$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa File: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (raw, json) Hash identifier: jq0e805LfMnkdfWLKacSRG7Ij32XtfUPAgDbV/aAs+8= Subject key identifier: 25:20:8B:81:23:28:EE:48:CF:C1:00:65:87:C6:32:A9:2B:6D:40:52 Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766 Certificate serial: 5940C2736A66E9B658E64F74F10D1A5F7FB61993 Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa Signing time: Sun 02 Jun 2024 04:00:01 +0000 ROA not before: Sun 02 Jun 2024 03:55:01 +0000 ROA not after: Sun 01 Jun 2025 04:00:01 +0000 asID: 18004 IP address blocks: 115.178.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:40:c2:73:6a:66:e9:b6:58:e6:4f:74:f1:0d:1a:5f:7f:b6:19:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766 Validity Not Before: Jun 2 03:55:01 2024 GMT Not After : Jun 1 04:00:01 2025 GMT Subject: CN=25208B812328EE48CFC1006587C632A92B6D4052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:bf:85:33:f5:8f:56:c3:0d:39:e2:44:31: 2c:65:54:ba:c8:0c:25:33:12:d4:54:2b:b1:a6:04: 2b:68:7d:2f:6f:f3:50:cc:c5:0e:c8:84:04:ec:04: 88:fe:85:05:72:85:ac:dd:17:d3:5c:32:47:7d:ed: 81:5e:20:0e:04:2f:27:b2:b1:6d:e3:94:87:24:80: a7:99:29:87:ae:f9:c9:9f:fe:b9:66:e3:59:9a:b5: bf:82:ec:c6:51:77:14:21:27:aa:c6:42:41:27:1a: 8e:bd:13:79:99:e0:ee:9e:65:60:c7:dc:ec:66:44: fd:ee:5b:47:db:71:e4:89:76:17:e6:e4:8e:6a:ae: 80:a9:a2:10:ec:46:ab:41:e6:f3:3c:e5:7e:51:5c: ba:2f:dd:be:0f:fb:39:83:e2:dc:90:ba:8d:72:a7: f5:ed:5e:a0:15:af:97:72:b9:9e:86:c0:c1:fc:1b: 39:b2:a1:8d:47:a0:a3:cc:5d:95:92:62:08:91:97: a5:40:1c:8d:e5:79:7e:d4:8e:0b:c4:4d:37:5b:55: a4:a6:8a:21:80:10:09:e3:bd:d6:45:10:3e:35:98: 1f:e3:75:42:55:f5:30:72:54:43:60:67:b6:4c:94: 55:62:1e:6f:d8:51:cf:6e:3a:5d:0b:90:41:8a:12: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:20:8B:81:23:28:EE:48:CF:C1:00:65:87:C6:32:A9:2B:6D:40:52 X509v3 Authority Key Identifier: keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.224.0/19 Signature Algorithm: sha256WithRSAEncryption 42:cc:91:e0:73:24:e4:fa:bc:b2:cf:e7:71:41:36:b2:97:a0: 7c:84:a8:f5:8c:01:f7:85:da:fd:0e:0b:9e:0b:e3:a6:51:3e: 95:cb:1f:44:66:a5:6b:1a:0d:90:f1:c6:d0:8f:58:d4:8e:16: 23:f8:0a:f4:08:a3:b7:66:1f:03:a7:c1:f2:a7:5e:e8:c7:56: a9:36:bd:72:78:d8:c3:bf:ca:bc:16:0c:1f:ca:df:93:73:4e: 44:4e:2f:9b:47:ae:18:75:6f:5f:f1:29:3b:b3:b6:64:f3:89: 07:ab:ee:4d:4b:82:97:d2:a9:8f:57:aa:36:c3:b4:50:ea:29: d4:86:9f:80:e5:c1:b5:dc:da:cb:a8:db:2d:d9:dc:71:56:a5: af:90:9b:f7:67:ef:41:5c:ec:fa:2b:ef:9b:bf:11:fa:a3:9f: b6:fd:6f:08:83:2c:cf:76:a0:b6:a7:0c:3b:ef:2f:70:d9:ee: 24:a1:0f:ba:3e:6e:7e:fa:56:bd:07:36:9f:46:2f:66:3f:74: d2:92:6a:4e:2d:58:5d:4e:f8:18:07:02:66:d0:d8:65:b2:99: ef:02:22:dd:8d:67:85:c8:f1:c1:d1:4b:67:b1:c7:73:f4:72: d7:34:95:38:d1:a5:5c:4d:5c:2e:b3:1e:3e:48:82:4f:45:bb: 16:78:70:7e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWUDCc2pm6bZY5k908Q0aX3+2GZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFG M0IxOTc2NjAeFw0yNDA2MDIwMzU1MDFaFw0yNTA2MDEwNDAwMDFaMDMxMTAvBgNV BAMTKDI1MjA4QjgxMjMyOEVFNDhDRkMxMDA2NTg3QzYzMkE5MkI2RDQwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wb+FM/WPVsMNOeJEMSxlVLrI DCUzEtRUK7GmBCtofS9v81DMxQ7IhATsBIj+hQVyhazdF9NcMkd97YFeIA4ELyey sW3jlIckgKeZKYeu+cmf/rlm41matb+C7MZRdxQhJ6rGQkEnGo69E3mZ4O6eZWDH 3OxmRP3uW0fbceSJdhfm5I5qroCpohDsRqtB5vM85X5RXLov3b4P+zmD4tyQuo1y p/XtXqAVr5dyuZ6GwMH8GzmyoY1HoKPMXZWSYgiRl6VAHI3leX7UjgvETTdbVaSm iiGAEAnjvdZFED41mB/jdUJV9TByVENgZ7ZMlFViHm/YUc9uOl0LkEGKEtobAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJSCLgSMo7kjPwQBlh8YyqSttQFIwHwYDVR0j BBgwFoAUc12HuoZ3OscBN89TEWNYofOxl2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC83MzVEODdCQTg2 NzczQUM3MDEzN0NGNTMxMTYzNThBMUYzQjE5NzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFGM0Ix OTc2Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRhLWRhMGItNDU0MC05 MzQ5LTU5MzBiZDcyNWNlMy8wLzMxMzEzNTJlMzEzNzM4MmUzMjMyMzQyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzMTM4MzAzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFc7LgMA0GCSqG SIb3DQEBCwUAA4IBAQBCzJHgcyTk+ryyz+dxQTayl6B8hKj1jAH3hdr9DgueC+Om UT6Vyx9EZqVrGg2Q8cbQj1jUjhYj+Ar0CKO3Zh8Dp8Hyp17ox1apNr1yeNjDv8q8 Fgwfyt+Tc05ETi+bR64YdW9f8Sk7s7Zk84kHq+5NS4KX0qmPV6o2w7RQ6inUhp+A 5cG13NrLqNst2dxxVqWvkJv3Z+9BXOz6K++bvxH6o5+2/W8IgyzPdqC2pww77y9w 2e4koQ+6Pm5++la9BzafRi9mP3TSkmpOLVhdTvgYBwJm0NhlspnvAiLdjWeFyPHB 0Utnscdz9HLXNJU40aVcTVwusx4+SIJPRbsWeHB+ -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org