$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa File: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (raw, json) Hash identifier: eZVPgWGbtRdIz5wN62xb4+qGdlqG3oBhV8LgeIV1Ju4= Subject key identifier: 49:87:CB:4D:B2:88:64:14:25:C5:2A:6B:A3:62:72:AF:F1:C3:3E:BA Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 3FF0A01BCBE860AD26FF9EADAEC2FE8ECC48EC43 Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa Signing time: Fri 12 Jan 2024 07:39:47 +0000 ROA not before: Fri 12 Jan 2024 07:34:47 +0000 ROA not after: Fri 10 Jan 2025 07:39:47 +0000 asID: 152045 IP address blocks: 210.79.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f0:a0:1b:cb:e8:60:ad:26:ff:9e:ad:ae:c2:fe:8e:cc:48:ec:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Jan 12 07:34:47 2024 GMT Not After : Jan 10 07:39:47 2025 GMT Subject: CN=4987CB4DB288641425C52A6BA36272AFF1C33EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:18:6f:cd:4f:e0:2d:73:5f:80:5b:6d:14: 80:b9:87:53:94:94:53:6a:b2:ed:74:e4:d2:41:7b: f0:07:b8:4a:1c:85:2d:b3:c1:78:ca:c7:5a:f4:ad: 8b:31:46:5c:a2:f9:41:89:f0:c6:77:21:07:04:43: ba:6b:17:7c:6c:4a:97:05:59:fa:08:36:08:4f:b8: f3:a9:61:d3:5b:ab:f0:19:64:87:b1:21:a6:2a:bf: c5:76:98:45:11:aa:c5:b6:6b:89:05:74:ae:38:92: dc:b9:ad:06:76:56:e1:3a:75:76:11:df:90:01:95: 68:8d:e1:59:ac:ed:f0:1d:c1:a1:4c:0e:e5:1b:7e: e1:c8:5a:45:9c:29:1c:df:04:4c:4c:04:ab:41:8f: e4:78:c5:9d:8d:3f:67:87:d4:31:30:71:24:07:05: fe:bf:b3:8a:77:17:55:62:31:5d:2a:f2:b8:c9:b1: c2:fb:dd:d9:cf:66:5c:a5:bd:d8:a5:cd:83:79:97: e3:4f:19:e0:26:b8:db:c4:2b:02:2d:bc:6b:12:c9: 9b:3c:bf:46:31:35:99:77:d8:4e:97:2b:8f:9b:b6: f7:de:35:ba:4e:3d:2b:9d:68:2a:56:e6:36:f0:ce: 8e:74:53:25:37:7b:1d:54:b0:d8:9d:8b:92:55:9f: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:87:CB:4D:B2:88:64:14:25:C5:2A:6B:A3:62:72:AF:F1:C3:3E:BA X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.146.0/23 Signature Algorithm: sha256WithRSAEncryption 67:ff:98:cc:89:d7:fa:de:ae:42:44:a2:4b:56:24:85:10:da: db:50:d7:fc:af:f2:3b:68:4f:9d:11:e9:91:43:64:01:a8:cf: c6:9b:20:27:f6:e2:e0:a3:66:3e:0c:21:71:3d:01:d4:71:a0: d3:30:d4:11:1b:19:ec:d1:eb:6b:97:7f:b9:d7:74:16:17:6a: cc:f9:c0:ec:9e:08:f5:cd:ee:59:e3:94:fc:a9:72:f5:f7:c1: 32:fa:a9:fb:55:c1:00:2e:1a:22:4d:34:80:23:52:47:0e:75: b4:c9:05:13:3a:ff:11:a1:6e:3c:62:37:a8:4a:44:bb:bf:33: 5e:c5:b3:eb:58:9a:88:11:fb:e2:16:56:95:73:fc:8a:10:24: 4b:73:ea:8e:6f:ec:20:f6:f0:b2:7e:f7:b7:94:f1:42:51:ac: 2f:60:65:2d:e4:aa:b1:2f:4d:88:64:c5:33:aa:e0:f6:54:e4: eb:77:13:98:86:48:77:5a:c1:e5:9f:0b:d4:78:67:bf:9a:91: 31:c3:f8:2a:47:b5:bc:17:1d:e1:ec:6b:1c:c8:fa:20:b0:1d: 9d:70:0f:0d:62:98:b4:20:5f:65:c6:4c:a8:01:7e:94:07:95: 8b:98:b7:60:02:3c:6e:5e:c0:e7:92:ae:91:1c:ba:f8:42:4d: 86:13:26:0e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP/CgG8voYK0m/56trsL+jsxI7EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNDAxMTIwNzM0NDdaFw0yNTAxMTAwNzM5NDdaMDMxMTAvBgNV BAMTKDQ5ODdDQjREQjI4ODY0MTQyNUM1MkE2QkEzNjI3MkFGRjFDMzNFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3xhvzU/gLXNfgFttFIC5h1OU lFNqsu105NJBe/AHuEochS2zwXjKx1r0rYsxRlyi+UGJ8MZ3IQcEQ7prF3xsSpcF WfoINghPuPOpYdNbq/AZZIexIaYqv8V2mEURqsW2a4kFdK44kty5rQZ2VuE6dXYR 35ABlWiN4Vms7fAdwaFMDuUbfuHIWkWcKRzfBExMBKtBj+R4xZ2NP2eH1DEwcSQH Bf6/s4p3F1ViMV0q8rjJscL73dnPZlylvdilzYN5l+NPGeAmuNvEKwItvGsSyZs8 v0YxNZl32E6XK4+btvfeNbpOPSudaCpW5jbwzo50UyU3ex1UsNidi5JVnycvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSYfLTbKIZBQlxSpro2Jyr/HDProwHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxYmI2NmQwLWE5MzMtNDExMC1h MDkzLTAzOGRhOWVjOGI3ZS8wLzMyMzEzMDJlMzczOTJlMzEzNDM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzAzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0k+SMA0GCSqG SIb3DQEBCwUAA4IBAQBn/5jMidf63q5CRKJLViSFENrbUNf8r/I7aE+dEemRQ2QB qM/GmyAn9uLgo2Y+DCFxPQHUcaDTMNQRGxns0etrl3+513QWF2rM+cDsngj1ze5Z 45T8qXL198Ey+qn7VcEALhoiTTSAI1JHDnW0yQUTOv8RoW48YjeoSkS7vzNexbPr WJqIEfviFlaVc/yKECRLc+qOb+wg9vCyfve3lPFCUawvYGUt5KqxL02IZMUzquD2 VOTrdxOYhkh3WsHlnwvUeGe/mpExw/gqR7W8Fx3h7GscyPogsB2dcA8NYpi0IF9l xkyoAX6UB5WLmLdgAjxuXsDnkq6RHLr4Qk2GEyYO -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org