$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: lnzYb3o32JzLmLh0jnxBUN0b8SRS5jjaBrljKWPG6Qo= Subject key identifier: A8:7F:A5:58:FA:18:FF:21:D0:E4:8B:40:10:8B:66:16:A9:EF:72:79 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 6DA2B8B0BE02658AF20F165C590BC278692E98B2 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa Signing time: Sun 21 Apr 2024 05:00:01 +0000 ROA not before: Sun 21 Apr 2024 04:55:01 +0000 ROA not after: Sun 20 Apr 2025 05:00:01 +0000 asID: 9341 IP address blocks: 119.252.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a2:b8:b0:be:02:65:8a:f2:0f:16:5c:59:0b:c2:78:69:2e:98:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Apr 21 04:55:01 2024 GMT Not After : Apr 20 05:00:01 2025 GMT Subject: CN=A87FA558FA18FF21D0E48B40108B6616A9EF7279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:85:7c:63:9b:4d:75:87:de:0a:ee:69:23: c4:f7:2d:9e:8c:db:35:a9:cf:27:d0:48:a2:da:92: 49:cc:d3:1a:7b:f7:ed:7b:87:7e:36:74:30:ef:27: 14:8d:9d:16:e7:ba:1b:7a:9d:35:d3:d7:bb:4f:c7: 7b:0a:67:f2:54:93:7f:57:62:73:da:4e:0f:eb:28: 84:06:dd:2a:6a:c3:6d:72:75:aa:70:ff:9f:f7:ea: 42:b0:bc:ac:94:d1:ee:19:a8:48:74:8c:73:e1:2e: 1d:9f:e4:be:f8:40:af:c5:98:47:b5:af:4b:32:b2: 8b:34:a5:98:47:b6:42:3d:27:d8:44:ef:f8:7e:7a: 0a:40:50:96:9b:d5:51:0f:57:1f:2a:dd:da:5d:08: 06:af:fc:5d:42:e6:bf:76:d8:a0:4e:4d:fd:00:5a: f4:78:fc:d6:49:26:c7:fe:0e:59:11:91:23:e8:91: 6d:41:91:1c:44:9e:46:85:d1:fd:6b:68:01:b2:0f: 43:99:3e:1d:32:e2:dc:ad:86:6e:5d:12:d0:ba:e0: 60:44:d0:52:74:8d:b3:3a:4d:a7:3b:fc:d6:ef:0e: 27:a9:e2:09:88:46:79:2d:de:34:5a:1c:94:32:55: 97:39:38:43:b8:70:2c:0d:05:29:2e:6b:24:9f:11: bc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7F:A5:58:FA:18:FF:21:D0:E4:8B:40:10:8B:66:16:A9:EF:72:79 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.171.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a3:fc:23:93:f8:ac:8d:fc:52:32:6e:f0:14:4b:96:31:10: 9f:6f:be:91:fd:76:a7:06:b4:ba:e1:62:ab:5c:7a:b6:3f:02: bc:72:0e:1a:9b:42:72:d3:92:23:f0:2e:c8:c3:c5:b1:20:d7: 4f:97:78:28:e7:4a:d6:41:af:4b:fa:4c:fe:54:1a:2f:f8:b8: 27:b1:d1:ff:78:3d:81:89:1c:0a:7d:00:d6:5a:ec:ca:9d:a3: f7:3e:87:9f:37:52:84:82:6e:f6:d9:7b:d0:f2:e1:de:cb:85: ca:4f:e3:a9:f5:bd:d1:77:0e:f4:67:1d:c0:d3:58:0b:7b:ea: a6:4b:fe:1f:fc:01:42:5a:50:be:4e:7a:04:f9:c6:ce:f7:b2: ff:e9:f4:70:d0:79:33:59:8f:94:54:41:70:09:cb:79:8f:14: ad:a4:46:04:9f:17:ef:0e:51:ac:01:6b:2c:42:41:54:aa:6e: 97:d0:81:37:6c:dc:ef:e1:32:a1:98:94:14:76:9c:97:5b:b8: 86:06:0a:1f:68:c8:b2:e6:f9:9e:01:34:ef:bd:81:f3:3e:36: 6f:45:ac:b0:0e:6e:84:fa:61:ab:7c:48:24:d5:72:18:5b:a0: 7b:0f:c5:bd:de:e2:09:48:7b:29:eb:80:89:83:67:8a:e2:5b: b0:ef:d4:64 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbaK4sL4CZYryDxZcWQvCeGkumLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNDA0MjEwNDU1MDFaFw0yNTA0MjAwNTAwMDFaMDMxMTAvBgNV BAMTKEE4N0ZBNTU4RkExOEZGMjFEMEU0OEI0MDEwOEI2NjE2QTlFRjcyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5z4V8Y5tNdYfeCu5pI8T3LZ6M 2zWpzyfQSKLakknM0xp79+17h342dDDvJxSNnRbnuht6nTXT17tPx3sKZ/JUk39X YnPaTg/rKIQG3Spqw21ydapw/5/36kKwvKyU0e4ZqEh0jHPhLh2f5L74QK/FmEe1 r0sysos0pZhHtkI9J9hE7/h+egpAUJab1VEPVx8q3dpdCAav/F1C5r922KBOTf0A WvR4/NZJJsf+DlkRkSPokW1BkRxEnkaF0f1raAGyD0OZPh0y4tythm5dEtC64GBE 0FJ0jbM6Tac7/NbvDiep4gmIRnkt3jRaHJQyVZc5OEO4cCwNBSkuaySfEbx/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqH+lWPoY/yHQ5ItAEItmFqnvcnkwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM3MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8qzANBgkqhkiG 9w0BAQsFAAOCAQEAAKP8I5P4rI38UjJu8BRLljEQn2++kf12pwa0uuFiq1x6tj8C vHIOGptCctOSI/AuyMPFsSDXT5d4KOdK1kGvS/pM/lQaL/i4J7HR/3g9gYkcCn0A 1lrsyp2j9z6HnzdShIJu9tl70PLh3suFyk/jqfW90XcO9GcdwNNYC3vqpkv+H/wB QlpQvk56BPnGzvey/+n0cNB5M1mPlFRBcAnLeY8UraRGBJ8X7w5RrAFrLEJBVKpu l9CBN2zc7+EyoZiUFHacl1u4hgYKH2jIsub5ngE0772B8z42b0WssA5uhPphq3xI JNVyGFugew/Fvd7iCUh7KeuAiYNniuJbsO/UZA== -----END CERTIFICATE-----Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org