$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136372e302f32342d3234203d3e203538353532.roa File: 3131362e36382e3136372e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: hkgOHW+Wp9c8Zz4Wnycl4wzd1PZ66ZK2Nd7Tbx9cBTk= Subject key identifier: 7C:3E:7F:FA:E5:AF:E9:7F:E7:A3:76:05:A3:4A:09:71:52:EC:0B:09 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 3BD02197AA30B953FFB5427788429E6B10E5E1EF Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136372e302f32342d3234203d3e203538353532.roa Signing time: Mon 01 Jul 2024 01:03:04 +0000 ROA not before: Mon 01 Jul 2024 00:58:04 +0000 ROA not after: Mon 30 Jun 2025 01:03:04 +0000 asID: 58552 IP address blocks: 116.68.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d0:21:97:aa:30:b9:53:ff:b5:42:77:88:42:9e:6b:10:e5:e1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 1 00:58:04 2024 GMT Not After : Jun 30 01:03:04 2025 GMT Subject: CN=7C3E7FFAE5AFE97FE7A37605A34A097152EC0B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4d:be:54:e4:ec:ce:ef:1d:a7:0a:70:86:59: 77:0d:d5:be:6f:c9:11:26:30:d1:18:d5:33:02:fd: d7:09:17:a5:b4:76:51:c4:7f:69:12:27:82:ec:ed: f8:41:d4:c1:03:31:99:0c:64:ce:7b:57:73:09:a7: 47:14:a4:57:b3:ee:b6:97:26:65:5d:a1:16:20:85: 91:48:42:c3:ee:6f:d3:74:e7:1d:01:82:b7:ab:ac: 82:15:49:b8:ef:86:1f:fb:34:e3:a3:b9:0d:eb:88: 28:89:d1:22:f2:82:b2:0c:2d:38:51:83:b0:37:cf: b4:fb:4c:93:e1:4a:b2:bf:af:86:e4:09:db:dc:d0: cb:11:6e:d0:1b:b8:c4:5f:4c:60:92:69:d6:b0:73: 13:13:07:38:d1:a2:17:19:24:3d:32:90:e9:c9:0b: df:23:0e:93:c3:fb:6b:88:1d:d9:e0:a9:61:52:a1: a9:5f:84:bb:3c:2d:e8:ad:74:18:1a:22:8c:c1:0c: ff:eb:b2:29:73:d8:27:19:61:0e:da:a9:97:d4:f2: 15:83:01:c6:5c:f1:e6:d8:58:29:98:3c:c7:cc:18: 02:99:4b:bd:32:d8:5d:2d:cd:b3:5a:0a:5e:d2:49: 06:6c:c2:3c:83:bb:8e:5d:9c:6a:86:9e:09:07:30: 72:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3E:7F:FA:E5:AF:E9:7F:E7:A3:76:05:A3:4A:09:71:52:EC:0B:09 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136372e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.68.167.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ba:34:71:bb:a7:2b:81:50:c8:99:9c:58:c8:f4:86:ca:03: ed:ef:7d:47:75:25:71:20:a1:38:a2:a5:57:ff:f0:e1:6b:60: e3:1a:79:c4:fe:87:bb:b5:1c:7a:45:16:f1:22:ee:42:37:82: 72:9e:06:8a:34:09:9f:d6:9e:8f:f6:e7:f6:c8:44:e7:ef:d9: 3f:b9:9d:ca:1c:c8:2f:1f:20:eb:78:27:10:23:30:7b:7d:a6: b6:59:88:e5:ef:b7:13:4c:38:ea:c7:4f:d6:b8:b1:83:f3:35: b0:1f:3f:59:5d:71:15:73:f8:c9:7f:96:8e:d9:df:6d:c0:88: 09:15:72:b0:08:56:98:fb:40:43:fe:ca:f0:fc:21:f4:8b:05: c2:a1:e7:6b:e6:f7:cb:06:5f:f2:b1:ce:18:6d:e2:fd:42:c4: 66:d5:db:20:86:0f:b4:fb:e2:66:41:70:ce:e3:ed:54:79:e0: 8b:b5:bb:0c:5f:d1:52:7a:ac:40:f6:32:24:e7:5e:85:33:aa: 32:18:c7:19:3d:ee:f7:30:10:65:df:14:b2:0f:1b:b4:cb:67: fe:02:b4:a0:6c:8c:d5:22:33:31:13:3f:05:98:a0:ce:b0:01: 35:81:30:e0:e5:e2:fd:74:b6:42:21:51:6e:5d:d1:a8:9d:fa: fa:28:d9:16 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUO9Ahl6owuVP/tUJ3iEKeaxDl4e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNDA3MDEwMDU4MDRaFw0yNTA2MzAwMTAzMDRaMDMxMTAvBgNV BAMTKDdDM0U3RkZBRTVBRkU5N0ZFN0EzNzYwNUEzNEEwOTcxNTJFQzBCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxTb5U5OzO7x2nCnCGWXcN1b5v yREmMNEY1TMC/dcJF6W0dlHEf2kSJ4Ls7fhB1MEDMZkMZM57V3MJp0cUpFez7raX JmVdoRYghZFIQsPub9N05x0BgrerrIIVSbjvhh/7NOOjuQ3riCiJ0SLygrIMLThR g7A3z7T7TJPhSrK/r4bkCdvc0MsRbtAbuMRfTGCSadawcxMTBzjRohcZJD0ykOnJ C98jDpPD+2uIHdngqWFSoalfhLs8LeitdBgaIozBDP/rsilz2CcZYQ7aqZfU8hWD AcZc8ebYWCmYPMfMGAKZS70y2F0tzbNaCl7SSQZswjyDu45dnGqGngkHMHIrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfD5/+uWv6X/no3YFo0oJcVLsCwkwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzEzNjJlMzYzODJlMzEzNjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHREpzANBgkqhkiG 9w0BAQsFAAOCAQEAB7o0cbunK4FQyJmcWMj0hsoD7e99R3UlcSChOKKlV//w4Wtg 4xp5xP6Hu7UcekUW8SLuQjeCcp4GijQJn9aej/bn9shE5+/ZP7mdyhzILx8g63gn ECMwe32mtlmI5e+3E0w46sdP1rixg/M1sB8/WV1xFXP4yX+WjtnfbcCICRVysAhW mPtAQ/7K8Pwh9IsFwqHna+b3ywZf8rHOGG3i/ULEZtXbIIYPtPviZkFwzuPtVHng i7W7DF/RUnqsQPYyJOdehTOqMhjHGT3u9zAQZd8Usg8btMtn/gK0oGyM1SIzMRM/ BZigzrABNYEw4OXi/XS2QiFRbl3RqJ36+ijZFg== -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org