$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3131372e32302e34382e302f32302d3234203d3e203233393531.roa File: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (raw, json) Hash identifier: twCP3bQtXm7fHopGhk9qw+BKzDavhDYNdBsRfz7JGKg= Subject key identifier: B7:CD:72:0B:2E:0A:D4:1D:81:44:60:94:5B:7D:2E:BC:19:26:CB:CF Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 3F4E149D4A2315EAEC139414E40701A79C63A223 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3131372e32302e34382e302f32302d3234203d3e203233393531.roa Signing time: Tue 20 Aug 2024 04:00:00 +0000 ROA not before: Tue 20 Aug 2024 03:55:00 +0000 ROA not after: Tue 19 Aug 2025 04:00:00 +0000 asID: 23951 IP address blocks: 117.20.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4e:14:9d:4a:23:15:ea:ec:13:94:14:e4:07:01:a7:9c:63:a2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Aug 20 03:55:00 2024 GMT Not After : Aug 19 04:00:00 2025 GMT Subject: CN=B7CD720B2E0AD41D814460945B7D2EBC1926CBCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:e6:01:e1:f1:93:c4:f0:a2:a2:42:e0:f9: 82:3c:9f:5d:7e:55:b5:16:3d:3f:aa:c8:4c:86:ba: 94:a6:bb:49:82:27:4b:cd:ce:18:1a:70:70:56:fc: 8d:b7:1d:e3:e1:56:c0:69:d0:c7:ba:05:82:42:5d: 4c:d7:17:c3:ae:10:8d:b2:cd:32:61:a0:45:26:9a: f0:35:a7:9a:9b:62:c1:9d:16:e8:54:e9:59:62:79: fa:cc:ce:eb:64:86:45:81:5e:73:6c:b8:32:14:31: d8:ab:d4:dc:93:ce:b6:c2:a4:3e:28:b4:aa:52:fd: c6:39:27:13:9b:14:95:46:64:cb:1a:74:10:c6:98: 0a:d6:2b:d9:26:c2:80:cf:41:4d:89:c1:6c:cf:da: c0:31:76:29:cd:19:71:07:ed:15:c8:f9:72:cf:52: 9a:18:d4:bc:b8:a7:1f:45:85:ae:6e:58:99:92:f4: 17:af:bb:10:fd:9c:ba:bf:a0:44:7b:9e:1a:df:c3: fd:05:b7:e4:70:c5:7e:1c:ef:29:24:f3:58:94:bf: f3:6c:45:69:c1:2c:7b:96:fd:21:d0:18:0c:60:b0: be:32:c7:93:46:fd:68:63:9f:6f:89:20:95:20:1f: 66:75:8a:89:7e:b7:94:dc:04:34:53:35:83:b0:7d: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CD:72:0B:2E:0A:D4:1D:81:44:60:94:5B:7D:2E:BC:19:26:CB:CF X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3131372e32302e34382e302f32302d3234203d3e203233393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.20.48.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:cb:83:d8:97:6d:86:4d:9e:ed:70:95:f9:fb:39:66:a0:b8: 14:7b:21:9d:cf:3b:b0:d4:e5:80:a6:08:75:23:6e:6b:62:52: 7b:e4:9d:4e:68:5b:4f:76:c5:69:58:85:c5:1f:f2:5a:1d:f8: d9:c4:eb:80:94:98:02:6f:b2:28:5e:3d:3e:68:af:46:d0:4f: a0:4e:a4:9c:d2:10:10:07:49:b5:54:da:52:35:0f:27:63:ba: 17:5b:6e:24:ea:74:06:cd:dc:80:03:85:5c:47:ac:f7:cd:ad: 7b:a3:81:6a:58:74:ca:8b:ec:00:c4:a3:22:1f:a1:92:d9:b1: 2e:db:6a:ab:78:6a:48:0b:df:05:9f:ab:d6:b2:62:97:44:98: 50:c8:30:ef:70:8a:5e:76:f1:b2:51:46:bb:40:6b:83:4c:ae: de:0d:80:f3:99:7d:d3:4f:2b:5c:e3:b2:55:9f:c4:c1:9b:2f: 52:e5:1f:1f:1c:ed:16:36:ec:f4:f5:c1:d3:84:9b:77:9e:79: 30:9b:3d:2d:fa:f8:eb:67:07:74:5b:5b:85:03:86:c7:5f:07: 0c:1d:46:50:62:6f:f9:99:fc:c9:31:66:75:b2:60:ae:1e:a1: 32:5d:81:de:c5:07:d0:98:d9:b3:f9:f3:94:bc:32:bb:69:cc: ca:61:c2:b9 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUP04UnUojFersE5QU5AcBp5xjoiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNDA4MjAwMzU1MDBaFw0yNTA4MTkwNDAwMDBaMDMxMTAvBgNV BAMTKEI3Q0Q3MjBCMkUwQUQ0MUQ4MTQ0NjA5NDVCN0QyRUJDMTkyNkNCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdwuYB4fGTxPCiokLg+YI8n11+ VbUWPT+qyEyGupSmu0mCJ0vNzhgacHBW/I23HePhVsBp0Me6BYJCXUzXF8OuEI2y zTJhoEUmmvA1p5qbYsGdFuhU6VliefrMzutkhkWBXnNsuDIUMdir1NyTzrbCpD4o tKpS/cY5JxObFJVGZMsadBDGmArWK9kmwoDPQU2JwWzP2sAxdinNGXEH7RXI+XLP UpoY1Ly4px9Fha5uWJmS9BevuxD9nLq/oER7nhrfw/0Ft+RwxX4c7ykk81iUv/Ns RWnBLHuW/SHQGAxgsL4yx5NG/Whjn2+JIJUgH2Z1iol+t5TcBDRTNYOwfcWVAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUt81yCy4K1B2BRGCUW30uvBkmy88wHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlNmE3ZTQ2LWI2YWQtNGE3ZC1i OTMwLTFhYjBiZjAyZGQ1ZC8wLzMxMzEzNzJlMzIzMDJlMzQzODJlMzAyZjMyMzAy ZDMyMzQyMDNkM2UyMDMyMzMzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR1FDAwDQYJKoZIhvcN AQELBQADggEBAD7Lg9iXbYZNnu1wlfn7OWaguBR7IZ3PO7DU5YCmCHUjbmtiUnvk nU5oW092xWlYhcUf8lod+NnE64CUmAJvsihePT5or0bQT6BOpJzSEBAHSbVU2lI1 DydjuhdbbiTqdAbN3IADhVxHrPfNrXujgWpYdMqL7ADEoyIfoZLZsS7baqt4akgL 3wWfq9ayYpdEmFDIMO9wil528bJRRrtAa4NMrt4NgPOZfdNPK1zjslWfxMGbL1Ll Hx8c7RY27PT1wdOEm3eeeTCbPS36+OtnB3RbW4UDhsdfBwwdRlBib/mZ/MkxZnWy YK4eoTJdgd7FB9CY2bP585S8MrtpzMphwrk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org