$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32342d3234203d3e20313532303532.roa File: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (raw, json) Hash identifier: uwdYr6Vc4obI5UkZd3aysyOqaW/UmE8m3/nxpyz48I4= Subject key identifier: 1E:A1:F5:7D:BE:C8:A0:46:DE:28:4A:D8:D6:91:DD:A4:DF:DF:C4:99 Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 679011085CC397414B5C8B23ED87818EB5539DBD Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32342d3234203d3e20313532303532.roa Signing time: Fri 31 May 2024 13:55:51 +0000 ROA not before: Fri 31 May 2024 13:50:51 +0000 ROA not after: Fri 30 May 2025 13:55:51 +0000 asID: 152052 IP address blocks: 27.124.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:90:11:08:5c:c3:97:41:4b:5c:8b:23:ed:87:81:8e:b5:53:9d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: May 31 13:50:51 2024 GMT Not After : May 30 13:55:51 2025 GMT Subject: CN=1EA1F57DBEC8A046DE284AD8D691DDA4DFDFC499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9d:32:9c:44:35:9e:39:f6:cd:a6:2a:f3:bc: 2f:1e:bb:17:b9:3f:81:a4:38:21:3b:56:f6:66:2b: 93:3c:8d:7a:ee:b3:92:6d:b2:e3:1c:c7:2f:93:02: ab:5c:7b:44:15:c5:c4:68:e2:ae:94:3f:5f:a7:e8: d5:0e:e4:3a:88:b5:55:20:d0:2d:9c:86:e9:b5:b4: 00:fb:f1:61:af:50:a0:4d:1c:5f:ca:74:96:50:92: ff:e4:b0:6c:64:85:e6:e7:97:45:50:b0:ad:02:5f: ef:77:71:e0:38:e4:9b:7f:6c:98:9b:03:80:ef:4c: 56:f8:7e:da:24:15:15:c7:17:3f:f2:a7:93:ce:90: 3b:9e:e6:00:d8:8a:b9:d1:b8:4f:fc:4f:a5:5c:57: bf:02:97:5a:20:f7:3a:7f:6d:7c:70:a7:b6:3e:62: 8a:19:61:c3:1a:27:72:66:3e:40:95:6b:3d:c4:4b: c2:53:8c:93:a3:4b:45:b4:14:8d:69:68:82:80:93: b8:33:03:bb:5e:fe:ab:f6:8a:1d:1a:3c:a1:2e:54: 48:65:85:25:96:a2:34:1f:e2:f7:9a:27:f0:e3:05: 1b:f0:94:22:e2:fa:20:fc:83:fe:0d:95:5d:1e:d0: a5:58:38:c0:1d:f9:07:32:6c:4f:ec:34:47:67:02: 5a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:F5:7D:BE:C8:A0:46:DE:28:4A:D8:D6:91:DD:A4:DF:DF:C4:99 X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32342d3234203d3e20313532303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.74.0/24 Signature Algorithm: sha256WithRSAEncryption 84:e6:69:a3:a9:87:1e:7b:b4:d3:67:49:82:ff:ec:13:93:58: 05:cc:03:5a:83:74:98:18:f3:fb:f7:06:88:8a:49:62:57:a0: 62:40:f9:af:0f:96:0e:d6:d8:27:8c:13:12:ea:7b:43:d9:39: a1:bd:56:3d:39:99:0e:bd:6b:ab:89:e7:06:1e:b3:f0:aa:63: cd:a6:af:06:d5:10:09:c0:ed:94:9d:f0:cc:ec:83:e6:0c:f5: 60:98:0e:ee:26:a5:1b:63:8f:61:33:ac:9c:cc:ab:9e:b0:d1: cd:21:6f:62:98:86:3a:78:f1:f6:f9:f3:aa:0f:7e:2e:42:a3: 76:9f:1e:10:84:db:5b:30:6f:db:fa:ef:af:9d:75:54:e4:76: 8d:b6:3c:d8:08:ba:8e:f4:0f:27:24:f7:18:86:84:d2:d5:20: 93:c4:3d:96:c0:06:d1:aa:27:5a:25:17:bc:e4:c2:80:17:c9: c8:67:a7:ba:1e:9b:6b:f4:dd:ae:a9:cd:2a:7d:f2:27:69:95: 3c:c2:c1:cf:1c:33:79:ca:fd:c6:ef:89:ca:14:a6:45:2f:5c: 36:30:7e:38:9c:5a:1d:77:6a:da:9a:f3:d5:82:0f:d6:fd:98: 0e:b7:0f:d6:62:3f:20:19:fc:20:2c:6c:54:f0:93:58:99:fd: 76:d6:eb:7d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZ5ARCFzDl0FLXIsj7YeBjrVTnb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNDA1MzExMzUwNTFaFw0yNTA1MzAxMzU1NTFaMDMxMTAvBgNV BAMTKDFFQTFGNTdEQkVDOEEwNDZERTI4NEFEOEQ2OTFEREE0REZERkM0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7nTKcRDWeOfbNpirzvC8euxe5 P4GkOCE7VvZmK5M8jXrus5JtsuMcxy+TAqtce0QVxcRo4q6UP1+n6NUO5DqItVUg 0C2chum1tAD78WGvUKBNHF/KdJZQkv/ksGxkhebnl0VQsK0CX+93ceA45Jt/bJib A4DvTFb4ftokFRXHFz/yp5POkDue5gDYirnRuE/8T6VcV78Cl1og9zp/bXxwp7Y+ YooZYcMaJ3JmPkCVaz3ES8JTjJOjS0W0FI1paIKAk7gzA7te/qv2ih0aPKEuVEhl hSWWojQf4veaJ/DjBRvwlCLi+iD8g/4NlV0e0KVYOMAd+QcybE/sNEdnAlqrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHqH1fb7IoEbeKErY1pHdpN/fxJkwHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkYWY5ZjBmLTRmYjEtNDBjMC1i MzgwLTU5YTM4ZGJjOWExNi8wLzMyMzcyZTMxMzIzNDJlMzczNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABt8SjANBgkqhkiG 9w0BAQsFAAOCAQEAhOZpo6mHHnu002dJgv/sE5NYBcwDWoN0mBjz+/cGiIpJYleg YkD5rw+WDtbYJ4wTEup7Q9k5ob1WPTmZDr1rq4nnBh6z8KpjzaavBtUQCcDtlJ3w zOyD5gz1YJgO7ialG2OPYTOsnMyrnrDRzSFvYpiGOnjx9vnzqg9+LkKjdp8eEITb WzBv2/rvr511VOR2jbY82Ai6jvQPJyT3GIaE0tUgk8Q9lsAG0aonWiUXvOTCgBfJ yGenuh6ba/TdrqnNKn3yJ2mVPMLBzxwzecr9xu+JyhSmRS9cNjB+OJxaHXdq2prz 1YIP1v2YDrcP1mI/IBn8ICxsVPCTWJn9dtbrfQ== -----END CERTIFICATE-----Generated at Sat Jun 29 20:37:01 2024 by rpki-client on console-ams.rpki-client.org