$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa File: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (raw, json) Hash identifier: aSmELMjbVbrJYcy5WtWo7WJdkIRQbL5hFTNoqcM9u0M= Subject key identifier: 01:71:16:FA:83:A9:1F:9F:87:68:4A:33:4F:6E:A0:35:01:50:E4:26 Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 4D1BA8A956A38503415FAB28A2933A39C46C2F54 Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa Signing time: Sun 16 Jun 2024 06:00:01 +0000 ROA not before: Sun 16 Jun 2024 05:55:01 +0000 ROA not after: Sun 15 Jun 2025 06:00:01 +0000 asID: 45306 IP address blocks: 119.15.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1b:a8:a9:56:a3:85:03:41:5f:ab:28:a2:93:3a:39:c4:6c:2f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Jun 16 05:55:01 2024 GMT Not After : Jun 15 06:00:01 2025 GMT Subject: CN=017116FA83A91F9F87684A334F6EA0350150E426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:e6:92:19:eb:40:b3:4a:22:51:73:6d:83: aa:1a:0a:b6:55:95:6d:aa:7b:59:69:fe:03:ba:55: 7d:46:a3:7e:10:9a:0e:19:e0:ed:56:cf:1d:23:d0: bc:46:58:4e:ed:1a:e8:d6:41:66:c0:42:d7:a5:40: 5d:62:25:c2:05:6c:dc:3b:79:46:3d:eb:15:bf:79: 97:4e:3d:9e:be:5c:9c:1c:d2:67:3d:28:a8:97:93: 63:ae:e5:2e:26:a6:6f:a0:30:bb:88:12:e5:20:42: 92:29:88:6a:0d:49:d3:2e:74:ea:0d:67:3e:c8:db: a2:a3:58:a0:08:38:a3:59:13:f5:25:39:12:c4:8e: e8:9a:53:29:fd:77:af:74:84:87:c0:1c:e5:26:5b: dc:2f:8e:76:15:57:8c:d2:f0:85:22:8a:ce:aa:86: 7f:a9:ab:bf:1e:2e:a3:34:86:03:1f:00:e6:ab:17: 5f:c9:52:09:6b:33:8b:0c:5f:24:51:78:bf:9d:4f: 35:22:53:07:2f:cb:8b:b3:13:cd:7f:07:6e:19:a8: ee:d0:d9:b7:be:9b:46:b1:bd:7e:a5:64:5b:61:2e: ff:ad:bc:3c:82:b6:75:80:e0:a4:97:c6:cb:42:5b: 7c:b8:72:67:9a:62:4b:15:2f:6d:05:5e:a1:94:6b: 38:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:71:16:FA:83:A9:1F:9F:87:68:4A:33:4F:6E:A0:35:01:50:E4:26 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.15.133.0/24 Signature Algorithm: sha256WithRSAEncryption 30:c1:b6:19:7f:c0:e0:a6:19:cb:df:5d:b6:1b:44:23:be:d5: 17:a6:b4:06:8d:3f:49:2b:5b:33:70:41:de:1e:d9:d7:3d:a7: 99:d1:bf:f2:63:b4:22:99:06:51:f7:07:5f:0f:82:92:59:58: 63:35:1b:98:e0:49:58:6d:d8:ea:33:8e:d6:f7:8e:39:01:51: 43:67:e0:e9:c8:d2:fd:b9:e0:44:c5:cd:75:5b:54:14:d0:95: f4:e9:6b:72:4f:37:5e:4a:e1:04:6f:b4:7f:0a:65:f3:1b:44: c7:71:64:2a:4f:49:cd:31:84:76:9c:62:b1:0f:09:64:82:96: 50:a2:9f:46:95:5f:43:ba:16:2b:0c:3a:07:02:11:53:2c:33: 91:99:d5:bb:40:4c:c0:ce:a3:44:c9:b1:2a:ed:61:82:a6:9d: 9d:00:e8:a6:05:04:19:87:03:a0:af:7d:5c:2f:ef:43:ce:3d: ac:2e:4c:92:f4:6d:7d:96:32:a2:da:f5:6d:26:cf:e4:7e:ee: 84:50:7f:6e:e1:64:23:09:f8:91:bf:0a:6d:f6:af:99:33:3e: 35:4c:d3:03:0b:89:8e:cc:cd:e9:07:d2:93:ec:e9:8c:a1:7b: 77:04:c0:28:b7:14:fa:02:45:ef:c3:b1:ed:db:84:0a:9d:e2: 39:1c:c8:4f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTRuoqVajhQNBX6soopM6OcRsL1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNDA2MTYwNTU1MDFaFw0yNTA2MTUwNjAwMDFaMDMxMTAvBgNV BAMTKDAxNzExNkZBODNBOTFGOUY4NzY4NEEzMzRGNkVBMDM1MDE1MEU0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXuaSGetAs0oiUXNtg6oaCrZV lW2qe1lp/gO6VX1Go34Qmg4Z4O1Wzx0j0LxGWE7tGujWQWbAQtelQF1iJcIFbNw7 eUY96xW/eZdOPZ6+XJwc0mc9KKiXk2Ou5S4mpm+gMLuIEuUgQpIpiGoNSdMudOoN Zz7I26KjWKAIOKNZE/UlORLEjuiaUyn9d690hIfAHOUmW9wvjnYVV4zS8IUiis6q hn+pq78eLqM0hgMfAOarF1/JUglrM4sMXyRReL+dTzUiUwcvy4uzE81/B24ZqO7Q 2be+m0axvX6lZFthLv+tvDyCtnWA4KSXxstCW3y4cmeaYksVL20FXqGUazhFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAXEW+oOpH5+HaEozT26gNQFQ5CYwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMxMzEzOTJlMzEzNTJlMzEzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcPhTANBgkqhkiG 9w0BAQsFAAOCAQEAMMG2GX/A4KYZy99dthtEI77VF6a0Bo0/SStbM3BB3h7Z1z2n mdG/8mO0IpkGUfcHXw+CkllYYzUbmOBJWG3Y6jOO1veOOQFRQ2fg6cjS/bngRMXN dVtUFNCV9Olrck83XkrhBG+0fwpl8xtEx3FkKk9JzTGEdpxisQ8JZIKWUKKfRpVf Q7oWKww6BwIRUywzkZnVu0BMwM6jRMmxKu1hgqadnQDopgUEGYcDoK99XC/vQ849 rC5MkvRtfZYyotr1bSbP5H7uhFB/buFkIwn4kb8KbfavmTM+NUzTAwuJjszN6QfS k+zpjKF7dwTAKLcU+gJF78Ox7duECp3iORzITw== -----END CERTIFICATE-----Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org