$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa File: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (raw, json) Hash identifier: qlLP7ZSszytsh77jCDdE++1/6lXc1HpQL7kerWs3cr0= Subject key identifier: 95:B8:73:CF:43:A2:BA:DF:5B:84:07:90:14:48:17:77:EA:5C:E6:7E Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 537EEE4648211BC50845801C1039E5967CEC86 Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa Signing time: Tue 26 Mar 2024 07:44:18 +0000 ROA not before: Tue 26 Mar 2024 07:39:18 +0000 ROA not after: Tue 25 Mar 2025 07:44:18 +0000 asID: 152427 IP address blocks: 157.20.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7e:ee:46:48:21:1b:c5:08:45:80:1c:10:39:e5:96:7c:ec:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Mar 26 07:39:18 2024 GMT Not After : Mar 25 07:44:18 2025 GMT Subject: CN=95B873CF43A2BADF5B84079014481777EA5CE67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:09:58:a6:5b:10:30:f3:ef:f2:cd:78:50: a8:0f:74:d3:c0:1b:d2:8a:40:f3:2f:a3:56:96:d3: e5:96:b0:f3:26:b3:2d:84:40:48:44:b8:19:a3:d2: 23:2a:1c:7c:c5:53:b2:a2:36:25:fa:1f:b7:77:e6: ab:ef:5f:e0:ef:14:ed:ec:01:c0:7f:3c:72:f2:30: 93:fe:c8:77:e1:c1:7d:f4:4c:7c:a7:03:13:57:ea: f7:a0:e0:1a:c8:cb:b9:02:e1:2f:71:18:17:7c:ad: 98:2c:4c:d0:a1:7e:b2:fc:55:34:b4:d1:8a:20:35: 1f:bd:a6:9b:91:c4:dd:65:74:18:f7:23:95:1b:e0: 18:4e:3c:5b:f5:6f:5c:df:a6:19:39:76:68:c9:60: a2:cc:22:dd:5d:0e:16:f1:46:32:af:31:ca:d7:98: dd:d0:31:56:b0:10:90:cd:e0:71:f8:65:c1:33:eb: 54:98:56:cc:d9:5a:39:a2:75:a0:21:07:d5:3e:90: 4d:d6:6f:ef:13:b0:65:3d:15:5b:e3:c4:f2:06:f0: 31:02:b2:24:ac:60:c2:ce:83:4e:ce:53:d3:0a:cc: a7:e9:6b:c9:da:82:cc:a5:1d:97:d6:83:e1:d1:ca: 24:8c:71:8a:d5:b7:da:1b:d9:02:46:24:bc:5b:c8: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B8:73:CF:43:A2:BA:DF:5B:84:07:90:14:48:17:77:EA:5C:E6:7E X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.193.0/24 Signature Algorithm: sha256WithRSAEncryption 47:c1:6f:eb:d0:35:88:58:1c:29:9a:cb:ef:50:38:81:3c:5b: 97:fe:e1:ab:05:24:de:c0:d0:82:6b:6e:e0:55:16:03:47:ab: 2f:6f:a4:9c:6b:48:cb:e2:0e:7e:73:17:04:d4:fd:79:dc:00: 09:b4:90:c9:50:78:cd:b8:cd:65:42:bc:e1:1d:b4:56:38:2d: 8c:aa:09:88:59:4a:83:4f:f0:00:d4:4c:44:15:85:cb:eb:e4: af:b6:62:70:81:5e:68:9a:47:58:df:fd:88:b1:44:d0:75:34: 19:93:58:5e:16:3b:ba:3c:d4:92:14:e2:28:ac:fe:ca:07:bd: 2c:77:20:3a:b4:d0:e7:1f:b8:09:4f:7a:63:33:98:bc:49:3a: 42:d1:27:db:f5:5d:05:f6:a1:47:d0:ab:f3:bb:34:03:67:2e: f6:10:bc:26:25:4a:ce:c8:d8:97:e1:f0:78:2d:0c:f1:12:26: b0:15:49:87:01:30:f2:86:94:dc:6d:bd:89:8c:86:b6:74:c6: 16:34:10:ca:32:21:5f:cd:8d:d7:90:6f:ff:a2:06:56:8b:5d: a8:44:e2:1f:51:5a:86:ee:eb:d1:76:08:46:30:c1:ad:c1:28: 63:31:fc:83:8e:60:81:5d:f3:51:8f:21:8d:0e:1e:d9:d6:04: c5:23:1e:fb -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgITU37uRkghG8UIRYAcEDnllnzshjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0NkEyRTYzNEZGRjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFB RUI1RDAzMB4XDTI0MDMyNjA3MzkxOFoXDTI1MDMyNTA3NDQxOFowMzExMC8GA1UE AxMoOTVCODczQ0Y0M0EyQkFERjVCODQwNzkwMTQ0ODE3NzdFQTVDRTY3RTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMHxCVimWxAw8+/yzXhQqA9008Ab 0opA8y+jVpbT5Zaw8yazLYRASES4GaPSIyocfMVTsqI2Jfoft3fmq+9f4O8U7ewB wH88cvIwk/7Id+HBffRMfKcDE1fq96DgGsjLuQLhL3EYF3ytmCxM0KF+svxVNLTR iiA1H72mm5HE3WV0GPcjlRvgGE48W/VvXN+mGTl2aMlgoswi3V0OFvFGMq8xyteY 3dAxVrAQkM3gcfhlwTPrVJhWzNlaOaJ1oCEH1T6QTdZv7xOwZT0VW+PE8gbwMQKy JKxgws6DTs5T0wrMp+lrydqCzKUdl9aD4dHKJIxxitW32hvZAkYkvFvIfn0CAwEA AaOCAjQwggIwMB0GA1UdDgQWBBSVuHPPQ6K631uEB5AUSBd36lzmfjAfBgNVHSME GDAWgBRGouY0//QK5UXsfbZ6iIGJqutdAzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMy ODgwZGRiLTNkOTQtNGUzNC05MmRjLTRkNDUzOGI5MDVhMi8wLzQ2QTJFNjM0RkZG NDBBRTU0NUVDN0RCNjdBODg4MTg5QUFFQjVEMDMuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMS80NkEyRTYzNEZGRjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1 RDAzLmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvMzEzNTM3MmUzMjMwMmUzMTM5MzMyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMTM1MzIzNDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdFMEwDQYJKoZI hvcNAQELBQADggEBAEfBb+vQNYhYHCmay+9QOIE8W5f+4asFJN7A0IJrbuBVFgNH qy9vpJxrSMviDn5zFwTU/XncAAm0kMlQeM24zWVCvOEdtFY4LYyqCYhZSoNP8ADU TEQVhcvr5K+2YnCBXmiaR1jf/YixRNB1NBmTWF4WO7o81JIU4iis/soHvSx3IDq0 0OcfuAlPemMzmLxJOkLRJ9v1XQX2oUfQq/O7NANnLvYQvCYlSs7I2Jfh8HgtDPES JrAVSYcBMPKGlNxtvYmMhrZ0xhY0EMoyIV/NjdeQb/+iBlaLXahE4h9RWobu69F2 CEYwwa3BKGMx/IOOYIFd81GPIY0OHtnWBMUjHvs= -----END CERTIFICATE-----Generated at Sat Jun 22 11:50:24 2024 by rpki-client on console-fra.rpki-client.org