$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32342d3234203d3e20313532373934.roa File: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (raw, json) Hash identifier: XF0z782r3sHF+OrwCSt8ZCAVQ0WZ8tu8nYx4HOA7soI= Subject key identifier: CD:E2:CD:85:64:0B:36:73:5F:93:2B:5F:3D:5D:46:D7:34:CC:59:C4 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 0CACB9D4A3D7BD2A475D2652C73E17F15F201052 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32342d3234203d3e20313532373934.roa Signing time: Sat 02 Nov 2024 11:58:56 +0000 ROA not before: Sat 02 Nov 2024 11:53:56 +0000 ROA not after: Sat 01 Nov 2025 11:58:56 +0000 asID: 152794 IP address blocks: 157.66.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ac:b9:d4:a3:d7:bd:2a:47:5d:26:52:c7:3e:17:f1:5f:20:10:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Nov 2 11:53:56 2024 GMT Not After : Nov 1 11:58:56 2025 GMT Subject: CN=CDE2CD85640B36735F932B5F3D5D46D734CC59C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:98:82:be:e0:03:6f:e4:d2:52:bd:79:70: c1:67:c5:5a:dc:ca:38:04:84:80:94:89:dd:65:05: e0:18:fe:05:f4:5b:2b:56:15:d9:b8:1a:da:a4:78: 37:cd:6d:f2:cb:8d:da:ad:59:b9:cd:72:73:ba:53: b1:dc:f8:60:ca:dd:81:ea:2e:35:b3:4d:4d:bf:9b: 55:06:97:51:d9:75:30:4d:9c:5f:8b:b5:94:ac:fe: 03:2b:fc:a7:ca:a5:ac:27:61:bd:60:42:47:ed:91: 1c:f0:85:6d:cc:65:e7:e8:4b:f7:c7:64:66:60:4c: 17:14:d7:c5:be:41:43:2b:ac:18:c6:4d:ba:3b:02: a9:4d:f1:a2:f9:97:3c:da:d7:4c:73:fc:ea:88:70: d7:23:a8:65:15:8d:80:e1:13:89:27:71:f7:f4:e6: 78:e5:15:f7:7f:95:99:85:4d:2b:dd:c4:cc:fe:03: b4:43:5a:3f:d5:95:c0:a0:11:0f:bf:7a:17:d6:a0: bc:b2:9b:fe:ce:ee:a0:ed:4e:f1:ad:0c:94:35:b3: 97:57:73:ac:44:84:10:88:66:3a:cb:61:a3:25:59: 7e:86:a8:a7:c5:a3:a7:14:6c:e2:a4:37:13:10:0f: 53:55:88:07:5a:3d:0d:57:f1:af:43:b7:bf:cc:7c: 72:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E2:CD:85:64:0B:36:73:5F:93:2B:5F:3D:5D:46:D7:34:CC:59:C4 X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32342d3234203d3e20313532373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.40.0/24 Signature Algorithm: sha256WithRSAEncryption 74:92:16:f9:53:8c:64:56:d1:7c:bf:ea:bd:5f:35:8b:cf:53: e2:d9:5d:be:cf:ac:a0:6f:99:76:85:f2:04:a7:6d:50:b7:e4: 2b:8a:04:c6:fe:34:fd:89:a8:ae:b5:72:9d:48:99:b8:ec:d3: 1b:89:35:b0:81:99:c8:7d:c8:fb:cc:ff:42:cb:5e:17:b4:e4: 33:90:84:bd:b6:0c:ca:cf:54:68:69:67:c2:37:68:c0:6e:43: 95:35:ff:3e:f6:e0:20:a6:fe:1f:97:8c:9a:0e:21:0d:ba:6b: 17:87:e6:92:27:b8:c0:4f:fe:91:82:24:14:3c:73:f4:64:e7: 4e:93:7c:a1:03:f4:ab:f2:d2:b8:d1:bc:a7:d9:b1:d2:6f:1e: e2:97:e8:42:16:57:b8:df:a0:99:ba:d6:81:b4:a4:77:a6:8e: 95:69:97:16:49:a5:7a:d6:41:77:25:17:26:e0:f7:ce:24:7f: 1f:b1:a5:9e:dd:da:f1:c3:0f:87:41:6f:81:e6:07:d9:e6:90: 05:0f:a1:d3:39:49:18:b5:99:1d:48:fd:d6:7b:54:d9:4c:c9: 1b:20:46:b7:9b:a4:62:5c:24:69:7b:5a:2b:83:09:cc:b4:ef: 0d:a7:fc:f4:8e:9d:7c:c4:17:66:7d:fb:36:f3:db:81:f0:00: ef:3b:ff:7a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDKy51KPXvSpHXSZSxz4X8V8gEFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNDExMDIxMTUzNTZaFw0yNTExMDExMTU4NTZaMDMxMTAvBgNV BAMTKENERTJDRDg1NjQwQjM2NzM1RjkzMkI1RjNENUQ0NkQ3MzRDQzU5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw95iCvuADb+TSUr15cMFnxVrc yjgEhICUid1lBeAY/gX0WytWFdm4GtqkeDfNbfLLjdqtWbnNcnO6U7Hc+GDK3YHq LjWzTU2/m1UGl1HZdTBNnF+LtZSs/gMr/KfKpawnYb1gQkftkRzwhW3MZefoS/fH ZGZgTBcU18W+QUMrrBjGTbo7AqlN8aL5lzza10xz/OqIcNcjqGUVjYDhE4kncff0 5njlFfd/lZmFTSvdxMz+A7RDWj/VlcCgEQ+/ehfWoLyym/7O7qDtTvGtDJQ1s5dX c6xEhBCIZjrLYaMlWX6GqKfFo6cUbOKkNxMQD1NViAdaPQ1X8a9Dt7/MfHI7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzeLNhWQLNnNfkytfPV1G1zTMWcQwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3ZjJjMTkwLTMwZjUtNGYxOS1i ZmNhLTBiOTg3YTUyZmQ1NS8wLzMxMzUzNzJlMzYzNjJlMzQzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CKDANBgkqhkiG 9w0BAQsFAAOCAQEAdJIW+VOMZFbRfL/qvV81i89T4tldvs+soG+ZdoXyBKdtULfk K4oExv40/YmorrVynUiZuOzTG4k1sIGZyH3I+8z/QsteF7TkM5CEvbYMys9UaGln wjdowG5DlTX/PvbgIKb+H5eMmg4hDbprF4fmkie4wE/+kYIkFDxz9GTnTpN8oQP0 q/LSuNG8p9mx0m8e4pfoQhZXuN+gmbrWgbSkd6aOlWmXFkmletZBdyUXJuD3ziR/ H7Glnt3a8cMPh0FvgeYH2eaQBQ+h0zlJGLWZHUj91ntU2UzJGyBGt5ukYlwkaXta K4MJzLTvDaf89I6dfMQXZn37NvPbgfAA7zv/eg== -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org