$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: Y3iOu59DjiG6hubjKhwdA+TVsAixNoGIN07A6ZmdHJE= Subject key identifier: 47:3B:BB:C7:79:CD:8F:30:FC:CA:FA:D1:63:16:4E:B8:CC:DA:AD:06 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 36F51D87826A6066A35B745DE79F57D431B50D2C Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 11:00:05 +0000 ROA not before: Sun 11 Aug 2024 10:55:05 +0000 ROA not after: Sun 10 Aug 2025 11:00:05 +0000 asID: 63859 IP address blocks: 158.140.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f5:1d:87:82:6a:60:66:a3:5b:74:5d:e7:9f:57:d4:31:b5:0d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 10:55:05 2024 GMT Not After : Aug 10 11:00:05 2025 GMT Subject: CN=473BBBC779CD8F30FCCAFAD163164EB8CCDAAD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:21:34:97:76:a3:b6:4b:db:ab:d1:b5:96: ef:ab:8e:0f:24:1a:40:f3:8d:50:cc:ca:df:2f:ee: 9f:db:0b:70:5f:c3:ae:b5:4b:5f:19:7e:c7:9b:05: b1:5a:e0:1a:40:ca:78:8c:49:54:68:bf:21:07:c6: 15:e0:c1:b1:c6:bc:c7:bf:c5:ab:b1:a4:b4:2e:84: 03:32:e8:f1:ca:3b:9d:0e:df:4a:43:56:15:dc:d1: 24:a5:4b:f0:6f:08:3d:de:92:7b:25:08:f6:af:96: ce:49:07:2e:0b:e2:19:81:07:95:83:b2:59:3f:fa: 3f:ce:0b:65:7b:86:f6:29:bb:b3:aa:ee:78:34:04: 2b:8f:7f:75:2c:9b:92:6b:3d:5a:d1:43:cf:a2:0a: 28:45:f2:31:42:db:25:87:1c:56:eb:63:8f:5b:fd: 66:30:f8:68:06:aa:c9:d2:00:86:39:cb:8e:61:05: f9:19:73:97:05:cf:c1:e1:c2:cb:87:af:80:06:83: b7:44:c9:60:da:bd:6c:eb:53:8b:49:cb:30:27:88: ef:73:d9:a1:b0:21:4a:62:8d:0f:25:d2:dc:24:e6: 0e:ef:1d:5d:13:a6:8c:8e:69:96:d3:df:66:ed:c2: 93:3e:57:f5:c2:f4:8c:e5:c5:44:1d:f3:f4:f1:e5: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3B:BB:C7:79:CD:8F:30:FC:CA:FA:D1:63:16:4E:B8:CC:DA:AD:06 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.164.0/24 Signature Algorithm: sha256WithRSAEncryption b0:12:5c:1b:19:99:8b:c4:9e:ea:3e:05:4a:8a:03:52:d3:23: af:a4:c3:0d:9a:7d:bb:9e:30:69:b8:ed:47:66:ad:35:82:2f: c3:6a:0e:de:63:bf:ed:2e:a6:33:f2:c4:8a:39:48:0e:ac:1e: ee:6a:f1:76:8a:83:d1:2a:95:5e:a8:8c:7d:36:47:01:68:ea: be:82:95:0e:56:a3:3c:f8:bb:b9:2d:a3:09:86:91:98:34:b1: 74:c2:cf:68:2d:74:5b:d1:8b:99:c9:ed:1d:a5:7e:94:11:b6: 7b:91:2d:6c:a8:8b:9a:a2:c8:be:52:b9:b0:c8:44:95:96:b9: 09:78:42:a4:66:d4:e6:20:95:a8:ca:c5:ac:f1:1a:23:8f:79: 28:11:92:35:83:72:61:f4:e0:32:2b:52:ec:5d:81:19:c2:e7: 47:a9:6e:33:77:65:95:16:02:c8:71:aa:b8:e5:b1:78:9e:5a: 5e:5e:ba:80:cd:56:ff:da:b1:3c:1d:40:6d:5d:65:a0:53:fa: bf:fc:20:4f:b3:95:6b:8c:58:b7:9a:b6:b0:48:1e:e5:0a:94: 04:da:56:24:81:9d:6c:b1:bb:5f:30:22:53:3b:a9:aa:99:db: ee:ab:01:dc:ac:fd:d3:6d:54:c4:34:13:86:5d:fd:ef:7c:22: 71:43:a9:91 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNvUdh4JqYGajW3Rd559X1DG1DSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTExMDU1MDVaFw0yNTA4MTAxMTAwMDVaMDMxMTAvBgNV BAMTKDQ3M0JCQkM3NzlDRDhGMzBGQ0NBRkFEMTYzMTY0RUI4Q0NEQUFEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGyE0l3ajtkvbq9G1lu+rjg8k GkDzjVDMyt8v7p/bC3Bfw661S18ZfsebBbFa4BpAyniMSVRovyEHxhXgwbHGvMe/ xauxpLQuhAMy6PHKO50O30pDVhXc0SSlS/BvCD3eknslCPavls5JBy4L4hmBB5WD slk/+j/OC2V7hvYpu7Oq7ng0BCuPf3Usm5JrPVrRQ8+iCihF8jFC2yWHHFbrY49b /WYw+GgGqsnSAIY5y45hBfkZc5cFz8HhwsuHr4AGg7dEyWDavWzrU4tJyzAniO9z 2aGwIUpijQ8l0twk5g7vHV0TpoyOaZbT32btwpM+V/XC9IzlxUQd8/Tx5R17AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURzu7x3nNjzD8yvrRYxZOuMzarQYwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoykMA0GCSqG SIb3DQEBCwUAA4IBAQCwElwbGZmLxJ7qPgVKigNS0yOvpMMNmn27njBpuO1HZq01 gi/Dag7eY7/tLqYz8sSKOUgOrB7uavF2ioPRKpVeqIx9NkcBaOq+gpUOVqM8+Lu5 LaMJhpGYNLF0ws9oLXRb0YuZye0dpX6UEbZ7kS1sqIuaosi+UrmwyESVlrkJeEKk ZtTmIJWoysWs8Rojj3koEZI1g3Jh9OAyK1LsXYEZwudHqW4zd2WVFgLIcaq45bF4 nlpeXrqAzVb/2rE8HUBtXWWgU/q//CBPs5VrjFi3mrawSB7lCpQE2lYkgZ1ssbtf MCJTO6mqmdvuqwHcrP3TbVTENBOGXf3vfCJxQ6mR -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org