$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137352e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3137352e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 2qbjl49gIy4HzbrYfiQ/NXczLifTAsQWIDiSk45aY08= Subject key identifier: F8:77:50:6F:98:C7:07:56:D0:9C:99:19:A1:76:DE:40:8A:54:5B:DE Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 374DABDEDD191D933067ECCCA9CA09B8FA8A5C3E Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137352e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 11:00:03 +0000 ROA not before: Sun 11 Aug 2024 10:55:03 +0000 ROA not after: Sun 10 Aug 2025 11:00:03 +0000 asID: 63859 IP address blocks: 158.140.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4d:ab:de:dd:19:1d:93:30:67:ec:cc:a9:ca:09:b8:fa:8a:5c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 10:55:03 2024 GMT Not After : Aug 10 11:00:03 2025 GMT Subject: CN=F877506F98C70756D09C9919A176DE408A545BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:a4:a4:ef:f3:6c:57:b7:d4:70:e8:d0:50: 6b:46:3c:8e:77:1b:25:80:1e:8c:1e:86:05:71:84: 21:e4:e8:42:86:aa:48:b0:e6:c8:2f:99:61:40:fc: 66:8d:9f:e8:2c:08:c9:64:fd:8f:d6:77:e0:7d:84: fc:19:31:10:b5:aa:75:a8:01:24:4d:fd:e3:be:a9: f5:87:84:68:79:5d:65:ad:9d:39:af:c8:45:92:ee: 7c:4b:f3:77:d2:9f:d0:fa:80:0e:f2:5e:57:34:94: f0:65:eb:40:ac:92:a4:eb:fd:9c:ff:24:a1:7a:69: ec:d4:61:28:af:b7:4a:f7:73:c9:3c:93:50:fc:96: b1:4d:53:e2:ef:91:cd:a3:b0:34:aa:73:20:ba:80: 26:13:0a:41:6b:39:89:42:2c:a9:e1:fa:4e:9c:a4: 1c:08:6f:73:c2:b3:80:c0:e9:28:e1:ca:17:e2:c9: 19:0e:2c:ce:d5:46:b3:9c:a1:b0:38:47:76:56:1b: 90:54:b7:08:da:30:ef:00:4c:0b:70:88:dd:4c:92: 70:3e:30:c1:96:e6:6b:07:f2:de:54:72:d3:24:71: 10:e9:7b:8c:6e:a3:8c:e5:2e:89:91:42:07:82:63: 8b:4a:34:e5:67:b7:05:97:1c:35:a1:10:d1:1b:3d: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:77:50:6F:98:C7:07:56:D0:9C:99:19:A1:76:DE:40:8A:54:5B:DE X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137352e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.175.0/24 Signature Algorithm: sha256WithRSAEncryption 29:77:d6:7d:7e:4f:1b:67:c1:ad:01:26:c6:15:83:e0:67:21: c1:93:ad:bd:c8:54:07:4c:f7:ea:10:0a:7f:c8:42:87:ce:b6: 71:34:79:7d:7e:54:3a:42:cf:22:3a:df:bf:47:35:8f:b1:9d: 95:a0:67:31:25:b6:53:aa:95:83:4a:5a:50:b6:a5:e4:e7:fc: f2:c7:96:52:00:d2:9c:80:5c:c7:7a:2f:ae:4d:24:16:4e:ae: fe:65:f1:c7:31:9d:9f:1d:45:9e:e2:66:51:0b:d7:de:e5:aa: 57:67:33:11:87:d8:b0:f1:55:a1:92:ab:64:65:80:9d:e5:17: e8:67:c5:3c:f8:aa:53:87:1c:1e:0f:b5:54:20:6e:47:94:63: 0b:57:29:8d:ff:e9:4a:ea:f6:95:d1:3e:dc:5e:6e:df:7e:10: b3:12:99:6a:56:93:bc:a4:88:a3:a1:66:96:ab:37:bc:cf:14: 2f:6f:01:19:8b:9c:ca:d0:71:ff:d0:a0:d2:08:38:8f:14:21: 78:a6:a0:11:4d:8d:92:26:89:50:3b:69:5c:1f:78:14:15:50: 10:ec:19:b0:4a:7c:87:94:9a:45:46:10:f9:22:58:ab:8a:68: 2f:86:79:16:2c:b9:af:69:bb:1e:66:22:1f:fe:11:ba:6a:91: 8a:c1:33:ad -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUN02r3t0ZHZMwZ+zMqcoJuPqKXD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTExMDU1MDNaFw0yNTA4MTAxMTAwMDNaMDMxMTAvBgNV BAMTKEY4Nzc1MDZGOThDNzA3NTZEMDlDOTkxOUExNzZERTQwOEE1NDVCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOu6Sk7/NsV7fUcOjQUGtGPI53 GyWAHowehgVxhCHk6EKGqkiw5sgvmWFA/GaNn+gsCMlk/Y/Wd+B9hPwZMRC1qnWo ASRN/eO+qfWHhGh5XWWtnTmvyEWS7nxL83fSn9D6gA7yXlc0lPBl60CskqTr/Zz/ JKF6aezUYSivt0r3c8k8k1D8lrFNU+Lvkc2jsDSqcyC6gCYTCkFrOYlCLKnh+k6c pBwIb3PCs4DA6SjhyhfiyRkOLM7VRrOcobA4R3ZWG5BUtwjaMO8ATAtwiN1MknA+ MMGW5msH8t5UctMkcRDpe4xuo4zlLomRQgeCY4tKNOVntwWXHDWhENEbPXPxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+HdQb5jHB1bQnJkZoXbeQIpUW94wHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoyvMA0GCSqG SIb3DQEBCwUAA4IBAQApd9Z9fk8bZ8GtASbGFYPgZyHBk629yFQHTPfqEAp/yEKH zrZxNHl9flQ6Qs8iOt+/RzWPsZ2VoGcxJbZTqpWDSlpQtqXk5/zyx5ZSANKcgFzH ei+uTSQWTq7+ZfHHMZ2fHUWe4mZRC9fe5apXZzMRh9iw8VWhkqtkZYCd5RfoZ8U8 +KpThxweD7VUIG5HlGMLVymN/+lK6vaV0T7cXm7ffhCzEplqVpO8pIijoWaWqze8 zxQvbwEZi5zK0HH/0KDSCDiPFCF4pqARTY2SJolQO2lcH3gUFVAQ7BmwSnyHlJpF RhD5IlirimgvhnkWLLmvabseZiIf/hG6apGKwTOt -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org