$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: iMXs7GfY5u7bngjr3iOEFH0msWvdsFxg4ue+MtZVsMU= Subject key identifier: BB:BD:56:21:C0:22:EE:4C:1A:FC:90:6D:C2:2F:75:05:EE:03:FD:0E Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 6C577A72350452B36A194BA9A00ED90A7AB1DF98 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa Signing time: Sun 21 Apr 2024 06:00:01 +0000 ROA not before: Sun 21 Apr 2024 05:55:01 +0000 ROA not after: Sun 20 Apr 2025 06:00:01 +0000 asID: 9341 IP address blocks: 119.252.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:57:7a:72:35:04:52:b3:6a:19:4b:a9:a0:0e:d9:0a:7a:b1:df:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Apr 21 05:55:01 2024 GMT Not After : Apr 20 06:00:01 2025 GMT Subject: CN=BBBD5621C022EE4C1AFC906DC22F7505EE03FD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:53:13:de:d9:a3:48:ca:78:a5:d4:ee:ab:9e: 60:65:b0:f9:fd:23:dc:1e:fe:3f:80:e2:59:4d:f8: 40:91:63:58:e0:53:d2:b4:56:90:b0:b8:98:3c:c1: 68:c9:37:0b:6b:73:af:03:9e:a8:03:8d:13:b6:56: 54:57:9b:7e:1e:27:7f:a6:c8:7a:e5:22:0d:f2:80: a7:ea:6c:3c:fc:4c:98:0d:3b:5a:d9:9d:99:ac:fb: 18:f7:38:6f:ac:20:f0:d7:e1:d9:01:37:43:3f:d5: 34:19:9e:b9:de:3d:5a:41:a1:30:dc:67:ab:50:02: 2b:2d:26:ff:23:52:ee:8b:4f:1a:1e:33:f0:cc:12: 3a:bd:d9:13:d1:9b:a6:69:61:e5:ee:dd:5a:88:69: c3:43:3f:94:1c:f0:83:95:52:9d:21:92:e9:0c:11: ed:2a:d4:3c:7f:d4:92:b8:a7:11:29:49:bd:be:d1: 3d:b2:77:70:91:84:bd:7d:c8:60:e8:b4:56:34:84: 99:cb:ad:52:0e:23:f8:c3:ac:db:47:71:e1:09:9a: 98:11:c6:d0:13:3a:27:e9:5a:95:e2:7e:e9:85:c9: cc:b4:87:b9:09:42:f7:80:52:f8:6b:17:f4:88:f0: 97:35:1c:d2:8a:85:7d:00:22:51:62:75:31:13:0f: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BD:56:21:C0:22:EE:4C:1A:FC:90:6D:C2:2F:75:05:EE:03:FD:0E X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.167.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:d1:4a:11:ed:28:82:69:38:87:9d:88:51:10:a0:1a:e0:fa: 87:50:0e:ab:f6:4d:a6:10:c3:54:50:c4:1a:ef:b9:72:93:39: 15:66:19:2e:67:80:d9:ba:b5:05:d9:27:45:67:94:ef:fc:a2: e0:b1:71:ff:9f:3f:03:2d:8e:ae:0a:bc:66:50:39:a8:d9:e3: b1:fc:5e:05:d8:37:da:bd:25:b4:1d:fa:e0:bc:37:ed:79:35: 8d:43:f1:28:05:01:a4:74:c4:c9:c8:1c:b9:a2:e7:5b:60:d5: f0:8b:dc:c7:54:d7:95:7a:69:85:05:36:c3:42:37:da:5b:4d: 28:98:7f:c4:c5:00:78:5c:a4:c0:8b:39:fb:2a:ba:39:b2:2e: 61:3c:3f:a5:e4:58:87:de:10:d7:7b:33:dc:e8:e3:80:1c:a2: 46:f7:26:23:60:67:4b:74:a5:c3:e1:2b:f9:61:52:52:c5:08: f7:e7:d4:02:3f:0b:42:55:6b:93:0c:b0:99:31:e7:60:e2:19: 18:b4:a3:2f:a0:da:06:de:f5:d5:95:50:c0:c4:d7:56:69:29: 6e:42:9e:93:58:0b:0b:f5:86:ac:44:16:c4:54:25:fc:0e:58: 3b:11:64:d4:38:bb:eb:82:b7:a6:4f:c1:ec:15:7f:61:11:f8: 4d:da:bc:27 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbFd6cjUEUrNqGUupoA7ZCnqx35gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNDA0MjEwNTU1MDFaFw0yNTA0MjAwNjAwMDFaMDMxMTAvBgNV BAMTKEJCQkQ1NjIxQzAyMkVFNEMxQUZDOTA2REMyMkY3NTA1RUUwM0ZEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUxPe2aNIynil1O6rnmBlsPn9 I9we/j+A4llN+ECRY1jgU9K0VpCwuJg8wWjJNwtrc68DnqgDjRO2VlRXm34eJ3+m yHrlIg3ygKfqbDz8TJgNO1rZnZms+xj3OG+sIPDX4dkBN0M/1TQZnrnePVpBoTDc Z6tQAistJv8jUu6LTxoeM/DMEjq92RPRm6ZpYeXu3VqIacNDP5Qc8IOVUp0hkukM Ee0q1Dx/1JK4pxEpSb2+0T2yd3CRhL19yGDotFY0hJnLrVIOI/jDrNtHceEJmpgR xtATOifpWpXifumFycy0h7kJQveAUvhrF/SI8Jc1HNKKhX0AIlFidTETD11ZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUu71WIcAi7kwa/JBtwi91Be4D/Q4wHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8pzANBgkqhkiG 9w0BAQsFAAOCAQEAP9FKEe0ogmk4h52IURCgGuD6h1AOq/ZNphDDVFDEGu+5cpM5 FWYZLmeA2bq1BdknRWeU7/yi4LFx/58/Ay2Orgq8ZlA5qNnjsfxeBdg32r0ltB36 4Lw37Xk1jUPxKAUBpHTEycgcuaLnW2DV8Ivcx1TXlXpphQU2w0I32ltNKJh/xMUA eFykwIs5+yq6ObIuYTw/peRYh94Q13sz3OjjgByiRvcmI2BnS3Slw+Er+WFSUsUI 9+fUAj8LQlVrkwywmTHnYOIZGLSjL6DaBt711ZVQwMTXVmkpbkKek1gLC/WGrEQW xFQl/A5YOxFk1Di764K3pk/B7BV/YRH4Tdq8Jw== -----END CERTIFICATE-----Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org