$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/34352e3132362e34302e302f32332d3234203d3e203634333030.roa File: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (raw, json) Hash identifier: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils= Subject key identifier: A4:95:21:47:32:14:AB:B7:63:85:C4:D2:5A:DB:8A:71:9E:92:C1:B1 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 199B8926F32A0FA10DE852C769CFBE49EA021B0D Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/34352e3132362e34302e302f32332d3234203d3e203634333030.roa Signing time: Thu 24 Oct 2024 05:02:11 +0000 ROA not before: Thu 24 Oct 2024 04:57:11 +0000 ROA not after: Thu 23 Oct 2025 05:02:11 +0000 asID: 64300 IP address blocks: 45.126.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9b:89:26:f3:2a:0f:a1:0d:e8:52:c7:69:cf:be:49:ea:02:1b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Oct 24 04:57:11 2024 GMT Not After : Oct 23 05:02:11 2025 GMT Subject: CN=A49521473214ABB76385C4D25ADB8A719E92C1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:40:6e:ef:7c:07:8d:05:ef:fd:41:86:1e: 76:82:ab:ab:65:04:b2:22:2f:cc:46:0c:21:c1:32: 60:79:2a:3f:06:e8:4a:f1:8a:b7:ab:ff:f2:c9:6d: 0d:ce:98:47:5c:a3:24:82:6c:10:fe:64:c9:d9:3b: 2f:6c:f3:f8:b4:1f:c0:98:1c:c7:d7:a6:90:ab:60: 73:e5:5b:69:a9:7d:07:29:f7:81:fc:4d:e6:c7:03: f4:b3:35:be:ec:08:e0:f1:32:f9:e2:8c:19:c0:b9: 92:fa:cb:7f:a5:80:8e:24:54:24:74:1f:2b:3c:65: ee:ca:02:8c:d4:21:81:f2:4b:d1:bb:df:52:8c:0f: 05:1e:e5:af:62:a4:c0:07:16:f5:2c:b8:90:6c:f5: 43:eb:e1:e9:b3:7a:72:9b:75:e5:65:d0:ec:f9:57: 94:dc:0d:7a:6e:e6:10:2b:60:b4:c2:e9:49:3b:20: 59:3e:a4:07:f7:74:1a:82:12:ca:d4:0f:54:a5:41: c7:6f:76:14:d6:a0:72:2f:0b:f2:20:86:dd:22:89: 60:ef:62:04:1f:f9:f4:00:1a:0c:f2:14:df:1b:e7: 81:07:9b:f5:56:f9:1a:e4:c2:37:4d:46:95:ba:8c: 05:55:63:0a:7d:0c:29:c8:91:7b:23:52:41:1d:57: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:95:21:47:32:14:AB:B7:63:85:C4:D2:5A:DB:8A:71:9E:92:C1:B1 X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/34352e3132362e34302e302f32332d3234203d3e203634333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.40.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:3b:3a:88:be:5d:99:ef:e9:ec:82:c0:2f:77:0e:75:c2:fa: 0e:a2:3d:c7:85:c0:d9:b2:38:e5:41:ef:b1:cd:fa:ab:3f:5f: de:9d:bc:d3:43:17:4a:90:af:2b:a1:33:7a:73:fa:95:30:42: f0:b4:cb:d4:83:c7:a1:e1:09:a0:14:54:9e:81:f2:b9:54:6b: c5:e3:09:62:6e:5a:a2:65:1b:98:49:0d:df:41:02:e8:75:01: 29:95:4c:bb:12:d4:dc:1f:ca:77:28:6e:da:65:c1:46:df:1a: c1:ae:6f:7b:16:7e:ae:a2:0e:22:f6:21:cd:34:49:62:6a:14: 8f:a6:6d:ac:98:d3:1e:63:63:c5:5d:28:af:c1:81:5a:a3:c1: 79:a0:81:59:db:1e:9d:23:05:97:9c:29:b7:30:08:d6:47:2e: d9:80:64:63:36:63:3e:3d:e9:10:96:ed:33:94:a4:ee:00:7f: bb:39:7d:8a:56:ba:7b:9e:62:70:a2:03:20:20:9f:12:9d:fd: d6:da:4c:6e:5b:9b:93:bf:bd:87:0f:74:d4:24:d1:74:f6:a4: 42:4b:8b:f9:a0:de:8a:3f:52:36:51:1b:f6:5c:75:6a:94:65: 2f:fb:cd:4d:37:20:2d:09:2c:a3:26:a8:e7:31:fc:00:46:91: 02:7a:95:5f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUGZuJJvMqD6EN6FLHac++SeoCGw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNDEwMjQwNDU3MTFaFw0yNTEwMjMwNTAyMTFaMDMxMTAvBgNV BAMTKEE0OTUyMTQ3MzIxNEFCQjc2Mzg1QzREMjVBREI4QTcxOUU5MkMxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2kBu73wHjQXv/UGGHnaCq6tl BLIiL8xGDCHBMmB5Kj8G6Erxirer//LJbQ3OmEdcoySCbBD+ZMnZOy9s8/i0H8CY HMfXppCrYHPlW2mpfQcp94H8TebHA/SzNb7sCODxMvnijBnAuZL6y3+lgI4kVCR0 Hys8Ze7KAozUIYHyS9G731KMDwUe5a9ipMAHFvUsuJBs9UPr4emzenKbdeVl0Oz5 V5TcDXpu5hArYLTC6Uk7IFk+pAf3dBqCEsrUD1SlQcdvdhTWoHIvC/Ight0iiWDv YgQf+fQAGgzyFN8b54EHm/VW+RrkwjdNRpW6jAVVYwp9DCnIkXsjUkEdV4gbAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUpJUhRzIUq7djhcTSWtuKcZ6SwbEwHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0ODQwN2UzLTJjYjEtNGM2ZS04 YWViLTVlMGQzNTVlOGM5Ni8wLzM0MzUyZTMxMzIzNjJlMzQzMDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDM2MzQzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtfigwDQYJKoZIhvcN AQELBQADggEBAC07Ooi+XZnv6eyCwC93DnXC+g6iPceFwNmyOOVB77HN+qs/X96d vNNDF0qQryuhM3pz+pUwQvC0y9SDx6HhCaAUVJ6B8rlUa8XjCWJuWqJlG5hJDd9B Auh1ASmVTLsS1NwfyncobtplwUbfGsGub3sWfq6iDiL2Ic00SWJqFI+mbayY0x5j Y8VdKK/BgVqjwXmggVnbHp0jBZecKbcwCNZHLtmAZGM2Yz496RCW7TOUpO4Af7s5 fYpWunueYnCiAyAgnxKd/dbaTG5bm5O/vYcPdNQk0XT2pEJLi/mg3oo/UjZRG/Zc dWqUZS/7zU03IC0JLKMmqOcx/ABGkQJ6lV8= -----END CERTIFICATE-----Generated at Sun Nov 24 08:35:25 2024 by rpki-client on console-ams.rpki-client.org