$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36362e302f32342d3234203d3e20313532303339.roa File: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (raw, json) Hash identifier: 4IsdwZuqWrtsTBy7qNoDqeWfulmbeoj4TPAyRDs8m28= Subject key identifier: F0:F1:79:2F:13:A4:EF:B1:49:BF:31:FB:CB:67:55:10:F9:5A:C6:3D Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 7B7B868E284C087C28BF9E5292185C2DD96AB30E Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36362e302f32342d3234203d3e20313532303339.roa Signing time: Fri 17 May 2024 15:36:31 +0000 ROA not before: Fri 17 May 2024 15:31:31 +0000 ROA not after: Fri 16 May 2025 15:36:31 +0000 asID: 152039 IP address blocks: 27.124.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 10:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7b:86:8e:28:4c:08:7c:28:bf:9e:52:92:18:5c:2d:d9:6a:b3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: May 17 15:31:31 2024 GMT Not After : May 16 15:36:31 2025 GMT Subject: CN=F0F1792F13A4EFB149BF31FBCB675510F95AC63D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:63:ad:35:bd:da:4e:22:e2:0b:d4:6b:80: 5e:4d:8f:eb:d4:5d:45:c5:30:e8:ee:71:35:c5:71: 7a:75:b6:c4:ab:cb:54:6a:be:00:23:8c:0a:e1:47: 89:28:df:ad:cd:25:34:a8:7e:e5:06:85:98:5f:35: 24:3a:8a:91:cb:9a:fe:88:ab:d6:ea:95:fa:d3:37: 19:af:41:60:25:00:44:62:52:13:cb:95:30:ea:5c: bc:3a:c8:20:bf:cc:98:93:78:1f:91:e8:a3:3a:a3: 60:6e:28:96:ad:e0:ab:dc:3b:e6:08:02:87:c8:b0: f7:1d:b3:16:d2:8b:30:b3:f0:af:bb:f5:49:89:0d: d2:2a:2e:89:07:6f:0b:2f:ab:6c:aa:62:fa:3f:44: 3b:d9:57:9d:95:26:18:11:61:6c:e3:83:16:18:b2: 1a:c9:8d:23:13:98:70:4f:0c:41:30:de:06:e8:aa: 3a:1d:b0:67:74:63:51:ae:dc:d6:d1:0f:61:f9:21: 09:85:30:1b:61:72:45:ba:39:ef:6c:fe:74:12:31: 4a:84:01:2d:5c:c9:d4:2b:51:e0:7f:0a:1a:f7:95: 11:05:4a:78:f9:12:45:a9:a5:05:42:20:39:a4:81: 64:3b:6b:17:6b:bb:a8:30:a4:16:a9:6a:00:c4:18: 88:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:79:2F:13:A4:EF:B1:49:BF:31:FB:CB:67:55:10:F9:5A:C6:3D X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36362e302f32342d3234203d3e20313532303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.66.0/24 Signature Algorithm: sha256WithRSAEncryption 74:5a:8b:ad:5f:08:ed:43:12:50:1c:b1:a0:2f:47:bf:34:f8: 81:f6:24:b2:c9:f5:37:fe:8f:84:0c:11:c1:52:dd:ec:d1:11: 2b:05:c0:b4:1e:2c:cc:2b:60:7c:f7:82:0b:f6:e7:ff:da:df: a4:b1:f4:a9:63:40:8c:30:cc:11:9a:f6:1e:a3:56:e4:8c:43: b3:f4:26:d6:47:b7:c9:ed:51:a6:0d:3d:1d:a9:6e:38:c3:4a: c6:a4:b1:ec:e8:14:3e:aa:84:b0:9c:17:57:9c:98:75:64:ae: 01:e8:b4:72:a7:8f:20:eb:7b:7f:b7:a3:9f:0e:f6:c8:2d:ba: 25:93:4f:ac:ae:86:00:b9:4f:71:1b:14:d6:6a:36:0d:21:e5: dd:f9:d7:20:25:de:49:c5:44:bd:ae:bc:ab:e0:dc:e7:8b:f4: c2:3c:6e:63:fa:9a:ed:93:50:fa:b4:1b:3a:17:d3:40:d8:79: 82:54:96:e7:2f:08:e0:81:f8:53:af:a3:65:92:91:e3:f1:e8: d9:98:c7:d3:2b:79:a8:d9:bd:68:d8:2c:ef:f8:af:3d:81:9c: 95:e7:d4:41:08:5f:4a:03:d3:4b:66:10:af:e1:30:f9:6c:b2: 31:70:04:15:87:c4:7b:d6:df:cd:62:be:48:d5:74:3c:16:a9: 11:1d:54:7e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUe3uGjihMCHwov55SkhhcLdlqsw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNDA1MTcxNTMxMzFaFw0yNTA1MTYxNTM2MzFaMDMxMTAvBgNV BAMTKEYwRjE3OTJGMTNBNEVGQjE0OUJGMzFGQkNCNjc1NTEwRjk1QUM2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFWOtNb3aTiLiC9RrgF5Nj+vU XUXFMOjucTXFcXp1tsSry1RqvgAjjArhR4ko363NJTSofuUGhZhfNSQ6ipHLmv6I q9bqlfrTNxmvQWAlAERiUhPLlTDqXLw6yCC/zJiTeB+R6KM6o2BuKJat4KvcO+YI AofIsPcdsxbSizCz8K+79UmJDdIqLokHbwsvq2yqYvo/RDvZV52VJhgRYWzjgxYY shrJjSMTmHBPDEEw3gboqjodsGd0Y1Gu3NbRD2H5IQmFMBthckW6Oe9s/nQSMUqE AS1cydQrUeB/Chr3lREFSnj5EkWppQVCIDmkgWQ7axdru6gwpBapagDEGIhbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8PF5LxOk77FJvzH7y2dVEPlaxj0wHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiN2UwYmMwLTc2MWItNGVjMy04 ZjQyLTgyOTgxYjkxYTk3YS8wLzMyMzcyZTMxMzIzNDJlMzYzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABt8QjANBgkqhkiG 9w0BAQsFAAOCAQEAdFqLrV8I7UMSUByxoC9HvzT4gfYkssn1N/6PhAwRwVLd7NER KwXAtB4szCtgfPeCC/bn/9rfpLH0qWNAjDDMEZr2HqNW5IxDs/Qm1ke3ye1Rpg09 HaluOMNKxqSx7OgUPqqEsJwXV5yYdWSuAei0cqePIOt7f7ejnw72yC26JZNPrK6G ALlPcRsU1mo2DSHl3fnXICXeScVEva68q+Dc54v0wjxuY/qa7ZNQ+rQbOhfTQNh5 glSW5y8I4IH4U6+jZZKR4/Ho2ZjH0yt5qNm9aNgs7/ivPYGclefUQQhfSgPTS2YQ r+Ew+WyyMXAEFYfEe9bfzWK+SNV0PBapER1Ufg== -----END CERTIFICATE-----Generated at Fri Jun 28 06:07:31 2024 by rpki-client on console-fra.rpki-client.org