$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa File: 3132312e3130302e302e302f32312d3234203d3e203338313538.roa (raw, json) Hash identifier: 4OEVR4t4JntmWKdQ2xyPFDAR1Dn2UjqhKWyVo8OVQ9Y= Subject key identifier: A7:82:F1:6E:7F:71:89:7F:1B:B8:88:54:BD:E8:FC:C7:E3:74:4D:C8 Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 4AFBE637661C4CFB63C7B22F6DE26D2C0D7995A5 Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa Signing time: Mon 01 Jul 2024 01:05:41 +0000 ROA not before: Mon 01 Jul 2024 01:00:41 +0000 ROA not after: Mon 30 Jun 2025 01:05:41 +0000 asID: 38158 IP address blocks: 121.100.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 10:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fb:e6:37:66:1c:4c:fb:63:c7:b2:2f:6d:e2:6d:2c:0d:79:95:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Jul 1 01:00:41 2024 GMT Not After : Jun 30 01:05:41 2025 GMT Subject: CN=A782F16E7F71897F1BB88854BDE8FCC7E3744DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:ac:d0:95:4e:14:6f:48:c9:37:72:fa:6f: 82:b4:6e:e3:89:31:ea:24:32:f2:ff:30:44:8e:8d: f3:50:fb:1e:67:a3:aa:d0:13:55:2d:f9:56:34:86: 83:43:07:73:b4:45:6d:2f:8e:a0:d6:f8:29:d0:72: 98:b0:42:2b:48:39:55:a0:1d:38:e3:ae:e1:b4:e8: 58:18:66:81:fa:aa:57:20:07:43:41:5a:3a:ec:a6: be:fe:e7:90:30:f6:82:c4:ef:26:25:e7:5e:fe:b0: 18:9c:d6:40:0e:1d:d1:e5:10:94:a6:3d:77:f1:c8: ca:3a:78:8c:ec:32:92:75:f5:4e:07:42:03:24:a9: ff:d7:34:75:88:38:75:87:26:c3:91:9f:fe:a6:7e: 89:50:90:40:bb:ca:be:77:1e:ea:10:2e:9b:a9:ed: 86:19:d7:37:c1:c2:0b:91:22:10:b6:b9:11:90:16: 36:91:b0:e6:e3:b3:fa:23:73:3b:d9:ba:d4:64:3b: df:d2:ba:de:7b:f4:32:21:56:a7:81:8c:53:11:a8: d6:b5:42:81:10:9e:dc:4a:4d:68:cb:44:de:cb:2a: d2:aa:fd:a6:ab:75:14:89:8f:e7:5b:68:67:1f:2f: 8d:6b:b0:2e:42:1c:ee:e4:9b:7f:75:d8:26:d7:34: e7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:82:F1:6E:7F:71:89:7F:1B:B8:88:54:BD:E8:FC:C7:E3:74:4D:C8 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.100.0.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:38:76:b1:a2:43:e2:de:0c:dc:c9:92:95:da:be:db:95:52: c5:94:90:24:35:95:93:fa:a9:cc:f8:76:27:71:01:46:7e:0b: a4:94:82:5f:6c:78:b5:0b:9b:fb:44:52:28:3c:82:ff:9b:93: b5:2e:14:6f:7b:8f:e4:ac:b9:52:2e:7a:6a:41:9c:01:57:c4: 5d:79:e0:dc:07:07:ee:42:20:80:f1:85:2c:1f:65:e5:a1:a0: bb:f0:91:de:6e:6b:49:d7:a2:20:b2:78:13:53:57:b7:bf:5f: 31:1b:e2:a5:13:69:02:37:63:ed:82:85:f7:92:e4:de:2b:8f: 62:b2:e1:3a:00:6c:4d:8a:5f:01:af:4f:ee:9a:10:13:58:ae: 57:1a:f0:92:96:2a:b7:e5:09:2f:17:86:55:e8:0c:be:6a:38: c4:31:58:9b:b5:98:6b:70:ad:b1:e4:ab:72:55:f4:46:b7:b1: 5f:82:03:fa:35:f1:e6:4f:26:29:37:ef:27:57:ca:8d:cc:48: 57:a2:7b:e1:4e:bf:9f:94:da:5a:b8:9a:f7:71:83:72:e1:5d: 5f:65:7f:e3:2b:1b:76:af:d7:a8:ce:ae:72:48:ac:ac:1a:be: 3c:19:18:79:84:40:88:32:69:91:52:5b:7d:0d:c4:94:d3:f6: 7a:98:2e:53 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSvvmN2YcTPtjx7IvbeJtLA15laUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yNDA3MDEwMTAwNDFaFw0yNTA2MzAwMTA1NDFaMDMxMTAvBgNV BAMTKEE3ODJGMTZFN0Y3MTg5N0YxQkI4ODg1NEJERThGQ0M3RTM3NDREQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/azQlU4Ub0jJN3L6b4K0buOJ MeokMvL/MESOjfNQ+x5no6rQE1Ut+VY0hoNDB3O0RW0vjqDW+CnQcpiwQitIOVWg HTjjruG06FgYZoH6qlcgB0NBWjrspr7+55Aw9oLE7yYl517+sBic1kAOHdHlEJSm PXfxyMo6eIzsMpJ19U4HQgMkqf/XNHWIOHWHJsORn/6mfolQkEC7yr53HuoQLpup 7YYZ1zfBwguRIhC2uRGQFjaRsObjs/ojczvZutRkO9/Sut579DIhVqeBjFMRqNa1 QoEQntxKTWjLRN7LKtKq/aardRSJj+dbaGcfL41rsC5CHO7km3912CbXNOdPAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUp4Lxbn9xiX8buIhUvej8x+N0TcgwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04 MGI3LTA2ZmMxMThkZjhlMi8wLzMxMzIzMTJlMzEzMDMwMmUzMDJlMzAyZjMyMzEy ZDMyMzQyMDNkM2UyMDMzMzgzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN5ZAAwDQYJKoZIhvcN AQELBQADggEBAI04drGiQ+LeDNzJkpXavtuVUsWUkCQ1lZP6qcz4didxAUZ+C6SU gl9seLULm/tEUig8gv+bk7UuFG97j+SsuVIuempBnAFXxF154NwHB+5CIIDxhSwf ZeWhoLvwkd5ua0nXoiCyeBNTV7e/XzEb4qUTaQI3Y+2ChfeS5N4rj2Ky4ToAbE2K XwGvT+6aEBNYrlca8JKWKrflCS8XhlXoDL5qOMQxWJu1mGtwrbHkq3JV9Ea3sV+C A/o18eZPJik37ydXyo3MSFeie+FOv5+U2lq4mvdxg3LhXV9lf+MrG3av16jOrnJI rKwavjwZGHmEQIgyaZFSW30NxJTT9nqYLlM= -----END CERTIFICATE-----Generated at Wed Nov 20 10:24:13 2024 by rpki-client on console-fra.rpki-client.org