$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa File: 3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa (raw, json) Hash identifier: uRS0hOIQkWaGNdFDHLOXybFp5fjSrIa3gxooA+LEl5A= Subject key identifier: C8:8C:63:CD:C7:C1:67:DD:9F:96:6C:6A:35:61:C9:9C:19:75:DC:9E Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 4C77D08D820C595E9248832B3F07167ABE897133 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa Signing time: Sun 02 Jun 2024 14:43:20 +0000 ROA not before: Sun 02 Jun 2024 14:38:20 +0000 ROA not after: Sun 01 Jun 2025 14:43:20 +0000 asID: 149760 IP address blocks: 119.110.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:77:d0:8d:82:0c:59:5e:92:48:83:2b:3f:07:16:7a:be:89:71:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Jun 2 14:38:20 2024 GMT Not After : Jun 1 14:43:20 2025 GMT Subject: CN=C88C63CDC7C167DD9F966C6A3561C99C1975DC9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:ad:73:53:fc:87:70:35:ec:56:d4:1c:8a: 60:e4:ff:d0:6f:96:d4:46:55:ba:dc:a0:46:db:f0: d2:c6:07:f2:f5:89:44:f4:c2:02:7b:9d:b3:63:cd: 05:17:ec:3a:64:f5:21:dc:52:0c:8b:37:b4:1f:01: 17:94:b8:0f:05:2b:17:9b:a4:e8:9e:3a:7f:41:56: d3:25:c9:8c:6b:08:eb:5e:22:55:8f:bb:78:e2:bd: bc:ba:5b:43:f2:ed:4e:40:84:12:1a:ba:51:09:64: 52:f1:ee:24:ce:78:da:53:52:de:11:11:b5:da:51: 6d:1d:77:95:b4:e1:01:90:e7:bc:8c:a8:b9:c7:8d: c4:c3:98:97:d8:fb:89:d7:33:7c:a8:4e:22:ed:3d: 40:c0:aa:ca:0d:c5:cd:4e:58:fd:1a:04:8c:76:ac: 4c:70:1c:47:a1:f2:4f:d5:b0:6d:27:5a:16:39:0b: fa:3a:70:fc:d0:bb:ed:52:14:9b:b5:95:cb:72:4f: 10:46:4b:bf:8b:7a:9d:3e:1d:72:e4:af:4a:e5:56: 24:0e:f9:34:e3:b8:f1:ba:1b:26:20:64:20:55:86: d9:ee:9d:a4:a0:c3:45:93:64:c7:05:55:e3:57:a0: e2:c0:3d:0d:28:49:70:17:ac:83:0c:d4:3f:81:c4: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8C:63:CD:C7:C1:67:DD:9F:96:6C:6A:35:61:C9:9C:19:75:DC:9E X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.124.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:8d:35:ff:37:90:f2:5d:6d:9a:00:96:29:75:34:f5:51:77: 16:01:05:1b:46:83:f9:6a:40:e6:1a:37:b3:86:9f:29:1e:a9: 10:64:e4:ea:b0:44:17:9b:70:12:fd:53:6d:04:d8:42:6c:b6: 87:e6:61:dd:bb:77:9f:f0:62:59:3e:05:6c:85:82:04:54:34: 8e:19:60:00:68:6b:73:f2:ea:a6:c7:c1:42:db:ba:20:7c:6a: 4b:5d:33:c3:ec:e6:60:ee:be:92:66:97:3f:df:9a:13:32:ab: dd:e7:84:2b:28:8d:fb:b9:06:76:fa:37:7a:0e:93:fd:2e:67: b4:91:2f:b6:4c:e0:e6:fb:ec:34:7d:3e:b4:8e:a9:98:91:48: f3:ae:07:dd:06:6f:f5:54:dc:25:d6:5c:49:39:98:9a:49:0c: 17:bc:44:58:d1:21:5c:24:6d:5d:8a:c8:05:84:4a:14:2f:26: 40:a9:75:25:2e:33:9f:13:a8:40:c0:72:fd:a2:31:fc:76:a5: 31:61:06:82:61:40:66:6f:6a:eb:93:ae:c1:c5:8c:1b:08:75: 4b:33:ba:e7:85:ea:45:ab:cf:d7:6a:0b:30:88:65:40:9a:87: a5:94:a5:91:bf:37:19:a9:39:9e:8e:21:43:bd:f7:12:a7:f2: 04:e5:5f:db -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTHfQjYIMWV6SSIMrPwcWer6JcTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNDA2MDIxNDM4MjBaFw0yNTA2MDExNDQzMjBaMDMxMTAvBgNV BAMTKEM4OEM2M0NEQzdDMTY3REQ5Rjk2NkM2QTM1NjFDOTlDMTk3NURDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubq1zU/yHcDXsVtQcimDk/9Bv ltRGVbrcoEbb8NLGB/L1iUT0wgJ7nbNjzQUX7Dpk9SHcUgyLN7QfAReUuA8FKxeb pOieOn9BVtMlyYxrCOteIlWPu3jivby6W0Py7U5AhBIaulEJZFLx7iTOeNpTUt4R EbXaUW0dd5W04QGQ57yMqLnHjcTDmJfY+4nXM3yoTiLtPUDAqsoNxc1OWP0aBIx2 rExwHEeh8k/VsG0nWhY5C/o6cPzQu+1SFJu1lctyTxBGS7+Lep0+HXLkr0rlViQO +TTjuPG6GyYgZCBVhtnunaSgw0WTZMcFVeNXoOLAPQ0oSXAXrIMM1D+BxAeNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyIxjzcfBZ92flmxqNWHJnBl13J4wHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMyMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM2MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3bnwwDQYJ KoZIhvcNAQELBQADggEBAJqNNf83kPJdbZoAlil1NPVRdxYBBRtGg/lqQOYaN7OG nykeqRBk5OqwRBebcBL9U20E2EJstofmYd27d5/wYlk+BWyFggRUNI4ZYABoa3Py 6qbHwULbuiB8aktdM8Ps5mDuvpJmlz/fmhMyq93nhCsojfu5Bnb6N3oOk/0uZ7SR L7ZM4Ob77DR9PrSOqZiRSPOuB90Gb/VU3CXWXEk5mJpJDBe8RFjRIVwkbV2KyAWE ShQvJkCpdSUuM58TqEDAcv2iMfx2pTFhBoJhQGZvauuTrsHFjBsIdUszuueF6kWr z9dqCzCIZUCah6WUpZG/NxmpOZ6OIUO99xKn8gTlX9s= -----END CERTIFICATE-----Generated at Fri Jun 21 15:50:40 2024 by rpki-client on console-ams.rpki-client.org