0e:23:a3:d0:c2:98:27:82:f7:d4:26: 82:37:16:31 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEIz8+a2jMlS+g+hqptr4I9IdJrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNDA3MDEwMDU4MzBaFw0yNTA2MzAwMTAzMzBaMDMxMTAvBgNV BAMTKDNDRTA2MUNFNjZDMjdBRDAzMzI0NDNBNkFGNTk1RTMyNzk2RkJFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNs5zeH7zCAT7GOB5zvMWE6Lo qmO9l4SywxtP1kUhZaqWpxNE1uzO1PJNoMsf8oTNhti4qLb4Vjy/K2Cwn0RxzVAd wSA28DP8bC3rolEh4BOWD9oSI2VwiLEIkT4Othl/5DA0YmRITdZRurRoxeUpZ+Lp k3snkmDCrMwbDi7UWh1Ll2D3wfMWpZrZwmWP1pIlhOPWOVHm6I+XRJrLNJa2Xdav CsNhZX+0qfZt8HQuPfSQoXZDhn7axSzLdqLI6mijlt5RDMMaQbyaH97KbdkCGvTr 4h5SR16+fz9qohO3DwoMse9UcylxLnr34yFt5ym022zcaQZ/IjzxlkxwUP9BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPOBhzmbCetAzJEOmr1leMnlvvuQwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNb/MA0GCSqG SIb3DQEBCwUAA4IBAQCMiDspBJ5XGWcti5tTDmjeoCrJTFGXRllsS65u3WXrwJzX RXIdDbQ6MYx6cN4KcNRZr5Rwof7E4IjWhJ20wVcF/lV7cNrGCimxQgyxcLjIer7D J+UDLbvvPEPTQa6e2OWsqZeuMzL1SEFP+1S8Ldq5yAiXw5sVCM/tPNo1YnXF2O99 Gwpzw9gpNF4gias1kkbvJIQC0VJGSa97qx9vFE4krjXQZ+FfMh5Z94xZgopQ/UXR J0LwJpIdKWX9UuzGyg1XQsClv/nGl4JN/ahljxHxC9ln57sCmmE2uP269sM8Z/m5 bBC6XC78/S7f63trZk7BDiOj0MKYJ4L31CaCNxYx -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org