$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136312e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3136312e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: CVsBSKvXILSyF+qgHCp09GilMBvO/smizOq3YH8QeCw= Subject key identifier: 0B:12:1F:F5:3E:1D:A6:2D:94:06:66:74:C9:88:12:EE:40:DD:3E:37 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 1B46E9D4D6B5B8454601140C0E277638A8F7CD7E Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136312e302f32342d3234203d3e2039333431.roa Signing time: Sun 21 Apr 2024 04:00:01 +0000 ROA not before: Sun 21 Apr 2024 03:55:01 +0000 ROA not after: Sun 20 Apr 2025 04:00:01 +0000 asID: 9341 IP address blocks: 119.252.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:46:e9:d4:d6:b5:b8:45:46:01:14:0c:0e:27:76:38:a8:f7:cd:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Apr 21 03:55:01 2024 GMT Not After : Apr 20 04:00:01 2025 GMT Subject: CN=0B121FF53E1DA62D94066674C98812EE40DD3E37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:09:72:1f:99:cb:3c:54:a3:6b:72:2b:ed:75: 71:5c:55:75:40:e1:cb:0d:5b:e9:47:b1:6e:b9:b0: 5d:b5:3d:8b:4a:da:fe:a5:4f:43:b0:48:39:29:a7: 3e:d8:46:43:32:cb:da:ae:b1:8e:c5:b9:d7:61:78: d7:91:3b:0c:9f:e8:13:36:b2:92:47:35:09:3a:79: a8:1c:5f:e1:36:a8:47:eb:84:84:b1:18:fa:2e:e2: c5:0a:00:64:0d:76:f2:8d:98:c1:ef:61:89:7f:86: 5e:5b:83:14:0b:6b:46:67:a6:65:f8:56:a3:0a:f7: 79:b2:48:8f:6b:4f:17:7f:4e:f8:ed:03:99:7d:63: 7c:1b:04:57:6b:2a:0f:67:79:00:d1:9a:bf:0c:8b: 6b:a8:5b:e1:36:0f:12:f2:84:9a:80:b6:3a:46:40: 50:7e:ec:3a:f7:94:2e:71:41:d3:f3:dc:c0:8c:88: 42:24:cf:e8:47:e9:db:9a:0e:a7:48:d0:bf:ae:25: e2:9d:36:b6:7b:95:43:1f:e1:e7:5b:4a:e4:72:12: 40:3d:b2:6b:73:73:d3:4d:86:54:61:5c:33:00:65: 52:d7:fb:2f:32:fc:c9:9d:32:f8:5c:aa:5c:6c:22: 61:5d:06:0e:79:a9:35:79:02:8b:d3:ff:0b:54:8c: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:12:1F:F5:3E:1D:A6:2D:94:06:66:74:C9:88:12:EE:40:DD:3E:37 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136312e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.161.0/24 Signature Algorithm: sha256WithRSAEncryption a1:1f:ad:a1:56:9f:0f:87:8f:5a:4f:f9:d3:2e:34:24:da:d8: 68:33:b3:4e:14:cf:a1:9f:e5:80:fe:e2:22:42:ed:96:dc:e6: af:9b:77:f4:3b:53:5c:07:c7:9c:65:32:42:8a:cf:2e:79:66: 9d:d8:55:97:50:c8:bb:99:3d:e3:3a:29:90:31:de:67:33:4b: 7e:17:27:1d:e3:29:ea:9d:cb:02:c5:af:be:bc:39:27:a7:cf: ef:f6:03:85:90:92:e2:4e:2f:1d:69:04:e6:26:0c:3d:ea:26: 36:8e:2b:b5:23:9c:80:b7:1d:f9:95:ab:e7:4a:f4:88:0c:ab: c3:50:a5:ec:7b:a8:61:fc:d6:c8:fd:f8:d8:7b:23:6b:7a:74: 22:04:bb:50:53:bb:51:69:f2:2b:e7:6d:73:67:c6:35:6d:17: a0:a8:c3:b2:61:0b:2b:a8:f3:e4:11:be:ad:56:85:d3:1e:9c: 3f:97:80:95:6c:81:1f:46:93:6e:40:3c:09:68:3c:44:5f:ac: 57:d7:18:ea:7f:db:64:ac:b6:6e:37:51:6f:87:42:2d:be:c1: 89:f9:79:27:fa:6e:a6:a4:30:47:c1:b7:93:54:f1:61:4f:17: 5d:a5:14:1f:b8:d1:9a:da:fe:41:74:18:ab:7f:3c:1f:b7:64: c1:6c:ab:99 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUG0bp1Na1uEVGARQMDid2OKj3zX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNDA0MjEwMzU1MDFaFw0yNTA0MjAwNDAwMDFaMDMxMTAvBgNV BAMTKDBCMTIxRkY1M0UxREE2MkQ5NDA2NjY3NEM5ODgxMkVFNDBERDNFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCXIfmcs8VKNrcivtdXFcVXVA 4csNW+lHsW65sF21PYtK2v6lT0OwSDkppz7YRkMyy9qusY7FuddheNeROwyf6BM2 spJHNQk6eagcX+E2qEfrhISxGPou4sUKAGQNdvKNmMHvYYl/hl5bgxQLa0ZnpmX4 VqMK93mySI9rTxd/TvjtA5l9Y3wbBFdrKg9neQDRmr8Mi2uoW+E2DxLyhJqAtjpG QFB+7Dr3lC5xQdPz3MCMiEIkz+hH6duaDqdI0L+uJeKdNrZ7lUMf4edbSuRyEkA9 smtzc9NNhlRhXDMAZVLX+y8y/MmdMvhcqlxsImFdBg55qTV5AovT/wtUjCatAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCxIf9T4dpi2UBmZ0yYgS7kDdPjcwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8oTANBgkqhkiG 9w0BAQsFAAOCAQEAoR+toVafD4ePWk/50y40JNrYaDOzThTPoZ/lgP7iIkLtltzm r5t39DtTXAfHnGUyQorPLnlmndhVl1DIu5k94zopkDHeZzNLfhcnHeMp6p3LAsWv vrw5J6fP7/YDhZCS4k4vHWkE5iYMPeomNo4rtSOcgLcd+ZWr50r0iAyrw1Cl7Huo YfzWyP342Hsja3p0IgS7UFO7UWnyK+dtc2fGNW0XoKjDsmELK6jz5BG+rVaF0x6c P5eAlWyBH0aTbkA8CWg8RF+sV9cY6n/bZKy2bjdRb4dCLb7Bifl5J/pupqQwR8G3 k1TxYU8XXaUUH7jRmtr+QXQYq388H7dkwWyrmQ== -----END CERTIFICATE-----Generated at Fri May 31 20:32:23 2024 by rpki-client on console-ams.rpki-client.org