$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3138332e38312e3135322e302f32312d3234203d3e203234353237.roa File: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (raw, json) Hash identifier: QV0OMSv5p4Bp6GHcowx6nYWRELs5eo5fWVyu/lnK22I= Subject key identifier: B2:21:69:85:F2:9C:36:60:49:D2:53:BE:1E:B0:05:E1:D4:A8:DC:F5 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 5FDCC81328324B71DCA46972669BD082F9EFD543 Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3138332e38312e3135322e302f32312d3234203d3e203234353237.roa Signing time: Mon 01 Jul 2024 00:02:14 +0000 ROA not before: Sun 30 Jun 2024 23:57:14 +0000 ROA not after: Mon 30 Jun 2025 00:02:14 +0000 asID: 24527 IP address blocks: 183.81.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:dc:c8:13:28:32:4b:71:dc:a4:69:72:66:9b:d0:82:f9:ef:d5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Jun 30 23:57:14 2024 GMT Not After : Jun 30 00:02:14 2025 GMT Subject: CN=B2216985F29C366049D253BE1EB005E1D4A8DCF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:08:dc:73:3c:c6:2d:d2:a6:c5:52:32:5d: 1d:a3:4d:e7:8f:e5:c3:6e:8e:84:70:c6:0d:e2:b7: ca:f4:f3:2d:e1:b3:53:e6:00:09:6a:b4:09:3b:89: 30:64:a7:91:0b:e3:46:66:65:70:9f:01:2b:f0:92: da:48:41:6b:34:41:56:b7:ac:5a:b8:07:df:29:f8: f9:bb:3a:3f:8a:13:2a:b2:32:31:67:af:eb:4e:b9: 12:71:4b:fd:c2:f3:25:41:24:eb:af:5f:67:8c:3d: 44:77:79:b4:7b:81:cc:ab:31:2c:e8:b4:56:40:c2: a1:50:6d:c3:2f:80:12:6f:63:2e:04:0c:d7:33:99: 02:24:f1:52:ff:bb:59:78:1c:2c:0e:8e:59:55:95: 22:0e:64:86:0d:95:0d:5c:a1:5b:4a:61:86:5e:81: f9:4b:35:a5:24:be:c1:45:f7:7b:75:0d:73:28:d8: 72:bf:33:27:b6:f3:b1:d9:84:a6:44:4d:2c:04:9a: a6:fb:7d:fb:f9:1f:fd:f6:e7:90:6e:1f:d9:2b:d2: b9:48:bb:8f:55:65:02:c5:66:62:f3:96:f5:9f:f6: 1f:a0:d9:6f:60:22:a0:a5:8f:3c:50:d2:11:8b:4f: 89:e1:0a:94:72:d8:b8:bf:f0:c3:58:cd:c2:d0:ca: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:21:69:85:F2:9C:36:60:49:D2:53:BE:1E:B0:05:E1:D4:A8:DC:F5 X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3138332e38312e3135322e302f32312d3234203d3e203234353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 183.81.152.0/21 Signature Algorithm: sha256WithRSAEncryption a5:cb:b6:b3:5b:6e:19:61:c2:d3:a0:4e:d0:b3:9b:50:14:3b: aa:12:bd:51:b7:65:1e:18:ad:3b:2c:4f:d0:60:4d:5a:29:b7: 52:14:b1:82:e2:ad:98:6f:86:02:b0:09:80:f1:61:01:34:ed: b7:58:e3:67:f1:01:fe:76:8f:1d:71:cd:84:a6:65:78:a4:74: 54:3f:ba:be:cb:3f:36:4a:f4:38:f1:5a:f5:fb:11:3e:a2:b3: 95:3b:8b:a0:f8:9a:71:c8:3b:fa:bb:2e:4f:69:6e:2e:6b:a7: 8f:6f:49:4a:20:8a:cb:d9:6c:fc:7a:a8:ab:d4:12:28:70:c3: bc:bb:c6:fb:4c:e1:c1:04:b6:20:00:78:1f:ed:a7:0e:07:24: cc:d7:34:10:b5:a1:6a:6a:23:15:89:e9:5e:fa:60:75:eb:12: e8:2b:79:4c:eb:01:d9:5e:f3:fe:9f:9a:c8:2c:ad:4b:ea:21: 24:67:8c:b5:35:47:b0:ce:0b:42:cf:78:47:0e:e1:6c:8d:5a: 8d:38:e0:f9:9b:e1:fa:a8:7d:07:6f:ae:58:f0:6e:02:f4:1f: db:5d:55:72:89:bf:32:0d:a2:d7:fc:5c:f4:3d:6a:0e:8d:29: 0c:22:9f:e2:93:3a:be:17:f6:78:c2:e9:59:dc:4a:bd:f1:49: 13:cc:25:de -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUX9zIEygyS3HcpGlyZpvQgvnv1UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yNDA2MzAyMzU3MTRaFw0yNTA2MzAwMDAyMTRaMDMxMTAvBgNV BAMTKEIyMjE2OTg1RjI5QzM2NjA0OUQyNTNCRTFFQjAwNUUxRDRBOERDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mgjcczzGLdKmxVIyXR2jTeeP 5cNujoRwxg3it8r08y3hs1PmAAlqtAk7iTBkp5EL40ZmZXCfASvwktpIQWs0QVa3 rFq4B98p+Pm7Oj+KEyqyMjFnr+tOuRJxS/3C8yVBJOuvX2eMPUR3ebR7gcyrMSzo tFZAwqFQbcMvgBJvYy4EDNczmQIk8VL/u1l4HCwOjllVlSIOZIYNlQ1coVtKYYZe gflLNaUkvsFF93t1DXMo2HK/Mye287HZhKZETSwEmqb7ffv5H/3255BuH9kr0rlI u49VZQLFZmLzlvWf9h+g2W9gIqCljzxQ0hGLT4nhCpRy2Li/8MNYzcLQyhCfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsiFphfKcNmBJ0lO+HrAF4dSo3PUwHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2Yjg3ZmViLTBmZTItNDE4YS1h MzdhLWJlM2RkMWYwZTYzYy8wLzMxMzgzMzJlMzgzMTJlMzEzNTMyMmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7dRmDANBgkqhkiG 9w0BAQsFAAOCAQEApcu2s1tuGWHC06BO0LObUBQ7qhK9UbdlHhitOyxP0GBNWim3 UhSxguKtmG+GArAJgPFhATTtt1jjZ/EB/naPHXHNhKZleKR0VD+6vss/Nkr0OPFa 9fsRPqKzlTuLoPiaccg7+rsuT2luLmunj29JSiCKy9ls/Hqoq9QSKHDDvLvG+0zh wQS2IAB4H+2nDgckzNc0ELWhamojFYnpXvpgdesS6Ct5TOsB2V7z/p+ayCytS+oh JGeMtTVHsM4LQs94Rw7hbI1ajTjg+Zvh+qh9B2+uWPBuAvQf211Vcom/Mg2i1/xc 9D1qDo0pDCKf4pM6vhf2eMLpWdxKvfFJE8wl3g== -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org