$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32332d3233203d3e20313532373934.roa File: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (raw, json) Hash identifier: /DFyNaEsyO2usBnFzIOmfhaGZCRB0eHYovN+KsopEbs= Subject key identifier: 86:5B:BB:58:31:43:77:25:4D:87:1C:13:C6:4B:1A:8B:D5:32:D6:BA Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 70A1728A84741115630ED748416F468982779469 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32332d3233203d3e20313532373934.roa Signing time: Sun 10 Nov 2024 07:59:49 +0000 ROA not before: Sun 10 Nov 2024 07:54:49 +0000 ROA not after: Sun 09 Nov 2025 07:59:49 +0000 asID: 152794 IP address blocks: 157.66.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a1:72:8a:84:74:11:15:63:0e:d7:48:41:6f:46:89:82:77:94:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Nov 10 07:54:49 2024 GMT Not After : Nov 9 07:59:49 2025 GMT Subject: CN=865BBB58314377254D871C13C64B1A8BD532D6BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d0:e1:07:31:ab:9e:7e:68:55:50:59:90:98: b6:05:10:cb:b3:f9:3f:30:02:44:31:cd:e7:9a:64: 88:ed:d7:23:6c:bc:b0:81:5d:b9:bf:56:41:c1:3c: c2:9b:c1:6b:b8:56:9d:73:51:b4:1f:09:80:bf:76: 56:fa:17:d8:fd:50:ef:1d:8b:17:3f:ee:1c:e0:a9: d3:87:43:91:44:5a:4e:8a:35:a7:a4:bc:14:7e:48: b0:20:66:9e:5f:2e:09:91:25:8c:62:8e:6b:3c:86: 9c:fd:3c:67:3d:9b:f4:93:4e:2c:3a:3b:ad:e9:01: 15:0b:15:ea:bb:fc:86:bd:17:3a:d1:1e:70:6f:d0: 3d:11:92:06:9f:d4:27:e3:d7:e8:6e:08:16:62:34: 2b:8f:d9:78:ca:a2:1f:05:7a:c7:bb:b7:09:b6:07: d9:c3:9f:1d:6f:46:bc:69:ee:b9:33:06:5b:8b:0e: ce:73:9a:eb:b7:0c:0f:1b:77:89:43:d6:af:6a:99: c6:ba:81:55:7f:f3:a2:d0:74:a3:59:0b:7d:b9:3e: ec:dd:5b:cd:cd:f2:64:8f:0f:ab:fe:be:57:25:ff: 27:02:58:76:07:94:36:cc:ca:12:f8:2c:e9:22:9a: 3a:9a:10:f2:dc:bf:3a:43:4d:71:31:e3:64:5e:41: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5B:BB:58:31:43:77:25:4D:87:1C:13:C6:4B:1A:8B:D5:32:D6:BA X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32332d3233203d3e20313532373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.40.0/23 Signature Algorithm: sha256WithRSAEncryption 64:0f:87:91:ea:d3:b9:5a:1d:86:09:70:bf:39:4d:85:a4:0b: d9:39:5a:32:cd:60:8d:9f:92:67:10:48:56:c4:d1:ab:f8:67: 50:44:a5:32:70:04:ec:09:9d:70:97:8c:aa:d1:62:da:66:54: 0d:18:b0:1d:c4:e5:12:ac:38:84:57:a2:32:37:a4:bf:4e:1f: 91:15:6c:17:5e:9c:69:73:da:81:c5:dd:8b:0b:58:f0:27:b4: 4d:90:ad:19:19:6a:a3:d1:87:b8:66:95:73:0a:e5:99:50:94: 67:ff:b2:34:12:e1:70:d5:8d:1e:05:e7:89:07:43:d6:91:ee: fe:68:ab:5d:5f:7e:f0:61:68:69:d4:31:f5:ee:e7:67:4b:45: 8a:df:a2:f7:8f:b6:51:0e:93:b9:d4:93:d4:d3:35:2f:11:1d: f7:97:a3:ba:16:ad:b6:14:19:4c:86:7a:bb:12:05:8d:5e:7b: b7:27:af:42:20:fa:57:8c:19:e7:69:a2:97:4f:65:d4:83:84: 20:c7:f5:87:7f:13:2b:72:04:f3:0e:f0:13:6d:f1:aa:c4:4a: b0:18:15:47:97:34:9c:97:28:3e:ec:82:01:1c:8a:c8:df:95: d1:63:d0:19:50:ab:be:b3:4b:80:96:9c:ce:c6:68:fc:10:f5: 37:ee:6d:44 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcKFyioR0ERVjDtdIQW9GiYJ3lGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNDExMTAwNzU0NDlaFw0yNTExMDkwNzU5NDlaMDMxMTAvBgNV BAMTKDg2NUJCQjU4MzE0Mzc3MjU0RDg3MUMxM0M2NEIxQThCRDUzMkQ2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0OEHMauefmhVUFmQmLYFEMuz +T8wAkQxzeeaZIjt1yNsvLCBXbm/VkHBPMKbwWu4Vp1zUbQfCYC/dlb6F9j9UO8d ixc/7hzgqdOHQ5FEWk6KNaekvBR+SLAgZp5fLgmRJYxijms8hpz9PGc9m/STTiw6 O63pARULFeq7/Ia9FzrRHnBv0D0Rkgaf1Cfj1+huCBZiNCuP2XjKoh8Fese7twm2 B9nDnx1vRrxp7rkzBluLDs5zmuu3DA8bd4lD1q9qmca6gVV/86LQdKNZC325Puzd W83N8mSPD6v+vlcl/ycCWHYHlDbMyhL4LOkimjqaEPLcvzpDTXEx42ReQeDXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhlu7WDFDdyVNhxwTxksai9Uy1rowHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3ZjJjMTkwLTMwZjUtNGYxOS1i ZmNhLTBiOTg3YTUyZmQ1NS8wLzMxMzUzNzJlMzYzNjJlMzQzMDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CKDANBgkqhkiG 9w0BAQsFAAOCAQEAZA+HkerTuVodhglwvzlNhaQL2TlaMs1gjZ+SZxBIVsTRq/hn UESlMnAE7AmdcJeMqtFi2mZUDRiwHcTlEqw4hFeiMjekv04fkRVsF16caXPagcXd iwtY8Ce0TZCtGRlqo9GHuGaVcwrlmVCUZ/+yNBLhcNWNHgXniQdD1pHu/mirXV9+ 8GFoadQx9e7nZ0tFit+i94+2UQ6TudST1NM1LxEd95ejuhatthQZTIZ6uxIFjV57 tyevQiD6V4wZ52mil09l1IOEIMf1h38TK3IE8w7wE23xqsRKsBgVR5c0nJcoPuyC ARyKyN+V0WPQGVCrvrNLgJaczsZo/BD1N+5tRA== -----END CERTIFICATE-----Generated at Tue Nov 26 02:15:29 2024 by rpki-client on console-fra.rpki-client.org