$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132392e302f32342d3234203d3e203435333036.roa File: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (raw, json) Hash identifier: XTdIK/86pyqKuLIZqq8wslOj/nTzUkV26mzZitRqRtY= Subject key identifier: 76:EE:5B:18:92:AE:BB:98:64:D1:11:8D:FE:AE:D6:CF:1B:6E:9B:77 Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 79F292A02FF0ADBF992473816F46175A6EBFDD67 Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132392e302f32342d3234203d3e203435333036.roa Signing time: Sun 16 Jul 2023 06:00:00 +0000 ROA not before: Sun 16 Jul 2023 05:55:00 +0000 ROA not after: Sun 14 Jul 2024 06:00:00 +0000 asID: 45306 IP address blocks: 119.15.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f2:92:a0:2f:f0:ad:bf:99:24:73:81:6f:46:17:5a:6e:bf:dd:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Jul 16 05:55:00 2023 GMT Not After : Jul 14 06:00:00 2024 GMT Subject: CN=76EE5B1892AEBB9864D1118DFEAED6CF1B6E9B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:d8:fb:75:77:43:01:7e:c6:88:10:97:4d: f5:ec:a7:ca:a1:a0:f2:65:09:03:14:5e:db:f8:28: 5c:6f:80:9a:35:6b:8a:9e:b7:da:36:20:28:ff:ac: dd:eb:62:c7:3c:29:38:b5:64:67:2e:ee:7d:48:e7: e9:98:35:05:6c:d6:4e:84:e3:35:24:41:5a:98:af: a1:bf:b7:16:02:b3:bf:7d:48:d6:1c:6e:0d:bc:a2: 9e:b5:35:57:f5:6a:de:1f:43:3d:8f:e7:5a:23:96: 5b:a6:55:fc:06:d1:65:c9:a4:53:2d:d4:c0:67:e2: c6:d9:13:3e:d2:38:98:dd:b4:e9:ae:13:f6:2b:02: 63:87:5b:c3:50:b1:9e:93:82:23:75:8f:dd:c9:8b: 4c:53:b6:21:f9:0f:33:e6:90:ed:6e:ed:77:ff:03: 56:59:24:cf:a3:7a:7c:6c:09:a8:6d:2b:05:2c:30: bd:95:75:bf:c0:5d:14:6b:66:f1:cd:e3:17:c5:58: 49:06:ed:1f:3b:e5:71:36:dd:1f:2c:2d:35:0a:ae: 7e:11:27:78:7a:f1:e7:a5:f0:ea:d3:9e:0a:01:71: f3:df:a0:5a:2b:c9:e5:f1:30:cd:0b:07:23:e6:e7: cf:60:e9:cb:50:6c:f1:88:f2:c4:77:77:37:98:15: e3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EE:5B:18:92:AE:BB:98:64:D1:11:8D:FE:AE:D6:CF:1B:6E:9B:77 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132392e302f32342d3234203d3e203435333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.15.129.0/24 Signature Algorithm: sha256WithRSAEncryption a7:c4:9f:d0:dd:73:af:f9:5b:c0:ea:d2:e7:20:fc:f7:43:a8: 8d:ba:69:c8:01:d2:51:40:97:94:0a:95:fd:a2:d0:49:12:aa: 28:ad:83:53:69:1a:30:3a:08:6a:73:e1:7e:18:f1:f6:0d:85: 89:d2:8a:c2:83:f0:9a:96:69:cd:24:33:97:c9:25:cd:55:7f: cd:a0:e5:c2:4b:63:15:42:3d:24:de:0d:2f:4c:cc:3c:49:fc: 29:73:58:b6:50:59:ea:94:21:d7:e4:85:b6:58:b3:83:40:1c: 50:6d:c4:99:b9:df:d0:e8:78:6e:4c:f4:fc:a9:3e:f4:22:1a: c1:6d:ad:20:a3:72:17:66:29:08:dc:a5:19:52:aa:cb:c9:e3: fc:29:d4:16:ad:a2:76:72:aa:fb:35:5d:6c:4f:35:fe:76:5f: ff:fa:42:ae:cc:27:cb:23:2a:f0:b2:18:5a:a9:77:64:35:31: 99:9d:39:04:d6:bb:89:e0:f4:e9:ea:b1:b6:54:cb:dc:28:03: 0b:60:d1:a5:f4:a5:41:93:ae:cc:36:d7:06:7d:7a:6b:f3:11: 26:d3:5e:9f:76:04:ad:0e:17:e5:c1:46:5f:6d:9d:b9:44:fd: 60:88:89:0c:68:f7:8a:b3:20:1b:1f:ed:ab:ec:f0:48:36:e2: d4:56:bc:b2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUefKSoC/wrb+ZJHOBb0YXWm6/3WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yMzA3MTYwNTU1MDBaFw0yNDA3MTQwNjAwMDBaMDMxMTAvBgNV BAMTKDc2RUU1QjE4OTJBRUJCOTg2NEQxMTE4REZFQUVENkNGMUI2RTlCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAdj7dXdDAX7GiBCXTfXsp8qh oPJlCQMUXtv4KFxvgJo1a4qet9o2ICj/rN3rYsc8KTi1ZGcu7n1I5+mYNQVs1k6E 4zUkQVqYr6G/txYCs799SNYcbg28op61NVf1at4fQz2P51ojllumVfwG0WXJpFMt 1MBn4sbZEz7SOJjdtOmuE/YrAmOHW8NQsZ6TgiN1j93Ji0xTtiH5DzPmkO1u7Xf/ A1ZZJM+jenxsCahtKwUsML2Vdb/AXRRrZvHN4xfFWEkG7R875XE23R8sLTUKrn4R J3h68eel8OrTngoBcfPfoForyeXxMM0LByPm589g6ctQbPGI8sR3dzeYFePdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdu5bGJKuu5hk0RGN/q7Wzxtum3cwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMxMzEzOTJlMzEzNTJlMzEzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcPgTANBgkqhkiG 9w0BAQsFAAOCAQEAp8Sf0N1zr/lbwOrS5yD890OojbppyAHSUUCXlAqV/aLQSRKq KK2DU2kaMDoIanPhfhjx9g2FidKKwoPwmpZpzSQzl8klzVV/zaDlwktjFUI9JN4N L0zMPEn8KXNYtlBZ6pQh1+SFtlizg0AcUG3Embnf0Oh4bkz0/Kk+9CIawW2tIKNy F2YpCNylGVKqy8nj/CnUFq2idnKq+zVdbE81/nZf//pCrswnyyMq8LIYWql3ZDUx mZ05BNa7ieD06eqxtlTL3CgDC2DRpfSlQZOuzDbXBn16a/MRJtNen3YErQ4X5cFG X22duUT9YIiJDGj3irMgGx/tq+zwSDbi1Fa8sg== -----END CERTIFICATE-----Generated at Sat Jun 1 19:26:35 2024 by rpki-client on console-fra.rpki-client.org