$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39362e302f32342d3234203d3e203538343737.roa File: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: Gk747J2jBNpEXtir02tl58RV5f1YzhrWN3iKgxbQ7KE= Subject key identifier: 24:35:0C:7A:7F:9C:12:35:B0:FB:1C:A7:51:76:28:C4:6E:54:71:1A Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 5F2F3975D63A7D4B285EA4ADB32BD0F3385ED85C Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39362e302f32342d3234203d3e203538343737.roa Signing time: Mon 01 Jul 2024 01:05:27 +0000 ROA not before: Mon 01 Jul 2024 01:00:27 +0000 ROA not after: Mon 30 Jun 2025 01:05:27 +0000 asID: 58477 IP address blocks: 45.64.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2f:39:75:d6:3a:7d:4b:28:5e:a4:ad:b3:2b:d0:f3:38:5e:d8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jul 1 01:00:27 2024 GMT Not After : Jun 30 01:05:27 2025 GMT Subject: CN=24350C7A7F9C1235B0FB1CA7517628C46E54711A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:06:bb:ff:6e:75:7e:03:e2:ab:27:6f:6d: d0:75:60:2f:97:3a:f3:7b:b7:34:b9:aa:8d:35:2b: 1e:87:31:73:b3:b4:a1:e7:27:ad:06:f2:a7:ba:6d: 6c:ee:ed:50:77:70:d4:19:cb:70:38:5c:db:37:11: ce:15:87:aa:1e:52:52:2e:9f:76:1c:c2:05:3b:37: 99:9d:91:82:a7:5a:d2:c2:82:c7:e0:77:95:5c:6a: d1:8f:69:e9:22:32:84:9f:26:c0:37:bc:49:2c:2a: d8:1f:dd:07:39:4d:c3:f3:78:a9:c0:b8:9a:e4:7b: 5f:59:b7:1a:65:b1:b2:e0:1b:b5:6e:5d:86:0a:cb: b8:3e:92:13:85:d4:54:a2:d3:8a:7c:48:60:de:67: 04:a1:54:a8:ed:f8:35:42:34:9c:8c:28:20:69:28: 0f:d5:a2:7a:94:fc:01:e3:1b:71:7f:35:a3:87:ca: 34:54:20:7a:aa:5b:34:8d:65:fc:33:e0:b0:04:d3: 3a:d8:a9:b7:0a:48:57:c2:23:1e:04:99:2b:02:a3: bb:ac:90:d7:22:fb:f3:76:5c:72:58:e2:93:43:c8: f5:eb:45:5e:b4:65:be:cc:e7:b6:52:3b:09:1f:00: 27:db:2e:b0:dd:80:6d:75:16:05:df:77:57:73:6c: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:35:0C:7A:7F:9C:12:35:B0:FB:1C:A7:51:76:28:C4:6E:54:71:1A X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39362e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.96.0/24 Signature Algorithm: sha256WithRSAEncryption 53:dc:73:f4:05:ce:e7:18:10:df:e5:2a:ab:41:31:32:9c:32: 12:21:d4:6c:5d:d8:86:1f:93:3b:94:97:80:5a:00:34:d0:f6: 49:4b:e9:81:3c:da:b2:0d:c1:f2:a4:c7:b1:52:98:d6:15:ce: 9a:27:d7:08:7b:d7:88:bc:fc:b1:53:05:cb:0b:63:2a:90:e9: f1:74:42:b4:2f:d8:77:b8:e3:de:f8:8c:ed:a4:21:21:20:b4: d0:57:9e:91:2b:1e:0d:7c:84:f0:75:f3:dc:1a:56:74:00:91: 71:d6:cb:4b:43:54:17:3d:b6:25:e7:60:2a:1f:7e:f2:b8:aa: 8f:46:4b:ea:af:22:6b:70:3c:9b:28:88:f9:fe:32:36:c4:2c: 9c:d7:78:f1:bc:31:97:fc:b3:c1:2b:d3:40:3f:71:34:4f:c5: 93:19:17:f6:13:86:db:f8:51:ad:56:62:cd:09:b8:cb:92:03: 91:20:e6:d6:27:e9:d8:ce:f4:b7:02:6c:f1:56:6e:f0:e9:2a: b2:19:89:52:86:69:1f:47:99:79:60:96:a2:47:61:8d:c3:c2: 82:a2:72:dc:d5:72:b2:c2:e0:83:3a:10:5d:c7:e4:ba:b7:42: bc:dd:75:44:f6:74:54:e9:ec:2c:96:ae:d1:21:6f:cb:eb:2c: f8:77:f3:f1 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUXy85ddY6fUsoXqStsyvQ8zhe2FwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yNDA3MDEwMTAwMjdaFw0yNTA2MzAwMTA1MjdaMDMxMTAvBgNV BAMTKDI0MzUwQzdBN0Y5QzEyMzVCMEZCMUNBNzUxNzYyOEM0NkU1NDcxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rga7/251fgPiqydvbdB1YC+X OvN7tzS5qo01Kx6HMXOztKHnJ60G8qe6bWzu7VB3cNQZy3A4XNs3Ec4Vh6oeUlIu n3YcwgU7N5mdkYKnWtLCgsfgd5VcatGPaekiMoSfJsA3vEksKtgf3Qc5TcPzeKnA uJrke19ZtxplsbLgG7VuXYYKy7g+khOF1FSi04p8SGDeZwShVKjt+DVCNJyMKCBp KA/VonqU/AHjG3F/NaOHyjRUIHqqWzSNZfwz4LAE0zrYqbcKSFfCIx4EmSsCo7us kNci+/N2XHJY4pNDyPXrRV60Zb7M57ZSOwkfACfbLrDdgG11FgXfd1dzbDBJAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUJDUMen+cEjWw+xynUXYoxG5UcRowHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvMzQzNTJlMzYzNDJlMzkzNjJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtQGAwDQYJKoZIhvcNAQEL BQADggEBAFPcc/QFzucYEN/lKqtBMTKcMhIh1Gxd2IYfkzuUl4BaADTQ9klL6YE8 2rINwfKkx7FSmNYVzpon1wh714i8/LFTBcsLYyqQ6fF0QrQv2He44974jO2kISEg tNBXnpErHg18hPB189waVnQAkXHWy0tDVBc9tiXnYCoffvK4qo9GS+qvImtwPJso iPn+MjbELJzXePG8MZf8s8Er00A/cTRPxZMZF/YThtv4Ua1WYs0JuMuSA5Eg5tYn 6djO9LcCbPFWbvDpKrIZiVKGaR9HmXlglqJHYY3DwoKictzVcrLC4IM6EF3H5Lq3 QrzddUT2dFTp7CyWrtEhb8vrLPh38/E= -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org