$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: QpTEDfO54NFiOuPTdNcZuIxMHt89XS6V4dhhcJI640o= Subject key identifier: 86:95:9B:F3:5F:1F:BD:FB:BD:5D:8B:89:51:57:6C:97:EF:D9:DB:C6 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 404A76E77A0B443D9D421BC29D36EF1D35DC68DE Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa Signing time: Sun 21 Apr 2024 04:00:01 +0000 ROA not before: Sun 21 Apr 2024 03:55:01 +0000 ROA not after: Sun 20 Apr 2025 04:00:01 +0000 asID: 9341 IP address blocks: 119.252.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4a:76:e7:7a:0b:44:3d:9d:42:1b:c2:9d:36:ef:1d:35:dc:68:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Apr 21 03:55:01 2024 GMT Not After : Apr 20 04:00:01 2025 GMT Subject: CN=86959BF35F1FBDFBBD5D8B8951576C97EFD9DBC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:21:b1:07:ba:a6:cd:5a:1b:c9:da:ba:fe:ed: 1f:d8:25:b8:fc:72:ea:ab:0a:23:75:1c:78:eb:94: 7d:ee:fc:a4:c3:57:e2:c7:94:a3:35:ad:d6:5e:02: ef:1c:e8:17:dc:f8:b3:cc:e9:5b:35:17:8a:14:2a: 38:1b:e8:8d:0b:b5:4e:4a:99:0e:7b:03:20:2f:3d: 2e:89:71:04:b7:31:54:52:15:78:55:0b:bb:9b:e4: 48:9c:07:64:6a:9b:ac:61:0f:ab:02:57:4c:86:4d: 1e:f9:d0:16:ca:02:1a:5e:ea:99:6e:1b:29:91:93: a4:3c:8b:77:69:97:5e:c1:11:9a:b2:b4:89:81:8c: b3:bf:9c:cf:29:eb:35:92:3e:cf:ca:25:f2:b5:90: 31:8e:83:3c:05:e1:f2:b1:ca:64:ae:5b:4d:11:66: d5:9b:f0:45:7c:2c:5e:47:81:d1:14:16:7a:6a:22: aa:e5:b1:92:42:aa:e7:22:47:e0:3c:c1:23:e4:61: 45:4f:77:a3:84:ee:85:bf:8b:b2:b6:8f:77:86:c5: 43:19:b8:4a:ee:ca:d3:b0:74:b6:46:3a:85:0b:75: 07:3b:7a:89:d5:55:0b:22:7c:25:10:b9:4b:f5:3f: d8:f6:48:d5:ed:06:5d:75:32:2b:00:81:cb:7d:db: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:9B:F3:5F:1F:BD:FB:BD:5D:8B:89:51:57:6C:97:EF:D9:DB:C6 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.170.0/24 Signature Algorithm: sha256WithRSAEncryption 64:66:96:62:4f:f4:d4:33:bc:6d:30:f7:55:e5:01:8f:15:d5: 18:02:b5:06:1d:5a:9d:b8:2b:be:0a:87:fb:67:63:36:05:53: 31:97:db:7f:0c:78:e6:a5:b7:69:bc:58:70:64:30:ce:42:0e: 05:f3:d6:8a:01:a9:2b:26:1d:48:e0:e8:da:40:63:a1:e2:1c: 89:b4:66:20:0d:2a:ce:a5:36:0e:4e:fb:e6:d6:bf:6b:b4:97: 47:80:c9:7e:50:35:9a:fb:63:39:34:11:a5:cc:dc:4f:bf:36: c7:ec:2e:51:4b:92:8b:70:14:55:2c:f6:38:31:a7:57:90:fd: 8c:75:fd:67:46:6e:ca:b4:11:67:e4:83:89:d9:20:7e:ce:4d: a1:7e:ec:e3:66:a6:be:c9:e1:e5:dd:64:6d:e7:4a:ed:6d:e3: 8a:07:4c:8a:50:b3:9c:d1:d2:0e:c2:ce:5a:04:0f:ac:c8:21: 03:0b:d0:3a:46:e1:65:dc:1e:af:50:5d:5d:68:ab:ba:8a:86: 64:22:dd:5e:23:ad:0f:0e:a2:fe:12:ae:b9:f6:a7:1d:71:ca: d7:f5:9b:74:29:46:1a:2f:fd:db:53:c6:b0:33:bf:9e:9b:e8: f4:b8:aa:3d:86:f4:96:86:3a:d0:10:ba:ab:7b:af:c3:ed:c4: 75:57:e9:78 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQEp253oLRD2dQhvCnTbvHTXcaN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNDA0MjEwMzU1MDFaFw0yNTA0MjAwNDAwMDFaMDMxMTAvBgNV BAMTKDg2OTU5QkYzNUYxRkJERkJCRDVEOEI4OTUxNTc2Qzk3RUZEOURCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIbEHuqbNWhvJ2rr+7R/YJbj8 cuqrCiN1HHjrlH3u/KTDV+LHlKM1rdZeAu8c6Bfc+LPM6Vs1F4oUKjgb6I0LtU5K mQ57AyAvPS6JcQS3MVRSFXhVC7ub5EicB2Rqm6xhD6sCV0yGTR750BbKAhpe6plu GymRk6Q8i3dpl17BEZqytImBjLO/nM8p6zWSPs/KJfK1kDGOgzwF4fKxymSuW00R ZtWb8EV8LF5HgdEUFnpqIqrlsZJCquciR+A8wSPkYUVPd6OE7oW/i7K2j3eGxUMZ uEruytOwdLZGOoULdQc7eonVVQsifCUQuUv1P9j2SNXtBl11MisAgct92ztPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhpWb818fvfu9XYuJUVdsl+/Z28YwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM3MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8qjANBgkqhkiG 9w0BAQsFAAOCAQEAZGaWYk/01DO8bTD3VeUBjxXVGAK1Bh1anbgrvgqH+2djNgVT MZfbfwx45qW3abxYcGQwzkIOBfPWigGpKyYdSODo2kBjoeIcibRmIA0qzqU2Dk77 5ta/a7SXR4DJflA1mvtjOTQRpczcT782x+wuUUuSi3AUVSz2ODGnV5D9jHX9Z0Zu yrQRZ+SDidkgfs5NoX7s42amvsnh5d1kbedK7W3jigdMilCznNHSDsLOWgQPrMgh AwvQOkbhZdwer1BdXWiruoqGZCLdXiOtDw6i/hKuufanHXHK1/WbdClGGi/921PG sDO/npvo9LiqPYb0loY60BC6q3uvw+3EdVfpeA== -----END CERTIFICATE-----Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org