$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 0WNepwwfAO4ZO5UN5/kcClzIE4LLe4hUOYEzSPirPO0= Subject key identifier: B1:CF:8B:AD:D6:0E:9B:17:8C:91:2A:D8:E5:BE:52:E9:60:D0:A5:4E Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 3DADF8D704543B48C09D403D8EE7876BA05FA1B8 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 09:00:02 +0000 ROA not before: Sun 11 Aug 2024 08:55:02 +0000 ROA not after: Sun 10 Aug 2025 09:00:02 +0000 asID: 63859 IP address blocks: 158.140.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ad:f8:d7:04:54:3b:48:c0:9d:40:3d:8e:e7:87:6b:a0:5f:a1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 08:55:02 2024 GMT Not After : Aug 10 09:00:02 2025 GMT Subject: CN=B1CF8BADD60E9B178C912AD8E5BE52E960D0A54E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:bf:d8:de:36:b6:67:ea:d3:92:71:b8:92: c8:44:79:7e:a1:5c:c0:d8:f0:65:f9:d8:f8:ee:86: a6:8f:2f:11:a7:de:d6:7d:0a:07:1a:f6:ee:6f:9a: 79:a5:58:58:1b:e8:aa:12:ab:47:0f:75:ea:b8:98: 44:c7:eb:f9:72:b3:62:41:e0:57:86:f7:3e:20:6b: 1d:c4:af:6c:7a:3d:83:d1:c2:1a:02:7c:ca:d3:8c: 4c:ea:f5:b8:a6:16:9c:21:ab:77:39:74:ff:47:f2: e9:38:9e:ec:b2:5f:b8:29:af:5c:4a:67:77:22:88: f7:cd:28:3f:e9:72:7b:ad:17:7c:f0:ad:62:92:08: 64:04:8d:92:eb:33:34:72:60:0e:9f:10:5f:26:0d: 69:a6:0a:03:7c:84:95:4c:32:ca:c3:18:a0:24:2c: 35:32:ba:1f:b4:e6:6d:a2:c9:a2:c4:2f:65:46:2d: da:e3:02:89:63:61:05:86:0d:2e:4a:22:a0:ed:3a: 22:66:34:d0:b6:43:84:ac:03:9a:70:46:1e:dc:50: 49:43:e2:e2:ed:f4:3f:58:2f:75:75:a2:15:7b:eb: c3:8e:f7:df:f5:0d:d0:d3:76:ea:09:e9:c5:3d:dc: 11:62:8a:7f:a0:47:1f:7d:5a:40:b2:b8:c4:df:e4: e8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CF:8B:AD:D6:0E:9B:17:8C:91:2A:D8:E5:BE:52:E9:60:D0:A5:4E X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.165.0/24 Signature Algorithm: sha256WithRSAEncryption 48:0f:b6:c0:f6:fc:7b:f2:f5:d2:1e:9b:76:70:b2:18:4c:ae: ed:83:03:78:a0:a5:ed:31:84:02:de:19:14:8d:ef:39:7a:81: 59:2e:59:71:d6:2a:84:c6:3f:88:be:8f:62:41:c4:5f:0a:5c: d9:1a:06:ea:b7:96:d1:f1:5f:45:32:0e:f4:b3:a7:7e:a6:9c: 1f:3c:be:c2:9c:16:c9:35:29:fa:22:1c:d5:44:8b:b9:8d:42: fb:f0:f6:e5:25:79:06:32:94:44:ac:73:e2:ce:06:7c:0f:31: f3:e5:b3:fb:72:be:8b:b2:fc:a1:13:05:b4:34:6e:df:2b:ac: 34:ae:e8:97:70:8c:5e:5d:6a:e4:73:39:67:47:66:28:bf:ca: 51:4b:b0:9a:9b:28:d6:29:48:52:7e:52:5f:27:2f:10:b5:26: cc:40:58:6f:67:a1:17:3f:4e:be:8c:63:c4:24:7c:bf:90:85: 3b:e1:05:c7:e6:8a:a2:60:3c:f0:76:95:57:96:37:c0:4a:3b: f1:d2:84:d4:c4:00:93:00:6f:fd:85:01:be:a0:3d:e9:7e:c6: 03:c3:96:04:e4:80:fe:55:df:9a:cf:98:75:50:c0:31:f9:60: 75:eb:fc:83:9e:80:50:2c:4d:af:26:29:2b:bb:15:2c:60:21: 1a:87:62:80 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPa341wRUO0jAnUA9jueHa6BfobgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTEwODU1MDJaFw0yNTA4MTAwOTAwMDJaMDMxMTAvBgNV BAMTKEIxQ0Y4QkFERDYwRTlCMTc4QzkxMkFEOEU1QkU1MkU5NjBEMEE1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0b/Y3ja2Z+rTknG4kshEeX6h XMDY8GX52PjuhqaPLxGn3tZ9Cgca9u5vmnmlWFgb6KoSq0cPdeq4mETH6/lys2JB 4FeG9z4gax3Er2x6PYPRwhoCfMrTjEzq9bimFpwhq3c5dP9H8uk4nuyyX7gpr1xK Z3ciiPfNKD/pcnutF3zwrWKSCGQEjZLrMzRyYA6fEF8mDWmmCgN8hJVMMsrDGKAk LDUyuh+05m2iyaLEL2VGLdrjAoljYQWGDS5KIqDtOiJmNNC2Q4SsA5pwRh7cUElD 4uLt9D9YL3V1ohV768OO99/1DdDTduoJ6cU93BFiin+gRx99WkCyuMTf5OjNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsc+LrdYOmxeMkSrY5b5S6WDQpU4wHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM2MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoylMA0GCSqG SIb3DQEBCwUAA4IBAQBID7bA9vx78vXSHpt2cLIYTK7tgwN4oKXtMYQC3hkUje85 eoFZLllx1iqExj+Ivo9iQcRfClzZGgbqt5bR8V9FMg70s6d+ppwfPL7CnBbJNSn6 IhzVRIu5jUL78PblJXkGMpRErHPizgZ8DzHz5bP7cr6LsvyhEwW0NG7fK6w0ruiX cIxeXWrkczlnR2Yov8pRS7CamyjWKUhSflJfJy8QtSbMQFhvZ6EXP06+jGPEJHy/ kIU74QXH5oqiYDzwdpVXljfASjvx0oTUxACTAG/9hQG+oD3pfsYDw5YE5ID+Vd+a z5h1UMAx+WB16/yDnoBQLE2vJikruxUsYCEah2KA -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org