$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa File: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (raw, json) Hash identifier: SnVzmW28Qau3350GHvbjUPG7RqP7p+g79S8zzI64Aww= Subject key identifier: EA:C9:12:9D:7C:22:2A:94:6B:B0:F4:16:B3:71:25:D3:E3:E1:68:41 Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Certificate serial: 5849C93DA742D8D6ED492DD665D1DC13BA42114E Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa Signing time: Thu 17 Oct 2024 01:39:02 +0000 ROA not before: Thu 17 Oct 2024 01:34:02 +0000 ROA not after: Thu 16 Oct 2025 01:39:02 +0000 asID: 152069 IP address blocks: 150.242.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:49:c9:3d:a7:42:d8:d6:ed:49:2d:d6:65:d1:dc:13:ba:42:11:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Validity Not Before: Oct 17 01:34:02 2024 GMT Not After : Oct 16 01:39:02 2025 GMT Subject: CN=EAC9129D7C222A946BB0F416B37125D3E3E16841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:c2:e1:f6:35:67:45:fe:e8:5a:d0:22:76: 53:fe:c4:33:f2:d3:bd:44:5e:42:1f:9d:f2:81:cf: 8c:7e:15:07:93:80:7d:3e:37:cd:06:f5:e0:ac:bd: 6e:46:54:91:c2:bc:02:a4:29:07:5b:8e:c3:aa:f6: 39:09:57:84:a1:65:a0:eb:b6:13:77:e2:d2:f0:38: c1:04:d8:1c:aa:bb:d2:99:19:a8:29:00:69:d0:cd: 22:ad:00:3f:0f:89:85:7c:df:67:b7:2e:7c:60:d2: 8e:89:25:5d:71:8a:70:45:34:36:be:43:59:e0:43: 67:af:d4:0a:ac:08:5c:8d:97:21:15:4f:5a:86:9c: a5:86:c9:e7:fb:81:5e:93:73:b4:a0:d3:ab:ec:c5: 3d:48:75:38:1e:54:f2:c1:47:81:50:ab:a6:1d:0e: 60:39:2f:0e:57:91:66:fa:fe:fa:4a:66:71:63:87: b8:fd:bf:1f:8c:26:4d:8b:f5:e8:68:40:c3:cd:2b: bb:65:10:6b:fb:b9:da:65:32:bc:05:95:68:2e:b0: 0c:6a:81:e1:bf:5d:fa:0a:18:4e:e1:59:47:60:35: 7e:27:d5:f6:ff:ae:a3:6c:ea:d5:04:f0:87:33:58: b6:6e:ee:33:04:29:2a:5b:ae:4a:64:f7:fc:70:fd: 55:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C9:12:9D:7C:22:2A:94:6B:B0:F4:16:B3:71:25:D3:E3:E1:68:41 X509v3 Authority Key Identifier: keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.176.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:9e:17:ce:6c:d0:7c:86:0d:ee:6f:ea:f0:33:a6:12:2f:71: c4:cb:3f:72:53:6b:80:04:83:f1:13:6d:ec:cf:59:2b:04:be: 72:da:5b:75:13:3b:0a:30:09:54:da:db:be:1c:d5:f2:01:9c: 67:4d:72:fd:02:81:f3:57:7d:a0:b6:18:f7:0d:a3:42:c8:52: 90:de:1b:4e:83:3c:b9:c0:b2:cd:f9:83:89:59:2d:fc:aa:60: 17:37:d3:00:76:5a:13:15:c7:79:31:05:37:d2:86:9b:93:fd: 87:18:fc:64:4d:e2:07:06:4c:12:10:a3:65:29:02:bc:38:77: 02:0f:99:15:55:85:2f:d0:20:88:90:c5:7d:20:a3:b3:53:5b: bb:9e:62:50:96:92:94:7f:b7:1d:17:e3:ab:22:db:58:c6:08: f6:45:e3:ac:ca:26:a4:7c:fb:e3:8b:17:af:a4:dd:ee:27:82: ae:fa:49:60:b3:7b:23:3d:7e:be:5d:82:00:be:f5:d4:45:87: dd:81:c8:41:67:53:bb:bd:f0:c2:9c:d3:22:5c:67:5c:07:d4: 36:95:c3:03:f9:5f:c7:3c:70:b8:a1:57:60:ac:f1:9e:cf:72: f1:0d:56:51:3f:e7:f9:32:65:90:c0:8b:0d:48:af:93:3c:24: 3c:ef:60:2f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWEnJPadC2NbtSS3WZdHcE7pCEU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC RjdCN0NGNDAeFw0yNDEwMTcwMTM0MDJaFw0yNTEwMTYwMTM5MDJaMDMxMTAvBgNV BAMTKEVBQzkxMjlEN0MyMjJBOTQ2QkIwRjQxNkIzNzEyNUQzRTNFMTY4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OsLh9jVnRf7oWtAidlP+xDPy 071EXkIfnfKBz4x+FQeTgH0+N80G9eCsvW5GVJHCvAKkKQdbjsOq9jkJV4ShZaDr thN34tLwOMEE2Byqu9KZGagpAGnQzSKtAD8PiYV832e3Lnxg0o6JJV1xinBFNDa+ Q1ngQ2ev1AqsCFyNlyEVT1qGnKWGyef7gV6Tc7Sg06vsxT1IdTgeVPLBR4FQq6Yd DmA5Lw5XkWb6/vpKZnFjh7j9vx+MJk2L9ehoQMPNK7tlEGv7udplMrwFlWgusAxq geG/XfoKGE7hWUdgNX4n1fb/rqNs6tUE8IczWLZu7jMEKSpbrkpk9/xw/VWDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU6skSnXwiKpRrsPQWs3El0+PhaEEwHwYDVR0j BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC N0NGNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3YzA1NTIxLTAzMzgtNGYzMS1h MjA5LTRmODc4YmVmNjM4YS8wLzMxMzUzMDJlMzIzNDMyMmUzMTM3MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMDM2Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACW8rAwDQYJ KoZIhvcNAQELBQADggEBAB2eF85s0HyGDe5v6vAzphIvccTLP3JTa4AEg/ETbezP WSsEvnLaW3UTOwowCVTa274c1fIBnGdNcv0CgfNXfaC2GPcNo0LIUpDeG06DPLnA ss35g4lZLfyqYBc30wB2WhMVx3kxBTfShpuT/YcY/GRN4gcGTBIQo2UpArw4dwIP mRVVhS/QIIiQxX0go7NTW7ueYlCWkpR/tx0X46si21jGCPZF46zKJqR8++OLF6+k 3e4ngq76SWCzeyM9fr5dggC+9dRFh92ByEFnU7u98MKc0yJcZ1wH1DaVwwP5X8c8 cLihV2Cs8Z7PcvENVlE/5/kyZZDAiw1Ir5M8JDzvYC8= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org