$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32342d3234203d3e203436303139.roa File: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (raw, json) Hash identifier: ll1xVrAa6lhDcLUd8Yyr5OUC3kLSP7APj8eXxhlETQY= Subject key identifier: 5C:BF:D2:DB:D6:2A:2A:77:16:E6:F6:70:8D:41:80:9F:83:58:09:0E Certificate issuer: /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Certificate serial: 5F83BDEDA0F4CCA0243619F06B8E3D2E913E99F8 Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32342d3234203d3e203436303139.roa Signing time: Mon 31 Jul 2023 00:02:30 +0000 ROA not before: Sun 30 Jul 2023 23:57:30 +0000 ROA not after: Mon 29 Jul 2024 00:02:30 +0000 asID: 46019 IP address blocks: 175.45.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 07:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:83:bd:ed:a0:f4:cc:a0:24:36:19:f0:6b:8e:3d:2e:91:3e:99:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Validity Not Before: Jul 30 23:57:30 2023 GMT Not After : Jul 29 00:02:30 2024 GMT Subject: CN=5CBFD2DBD62A2A7716E6F6708D41809F8358090E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:57:ac:8a:1e:55:dd:2e:cf:52:27:1f:f2:9f: 0c:1e:49:33:e9:e6:0b:1a:75:8f:d2:2a:f1:c4:b2: 6a:c0:8c:ea:ed:8a:ba:9d:14:7c:b6:74:84:74:77: 8f:83:b9:6d:97:a9:99:38:24:51:44:b2:1b:cd:78: 34:8a:29:db:45:e4:b4:37:59:d1:2a:47:8b:1f:4a: bb:46:a6:24:92:d7:e5:53:00:24:23:34:c6:ee:6d: 6c:3d:0e:8d:a5:f0:12:6e:48:8e:5e:13:f3:2c:58: 28:6d:11:8f:4a:26:fa:75:86:41:35:16:a1:0c:25: b7:7b:a0:f1:45:f0:8c:c6:6f:a6:00:48:e7:d7:46: b2:a9:70:27:4c:70:a1:43:f0:e2:0d:5e:1d:5d:7a: 57:86:29:08:28:c8:a2:ef:02:52:7a:df:fa:e5:2e: 02:c2:34:2c:b2:c0:85:69:b5:b0:1e:32:68:1c:6b: 85:2a:22:4b:f4:db:c2:10:ca:1e:2e:1e:36:3b:88: a2:e5:65:ce:b2:48:3e:2f:df:e5:bb:ec:10:b0:20: fc:3f:70:c5:f3:fb:6b:11:53:98:a3:d3:dc:34:b2: 65:e1:4f:e0:d8:a9:98:ef:73:d1:2d:e8:3a:53:b7: 5e:10:b9:c9:db:8d:d7:64:4f:fb:51:4b:cf:a1:c8: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BF:D2:DB:D6:2A:2A:77:16:E6:F6:70:8D:41:80:9F:83:58:09:0E X509v3 Authority Key Identifier: keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32342d3234203d3e203436303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.45.184.0/24 Signature Algorithm: sha256WithRSAEncryption 99:e3:cd:48:40:28:1d:20:92:9b:ab:b0:ec:f1:1d:c4:c9:58: 83:4d:53:38:f7:80:c7:51:29:e6:5c:2c:11:1b:94:41:a6:a6: f0:3d:32:2f:67:f2:3d:3f:32:34:a4:5d:17:17:94:69:31:35: 47:22:1f:73:b8:3f:13:f1:2c:81:47:52:dd:91:8a:8a:e0:4b: 0a:dd:84:d8:b2:30:0e:d7:b3:d6:ae:7c:3a:1a:cb:85:47:57: 8b:51:6a:e8:03:0b:8f:8e:7e:40:2d:55:86:c7:f9:3e:36:9e: a9:dc:f3:63:1d:23:7f:3a:60:63:22:2a:bd:cf:26:4f:3e:4d: c2:c0:c5:45:44:0e:4e:16:b2:f9:5c:28:61:5d:95:3f:3f:6a: f0:db:7c:38:ad:3f:75:f4:6c:a9:8c:8f:55:50:95:38:7d:6d: 2b:74:93:ae:b8:36:7c:d4:7f:c2:64:50:4a:fc:5c:aa:4d:9c: cb:8d:c8:83:0b:7c:8d:5a:5c:9c:d0:6f:de:83:92:b3:02:fb: 45:68:2b:b7:ea:c1:7d:a0:57:2a:6b:9c:00:99:23:ee:85:85: 95:7a:37:70:d3:27:81:4d:e9:86:c2:9b:36:43:34:1e:cd:b4: 2f:de:f3:58:52:51:19:96:57:2c:0d:8f:27:34:ed:64:90:e3: 3f:55:2e:e3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUX4O97aD0zKAkNhnwa449LpE+mfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEz RjBCNzBCNTAeFw0yMzA3MzAyMzU3MzBaFw0yNDA3MjkwMDAyMzBaMDMxMTAvBgNV BAMTKDVDQkZEMkRCRDYyQTJBNzcxNkU2RjY3MDhENDE4MDlGODM1ODA5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChV6yKHlXdLs9SJx/ynwweSTPp 5gsadY/SKvHEsmrAjOrtirqdFHy2dIR0d4+DuW2XqZk4JFFEshvNeDSKKdtF5LQ3 WdEqR4sfSrtGpiSS1+VTACQjNMbubWw9Do2l8BJuSI5eE/MsWChtEY9KJvp1hkE1 FqEMJbd7oPFF8IzGb6YASOfXRrKpcCdMcKFD8OINXh1deleGKQgoyKLvAlJ63/rl LgLCNCyywIVptbAeMmgca4UqIkv028IQyh4uHjY7iKLlZc6ySD4v3+W77BCwIPw/ cMXz+2sRU5ij09w0smXhT+DYqZjvc9Et6DpTt14QucnbjddkT/tRS8+hyH8tAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXL/S29YqKncW5vZwjUGAn4NYCQ4wHwYDVR0j BBgwFoAUn1bsUNoU0T0Un1FF1ir8Wj8LcLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmY3MWM5MS0xNjI0LTRmYzAtOGM2My0yZWZhZmQ0NmZiYzEvMC85RjU2RUM1MERB MTREMTNEMTQ5RjUxNDVENjJBRkM1QTNGMEI3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEzRjBC NzBCNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiZjcxYzkxLTE2MjQtNGZjMC04 YzYzLTJlZmFmZDQ2ZmJjMS8wLzMxMzczNTJlMzQzNTJlMzEzODM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK8tuDANBgkqhkiG 9w0BAQsFAAOCAQEAmePNSEAoHSCSm6uw7PEdxMlYg01TOPeAx1Ep5lwsERuUQaam 8D0yL2fyPT8yNKRdFxeUaTE1RyIfc7g/E/EsgUdS3ZGKiuBLCt2E2LIwDtez1q58 OhrLhUdXi1Fq6AMLj45+QC1Vhsf5PjaeqdzzYx0jfzpgYyIqvc8mTz5NwsDFRUQO Thay+VwoYV2VPz9q8Nt8OK0/dfRsqYyPVVCVOH1tK3STrrg2fNR/wmRQSvxcqk2c y43Igwt8jVpcnNBv3oOSswL7RWgrt+rBfaBXKmucAJkj7oWFlXo3cNMngU3phsKb NkM0Hs20L97zWFJRGZZXLA2PJzTtZJDjP1Uu4w== -----END CERTIFICATE-----Generated at Thu May 2 03:10:51 2024 by rpki-client on console-ams.rpki-client.org