$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3131332e32302e32382e302f32322d3234203d3e203435373331.roa File: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (raw, json) Hash identifier: /798wirB7VjrPdG56qUfoHVeq59TUF+7Mz2oarXKArA= Subject key identifier: 59:B3:BD:E6:BA:C8:52:FE:CF:09:35:67:B6:8E:F6:1A:AB:69:5B:85 Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Certificate serial: F53B38DC78A78E661CA786006940B549C345E7 Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3131332e32302e32382e302f32322d3234203d3e203435373331.roa Signing time: Mon 12 Aug 2024 09:00:02 +0000 ROA not before: Mon 12 Aug 2024 08:55:02 +0000 ROA not after: Mon 11 Aug 2025 09:00:02 +0000 asID: 45731 IP address blocks: 113.20.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f5:3b:38:dc:78:a7:8e:66:1c:a7:86:00:69:40:b5:49:c3:45:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Validity Not Before: Aug 12 08:55:02 2024 GMT Not After : Aug 11 09:00:02 2025 GMT Subject: CN=59B3BDE6BAC852FECF093567B68EF61AAB695B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:98:48:d7:d3:93:e1:51:65:a9:57:f0:5e:10: d1:96:a0:4f:63:c7:f1:5b:e3:17:b1:0b:73:38:d4: 46:ff:a8:45:2f:73:a6:ea:1d:a2:b9:a6:ee:fa:5c: f1:2a:55:d2:56:71:0b:56:7f:34:9c:c3:4f:a0:4b: f3:59:27:1e:cd:d8:b7:f8:db:60:94:ac:0b:22:0e: 8a:5a:8c:84:a8:81:3c:35:d4:78:ec:98:db:7d:4a: 14:2e:7c:dc:61:28:08:e4:83:0b:34:c9:87:2f:12: c6:76:e6:f2:bd:c7:8b:8c:ad:6f:9e:65:79:17:fb: 71:11:8b:a9:78:1c:6c:9d:01:66:ce:cb:e3:cd:eb: 2a:9c:c5:76:3a:4d:86:bf:7c:70:6a:b1:f5:1b:58: 56:d1:74:7d:b4:e1:88:7c:1e:74:af:f8:77:86:04: 47:e2:2f:d6:c1:f3:f1:d3:b0:fa:fb:4c:e6:c8:93: c3:57:57:0b:2b:ae:6e:c9:59:07:44:34:8c:9b:3c: 8e:e5:dd:73:fb:cb:6b:a7:de:1b:b3:19:0d:b6:fd: 75:af:5d:8b:bf:e9:3d:41:4f:be:21:12:dd:41:d9: 9e:58:5a:8b:b0:5e:f9:90:4a:9b:38:c3:a0:2a:61: 0c:c8:af:8f:50:a9:4f:0a:3f:16:c7:b3:ab:2f:ad: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B3:BD:E6:BA:C8:52:FE:CF:09:35:67:B6:8E:F6:1A:AB:69:5B:85 X509v3 Authority Key Identifier: keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3131332e32302e32382e302f32322d3234203d3e203435373331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.20.28.0/22 Signature Algorithm: sha256WithRSAEncryption b8:22:dc:bc:d0:ec:80:97:1e:af:17:7d:59:69:9e:f9:b2:6c: 0d:49:d6:27:28:16:8e:cf:bd:17:36:d9:30:83:1c:a7:94:61: 5e:21:db:15:c7:ad:e0:8c:7a:c0:d9:d6:0b:a6:66:7a:26:8d: ff:ff:08:c2:58:78:41:df:80:ea:1e:de:39:9d:9c:28:06:a4: 7c:cd:7f:4b:ab:b3:2f:34:c4:ba:66:b8:7f:15:c5:84:41:8b: 20:e2:eb:4f:ce:0a:ed:e1:4f:cb:26:b9:78:82:76:53:dc:ba: 89:c4:3f:c9:d0:1c:bc:0e:53:51:f8:c0:f9:fa:72:e7:57:83: 78:57:93:bf:a5:78:12:ae:b3:f5:92:46:5c:62:42:c9:b6:13: be:dd:77:8b:9a:40:17:54:96:96:06:95:19:5a:d4:8b:27:c2: 70:f9:3b:37:4d:3d:77:01:3f:b6:ba:dc:77:cb:80:8c:b7:27: 16:47:07:e4:05:af:32:87:1b:75:75:63:d3:51:15:4a:81:32: 60:22:a8:0d:16:fe:43:33:6c:99:5a:7f:41:90:1c:26:3b:44: ad:db:0e:ec:c8:5d:f6:a0:58:2b:16:be:3b:1a:a9:84:83:05: 29:d8:22:87:21:d3:85:c8:86:c4:c5:b8:5a:0d:06:7d:67:27: e8:a2:d7:65 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUAPU7ONx4p45mHKeGAGlAtUnDRecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUw REEzMjFDRDAeFw0yNDA4MTIwODU1MDJaFw0yNTA4MTEwOTAwMDJaMDMxMTAvBgNV BAMTKDU5QjNCREU2QkFDODUyRkVDRjA5MzU2N0I2OEVGNjFBQUI2OTVCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3mEjX05PhUWWpV/BeENGWoE9j x/Fb4xexC3M41Eb/qEUvc6bqHaK5pu76XPEqVdJWcQtWfzScw0+gS/NZJx7N2Lf4 22CUrAsiDopajISogTw11HjsmNt9ShQufNxhKAjkgws0yYcvEsZ25vK9x4uMrW+e ZXkX+3ERi6l4HGydAWbOy+PN6yqcxXY6TYa/fHBqsfUbWFbRdH204Yh8HnSv+HeG BEfiL9bB8/HTsPr7TObIk8NXVwsrrm7JWQdENIybPI7l3XP7y2un3huzGQ22/XWv XYu/6T1BT74hEt1B2Z5YWouwXvmQSps4w6AqYQzIr49QqU8KPxbHs6svrderAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUWbO95rrIUv7PCTVnto72GqtpW4UwHwYDVR0j BBgwFoAUgRXTAJH4lIt2rgqsi09oVQ2jIc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmRiYmMwOC00ZThlLTQ0YmEtYTRjZi0wNWUyMzNkZGEzYTUvMC84MTE1RDMwMDkx Rjg5NDhCNzZBRTBBQUM4QjRGNjg1NTBEQTMyMUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUwREEz MjFDRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZGJiYzA4LTRlOGUtNDRiYS1h NGNmLTA1ZTIzM2RkYTNhNS8wLzMxMzEzMzJlMzIzMDJlMzIzODJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM0MzUzNzMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJxFBwwDQYJKoZIhvcN AQELBQADggEBALgi3LzQ7ICXHq8XfVlpnvmybA1J1icoFo7PvRc22TCDHKeUYV4h 2xXHreCMesDZ1gumZnomjf//CMJYeEHfgOoe3jmdnCgGpHzNf0ursy80xLpmuH8V xYRBiyDi60/OCu3hT8smuXiCdlPcuonEP8nQHLwOU1H4wPn6cudXg3hXk7+leBKu s/WSRlxiQsm2E77dd4uaQBdUlpYGlRla1IsnwnD5OzdNPXcBP7a63HfLgIy3JxZH B+QFrzKHG3V1Y9NRFUqBMmAiqA0W/kMzbJlaf0GQHCY7RK3bDuzIXfagWCsWvjsa qYSDBSnYIoch04XIhsTFuFoNBn1nJ+ii12U= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org