$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32342d3234203d3e203633383633.roa File: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (raw, json) Hash identifier: FLXPGBJ4Siq1VvBVIqzQdgs5xnGBom5EjCtqarg0Eqk= Subject key identifier: 96:94:4F:54:7D:C1:95:27:30:29:77:23:F0:E1:19:94:2B:C1:8E:D4 Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5 Certificate serial: 39CFAF107640DA9B985B86B835148476B2712038 Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32342d3234203d3e203633383633.roa Signing time: Mon 23 Sep 2024 08:05:08 +0000 ROA not before: Mon 23 Sep 2024 08:00:08 +0000 ROA not after: Mon 22 Sep 2025 08:05:08 +0000 asID: 63863 IP address blocks: 157.66.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 08:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cf:af:10:76:40:da:9b:98:5b:86:b8:35:14:84:76:b2:71:20:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5 Validity Not Before: Sep 23 08:00:08 2024 GMT Not After : Sep 22 08:05:08 2025 GMT Subject: CN=96944F547DC1952730297723F0E119942BC18ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:9a:67:48:9c:8d:38:d5:89:c5:4f:a2:75: 2b:d5:87:c4:91:07:29:41:85:9e:99:84:48:70:76: 8c:a4:ae:0d:76:55:f0:0c:5c:f6:f3:c6:d2:a8:ad: aa:f9:80:76:e1:71:3b:4e:ec:84:68:af:95:d6:f4: f0:8d:ee:23:58:40:a1:bd:3f:1a:8d:82:e8:bc:7b: 3e:5b:20:5a:5d:42:9c:00:24:a3:6c:ba:87:bc:a5: aa:6f:cb:a6:20:19:6a:37:7b:ab:ae:e6:50:40:47: d0:e8:77:c8:3f:c8:98:0e:61:6e:cf:8e:88:bc:21: b5:2c:2a:69:96:37:33:94:7f:a6:59:58:ce:c5:95: a4:75:19:b6:c9:3d:b4:7f:19:16:c6:bc:10:d0:35: 9b:33:ec:0f:1a:93:05:24:34:53:ee:66:43:7f:f7: 68:ee:ed:6d:d5:8b:0a:d8:19:a2:40:38:1c:c0:85: 15:99:a0:7d:af:4b:6f:fb:be:88:ee:5c:c1:d2:a2: e3:3c:56:d3:9a:60:9e:7a:f0:b5:3a:f3:53:59:47: 25:bd:c2:c7:29:ae:7c:f9:33:c6:a0:61:17:01:96: d0:12:f1:d8:62:2f:6e:65:0b:75:7e:50:aa:7b:48: ae:86:1f:49:a9:2a:02:69:96:4b:2f:ae:60:a4:25: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:94:4F:54:7D:C1:95:27:30:29:77:23:F0:E1:19:94:2B:C1:8E:D4 X509v3 Authority Key Identifier: keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32342d3234203d3e203633383633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.58.0/24 Signature Algorithm: sha256WithRSAEncryption 88:df:94:2b:51:fe:14:e8:aa:ac:4f:82:41:63:a6:41:13:5b: 56:fd:4e:a4:07:81:5a:33:c9:be:4d:76:7a:d6:aa:86:50:95: 53:3e:09:ac:60:91:94:3e:c3:27:d5:fe:60:0b:c9:3e:d9:90: 4e:9e:61:31:2e:a8:e3:d4:48:a8:68:15:f8:41:ac:3f:55:55: 7c:e2:84:de:33:54:25:4a:f2:02:49:b8:b7:61:15:09:c2:2a: f2:ea:95:2e:90:b1:81:e6:1a:49:3a:c5:3a:14:3a:f0:54:e9: cf:10:bd:11:40:2a:a3:da:f9:6f:67:2f:65:cd:d7:fb:fe:9a: 3e:c7:db:d1:01:c0:00:30:50:26:f2:83:75:4d:ef:81:05:62: 05:96:bf:04:46:24:cf:44:a2:f7:cf:3a:20:1e:a0:d7:fc:a5: b4:9f:b3:9d:0b:9d:b6:c7:aa:af:57:72:2c:4a:5e:ad:10:c3: db:bc:2c:4c:14:0f:1a:dd:cc:e5:48:82:21:96:4d:4a:22:e4: 7f:c8:57:02:3a:de:10:2f:88:43:16:75:60:b3:6b:5b:00:ae: a1:9c:fd:0b:37:8c:e7:46:a7:dd:f3:02:2a:94:bc:86:4e:a0: 15:66:c5:47:55:23:e5:02:82:66:11:99:d0:be:aa:62:b5:3b: 68:12:c4:f0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUOc+vEHZA2puYW4a4NRSEdrJxIDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENG NzhFODdFNTAeFw0yNDA5MjMwODAwMDhaFw0yNTA5MjIwODA1MDhaMDMxMTAvBgNV BAMTKDk2OTQ0RjU0N0RDMTk1MjczMDI5NzcyM0YwRTExOTk0MkJDMThFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gppnSJyNONWJxU+idSvVh8SR BylBhZ6ZhEhwdoykrg12VfAMXPbzxtKorar5gHbhcTtO7IRor5XW9PCN7iNYQKG9 PxqNgui8ez5bIFpdQpwAJKNsuoe8papvy6YgGWo3e6uu5lBAR9Dod8g/yJgOYW7P joi8IbUsKmmWNzOUf6ZZWM7FlaR1GbbJPbR/GRbGvBDQNZsz7A8akwUkNFPuZkN/ 92ju7W3ViwrYGaJAOBzAhRWZoH2vS2/7vojuXMHSouM8VtOaYJ568LU681NZRyW9 wscprnz5M8agYRcBltAS8dhiL25lC3V+UKp7SK6GH0mpKgJplksvrmCkJZwNAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUlpRPVH3BlScwKXcj8OEZlCvBjtQwHwYDVR0j BBgwFoAUFFhWaI1Y7rZz5ZzALSERTPeOh+UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmIwNWYzNi1lMTc0LTRkYWQtYmMyYS0wODkyNmM1ZGQwNDYvMC8xNDU4NTY2ODhE NThFRUI2NzNFNTlDQzAyRDIxMTE0Q0Y3OEU4N0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENGNzhF ODdFNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2YjA1ZjM2LWUxNzQtNGRhZC1i YzJhLTA4OTI2YzVkZDA0Ni8wLzMxMzUzNzJlMzYzNjJlMzUzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdQjowDQYJKoZIhvcN AQELBQADggEBAIjflCtR/hToqqxPgkFjpkETW1b9TqQHgVozyb5NdnrWqoZQlVM+ CaxgkZQ+wyfV/mALyT7ZkE6eYTEuqOPUSKhoFfhBrD9VVXzihN4zVCVK8gJJuLdh FQnCKvLqlS6QsYHmGkk6xToUOvBU6c8QvRFAKqPa+W9nL2XN1/v+mj7H29EBwAAw UCbyg3VN74EFYgWWvwRGJM9EovfPOiAeoNf8pbSfs50LnbbHqq9XcixKXq0Qw9u8 LEwUDxrdzOVIgiGWTUoi5H/IVwI63hAviEMWdWCza1sArqGc/Qs3jOdGp93zAiqU vIZOoBVmxUdVI+UCgmYRmdC+qmK1O2gSxPA= -----END CERTIFICATE-----Generated at Mon Nov 25 04:52:35 2024 by rpki-client on console-fra.rpki-client.org