$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/32372e3132342e37362e302f32332d3234203d3e20313532303336.roa File: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (raw, json) Hash identifier: wYdcnUFBSuzFDxRLSZQv3tgeXMwvjCP9rVz+PUMirJ4= Subject key identifier: 14:84:A9:04:B8:87:79:92:B1:05:E5:B7:CF:48:F0:E2:A8:D2:CB:0B Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 59130D3E2D6E8B04D574F39B4054D6DEC1D096C5 Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/32372e3132342e37362e302f32332d3234203d3e20313532303336.roa Signing time: Mon 28 Oct 2024 08:01:13 +0000 ROA not before: Mon 28 Oct 2024 07:56:13 +0000 ROA not after: Mon 27 Oct 2025 08:01:13 +0000 asID: 152036 IP address blocks: 27.124.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:13:0d:3e:2d:6e:8b:04:d5:74:f3:9b:40:54:d6:de:c1:d0:96:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Oct 28 07:56:13 2024 GMT Not After : Oct 27 08:01:13 2025 GMT Subject: CN=1484A904B8877992B105E5B7CF48F0E2A8D2CB0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f1:5d:a7:75:12:90:34:2c:bc:2e:ee:df:c8: a3:13:7d:59:bd:d2:c1:a1:2e:97:85:12:b6:5d:30: b8:91:e6:3e:41:d0:0c:a0:87:9f:2e:e7:e6:b8:8d: 08:22:db:cd:9c:02:1d:90:da:d1:c3:bc:45:75:4a: 65:a9:2f:e1:7a:9a:c8:de:c1:6a:80:45:2e:94:63: 3a:45:b6:de:25:dc:cd:8e:da:56:53:5d:c5:2d:60: 9c:eb:d1:ba:ea:50:77:42:ef:4d:4b:13:c7:c1:c4: 79:95:b7:c1:f8:c2:99:44:75:42:43:2f:4b:8e:c2: 06:80:30:a0:89:c6:5d:36:b5:ad:8d:dd:17:b9:4c: 5e:4f:98:b8:01:20:fb:2a:68:33:12:d9:e5:28:0a: 6c:7a:29:c8:59:35:c8:a5:dc:8e:75:7a:e9:94:b4: 2a:96:5e:4b:d8:9c:03:89:77:68:f8:ec:07:c7:ff: 73:e9:be:37:5d:92:8a:38:d3:a9:68:0f:bd:65:0e: d4:31:7c:c9:e5:0f:bd:86:c2:35:e7:b8:50:b8:cd: 54:15:ec:38:9e:66:54:36:ff:37:b4:8f:b0:47:6d: 35:d4:68:ae:9f:1a:a2:cc:7e:89:4b:af:b1:2d:82: 26:77:01:61:aa:ab:43:fe:90:79:e4:d0:f2:fe:b6: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:84:A9:04:B8:87:79:92:B1:05:E5:B7:CF:48:F0:E2:A8:D2:CB:0B X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/32372e3132342e37362e302f32332d3234203d3e20313532303336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.76.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:00:b8:19:bc:1c:9a:a0:e2:bb:18:2c:60:3c:6b:e7:79:1f: 09:d8:80:6b:a7:b9:f5:57:5d:77:4c:a8:5d:e1:04:00:91:35: 15:4f:8c:f7:14:3d:62:e7:1c:ba:2f:52:a8:80:cf:0b:0a:af: ef:b8:d1:dd:f8:49:41:8d:57:0a:e1:72:d9:ec:53:07:c1:6b: 5e:9a:4e:1b:27:c8:da:dc:00:83:9a:a2:1d:8d:a5:7b:76:ef: 6e:20:8e:a7:75:10:6a:df:2f:5d:8d:10:88:d6:c3:2f:45:e2: 6e:03:87:e4:da:2c:61:16:b8:f6:9f:39:ed:21:07:25:f4:a9: 1e:7d:0a:c2:06:59:a2:f5:ac:68:26:3d:e8:bb:2a:41:e8:2f: 3d:9d:25:ad:c7:bc:b2:93:41:82:35:10:68:39:22:e3:e0:fe: 99:ba:1e:0a:ba:2c:38:6f:9f:a4:87:2c:dc:f7:8d:4d:29:b2: e2:2c:3c:fa:fd:73:fb:58:5a:2f:dd:e2:7c:07:f7:0b:9e:c9: 46:f8:32:14:c3:15:c1:1f:92:1e:8b:03:e0:e5:c5:22:1c:7b: 2a:2c:1f:26:0d:c7:0e:18:19:9b:76:df:6e:0a:65:c1:19:6e: b1:53:75:d9:97:84:a1:a2:2c:f8:9c:bc:ba:82:10:72:21:c5: 54:d9:d3:99 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWRMNPi1uiwTVdPObQFTW3sHQlsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNDEwMjgwNzU2MTNaFw0yNTEwMjcwODAxMTNaMDMxMTAvBgNV BAMTKDE0ODRBOTA0Qjg4Nzc5OTJCMTA1RTVCN0NGNDhGMEUyQThEMkNCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc8V2ndRKQNCy8Lu7fyKMTfVm9 0sGhLpeFErZdMLiR5j5B0Aygh58u5+a4jQgi282cAh2Q2tHDvEV1SmWpL+F6msje wWqARS6UYzpFtt4l3M2O2lZTXcUtYJzr0brqUHdC701LE8fBxHmVt8H4wplEdUJD L0uOwgaAMKCJxl02ta2N3Re5TF5PmLgBIPsqaDMS2eUoCmx6KchZNcil3I51eumU tCqWXkvYnAOJd2j47AfH/3Ppvjddkoo406loD71lDtQxfMnlD72GwjXnuFC4zVQV 7DieZlQ2/ze0j7BHbTXUaK6fGqLMfolLr7EtgiZ3AWGqq0P+kHnk0PL+tqn5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFISpBLiHeZKxBeW3z0jw4qjSywswHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMmE4MDExLTRjNjYtNDNkMS1i YmM1LWZiMTFlODlmOTFlMC8wLzMyMzcyZTMxMzIzNDJlMzczNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEARt8TDANBgkqhkiG 9w0BAQsFAAOCAQEAOwC4GbwcmqDiuxgsYDxr53kfCdiAa6e59Vddd0yoXeEEAJE1 FU+M9xQ9Yuccui9SqIDPCwqv77jR3fhJQY1XCuFy2exTB8FrXppOGyfI2twAg5qi HY2le3bvbiCOp3UQat8vXY0QiNbDL0XibgOH5NosYRa49p857SEHJfSpHn0KwgZZ ovWsaCY96LsqQegvPZ0lrce8spNBgjUQaDki4+D+mboeCrosOG+fpIcs3PeNTSmy 4iw8+v1z+1haL93ifAf3C57JRvgyFMMVwR+SHosD4OXFIhx7KiwfJg3HDhgZm3bf bgplwRlusVN12ZeEoaIs+Jy8uoIQciHFVNnTmQ== -----END CERTIFICATE-----Generated at Sun Nov 24 07:10:00 2024 by rpki-client on console-ams.rpki-client.org