$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136332e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136332e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: M4oeSY3tgHD/7oMFrHDEvQa9FcQxAa+xFxR+HsBlOGQ= Subject key identifier: 04:AC:D9:98:41:06:F2:5E:E1:54:36:FF:50:2B:2E:EC:B5:1E:AA:71 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 2BB6F3B6B83973952B253957DB1E50941471FDBE Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136332e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 09:00:02 +0000 ROA not before: Sun 11 Aug 2024 08:55:02 +0000 ROA not after: Sun 10 Aug 2025 09:00:02 +0000 asID: 63859 IP address blocks: 158.140.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b6:f3:b6:b8:39:73:95:2b:25:39:57:db:1e:50:94:14:71:fd:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 08:55:02 2024 GMT Not After : Aug 10 09:00:02 2025 GMT Subject: CN=04ACD9984106F25EE15436FF502B2EECB51EAA71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b0:c3:ff:b4:36:54:c5:fb:71:bb:7d:b2:b7: 19:fd:db:66:51:d4:d7:80:0b:30:06:58:b4:88:22: 65:ab:d1:5d:8e:eb:a8:0d:79:2c:c3:a7:c6:07:aa: e1:8b:b7:62:77:4c:87:f1:16:4b:79:c5:1f:ec:47: fa:4b:3d:67:5d:2d:91:5f:c1:e8:31:13:a6:a0:65: 02:1a:5d:01:a6:1e:ee:14:76:7a:f1:7c:50:30:56: c3:72:88:ba:16:30:5d:69:dd:27:aa:fe:95:02:6d: d1:a0:c8:15:84:a2:ca:a3:fc:e8:ac:37:f3:11:74: 1d:8a:e2:19:2e:ca:8b:4d:e9:9c:e7:5c:d0:e6:4f: 44:4a:91:e3:f7:a2:b0:7f:91:9f:e0:8b:f8:79:5d: 09:ba:09:4e:17:6e:6f:07:01:ed:11:3f:8c:f6:86: ec:b8:60:16:0d:56:f3:3c:73:d8:5c:7e:d3:10:29: f9:77:b1:75:24:36:12:56:84:d6:02:36:2b:04:5f: 88:f6:45:48:5c:4a:81:6f:99:80:f8:df:be:07:44: dd:66:20:93:34:ed:ae:8e:14:16:85:87:e9:43:61: a5:13:39:a2:5a:e3:a5:30:4f:27:33:fe:5b:9b:d2: f8:74:1c:56:fd:a3:4f:18:5f:9a:aa:22:2c:a2:c1: 06:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AC:D9:98:41:06:F2:5E:E1:54:36:FF:50:2B:2E:EC:B5:1E:AA:71 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136332e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.163.0/24 Signature Algorithm: sha256WithRSAEncryption 70:64:f7:4b:ce:4b:8e:1a:30:49:d1:c8:b0:82:98:75:c8:fb: c5:94:91:0f:e0:93:a8:ec:d5:32:8a:cf:c5:b0:4b:bd:69:10: f7:7b:2d:b6:a9:bd:19:06:2e:08:25:56:8c:a1:70:e1:13:86: 6f:ed:c6:ad:7a:b9:63:f9:2a:e8:24:d4:2b:0a:24:99:04:c8: 2f:62:0c:9b:24:32:5f:2d:03:a5:90:e9:f4:02:25:a0:b2:f0: 68:e1:c8:ef:92:80:dc:07:8c:99:01:d5:a1:c4:72:ad:61:e5: 43:df:31:b1:65:31:68:c4:5b:78:7d:b8:dd:b4:97:83:7d:80: 94:cb:89:02:28:1d:12:e5:68:2e:e4:67:1b:30:71:9c:9c:f0: 3b:98:fa:50:57:10:3c:e6:92:94:8b:50:81:49:16:56:1e:26: 9f:72:1e:5b:fd:06:23:b8:d4:24:f0:9c:bf:08:33:60:33:15: ce:d4:2c:3e:5e:a9:e3:65:b0:41:3d:7e:3e:4b:61:d1:7c:31: 4e:5b:6d:92:25:86:1c:ee:b1:64:fc:41:30:99:4b:01:27:4f: 67:48:11:d0:06:0c:a9:30:ce:67:8a:45:6a:0d:9f:a5:77:a9: 65:0b:6f:08:f0:f9:c5:ef:de:4b:74:0d:d3:42:9e:b1:0c:b2: 1d:33:66:13 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUK7bztrg5c5UrJTlX2x5QlBRx/b4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTEwODU1MDJaFw0yNTA4MTAwOTAwMDJaMDMxMTAvBgNV BAMTKDA0QUNEOTk4NDEwNkYyNUVFMTU0MzZGRjUwMkIyRUVDQjUxRUFBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDosMP/tDZUxftxu32ytxn922ZR 1NeACzAGWLSIImWr0V2O66gNeSzDp8YHquGLt2J3TIfxFkt5xR/sR/pLPWddLZFf wegxE6agZQIaXQGmHu4UdnrxfFAwVsNyiLoWMF1p3Seq/pUCbdGgyBWEosqj/Ois N/MRdB2K4hkuyotN6ZznXNDmT0RKkeP3orB/kZ/gi/h5XQm6CU4Xbm8HAe0RP4z2 huy4YBYNVvM8c9hcftMQKfl3sXUkNhJWhNYCNisEX4j2RUhcSoFvmYD4374HRN1m IJM07a6OFBaFh+lDYaUTOaJa46UwTycz/lub0vh0HFb9o08YX5qqIiyiwQarAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBKzZmEEG8l7hVDb/UCsu7LUeqnEwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM2MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoyjMA0GCSqG SIb3DQEBCwUAA4IBAQBwZPdLzkuOGjBJ0ciwgph1yPvFlJEP4JOo7NUyis/FsEu9 aRD3ey22qb0ZBi4IJVaMoXDhE4Zv7caterlj+SroJNQrCiSZBMgvYgybJDJfLQOl kOn0AiWgsvBo4cjvkoDcB4yZAdWhxHKtYeVD3zGxZTFoxFt4fbjdtJeDfYCUy4kC KB0S5Wgu5GcbMHGcnPA7mPpQVxA85pKUi1CBSRZWHiafch5b/QYjuNQk8Jy/CDNg MxXO1Cw+XqnjZbBBPX4+S2HRfDFOW22SJYYc7rFk/EEwmUsBJ09nSBHQBgypMM5n ikVqDZ+ld6llC28I8PnF795LdA3TQp6xDLIdM2YT -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org