$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa File: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: H7qdxG0CJs/yYiQYilPVBOjCY0BNB2JobVkWTO7DC7g= Subject key identifier: FE:29:78:3C:9E:A8:08:4C:81:79:F1:FC:8B:B3:95:84:2E:DB:C3:7D Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 101C85850D062090C06C607E1C707C8CCA87A26A Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa Signing time: Mon 01 Jul 2024 01:05:28 +0000 ROA not before: Mon 01 Jul 2024 01:00:28 +0000 ROA not after: Mon 30 Jun 2025 01:05:28 +0000 asID: 58477 IP address blocks: 45.64.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1c:85:85:0d:06:20:90:c0:6c:60:7e:1c:70:7c:8c:ca:87:a2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jul 1 01:00:28 2024 GMT Not After : Jun 30 01:05:28 2025 GMT Subject: CN=FE29783C9EA8084C8179F1FC8BB395842EDBC37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:12:c6:d9:ec:12:41:17:47:a4:78:0c:f2:26: 5d:b7:db:0a:b6:8c:1b:c2:ec:a4:0d:78:c1:61:41: 99:f6:4a:a7:8e:d8:66:b3:85:d6:c5:89:1a:f4:ce: 2e:bd:92:12:ee:b7:ae:b6:a8:4f:e6:40:b6:b9:33: 02:7e:76:d9:c6:13:1c:6b:64:7c:64:ec:9d:0b:1e: a6:dd:81:42:7a:38:3c:41:e8:48:24:bc:08:08:f3: b5:ca:1e:2d:30:66:33:0c:ee:fb:83:4b:80:0d:30: 18:4b:4d:f9:fb:68:3e:d5:1b:ff:d7:7a:98:7e:86: e6:d9:bd:fd:8b:5f:0b:7c:c8:9d:06:e4:68:4a:d0: 6a:05:dc:ec:5d:1c:60:7a:40:69:e9:b9:fb:81:96: 75:fe:76:6c:44:05:02:5e:45:98:72:5b:03:d6:f5: 9d:5d:1b:57:0d:c2:d9:ec:c1:6c:7d:2a:fa:70:1b: 81:9a:e5:fb:5e:e9:5f:f4:21:6e:d5:c9:a1:1e:e5: 7e:07:e2:cf:22:86:51:68:ac:12:bd:d7:fb:32:61: ed:22:ae:a3:8b:b9:1f:e6:89:34:65:49:d3:2b:08: f8:7e:f8:20:23:4f:9a:74:51:70:34:5f:29:bf:2e: 2d:49:94:dc:71:bb:47:1b:56:71:ec:e1:a9:7d:74: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:29:78:3C:9E:A8:08:4C:81:79:F1:FC:8B:B3:95:84:2E:DB:C3:7D X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.99.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:a7:b5:2f:b2:7b:17:8b:93:b7:72:02:37:f0:23:47:7c:31: 43:96:5b:24:c7:b2:62:12:3c:95:09:7c:80:42:fa:34:50:3b: fd:cd:d5:7f:11:35:39:75:08:da:c6:7b:f4:63:13:fe:84:5b: 57:a7:f7:78:a7:4c:31:46:48:eb:15:98:81:69:58:c6:2b:a2: 56:23:7c:66:1b:9e:1a:13:f8:8b:d7:a5:c1:1f:a7:8f:17:dc: e1:f7:5a:af:3a:59:94:92:93:68:ed:95:37:07:d8:67:eb:a5: c8:b0:24:c0:af:f0:3c:7a:02:61:0a:f3:d6:66:fc:85:6a:19: 60:4c:b6:25:99:28:ca:b6:52:24:2b:e8:ac:9b:44:62:76:36: ef:a9:1a:2e:fd:a7:9f:75:dd:0c:0a:4e:fd:ea:fe:87:eb:ea: 22:60:f5:eb:50:d6:0d:45:7f:5b:1f:bc:cd:f8:c4:b4:38:50: 2a:71:4e:bf:26:34:0c:60:ef:ad:d6:fb:45:1b:24:32:26:74: d7:ad:53:29:d1:48:4e:1d:a6:f1:dc:31:48:eb:ef:f4:5d:e2: fa:54:e3:2c:26:bd:35:30:cb:aa:84:71:aa:95:70:e9:58:c5: 48:b3:7a:64:5d:f9:ba:b0:f8:55:aa:6d:33:cf:d2:dc:04:88: c8:bb:21:ff -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUEByFhQ0GIJDAbGB+HHB8jMqHomowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yNDA3MDEwMTAwMjhaFw0yNTA2MzAwMTA1MjhaMDMxMTAvBgNV BAMTKEZFMjk3ODNDOUVBODA4NEM4MTc5RjFGQzhCQjM5NTg0MkVEQkMzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkEsbZ7BJBF0ekeAzyJl232wq2 jBvC7KQNeMFhQZn2SqeO2GazhdbFiRr0zi69khLut662qE/mQLa5MwJ+dtnGExxr ZHxk7J0LHqbdgUJ6ODxB6EgkvAgI87XKHi0wZjMM7vuDS4ANMBhLTfn7aD7VG//X eph+hubZvf2LXwt8yJ0G5GhK0GoF3OxdHGB6QGnpufuBlnX+dmxEBQJeRZhyWwPW 9Z1dG1cNwtnswWx9KvpwG4Ga5fte6V/0IW7VyaEe5X4H4s8ihlForBK91/syYe0i rqOLuR/miTRlSdMrCPh++CAjT5p0UXA0Xym/Li1JlNxxu0cbVnHs4al9dI9VAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU/il4PJ6oCEyBefH8i7OVhC7bw30wHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvMzQzNTJlMzYzNDJlMzkzOTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtQGMwDQYJKoZIhvcNAQEL BQADggEBAB6ntS+yexeLk7dyAjfwI0d8MUOWWyTHsmISPJUJfIBC+jRQO/3N1X8R NTl1CNrGe/RjE/6EW1en93inTDFGSOsVmIFpWMYrolYjfGYbnhoT+IvXpcEfp48X 3OH3Wq86WZSSk2jtlTcH2GfrpciwJMCv8Dx6AmEK89Zm/IVqGWBMtiWZKMq2UiQr 6KybRGJ2Nu+pGi79p5913QwKTv3q/ofr6iJg9etQ1g1Ff1sfvM34xLQ4UCpxTr8m NAxg763W+0UbJDImdNetUynRSE4dpvHcMUjr7/Rd4vpU4ywmvTUwy6qEcaqVcOlY xUizemRd+bqw+FWqbTPP0twEiMi7If8= -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org