$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa File: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (raw, json) Hash identifier: vZOtLaOfjMhQfEcCJdIUC/qN22seOwp7tbsXKZXwRVo= Subject key identifier: DA:C1:AC:61:CD:CB:B5:F8:C6:47:20:FE:3B:6E:99:84:63:BE:BC:14 Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F Certificate serial: 63DDA5055E24A7D336A7A38F7137AC72CC0F66EE Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa Signing time: Tue 16 Jul 2024 01:18:01 +0000 ROA not before: Tue 16 Jul 2024 01:13:01 +0000 ROA not after: Tue 15 Jul 2025 01:18:01 +0000 asID: 262929 IP address blocks: 122.128.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:dd:a5:05:5e:24:a7:d3:36:a7:a3:8f:71:37:ac:72:cc:0f:66:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00EE953FD699788668C724460F4D8D420238194F Validity Not Before: Jul 16 01:13:01 2024 GMT Not After : Jul 15 01:18:01 2025 GMT Subject: CN=DAC1AC61CDCBB5F8C64720FE3B6E998463BEBC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:23:49:21:35:54:b2:20:6c:28:9f:9c:fd: b1:cd:36:89:ce:32:fb:76:c0:6e:60:69:e5:7c:74: 7d:11:1b:30:3d:0c:35:2e:d1:a7:78:26:76:24:45: 17:2b:2a:cd:bb:fb:83:2f:2d:97:6f:d9:56:16:be: 16:3f:85:eb:0c:8e:d4:5f:fc:3b:75:9d:2d:b2:02: 7d:f3:40:c4:40:85:0d:c9:7d:9a:35:e9:03:a9:88: c8:ab:b9:21:6f:1e:29:50:b1:a6:72:2e:13:0b:2f: 10:d2:bb:cc:a3:a4:f3:f7:65:0d:06:75:8d:e2:2b: ec:31:63:ca:64:d2:3c:85:23:42:37:c2:58:77:d6: b9:de:58:22:f2:dd:48:a7:dc:14:1d:74:2f:a2:1e: 69:3b:70:86:1d:d7:bb:9f:36:0b:4d:87:09:31:ca: b4:84:b5:80:92:e2:0d:6c:37:d8:5e:0d:54:29:42: c2:94:8a:b6:8a:76:63:d3:c1:49:81:b5:03:db:e8: b2:8f:b4:c8:01:07:69:f5:1e:49:bc:49:8f:1f:d2: 18:82:07:9c:15:28:eb:da:4b:08:ed:00:50:79:bb: a2:11:76:1e:7d:35:60:c1:d0:5a:64:82:a4:15:9a: 1a:90:11:96:d9:f2:ba:8c:46:bb:f5:99:f0:1d:31: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C1:AC:61:CD:CB:B5:F8:C6:47:20:FE:3B:6E:99:84:63:BE:BC:14 X509v3 Authority Key Identifier: keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.21.0/24 Signature Algorithm: sha256WithRSAEncryption aa:1f:78:af:b9:6e:6b:9c:29:81:9e:77:32:dc:2e:6e:be:29: 41:88:3c:29:95:06:2b:1e:2f:48:0b:8c:6a:62:5e:10:c2:30: a6:36:65:bf:36:c4:dd:74:96:c1:a7:9c:f2:7b:de:78:32:a2: 8a:b7:88:fa:a2:a0:1a:e2:23:0b:69:77:ff:58:87:98:51:92: 9f:cc:84:32:69:0f:8b:9a:4c:b4:3b:33:c6:a4:41:06:e7:5a: 44:56:58:72:14:f9:69:d0:54:9c:64:5f:6a:28:6b:8f:f9:7a: 07:94:51:10:77:7b:8d:14:fa:e5:b6:51:cf:c0:41:f0:c9:e4: 69:62:c4:72:6d:fb:74:27:a7:5f:c0:1a:86:53:c0:e5:08:72: fe:f4:68:95:ba:89:51:3c:8d:82:46:90:d0:20:ea:53:f2:7b: e0:c7:40:14:96:0a:95:58:a7:50:9e:3f:7a:ec:f7:f1:59:ac: 36:04:53:bc:75:bf:cc:d7:a3:9b:0c:88:d7:2f:76:9d:12:fb: 0c:4e:90:4d:48:20:f8:79:78:a4:68:02:7a:0a:db:1b:98:f4: d3:cf:6f:e1:06:56:d6:94:84:6f:89:f6:3b:8e:08:95:bf:fa: f7:aa:06:06:81:88:51:26:8e:1e:ea:26:1e:a4:6c:9e:11:d2: 78:ef:68:83 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUY92lBV4kp9M2p6OPcTescswPZu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw MjM4MTk0RjAeFw0yNDA3MTYwMTEzMDFaFw0yNTA3MTUwMTE4MDFaMDMxMTAvBgNV BAMTKERBQzFBQzYxQ0RDQkI1RjhDNjQ3MjBGRTNCNkU5OTg0NjNCRUJDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XyNJITVUsiBsKJ+c/bHNNonO Mvt2wG5gaeV8dH0RGzA9DDUu0ad4JnYkRRcrKs27+4MvLZdv2VYWvhY/hesMjtRf /Dt1nS2yAn3zQMRAhQ3JfZo16QOpiMiruSFvHilQsaZyLhMLLxDSu8yjpPP3ZQ0G dY3iK+wxY8pk0jyFI0I3wlh31rneWCLy3Uin3BQddC+iHmk7cIYd17ufNgtNhwkx yrSEtYCS4g1sN9heDVQpQsKUiraKdmPTwUmBtQPb6LKPtMgBB2n1Hkm8SY8f0hiC B5wVKOvaSwjtAFB5u6IRdh59NWDB0FpkgqQVmhqQEZbZ8rqMRrv1mfAdMbOtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2sGsYc3LtfjGRyD+O26ZhGO+vBQwHwYDVR0j BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2 OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4 MTk0Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeoAVMA0GCSqG SIb3DQEBCwUAA4IBAQCqH3ivuW5rnCmBnncy3C5uvilBiDwplQYrHi9IC4xqYl4Q wjCmNmW/NsTddJbBp5zye954MqKKt4j6oqAa4iMLaXf/WIeYUZKfzIQyaQ+Lmky0 OzPGpEEG51pEVlhyFPlp0FScZF9qKGuP+XoHlFEQd3uNFPrltlHPwEHwyeRpYsRy bft0J6dfwBqGU8DlCHL+9GiVuolRPI2CRpDQIOpT8nvgx0AUlgqVWKdQnj967Pfx Waw2BFO8db/M16ObDIjXL3adEvsMTpBNSCD4eXikaAJ6CtsbmPTTz2/hBlbWlIRv ifY7jgiVv/r3qgYGgYhRJo4e6iYepGyeEdJ472iD -----END CERTIFICATE-----Generated at Fri Nov 22 22:20:41 2024 by rpki-client on console-fra.rpki-client.org