$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137322e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3137322e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: W0xThIlUO9kW/KLfav4Rhg9gNIzWApwzoW6mQV65L64= Subject key identifier: 86:8C:C2:21:A3:D5:1A:21:B3:CE:81:8B:40:32:40:D5:16:31:B4:F9 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 2E71AE5A15BB467DC9EC569C6911A3BEB392EA17 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137322e302f32342d3234203d3e2039333431.roa Signing time: Sun 21 Apr 2024 06:00:01 +0000 ROA not before: Sun 21 Apr 2024 05:55:01 +0000 ROA not after: Sun 20 Apr 2025 06:00:01 +0000 asID: 9341 IP address blocks: 119.252.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:71:ae:5a:15:bb:46:7d:c9:ec:56:9c:69:11:a3:be:b3:92:ea:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Apr 21 05:55:01 2024 GMT Not After : Apr 20 06:00:01 2025 GMT Subject: CN=868CC221A3D51A21B3CE818B403240D51631B4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:93:f1:8c:09:a4:c8:b1:19:10:27:e9:e1:b5: 5d:00:db:bf:b0:ad:3e:be:3b:ac:96:8e:68:0e:7b: 30:31:04:97:85:31:28:60:86:47:db:ba:ce:18:70: 29:28:d6:9f:9c:65:d3:81:9d:04:67:a3:04:b9:4b: d0:37:48:c6:a7:3f:74:9c:c3:d5:fb:91:47:9f:5c: 54:ee:23:51:e7:59:00:01:32:d4:dd:58:ae:92:55: df:a0:50:82:e5:99:ef:a5:65:06:00:62:8c:a5:41: 1c:e0:e4:ec:e3:ef:88:c2:d3:15:e6:e2:f9:2d:12: 8f:5a:8d:20:76:9f:1a:33:72:71:eb:9f:30:96:ca: c1:cd:81:3a:e5:0b:71:02:3d:d4:9c:11:1e:db:5d: 41:6b:6e:09:bd:be:cc:63:75:85:ab:44:21:1a:9a: 11:15:7d:65:0b:65:e5:69:6d:cc:f2:eb:bd:a3:1f: c0:27:0e:c3:2a:52:26:17:ff:ed:48:e6:fa:f1:37: 3c:c8:86:3d:df:05:24:e6:99:5c:9e:df:32:21:d0: c6:0d:1c:18:c7:32:ae:05:ee:06:b7:da:b4:7d:d7: ed:aa:e1:3c:90:95:28:70:22:a7:c0:f8:e1:7e:cc: e0:a2:c9:36:74:b3:04:98:4b:50:6b:52:21:d2:0d: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8C:C2:21:A3:D5:1A:21:B3:CE:81:8B:40:32:40:D5:16:31:B4:F9 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137322e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.172.0/24 Signature Algorithm: sha256WithRSAEncryption 64:c8:7a:ad:a2:11:4e:a7:0e:3c:0d:d3:dd:fd:5e:34:d0:97: 8a:b7:9f:63:8b:64:45:1b:a9:18:32:97:22:ed:ca:6c:5b:d7: 4f:ab:c2:e8:bc:7b:a5:83:e7:55:bb:d0:7c:8d:53:e1:eb:d2: 1c:df:bb:cc:fe:29:5a:29:07:e7:ee:4c:14:88:19:85:4e:e5: 7e:fd:15:ec:8d:8c:e2:34:c9:db:72:50:5d:18:bc:e2:52:07: 6d:54:6a:0b:11:16:1a:0b:63:10:5b:dd:48:00:0b:20:34:e2: 3c:d7:30:b0:e2:7d:75:19:58:6f:7c:77:53:c6:cd:ed:c9:b5: a8:e8:a3:99:aa:a3:65:04:00:9f:91:7d:9f:3f:3e:88:4a:c9: a1:89:33:ea:70:14:51:f9:5e:4d:63:e8:3b:e6:49:17:32:75: 8a:1a:09:4f:2b:e5:33:44:85:5d:8d:2b:41:78:84:1f:4a:16: 06:9d:90:70:f7:9e:9d:36:6a:3e:2f:c6:13:69:67:6b:5c:ab: 31:cb:80:da:dc:f2:ae:42:75:7b:8e:d8:1d:ad:10:d3:ee:8f: 7e:8e:a7:c4:82:51:c7:09:3c:75:88:47:88:79:a9:b6:13:86: c4:2a:3d:ac:74:d4:23:c1:6d:db:c4:7e:b0:6e:73:0a:a8:42: 7b:1a:bc:b0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULnGuWhW7Rn3J7FacaRGjvrOS6hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNDA0MjEwNTU1MDFaFw0yNTA0MjAwNjAwMDFaMDMxMTAvBgNV BAMTKDg2OENDMjIxQTNENTFBMjFCM0NFODE4QjQwMzI0MEQ1MTYzMUI0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkk/GMCaTIsRkQJ+nhtV0A27+w rT6+O6yWjmgOezAxBJeFMShghkfbus4YcCko1p+cZdOBnQRnowS5S9A3SManP3Sc w9X7kUefXFTuI1HnWQABMtTdWK6SVd+gUILlme+lZQYAYoylQRzg5Ozj74jC0xXm 4vktEo9ajSB2nxozcnHrnzCWysHNgTrlC3ECPdScER7bXUFrbgm9vsxjdYWrRCEa mhEVfWULZeVpbczy672jH8AnDsMqUiYX/+1I5vrxNzzIhj3fBSTmmVye3zIh0MYN HBjHMq4F7ga32rR91+2q4TyQlShwIqfA+OF+zOCiyTZ0swSYS1BrUiHSDU7BAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhozCIaPVGiGzzoGLQDJA1RYxtPkwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM3MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8rDANBgkqhkiG 9w0BAQsFAAOCAQEAZMh6raIRTqcOPA3T3f1eNNCXirefY4tkRRupGDKXIu3KbFvX T6vC6Lx7pYPnVbvQfI1T4evSHN+7zP4pWikH5+5MFIgZhU7lfv0V7I2M4jTJ23JQ XRi84lIHbVRqCxEWGgtjEFvdSAALIDTiPNcwsOJ9dRlYb3x3U8bN7cm1qOijmaqj ZQQAn5F9nz8+iErJoYkz6nAUUfleTWPoO+ZJFzJ1ihoJTyvlM0SFXY0rQXiEH0oW Bp2QcPeenTZqPi/GE2lna1yrMcuA2tzyrkJ1e47YHa0Q0+6Pfo6nxIJRxwk8dYhH iHmpthOGxCo9rHTUI8Ft28R+sG5zCqhCexq8sA== -----END CERTIFICATE-----Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org