$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa File: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (raw, json) Hash identifier: 1f4UXWKsOacyCVtxubj2AeJTPPvOpeqJnHyC0iziuxo= Subject key identifier: D7:AD:95:90:2F:10:2D:2A:64:61:88:B4:2D:1D:51:3F:0C:73:3E:67 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 6A6553E3427A89D7B1C07529C33B65AF684BEC7D Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa Signing time: Fri 14 Jun 2024 13:08:23 +0000 ROA not before: Fri 14 Jun 2024 13:03:23 +0000 ROA not after: Fri 13 Jun 2025 13:08:23 +0000 asID: 152363 IP address blocks: 157.15.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 10:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:65:53:e3:42:7a:89:d7:b1:c0:75:29:c3:3b:65:af:68:4b:ec:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Jun 14 13:03:23 2024 GMT Not After : Jun 13 13:08:23 2025 GMT Subject: CN=D7AD95902F102D2A646188B42D1D513F0C733E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:23:d5:f3:45:8b:4d:80:d0:ee:22:0a:99: ee:10:cd:97:8a:fe:fd:c7:04:ea:1b:2c:10:27:0a: 46:51:69:52:0f:ad:a2:9c:84:bb:20:28:e7:37:71: 84:93:61:e0:b6:02:a1:37:8d:69:9a:6f:5c:90:99: 28:8e:bd:d3:42:a8:9b:9e:03:d6:eb:67:b4:94:63: 9b:fd:3a:91:d8:f0:b1:b8:8a:b0:8d:f5:c9:47:48: 7a:9f:2f:eb:75:fe:5d:71:07:2b:ff:a6:be:8e:4e: 34:3e:4e:30:c3:1e:57:b7:c1:9b:04:1e:68:23:c1: 04:d7:5b:70:4f:9d:96:3c:b8:92:15:35:2e:67:9a: 5b:61:82:1e:d9:66:6b:c7:b0:c1:ee:36:ec:89:98: 96:6d:3e:33:91:de:15:40:39:c0:c4:2b:49:dc:8b: 74:a3:65:1c:d1:96:0e:24:33:be:2a:58:3f:3e:34: 80:08:eb:d1:b7:77:6d:74:b7:0a:e2:92:70:25:4e: 14:d9:5b:28:60:33:90:87:aa:bb:7b:18:94:7a:74: 9e:d2:6b:87:2d:77:e5:0b:a7:b8:c5:11:7d:0f:00: 4d:fc:5a:86:ee:65:4a:c8:88:e0:5f:b5:f6:32:dd: 8c:74:a3:a2:82:56:8e:27:87:23:3b:70:8c:c6:0c: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AD:95:90:2F:10:2D:2A:64:61:88:B4:2D:1D:51:3F:0C:73:3E:67 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.83.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:e0:19:7b:51:c7:5b:ce:7f:5f:ef:b0:f5:19:ed:cd:0e:0e: cb:9d:c7:54:34:a2:d5:ed:ef:02:4a:a4:0a:93:c9:5a:87:3f: ac:ae:06:d0:5b:e1:5c:e9:95:e6:63:e9:ed:59:11:af:82:a1: 88:ad:bc:d8:08:20:eb:97:74:31:51:d2:7b:5c:7d:0a:df:ec: 2e:f8:c9:2c:db:2b:80:a7:ee:2a:fe:b8:6c:c7:33:fc:a3:dd: 0a:25:b7:48:8f:0d:61:75:12:23:c2:6d:21:54:7e:3c:29:02: 28:58:9e:5e:63:f0:37:2f:84:45:4a:f8:44:5a:23:f0:d1:33: 50:e1:fd:71:b8:67:aa:d1:54:38:19:0b:25:27:5f:e7:f3:d8: 2c:dc:1e:cd:dd:d4:8e:46:07:15:84:b2:a1:f4:ee:e9:92:cd: e7:38:6c:0b:19:cc:d2:fa:da:fa:ba:aa:56:82:9b:b0:e0:45: 11:29:37:7b:2f:bd:d0:54:97:e5:0a:3e:53:98:68:bd:0c:e2: a1:a3:2e:51:e4:df:64:e2:fc:76:09:da:1e:0e:02:a5:3a:55: 3c:6c:2f:15:3f:82:f4:a5:ab:68:2e:31:f3:bb:57:3a:6b:de: 6c:8a:68:1a:5e:56:bd:58:de:10:62:90:e8:82:c2:e4:e5:4d: 76:03:23:87 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUamVT40J6idexwHUpwztlr2hL7H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNDA2MTQxMzAzMjNaFw0yNTA2MTMxMzA4MjNaMDMxMTAvBgNV BAMTKEQ3QUQ5NTkwMkYxMDJEMkE2NDYxODhCNDJEMUQ1MTNGMEM3MzNFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZISPV80WLTYDQ7iIKme4QzZeK /v3HBOobLBAnCkZRaVIPraKchLsgKOc3cYSTYeC2AqE3jWmab1yQmSiOvdNCqJue A9brZ7SUY5v9OpHY8LG4irCN9clHSHqfL+t1/l1xByv/pr6OTjQ+TjDDHle3wZsE HmgjwQTXW3BPnZY8uJIVNS5nmlthgh7ZZmvHsMHuNuyJmJZtPjOR3hVAOcDEK0nc i3SjZRzRlg4kM74qWD8+NIAI69G3d210twriknAlThTZWyhgM5CHqrt7GJR6dJ7S a4ctd+ULp7jFEX0PAE38WobuZUrIiOBftfYy3Yx0o6KCVo4nhyM7cIzGDF3hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU162VkC8QLSpkYYi0LR1RPwxzPmcwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkMDExYTFjLWEwYWQtNGQ5My04 NmFmLTNmMGFhZGQ5Njg0Zi8wLzMxMzUzNzJlMzEzNTJlMzgzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PUzANBgkqhkiG 9w0BAQsFAAOCAQEAPeAZe1HHW85/X++w9RntzQ4Oy53HVDSi1e3vAkqkCpPJWoc/ rK4G0FvhXOmV5mPp7VkRr4KhiK282Agg65d0MVHSe1x9Ct/sLvjJLNsrgKfuKv64 bMcz/KPdCiW3SI8NYXUSI8JtIVR+PCkCKFieXmPwNy+ERUr4RFoj8NEzUOH9cbhn qtFUOBkLJSdf5/PYLNwezd3UjkYHFYSyofTu6ZLN5zhsCxnM0vra+rqqVoKbsOBF ESk3ey+90FSX5Qo+U5hovQzioaMuUeTfZOL8dgnaHg4CpTpVPGwvFT+C9KWraC4x 87tXOmvebIpoGl5WvVjeEGKQ6ILC5OVNdgMjhw== -----END CERTIFICATE-----Generated at Sat Sep 28 05:42:00 2024 by rpki-client on console-fra.rpki-client.org