$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38322e302f32342d3234203d3e2039333431.roa File: 32372e3132342e38322e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: O8Ft4xeUSgiX5nG7Tpay5yfq+nA+0rjZLUvQxPwnLp8= Subject key identifier: D2:EB:45:10:1F:BB:91:DB:77:50:BB:D9:27:73:21:09:DF:70:54:B3 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 7BC969C9D348D2AD0E3B23DC8C04C337AE4EB840 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38322e302f32342d3234203d3e2039333431.roa Signing time: Wed 11 Sep 2024 12:00:02 +0000 ROA not before: Wed 11 Sep 2024 11:55:02 +0000 ROA not after: Wed 10 Sep 2025 12:00:02 +0000 asID: 9341 IP address blocks: 27.124.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c9:69:c9:d3:48:d2:ad:0e:3b:23:dc:8c:04:c3:37:ae:4e:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Sep 11 11:55:02 2024 GMT Not After : Sep 10 12:00:02 2025 GMT Subject: CN=D2EB45101FBB91DB7750BBD927732109DF7054B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:f2:22:92:a4:e3:a4:8b:16:51:ff:28:69: 7f:69:29:24:13:38:15:07:c7:e9:20:66:83:1c:a7: e4:a0:1d:2e:21:3a:bc:7e:f9:ec:95:df:73:b9:e8: 40:0f:51:50:4e:28:32:67:dd:0d:2a:c8:54:13:68: 86:92:8e:85:cd:d2:e5:81:b7:d8:24:ae:48:e5:1f: 1d:d5:2e:0c:9e:b7:b3:b7:d4:26:90:1a:93:f3:e3: b9:62:5d:58:c6:b6:b4:66:3d:f2:df:37:88:1e:c1: 2a:40:23:77:3c:31:16:a3:e0:03:dc:a5:21:3f:48: 4c:9b:1d:3d:5a:e5:47:df:3a:0c:ed:2e:9b:e2:19: 16:71:10:d3:b1:3b:2d:8f:0d:77:30:bb:2e:2b:5f: 2c:e1:95:7b:df:79:41:f4:6a:31:73:bb:3e:44:1d: a9:45:17:8f:69:ce:38:2b:03:61:1d:e7:54:b7:bd: 0c:cb:7a:05:2b:bf:d6:3f:e5:d5:4b:75:90:50:18: de:ad:5c:78:18:76:be:20:06:3e:4e:5a:3a:b7:96: 5c:96:36:3e:22:8f:15:dc:d3:2e:f2:91:02:2d:e9: 62:77:99:f3:06:dc:6b:00:5f:b0:da:15:97:51:1c: dc:92:78:63:09:7a:a0:4f:3c:78:21:5a:1b:17:89: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EB:45:10:1F:BB:91:DB:77:50:BB:D9:27:73:21:09:DF:70:54:B3 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38322e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.82.0/24 Signature Algorithm: sha256WithRSAEncryption 40:6c:56:02:39:5b:fd:45:c4:49:2a:dc:86:94:38:be:3e:8d: ba:48:79:b6:b5:01:76:e1:62:21:d4:65:69:a2:2e:22:ba:fe: 82:af:04:06:17:78:9f:6d:b7:69:7c:f7:44:af:68:af:01:34: 41:a9:d6:8b:51:d8:a1:15:67:7f:8b:81:72:24:a2:e8:c5:69: da:08:7b:04:3d:42:af:00:78:ef:7f:29:b1:3d:6f:5f:55:93: cb:fc:b0:c8:ab:5d:33:76:09:77:68:b6:98:cf:58:4d:c2:28: 04:c7:eb:19:9a:ff:f9:4f:a1:dc:d3:ee:13:e7:8b:01:70:4a: fd:95:fd:a7:1b:42:6b:ca:f1:16:f5:55:2b:3f:d5:85:00:06: 78:c4:46:95:3e:b2:75:5e:fe:62:20:f2:c3:7a:4b:be:5c:a2: 25:e7:ed:3a:60:dd:44:1e:ec:39:63:b6:c9:16:e1:26:60:cd: 13:98:43:02:ac:72:13:3e:86:99:c1:87:97:5f:4c:00:2c:a3: a0:b9:fc:b6:f9:42:c0:70:f4:cd:80:b8:2a:bd:73:d4:f8:6e: 86:0e:0c:17:a2:33:4c:e0:c5:3b:cc:73:70:d5:93:d3:65:62: b1:f0:9a:d8:08:d4:df:fe:76:ed:dc:c4:ba:ab:1a:35:b5:15: 4d:57:04:73 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUe8lpydNI0q0OOyPcjATDN65OuEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNDA5MTExMTU1MDJaFw0yNTA5MTAxMjAwMDJaMDMxMTAvBgNV BAMTKEQyRUI0NTEwMUZCQjkxREI3NzUwQkJEOTI3NzMyMTA5REY3MDU0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsP/IikqTjpIsWUf8oaX9pKSQT OBUHx+kgZoMcp+SgHS4hOrx++eyV33O56EAPUVBOKDJn3Q0qyFQTaIaSjoXN0uWB t9gkrkjlHx3VLgyet7O31CaQGpPz47liXVjGtrRmPfLfN4gewSpAI3c8MRaj4APc pSE/SEybHT1a5UffOgztLpviGRZxENOxOy2PDXcwuy4rXyzhlXvfeUH0ajFzuz5E HalFF49pzjgrA2Ed51S3vQzLegUrv9Y/5dVLdZBQGN6tXHgYdr4gBj5OWjq3llyW Nj4ijxXc0y7ykQIt6WJ3mfMG3GsAX7DaFZdRHNySeGMJeqBPPHghWhsXicEBAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU0utFEB+7kdt3ULvZJ3MhCd9wVLMwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh YjktMzQyNGU0NDg0ODRlLzAvMzIzNzJlMzEzMjM0MmUzODMyMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbfFIwDQYJKoZIhvcNAQEL BQADggEBAEBsVgI5W/1FxEkq3IaUOL4+jbpIeba1AXbhYiHUZWmiLiK6/oKvBAYX eJ9tt2l890SvaK8BNEGp1otR2KEVZ3+LgXIkoujFadoIewQ9Qq8AeO9/KbE9b19V k8v8sMirXTN2CXdotpjPWE3CKATH6xma//lPodzT7hPniwFwSv2V/acbQmvK8Rb1 VSs/1YUABnjERpU+snVe/mIg8sN6S75coiXn7Tpg3UQe7DljtskW4SZgzROYQwKs chM+hpnBh5dfTAAso6C5/Lb5QsBw9M2AuCq9c9T4boYODBeiM0zgxTvMc3DVk9Nl YrHwmtgI1N/+du3cxLqrGjW1FU1XBHM= -----END CERTIFICATE-----Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org