$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa File: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (raw, json) Hash identifier: plzShTny50kIRVpKPuAFTM+py4IIAUYkLzBiUxnyTJ0= Subject key identifier: 0C:44:08:BC:CC:D8:14:38:8C:14:AC:52:E7:71:B2:4E:F3:ED:E6:4C Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 7E3F3B53D9A0B5978EFCFD6DEE50BEE1E2A9C400 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa Signing time: Tue 20 Aug 2024 07:00:02 +0000 ROA not before: Tue 20 Aug 2024 06:55:02 +0000 ROA not after: Tue 19 Aug 2025 07:00:02 +0000 asID: 132652 IP address blocks: 146.196.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3f:3b:53:d9:a0:b5:97:8e:fc:fd:6d:ee:50:be:e1:e2:a9:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Aug 20 06:55:02 2024 GMT Not After : Aug 19 07:00:02 2025 GMT Subject: CN=0C4408BCCCD814388C14AC52E771B24EF3EDE64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:1c:bc:e2:d3:d0:1f:f7:7d:58:39:ce:88: ee:6e:8c:46:60:82:63:35:46:83:fb:55:ba:84:a9: 41:d9:60:92:2b:ba:f9:6d:87:f3:97:4a:f9:10:38: c2:bd:c6:84:59:08:fe:78:68:0f:41:68:1c:db:f0: bb:62:1e:6d:8f:a2:c8:08:ed:05:e0:ca:8b:c1:0f: 7c:3d:67:18:a0:e8:d3:b4:cd:ef:6d:1c:22:e0:5f: c8:66:7e:ed:e3:87:6e:c1:25:51:29:22:3c:cc:63: e8:f2:14:96:ac:e7:2b:2c:de:54:55:92:ea:fb:66: 3b:5b:fb:89:4b:b4:20:c3:4a:10:d7:c2:00:c2:8d: 1e:22:72:3a:87:05:e4:65:5c:49:6a:c7:fe:21:06: 72:e4:bc:24:bd:e1:06:61:6b:81:66:ed:df:30:e7: 0f:fe:d4:a1:de:b3:71:07:9c:f4:c1:f2:66:8b:3e: a2:83:e8:a8:77:55:22:a2:dd:df:4a:e0:66:12:e7: 87:91:8c:be:b8:7a:8d:c2:7f:25:02:c7:d2:46:1e: c1:f3:32:5c:7b:37:19:9c:b0:39:fa:05:da:8d:44: 32:93:8e:9b:b2:a7:fc:b9:6a:80:7e:93:8b:97:ad: 21:f9:7b:4c:59:5d:4d:69:57:a3:22:a9:b4:a4:b5: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:44:08:BC:CC:D8:14:38:8C:14:AC:52:E7:71:B2:4E:F3:ED:E6:4C X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.196.40.0/22 Signature Algorithm: sha256WithRSAEncryption 32:cc:3f:8e:c8:c9:58:29:0c:e2:24:cb:38:d7:85:5c:e5:e0: fd:6e:03:19:dd:8e:59:c2:f2:9d:9f:db:5f:a2:1e:02:8a:1e: 70:e8:20:f1:64:15:79:db:56:b0:8a:17:64:0c:25:e0:6f:87: be:5c:14:ae:3f:34:76:82:2e:3b:12:bf:e7:6f:4f:80:91:60: 1a:95:87:34:9b:04:14:aa:3f:c0:c3:d8:a5:5d:c5:38:f4:55: ae:a7:18:e5:ad:eb:5a:ae:26:86:ec:85:4f:ab:15:21:4b:44: d8:7e:00:d0:99:c1:ca:fb:ec:9e:58:3a:4b:22:2d:6e:5b:c6: ce:33:70:58:a6:dc:56:f4:97:41:4b:53:69:46:a2:d0:d5:31: 30:71:2f:84:17:44:04:5c:67:b0:b9:fc:da:26:29:93:69:03: 14:5d:23:61:06:3f:14:18:47:9f:76:16:bf:ee:ee:75:d5:18: ce:4f:39:08:ae:c6:74:8c:b4:e1:66:2d:c2:bd:0e:76:ff:d4: 5d:d6:3d:5a:69:aa:5b:6a:8f:c4:24:c1:48:15:09:d3:6c:31: 42:7a:5b:e4:cd:9f:27:cb:29:8a:4c:5e:ed:76:ac:0d:9f:4a: 24:10:fc:fc:1c:48:92:e2:d4:4c:ba:c7:68:58:64:61:2e:9d: 39:d1:c1:2d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfj87U9mgtZeO/P1t7lC+4eKpxAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNDA4MjAwNjU1MDJaFw0yNTA4MTkwNzAwMDJaMDMxMTAvBgNV BAMTKDBDNDQwOEJDQ0NEODE0Mzg4QzE0QUM1MkU3NzFCMjRFRjNFREU2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ixy84tPQH/d9WDnOiO5ujEZg gmM1RoP7VbqEqUHZYJIruvlth/OXSvkQOMK9xoRZCP54aA9BaBzb8LtiHm2PosgI 7QXgyovBD3w9Zxig6NO0ze9tHCLgX8hmfu3jh27BJVEpIjzMY+jyFJas5yss3lRV kur7Zjtb+4lLtCDDShDXwgDCjR4icjqHBeRlXElqx/4hBnLkvCS94QZha4Fm7d8w 5w/+1KHes3EHnPTB8maLPqKD6Kh3VSKi3d9K4GYS54eRjL64eo3CfyUCx9JGHsHz Mlx7NxmcsDn6BdqNRDKTjpuyp/y5aoB+k4uXrSH5e0xZXU1pV6MiqbSktQN/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUDEQIvMzYFDiMFKxS53GyTvPt5kwwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiNjMyYTJjLTQwNmUtNDVkNy1h MDI4LTI2MDQ3NGM3NzAzOC8wLzMxMzQzNjJlMzEzOTM2MmUzNDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCksQoMA0GCSqG SIb3DQEBCwUAA4IBAQAyzD+OyMlYKQziJMs414Vc5eD9bgMZ3Y5ZwvKdn9tfoh4C ih5w6CDxZBV521awihdkDCXgb4e+XBSuPzR2gi47Er/nb0+AkWAalYc0mwQUqj/A w9ilXcU49FWupxjlretariaG7IVPqxUhS0TYfgDQmcHK++yeWDpLIi1uW8bOM3BY ptxW9JdBS1NpRqLQ1TEwcS+EF0QEXGewufzaJimTaQMUXSNhBj8UGEefdha/7u51 1RjOTzkIrsZ0jLThZi3CvQ52/9Rd1j1aaapbao/EJMFIFQnTbDFCelvkzZ8nyymK TF7tdqwNn0okEPz8HEiS4tRMusdoWGRhLp050cEt -----END CERTIFICATE-----Generated at Sun Nov 24 23:06:09 2024 by rpki-client on console-ams.rpki-client.org