$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: P69kU2Ol0oKE/q17sKPO5P+HEWkgADm/GJuGWo7YjWQ= Subject key identifier: FE:7D:4B:3D:F0:5D:E6:F4:E3:10:F1:D6:76:EE:77:17:3E:4C:B6:98 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 5EDCFDF25206A32169756A960DA97AEACD604297 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 11:00:07 +0000 ROA not before: Sun 11 Aug 2024 10:55:07 +0000 ROA not after: Sun 10 Aug 2025 11:00:07 +0000 asID: 63859 IP address blocks: 158.140.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:dc:fd:f2:52:06:a3:21:69:75:6a:96:0d:a9:7a:ea:cd:60:42:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 10:55:07 2024 GMT Not After : Aug 10 11:00:07 2025 GMT Subject: CN=FE7D4B3DF05DE6F4E310F1D676EE77173E4CB698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:da:ad:bc:34:3e:84:cf:ac:c3:9c:15:33: 85:0f:98:a9:20:1d:3e:97:d3:04:50:22:45:c1:49: 71:af:cd:82:ea:50:7c:fb:05:2a:6d:7f:12:d1:3d: 95:16:5e:fd:58:f3:58:e9:15:3f:d2:fb:d8:d4:04: a6:1b:29:b3:20:5e:da:5e:a1:7f:00:2c:7e:a2:b3: 2b:43:62:d7:86:af:52:b9:2a:21:61:2a:da:6d:d3: bf:73:1c:11:f8:36:06:cb:8c:7e:c2:74:d9:e6:50: be:d3:27:15:c9:ce:43:a0:d0:4f:11:79:1b:bc:63: 9a:b4:4f:73:dd:41:6f:1e:5c:44:80:4a:a4:d5:ad: 08:e2:25:f2:0c:ed:da:3c:7e:f9:7d:33:1a:19:dd: e1:54:1f:0a:d5:c0:45:1c:f6:45:72:38:9d:19:1a: db:99:12:99:3d:5d:ef:1d:e1:94:30:8f:83:87:05: b6:99:3e:fa:4f:78:a7:a6:f5:f7:1a:96:66:7d:45: 90:0f:36:6d:fc:5e:e0:99:00:62:60:93:ca:a0:15: 9d:90:03:72:f1:cc:c3:9b:6a:c5:73:21:46:84:4e: e6:7f:fd:df:a0:e6:17:22:10:28:9b:eb:c6:10:9f: 8d:08:f8:80:c7:90:78:89:73:f1:5a:de:57:3e:5a: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7D:4B:3D:F0:5D:E6:F4:E3:10:F1:D6:76:EE:77:17:3E:4C:B6:98 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.187.0/24 Signature Algorithm: sha256WithRSAEncryption 81:59:14:4f:7f:f4:ee:fa:5e:93:db:0b:11:f5:ff:e8:d8:5e: 2f:ef:aa:4e:73:c8:2d:92:f9:7d:8e:88:6b:a6:52:b5:20:98: 56:56:5c:7a:62:5f:47:cc:1e:a7:df:28:21:2e:d2:a3:8b:81: 18:0e:12:c7:b4:a2:4e:5e:f5:7b:90:89:f5:36:db:6b:4f:31: 7b:86:53:e5:12:1e:37:46:9a:3d:85:57:a0:2c:d8:2e:c7:11: 43:70:23:b4:cd:5e:9e:fd:ae:27:59:bf:6a:23:5e:3d:cc:42: 5d:98:41:8f:e9:e8:3c:bc:aa:50:f7:62:e4:a8:46:f5:8d:48: c9:90:ce:df:81:6b:e7:7b:78:d6:57:f1:d3:ac:b6:0c:50:8a: 27:46:14:f3:fc:a9:26:6e:fc:12:55:37:50:32:d2:b4:cb:a7: 72:e1:2d:d4:e9:e7:ff:af:e9:88:60:f3:71:a1:68:a7:af:66: 81:6c:45:6a:db:29:84:05:21:68:76:11:1b:e1:29:99:f1:d9: bd:9f:91:d5:0a:a6:68:c7:92:8e:8c:38:e4:ea:c5:f4:08:2f: 09:1f:55:ff:3c:64:a8:20:57:08:7c:63:f9:bd:0c:91:21:1d: 45:85:6e:d1:23:df:38:7b:f7:bc:10:e3:b2:88:28:5d:8b:c7: 65:f3:df:a3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXtz98lIGoyFpdWqWDal66s1gQpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTExMDU1MDdaFw0yNTA4MTAxMTAwMDdaMDMxMTAvBgNV BAMTKEZFN0Q0QjNERjA1REU2RjRFMzEwRjFENjc2RUU3NzE3M0U0Q0I2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXHNqtvDQ+hM+sw5wVM4UPmKkg HT6X0wRQIkXBSXGvzYLqUHz7BSptfxLRPZUWXv1Y81jpFT/S+9jUBKYbKbMgXtpe oX8ALH6isytDYteGr1K5KiFhKtpt079zHBH4NgbLjH7CdNnmUL7TJxXJzkOg0E8R eRu8Y5q0T3PdQW8eXESASqTVrQjiJfIM7do8fvl9MxoZ3eFUHwrVwEUc9kVyOJ0Z GtuZEpk9Xe8d4ZQwj4OHBbaZPvpPeKem9fcalmZ9RZAPNm38XuCZAGJgk8qgFZ2Q A3LxzMObasVzIUaETuZ//d+g5hciECib68YQn40I+IDHkHiJc/Fa3lc+WlYdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/n1LPfBd5vTjEPHWdu53Fz5MtpgwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM4MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoy7MA0GCSqG SIb3DQEBCwUAA4IBAQCBWRRPf/Tu+l6T2wsR9f/o2F4v76pOc8gtkvl9johrplK1 IJhWVlx6Yl9HzB6n3yghLtKji4EYDhLHtKJOXvV7kIn1NttrTzF7hlPlEh43Rpo9 hVegLNguxxFDcCO0zV6e/a4nWb9qI149zEJdmEGP6eg8vKpQ92LkqEb1jUjJkM7f gWvne3jWV/HTrLYMUIonRhTz/KkmbvwSVTdQMtK0y6dy4S3U6ef/r+mIYPNxoWin r2aBbEVq2ymEBSFodhEb4SmZ8dm9n5HVCqZox5KOjDjk6sX0CC8JH1X/PGSoIFcI fGP5vQyRIR1FhW7RI984e/e8EOOyiChdi8dl89+j -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org