$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa File: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (raw, json) Hash identifier: Ydl3Ket/Eeuscy0B0YmxQqgt1TudedFNYlPQMUGcles= Subject key identifier: B0:B6:54:C3:75:DF:57:71:A9:1F:57:0D:86:A0:72:EB:1E:14:5C:C6 Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 2FAF7BDF289A0C282E7178DD2071AD50AAE3F63D Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa Signing time: Fri 26 Jul 2024 08:02:43 +0000 ROA not before: Fri 26 Jul 2024 07:57:43 +0000 ROA not after: Fri 25 Jul 2025 08:02:43 +0000 asID: 137286 IP address blocks: 49.128.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 03:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:af:7b:df:28:9a:0c:28:2e:71:78:dd:20:71:ad:50:aa:e3:f6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Jul 26 07:57:43 2024 GMT Not After : Jul 25 08:02:43 2025 GMT Subject: CN=B0B654C375DF5771A91F570D86A072EB1E145CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:d3:3f:9f:47:58:9a:d1:a6:89:1e:41:9d: d6:63:61:36:f6:bb:cc:bf:a0:3f:51:c4:82:9f:67: 3e:39:d7:48:92:e3:1b:55:70:b2:01:74:d2:b9:41: 4a:22:0e:de:c2:2c:4e:52:40:06:d5:3d:5a:ac:1d: e0:d8:8a:ed:9e:5c:a7:b3:9b:2f:b8:4a:7a:99:a3: eb:96:c7:a7:f8:67:9c:2c:78:2e:9f:0a:5b:19:a2: f4:1d:0b:23:75:a4:2a:02:75:d0:cf:33:45:ba:3e: d0:97:43:2b:2e:f8:84:c8:de:89:32:df:c5:4b:4e: 68:f2:07:52:cf:41:00:46:2e:2d:2c:5f:d9:c2:a1: bc:d4:a5:ac:4d:d2:65:54:4f:48:a6:57:2c:4c:6b: 7e:b4:d2:1b:d8:fd:e4:de:38:05:ee:a3:2d:a4:75: c3:92:c8:2b:c5:9f:38:a3:e0:a8:d3:0b:12:c2:1b: e2:3a:6f:0c:81:dd:ff:3b:64:ff:8f:71:af:5a:f3: 96:1b:e5:d3:bc:aa:ab:43:57:d4:c2:aa:96:1a:3e: 4a:da:98:e5:31:de:45:a0:70:2f:ee:74:b8:7b:73: a9:fe:2a:9f:1e:a7:e3:a6:1d:eb:86:da:da:b1:64: 98:4c:7b:bf:cd:fc:7a:61:e2:96:7a:58:c0:9b:ab: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B6:54:C3:75:DF:57:71:A9:1F:57:0D:86:A0:72:EB:1E:14:5C:C6 X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.188.0/22 Signature Algorithm: sha256WithRSAEncryption 64:a2:58:e8:dd:b5:ee:4b:93:d5:bb:d2:60:59:5b:c5:aa:b4: b7:d9:cc:38:7b:cd:fc:ae:ab:89:07:97:2c:29:84:18:de:67: 46:6b:55:8d:53:dd:bb:ab:4e:af:ab:a0:88:d1:a9:d7:7c:4c: c0:e8:a6:0b:fe:ce:6e:3a:3e:ed:b4:2d:25:74:3d:15:60:da: 34:e4:5c:5d:a2:2d:ca:b0:74:4e:c7:d4:f4:fa:ff:c0:15:1c: 59:5e:90:a9:57:3d:12:80:04:bc:b4:12:47:ac:81:35:f4:67: 6a:15:07:17:23:50:f8:1e:3a:f1:08:22:47:50:65:02:a5:6a: 92:e5:1f:74:27:2c:a9:63:70:05:c4:a2:22:80:de:d0:10:39: b4:43:9d:92:94:8c:d6:7d:cd:d3:11:f3:ac:2d:4c:ce:dd:f3: cd:20:b3:2d:48:c4:79:79:25:50:3a:f5:28:1b:84:9a:79:f2: 7f:36:94:52:6d:69:34:b9:8e:74:45:57:de:a7:32:ce:00:22: a3:79:44:60:e5:52:57:1c:fb:97:a9:f1:ee:44:93:3a:b1:7b: b7:d0:50:e1:40:5f:b4:1b:a9:8b:41:fe:57:d1:4d:bb:c8:dc: b8:4b:38:ef:29:f0:f9:18:6d:27:ce:41:2b:36:94:dc:ff:c8: ee:90:c9:ce -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUL6973yiaDCgucXjdIHGtUKrj9j0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNDA3MjYwNzU3NDNaFw0yNTA3MjUwODAyNDNaMDMxMTAvBgNV BAMTKEIwQjY1NEMzNzVERjU3NzFBOTFGNTcwRDg2QTA3MkVCMUUxNDVDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksNM/n0dYmtGmiR5BndZjYTb2 u8y/oD9RxIKfZz4510iS4xtVcLIBdNK5QUoiDt7CLE5SQAbVPVqsHeDYiu2eXKez my+4SnqZo+uWx6f4Z5wseC6fClsZovQdCyN1pCoCddDPM0W6PtCXQysu+ITI3oky 38VLTmjyB1LPQQBGLi0sX9nCobzUpaxN0mVUT0imVyxMa3600hvY/eTeOAXuoy2k dcOSyCvFnzij4KjTCxLCG+I6bwyB3f87ZP+Pca9a85Yb5dO8qqtDV9TCqpYaPkra mOUx3kWgcC/udLh7c6n+Kp8ep+OmHeuG2tqxZJhMe7/N/Hph4pZ6WMCbq6sDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsLZUw3XfV3GpH1cNhqBy6x4UXMYwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0MDJkYWE1LWZiMGMtNGEyNC05 ODg5LTMzYmQ1MGRiNGZlMC8wLzM0MzkyZTMxMzIzODJlMzEzODM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM3MzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMYC8MA0GCSqG SIb3DQEBCwUAA4IBAQBkoljo3bXuS5PVu9JgWVvFqrS32cw4e838rquJB5csKYQY 3mdGa1WNU927q06vq6CI0anXfEzA6KYL/s5uOj7ttC0ldD0VYNo05Fxdoi3KsHRO x9T0+v/AFRxZXpCpVz0SgAS8tBJHrIE19GdqFQcXI1D4HjrxCCJHUGUCpWqS5R90 JyypY3AFxKIigN7QEDm0Q52SlIzWfc3TEfOsLUzO3fPNILMtSMR5eSVQOvUoG4Sa efJ/NpRSbWk0uY50RVfepzLOACKjeURg5VJXHPuXqfHuRJM6sXu30FDhQF+0G6mL Qf5X0U27yNy4SzjvKfD5GG0nzkErNpTc/8jukMnO -----END CERTIFICATE-----Generated at Tue Mar 11 05:02:55 2025 by rpki-client