$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa File: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (raw, json) Hash identifier: qR69PjV06HyJtE+IpgPjo5dSSmhw2+KME3vu4seuNzI= Subject key identifier: 72:4B:A6:8C:4A:AC:60:3D:30:00:F1:86:D3:30:A6:EE:85:C9:F5:62 Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 0429041150DB1649D4912343E06E8943AF7AB605 Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa Signing time: Fri 12 Jan 2024 07:41:03 +0000 ROA not before: Fri 12 Jan 2024 07:36:03 +0000 ROA not after: Fri 10 Jan 2025 07:41:03 +0000 asID: 152045 IP address blocks: 210.79.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:29:04:11:50:db:16:49:d4:91:23:43:e0:6e:89:43:af:7a:b6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Jan 12 07:36:03 2024 GMT Not After : Jan 10 07:41:03 2025 GMT Subject: CN=724BA68C4AAC603D3000F186D330A6EE85C9F562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:9c:2c:95:0f:58:e1:a0:98:39:d0:d2:b6: bf:28:2e:fc:ca:16:5c:97:13:02:3c:a6:c5:d1:e8: 68:e9:6b:fc:72:91:1b:36:fc:a3:89:e9:f2:f3:4a: fe:57:d2:31:93:ee:30:4b:f4:fd:83:92:b8:d3:ee: 26:13:e6:4e:7a:27:35:c5:0f:e8:74:dd:15:17:72: 6e:a8:49:20:3f:67:8a:2e:1e:52:0f:ff:d8:7e:97: 0f:01:fc:20:3b:74:da:a2:71:f5:bd:fa:a1:cb:b1: 4a:57:a0:59:26:57:ba:8b:9c:c6:e8:5f:99:6a:96: c8:19:21:00:a3:8d:d5:9f:53:b8:e1:59:b1:57:1b: 05:08:2a:a2:f5:02:a6:9b:6a:50:22:1d:03:41:81: 54:f4:95:0e:1a:69:ae:33:7d:2e:7e:55:1d:22:15: c6:dd:8d:1d:3a:e1:15:0c:39:39:c2:a7:45:ec:db: 9b:85:ab:28:15:30:e4:aa:ac:fd:0a:0a:49:88:86: d3:f8:39:3f:ae:15:05:52:5a:0a:c2:ec:53:db:22: f0:e7:d4:2c:35:41:10:98:29:75:9b:c9:5e:ff:bc: 19:6b:8a:a7:80:4b:fd:09:0e:19:8d:89:a3:7e:cf: 91:23:9d:fe:04:93:11:a5:27:91:db:3b:19:5e:37: 0c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4B:A6:8C:4A:AC:60:3D:30:00:F1:86:D3:30:A6:EE:85:C9:F5:62 X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.147.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:92:b7:8a:03:3f:ba:e3:6a:68:8e:38:a3:24:cc:98:52:a3: 54:dc:01:1b:33:38:ab:c6:48:20:39:69:37:c9:13:58:e9:74: 8a:8c:75:b8:73:cf:e5:25:2e:ca:c5:52:ee:07:7a:94:6a:78: dc:3e:be:7b:91:2a:05:1d:bf:a4:da:76:13:d7:b7:5f:29:95: cb:74:8c:60:32:22:f8:10:92:98:71:99:41:a2:f7:64:b6:6b: 4f:f9:1a:f6:6a:f9:97:cc:75:80:9b:6f:c8:80:37:14:ea:af: 81:7f:4a:33:d6:5a:a2:3d:9d:c7:21:d7:61:18:45:e1:04:32: 9b:f9:b7:0f:86:9f:49:42:bc:10:ac:96:75:f3:8b:e2:b8:4e: 71:e7:fd:80:a8:d1:39:93:3e:66:35:a1:2d:9e:8e:4a:e4:42: 44:a2:8f:3e:3c:67:1a:22:be:34:21:cb:c5:5a:39:e0:a4:15: fe:de:1f:0a:ad:5f:10:73:c2:bd:7e:be:df:2c:05:60:ea:0f: b0:e4:18:f7:8d:67:81:f4:3d:57:5f:d9:85:24:19:62:87:6f: 03:df:5c:ff:6b:fe:99:e1:5c:c8:c6:4f:ce:4a:b5:92:00:d5: 5e:16:12:ea:8c:71:13:be:40:7e:cd:cf:67:6a:41:86:8e:7f: 1c:ba:b7:2c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBCkEEVDbFknUkSND4G6JQ696tgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNDAxMTIwNzM2MDNaFw0yNTAxMTAwNzQxMDNaMDMxMTAvBgNV BAMTKDcyNEJBNjhDNEFBQzYwM0QzMDAwRjE4NkQzMzBBNkVFODVDOUY1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuapwslQ9Y4aCYOdDStr8oLvzK FlyXEwI8psXR6Gjpa/xykRs2/KOJ6fLzSv5X0jGT7jBL9P2DkrjT7iYT5k56JzXF D+h03RUXcm6oSSA/Z4ouHlIP/9h+lw8B/CA7dNqicfW9+qHLsUpXoFkmV7qLnMbo X5lqlsgZIQCjjdWfU7jhWbFXGwUIKqL1AqabalAiHQNBgVT0lQ4aaa4zfS5+VR0i FcbdjR064RUMOTnCp0Xs25uFqygVMOSqrP0KCkmIhtP4OT+uFQVSWgrC7FPbIvDn 1Cw1QRCYKXWbyV7/vBlriqeAS/0JDhmNiaN+z5Ejnf4EkxGlJ5HbOxleNwztAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUckumjEqsYD0wAPGG0zCm7oXJ9WIwHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxYmI2NmQwLWE5MzMtNDExMC1h MDkzLTAzOGRhOWVjOGI3ZS8wLzMyMzEzMDJlMzczOTJlMzEzNDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0k+TMA0GCSqG SIb3DQEBCwUAA4IBAQAMkreKAz+642pojjijJMyYUqNU3AEbMzirxkggOWk3yRNY 6XSKjHW4c8/lJS7KxVLuB3qUanjcPr57kSoFHb+k2nYT17dfKZXLdIxgMiL4EJKY cZlBovdktmtP+Rr2avmXzHWAm2/IgDcU6q+Bf0oz1lqiPZ3HIddhGEXhBDKb+bcP hp9JQrwQrJZ184viuE5x5/2AqNE5kz5mNaEtno5K5EJEoo8+PGcaIr40IcvFWjng pBX+3h8KrV8Qc8K9fr7fLAVg6g+w5Bj3jWeB9D1XX9mFJBlih28D31z/a/6Z4VzI xk/OSrWSANVeFhLqjHETvkB+zc9nakGGjn8curcs -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org