$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137332e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3137332e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: ly9DdDIY544NQqyW8DiFMwv2IpRhU48HX7y4jJZ0wz0= Subject key identifier: B7:6A:8F:E4:6B:BB:60:31:57:24:94:40:7C:0B:55:E7:0D:1F:C3:1F Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 08B8889F6CAC840AA685319F20928457F952797E Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137332e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 11:00:07 +0000 ROA not before: Sun 11 Aug 2024 10:55:07 +0000 ROA not after: Sun 10 Aug 2025 11:00:07 +0000 asID: 63859 IP address blocks: 158.140.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b8:88:9f:6c:ac:84:0a:a6:85:31:9f:20:92:84:57:f9:52:79:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 10:55:07 2024 GMT Not After : Aug 10 11:00:07 2025 GMT Subject: CN=B76A8FE46BBB6031572494407C0B55E70D1FC31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b3:6f:26:d4:11:da:98:f2:17:16:12:da:1c: dd:da:4d:32:11:58:a0:61:9a:10:8a:c9:ec:eb:60: c4:ac:d6:b9:4b:8c:42:31:b1:f5:1b:9b:e3:eb:cb: 07:5d:4b:3b:28:b7:f5:85:bd:17:78:43:b3:73:fb: 0b:5e:41:dc:31:04:a9:4b:81:a5:3e:02:99:9c:7c: bb:56:f8:ec:75:ee:86:cd:b5:41:8d:cd:66:02:c1: 0e:db:a1:d2:f0:d0:f7:43:d1:65:7e:06:ec:17:87: 98:3e:7e:d7:35:b7:2e:d2:07:13:3a:68:93:c8:96: 73:78:3e:2a:be:43:69:67:2f:72:e5:69:35:d7:81: 93:41:bc:e2:ad:d1:92:b8:e8:81:3b:99:a8:bf:ec: 9e:93:30:4e:0e:4d:0e:05:2e:c3:51:c5:94:8b:e5: f0:54:d0:b1:c7:23:b8:85:e6:2f:56:3f:86:c6:8b: 95:ed:55:a0:c8:41:2a:d9:eb:67:38:d8:64:a6:af: 68:06:bb:82:42:17:5e:34:25:37:9b:f5:7a:3f:ac: 8f:67:40:9c:98:b3:d3:64:71:1b:f3:c2:96:19:45: 95:52:65:ca:6f:c0:2c:15:8b:e6:dc:f9:40:3b:07: 12:c0:11:33:4c:72:c4:82:b0:3d:e8:8c:76:b1:95: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6A:8F:E4:6B:BB:60:31:57:24:94:40:7C:0B:55:E7:0D:1F:C3:1F X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137332e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.173.0/24 Signature Algorithm: sha256WithRSAEncryption 43:52:f6:50:00:e3:4d:64:dc:11:58:e5:de:3f:70:39:90:8e: 60:6c:bf:0c:45:20:b7:cf:52:d3:4f:02:41:72:b8:ed:09:f3: ef:13:f0:cb:20:e1:f7:cb:e3:50:cf:01:e3:af:2b:d8:f8:a4: 33:df:b7:a3:20:bf:60:6a:79:47:ba:e4:73:29:5b:c4:c1:95: 46:3e:6e:56:23:fc:11:b3:30:33:3b:68:c8:07:c5:aa:46:6f: 4d:69:30:2e:d8:69:59:85:7a:26:1c:1d:9f:db:d5:5e:1f:1d: 8a:0d:e3:52:60:54:0c:a7:5e:ef:2c:90:fd:9c:59:17:8b:40: a7:d2:70:c6:e1:79:07:9b:f3:cd:26:40:6c:d6:8f:75:ee:38: fc:f2:83:45:03:68:10:92:87:24:74:8e:ce:99:76:c0:2d:c6: b4:ea:08:e2:df:f5:7f:9e:78:d3:65:ba:68:fc:6c:27:aa:59: 32:71:fb:bc:cf:d3:40:e4:10:61:03:48:34:bf:b0:08:9e:d7: 0a:9c:bb:0a:e0:fb:92:77:39:a2:74:78:ed:20:76:b2:26:65: 28:3b:97:d5:66:50:6e:fa:62:a8:eb:56:cb:52:e0:10:2d:ff: e5:e2:19:36:d5:ea:c1:57:be:35:d7:2e:54:d8:25:0a:05:60: 13:58:b9:14 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCLiIn2yshAqmhTGfIJKEV/lSeX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTExMDU1MDdaFw0yNTA4MTAxMTAwMDdaMDMxMTAvBgNV BAMTKEI3NkE4RkU0NkJCQjYwMzE1NzI0OTQ0MDdDMEI1NUU3MEQxRkMzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDts28m1BHamPIXFhLaHN3aTTIR WKBhmhCKyezrYMSs1rlLjEIxsfUbm+PrywddSzsot/WFvRd4Q7Nz+wteQdwxBKlL gaU+ApmcfLtW+Ox17obNtUGNzWYCwQ7bodLw0PdD0WV+BuwXh5g+ftc1ty7SBxM6 aJPIlnN4Piq+Q2lnL3LlaTXXgZNBvOKt0ZK46IE7mai/7J6TME4OTQ4FLsNRxZSL 5fBU0LHHI7iF5i9WP4bGi5XtVaDIQSrZ62c42GSmr2gGu4JCF140JTeb9Xo/rI9n QJyYs9NkcRvzwpYZRZVSZcpvwCwVi+bc+UA7BxLAETNMcsSCsD3ojHaxlVibAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUt2qP5Gu7YDFXJJRAfAtV5w0fwx8wHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM3MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoytMA0GCSqG SIb3DQEBCwUAA4IBAQBDUvZQAONNZNwRWOXeP3A5kI5gbL8MRSC3z1LTTwJBcrjt CfPvE/DLIOH3y+NQzwHjryvY+KQz37ejIL9ganlHuuRzKVvEwZVGPm5WI/wRszAz O2jIB8WqRm9NaTAu2GlZhXomHB2f29VeHx2KDeNSYFQMp17vLJD9nFkXi0Cn0nDG 4XkHm/PNJkBs1o917jj88oNFA2gQkockdI7OmXbALca06gji3/V/nnjTZbpo/Gwn qlkycfu8z9NA5BBhA0g0v7AIntcKnLsK4PuSdzmidHjtIHayJmUoO5fVZlBu+mKo 61bLUuAQLf/l4hk21erBV7411y5U2CUKBWATWLkU -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org