$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132372e302f32342d3234203d3e203435313437.roa File: 3131392e3131302e3132372e302f32342d3234203d3e203435313437.roa (raw, json) Hash identifier: WZYIcQ9gt+VIC46McJmrKtAfT9aFVjFsPYw7KXMh/Nk= Subject key identifier: 76:B3:FE:4A:41:35:3B:8E:95:16:9B:8D:08:3B:E4:D1:71:17:8C:86 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 501BDFED60E4BE14A1E7DD3A102EECFB9AA5FCFA Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132372e302f32342d3234203d3e203435313437.roa Signing time: Sun 29 Oct 2023 06:00:01 +0000 ROA not before: Sun 29 Oct 2023 05:55:01 +0000 ROA not after: Sun 27 Oct 2024 06:00:01 +0000 asID: 45147 IP address blocks: 119.110.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1b:df:ed:60:e4:be:14:a1:e7:dd:3a:10:2e:ec:fb:9a:a5:fc:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 05:55:01 2023 GMT Not After : Oct 27 06:00:01 2024 GMT Subject: CN=76B3FE4A41353B8E95169B8D083BE4D171178C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:39:d2:d3:af:09:db:f7:99:e9:4b:e8:69: d9:10:0e:e4:83:70:cb:b5:4a:50:ec:ab:b9:1a:53: 31:b2:cb:7f:e0:33:63:c1:22:72:6e:14:e3:85:13: cb:6f:5b:5e:28:64:52:1e:68:96:c2:bd:27:e1:7a: 1b:8f:f0:17:3b:1b:07:a8:57:8d:c0:3e:76:b6:55: 30:f8:0f:87:c1:96:94:2c:bd:33:11:f7:4e:6c:4d: 67:1d:b4:9f:2d:52:1e:03:ee:e7:d4:56:73:91:48: 16:4a:74:4e:c7:f2:6f:c2:13:23:c9:04:76:11:c3: bc:1f:0e:ed:38:b7:03:c0:53:80:94:78:a7:53:f5: 96:65:4c:4e:f9:30:3e:f6:56:a8:96:10:c0:ef:cb: 3c:e1:79:c7:1f:7e:e6:d3:ff:33:8d:b0:8a:5a:02: eb:5d:22:a9:17:2f:42:a0:98:6f:81:98:33:0a:20: f7:a5:07:f7:f4:cd:23:b8:fb:2b:f1:1b:56:a8:b3: fc:af:d1:8e:7c:d2:b4:85:1a:5b:f5:86:cb:2d:d3: 94:a7:e0:98:d0:d0:a6:28:8f:29:fb:ed:da:78:76: e1:cc:d1:8e:dd:30:af:d3:d2:74:ae:82:65:06:2c: e0:f9:02:31:5a:b8:3a:93:f4:3f:10:09:77:bd:92: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B3:FE:4A:41:35:3B:8E:95:16:9B:8D:08:3B:E4:D1:71:17:8C:86 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132372e302f32342d3234203d3e203435313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.127.0/24 Signature Algorithm: sha256WithRSAEncryption a3:81:92:39:23:0d:cd:d6:b7:b0:9c:7b:6e:4f:e6:ac:cd:58: c2:59:61:fb:c1:5a:0b:4e:34:75:13:23:cf:d2:5a:35:38:99: 7f:a7:81:2b:d0:87:d4:5b:6b:48:e8:4a:b4:24:8a:77:93:55: b2:ef:34:76:d5:58:00:f3:ed:f5:70:66:db:5b:af:ff:38:70: f8:d0:2a:86:0c:7c:d3:53:86:5a:fa:d0:ba:30:4f:06:aa:f9: 55:80:a9:d3:e2:15:42:f8:8d:ab:22:19:22:a2:bf:09:58:5c: 2d:70:43:ea:7a:4d:17:07:1f:ae:8d:5d:d7:78:1f:b4:7f:74: 01:25:a9:18:c4:89:2d:a5:cc:30:38:1f:72:8f:a9:d7:7e:a5: ce:5c:94:4f:14:d6:24:d5:c7:8f:d0:f3:77:7f:ab:3b:d3:b3: b3:df:a6:0f:57:44:a6:b4:b6:5a:72:61:58:69:3c:0c:ee:b1: 22:9a:2d:fd:69:10:b2:75:87:a9:8f:1a:4b:72:40:cf:06:77: c1:3d:4b:2b:43:36:2e:0b:72:b1:ff:80:91:d2:04:c2:df:0d: 1a:f3:4a:57:ae:10:84:68:01:0e:4f:ba:b4:54:2b:e1:f6:50: 97:b2:86:8f:78:1e:0d:6d:e6:ce:b9:a1:a5:48:6c:d1:19:71: 8f:b2:f8:e3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUBvf7WDkvhSh5906EC7s+5ql/PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNTU1MDFaFw0yNDEwMjcwNjAwMDFaMDMxMTAvBgNV BAMTKDc2QjNGRTRBNDEzNTNCOEU5NTE2OUI4RDA4M0JFNEQxNzExNzhDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4znS068J2/eZ6UvoadkQDuSD cMu1SlDsq7kaUzGyy3/gM2PBInJuFOOFE8tvW14oZFIeaJbCvSfhehuP8Bc7Gweo V43APna2VTD4D4fBlpQsvTMR905sTWcdtJ8tUh4D7ufUVnORSBZKdE7H8m/CEyPJ BHYRw7wfDu04twPAU4CUeKdT9ZZlTE75MD72VqiWEMDvyzzheccffubT/zONsIpa AutdIqkXL0KgmG+BmDMKIPelB/f0zSO4+yvxG1aos/yv0Y580rSFGlv1hsst05Sn 4JjQ0KYojyn77dp4duHM0Y7dMK/T0nSugmUGLOD5AjFauDqT9D8QCXe9ktfHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdrP+SkE1O46VFpuNCDvk0XEXjIYwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMyMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAd25/MA0GCSqG SIb3DQEBCwUAA4IBAQCjgZI5Iw3N1rewnHtuT+aszVjCWWH7wVoLTjR1EyPP0lo1 OJl/p4Er0IfUW2tI6Eq0JIp3k1Wy7zR21VgA8+31cGbbW6//OHD40CqGDHzTU4Za +tC6ME8GqvlVgKnT4hVC+I2rIhkior8JWFwtcEPqek0XBx+ujV3XeB+0f3QBJakY xIktpcwwOB9yj6nXfqXOXJRPFNYk1ceP0PN3f6s707Oz36YPV0SmtLZacmFYaTwM 7rEimi39aRCydYepjxpLckDPBnfBPUsrQzYuC3Kx/4CR0gTC3w0a80pXrhCEaAEO T7q0VCvh9lCXsoaPeB4NbebOuaGlSGzRGXGPsvjj -----END CERTIFICATE-----Generated at Fri Jun 21 16:09:57 2024 by rpki-client on console-fra.rpki-client.org