$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131372e302f32342d3234203d3e203338353233.roa File: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (raw, json) Hash identifier: jbjmyKqcmlUFZAY0I4sDhXYJTXQVsc2puip0ulWkQ90= Subject key identifier: 3A:EA:26:EB:32:6D:D3:84:04:68:CE:0D:57:9A:34:F3:D6:28:BD:04 Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 3D7C57EDD580199FB25BD33EF5D2AD0211EA388E Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131372e302f32342d3234203d3e203338353233.roa Signing time: Fri 01 Sep 2023 14:26:02 +0000 ROA not before: Fri 01 Sep 2023 14:21:02 +0000 ROA not after: Fri 30 Aug 2024 14:26:02 +0000 asID: 38523 IP address blocks: 117.74.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7c:57:ed:d5:80:19:9f:b2:5b:d3:3e:f5:d2:ad:02:11:ea:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Sep 1 14:21:02 2023 GMT Not After : Aug 30 14:26:02 2024 GMT Subject: CN=3AEA26EB326DD3840468CE0D579A34F3D628BD04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:a7:4a:4f:2f:ec:5c:1f:84:1d:7c:a2:7c: 0e:9a:0e:55:58:df:29:fc:55:47:3c:e5:36:3b:c3: 34:3c:14:8a:43:ea:10:f2:fe:5e:22:d5:86:f2:f4: 65:d9:aa:47:35:16:48:b4:9f:0f:83:02:9f:f5:a6: a1:54:7c:7c:09:60:5b:65:c5:81:6b:36:8d:a7:be: 5f:23:6d:83:f2:86:0c:3b:ba:bc:02:df:c8:d9:97: 3d:40:f0:d5:cd:ee:ff:bf:e9:a8:10:1a:94:36:2b: ab:97:ad:ae:6a:60:6c:c9:2a:9a:f9:a3:2f:26:81: b1:80:f9:26:35:63:02:dd:4f:2e:02:63:72:df:e9: 5a:23:53:3e:ed:59:62:e6:16:e5:c7:ad:26:0d:5b: 83:64:27:fb:3c:58:77:45:86:df:56:63:6d:74:a9: 2f:ef:ca:c4:86:73:1f:55:a3:4c:92:b7:45:b0:67: 63:21:88:b3:bb:eb:bf:ce:74:e7:ae:18:5d:6a:37: 00:34:4b:0b:f1:04:de:38:66:ae:09:f6:76:05:cc: 94:ff:ad:b4:8c:d0:25:d8:a8:eb:cf:cd:ad:2c:ca: 16:ee:44:c7:38:e2:3c:5c:cb:e1:d8:45:02:ba:90: 7d:c1:f3:d0:28:39:d2:22:b4:6f:a2:3e:4b:c2:77: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:26:EB:32:6D:D3:84:04:68:CE:0D:57:9A:34:F3:D6:28:BD:04 X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131372e302f32342d3234203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.117.0/24 Signature Algorithm: sha256WithRSAEncryption 49:ee:b2:5d:fd:be:00:f5:48:75:3b:25:8f:10:7a:3e:1e:b7: d5:ad:52:87:fe:44:4c:95:6e:c6:a4:b1:8f:8d:5d:cc:a6:97: a9:70:11:60:58:74:1a:cf:df:4d:91:02:ad:26:9d:6d:4d:b4: 81:e8:b6:d7:69:fc:6b:a9:07:ab:97:06:9b:e9:49:15:11:01: d2:9b:95:10:48:93:d8:1b:50:7b:7a:58:b6:27:cc:2b:c7:cc: d4:8c:b3:1d:b4:f0:bb:f1:95:3a:06:71:26:59:e7:97:11:55: 5f:1d:85:ca:f2:27:09:c3:e6:c6:6a:37:cc:bf:7e:81:d9:b0: aa:f1:d6:44:b9:ae:c8:dd:32:9f:d8:ba:82:56:c7:2a:be:f0: 3c:9b:00:74:c4:2d:97:ee:92:42:ce:b6:3d:d6:93:ea:ac:46: e5:25:87:c2:fc:89:b6:32:66:47:4a:f6:67:c9:77:89:3b:2a: 18:e8:ed:49:19:9e:2f:9f:1c:a7:bf:0e:61:6f:cb:f2:fd:1b: 8d:31:04:7d:2b:df:72:21:dd:88:00:da:de:01:98:17:85:46: 62:3a:86:e9:94:67:13:50:45:ce:cc:48:c3:3c:2d:18:23:46: af:63:fb:56:23:2d:18:d1:8a:bd:34:14:ee:ae:04:09:52:c4: d3:bf:db:6b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPXxX7dWAGZ+yW9M+9dKtAhHqOI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yMzA5MDExNDIxMDJaFw0yNDA4MzAxNDI2MDJaMDMxMTAvBgNV BAMTKDNBRUEyNkVCMzI2REQzODQwNDY4Q0UwRDU3OUEzNEYzRDYyOEJEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSvqdKTy/sXB+EHXyifA6aDlVY 3yn8VUc85TY7wzQ8FIpD6hDy/l4i1Yby9GXZqkc1Fki0nw+DAp/1pqFUfHwJYFtl xYFrNo2nvl8jbYPyhgw7urwC38jZlz1A8NXN7v+/6agQGpQ2K6uXra5qYGzJKpr5 oy8mgbGA+SY1YwLdTy4CY3Lf6VojUz7tWWLmFuXHrSYNW4NkJ/s8WHdFht9WY210 qS/vysSGcx9Vo0ySt0WwZ2MhiLO767/OdOeuGF1qNwA0SwvxBN44Zq4J9nYFzJT/ rbSM0CXYqOvPza0syhbuRMc44jxcy+HYRQK6kH3B89AoOdIitG+iPkvCd/OdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOuom6zJt04QEaM4NV5o089YovQQwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMxMzEzNzJlMzczNDJlMzEzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKdTANBgkqhkiG 9w0BAQsFAAOCAQEASe6yXf2+APVIdTsljxB6Ph631a1Sh/5ETJVuxqSxj41dzKaX qXARYFh0Gs/fTZECrSadbU20gei212n8a6kHq5cGm+lJFREB0puVEEiT2BtQe3pY tifMK8fM1IyzHbTwu/GVOgZxJlnnlxFVXx2FyvInCcPmxmo3zL9+gdmwqvHWRLmu yN0yn9i6glbHKr7wPJsAdMQtl+6SQs62PdaT6qxG5SWHwvyJtjJmR0r2Z8l3iTsq GOjtSRmeL58cp78OYW/L8v0bjTEEfSvfciHdiADa3gGYF4VGYjqG6ZRnE1BFzsxI wzwtGCNGr2P7ViMtGNGKvTQU7q4ECVLE07/baw== -----END CERTIFICATE-----Generated at Fri May 31 06:46:50 2024 by rpki-client on console-ams.rpki-client.org