$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa File: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (raw, json) Hash identifier: mXFaS3Q2Z8aMxFZyoIGhok389YcSdJUbkfBLcerijDQ= Subject key identifier: 19:31:3C:30:4C:E7:E4:51:2B:46:F1:25:19:69:60:DC:93:AA:0E:56 Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Certificate serial: 36936A6307E58325146A772972F8C008EAAE7C84 Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa Signing time: Mon 11 Sep 2023 09:00:01 +0000 ROA not before: Mon 11 Sep 2023 08:55:01 +0000 ROA not after: Mon 09 Sep 2024 09:00:01 +0000 asID: 45731 IP address blocks: 180.235.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:93:6a:63:07:e5:83:25:14:6a:77:29:72:f8:c0:08:ea:ae:7c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Validity Not Before: Sep 11 08:55:01 2023 GMT Not After : Sep 9 09:00:01 2024 GMT Subject: CN=19313C304CE7E4512B46F125196960DC93AA0E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4f:23:38:21:e8:4c:34:cc:7f:e6:f5:2f:d5: 50:17:36:e1:33:a0:97:70:e4:de:0f:5f:24:46:1c: a4:ec:79:7a:e1:88:12:1b:46:00:7d:0a:f6:78:7e: ed:54:a5:71:81:09:70:6b:98:4f:66:dc:fd:61:bc: 44:6e:13:cd:5d:fa:5c:8e:d5:5c:70:fe:82:31:76: 3a:4c:3b:6e:e9:fc:5c:9a:89:6e:3d:06:b6:8e:d8: cf:f8:c8:e2:2f:36:ba:9d:47:db:71:25:d9:88:12: 51:d7:fe:5c:4f:0e:55:91:55:11:7e:be:c5:d3:27: 9b:6f:d9:91:97:11:9e:6e:c7:aa:50:52:7b:68:f0: 05:58:73:ac:77:d1:80:77:19:26:5d:91:f0:03:c0: ef:d1:39:49:2a:69:52:03:69:0a:76:38:aa:fe:4e: 42:e2:d3:e6:d3:ec:02:5c:38:66:f9:83:23:f7:74: fa:2b:f0:96:bc:47:9e:b6:9e:94:d5:d3:79:a7:2f: 5d:df:8a:a4:90:96:6d:09:7d:0c:dd:90:2b:35:28: 29:cc:f4:51:aa:c6:8a:73:4f:be:65:ec:dc:87:1d: 7d:45:2b:6f:3b:05:8e:69:d5:4d:15:9b:dd:cc:3a: 35:a7:d2:69:54:8c:97:3e:57:79:f8:41:80:f6:46: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:31:3C:30:4C:E7:E4:51:2B:46:F1:25:19:69:60:DC:93:AA:0E:56 X509v3 Authority Key Identifier: keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.235.148.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:0f:94:bb:cf:60:28:45:77:9c:eb:e8:c7:ba:d1:9d:9c:f7: 67:4a:f3:e4:c5:09:9b:80:81:9e:f1:27:8c:0b:87:25:32:72: 01:f3:03:c1:36:ed:42:a8:a8:44:d6:8e:09:ca:81:26:57:90: 24:3d:39:70:b1:13:11:f4:38:db:bf:f9:bc:8a:40:3f:e2:55: 1e:0b:06:38:21:ae:3b:f2:4f:16:80:21:13:b4:5b:88:86:0e: f7:78:32:48:11:f3:1d:07:d8:8d:38:b7:e0:c8:dd:a4:4e:ec: 8f:5e:75:20:3b:ba:13:e8:27:55:69:31:46:42:23:1e:ec:60: 1d:0d:1b:a8:43:e9:9c:d6:74:54:dc:9c:2e:31:c3:43:6b:af: f6:7e:d8:67:d6:a7:1e:4b:94:55:61:7f:c3:88:60:20:50:f4: 29:15:0d:af:29:24:bc:4b:3f:89:0e:89:d7:8b:9b:0d:c6:94: 1b:4d:5b:97:87:1e:6d:7c:b5:cf:55:bb:28:d2:bf:cb:ef:e7: a9:d8:30:62:a3:fc:05:89:fd:6a:d1:2c:8d:4d:50:6f:21:eb: fd:ea:a8:4d:e1:63:17:d9:33:ec:35:c3:f7:7f:c2:02:22:59: 36:21:cf:89:18:1c:9b:6d:7e:00:c8:90:82:81:a8:91:a4:af: 17:08:14:46 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNpNqYwflgyUUancpcvjACOqufIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUw REEzMjFDRDAeFw0yMzA5MTEwODU1MDFaFw0yNDA5MDkwOTAwMDFaMDMxMTAvBgNV BAMTKDE5MzEzQzMwNENFN0U0NTEyQjQ2RjEyNTE5Njk2MERDOTNBQTBFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsTyM4IehMNMx/5vUv1VAXNuEz oJdw5N4PXyRGHKTseXrhiBIbRgB9CvZ4fu1UpXGBCXBrmE9m3P1hvERuE81d+lyO 1Vxw/oIxdjpMO27p/FyaiW49BraO2M/4yOIvNrqdR9txJdmIElHX/lxPDlWRVRF+ vsXTJ5tv2ZGXEZ5ux6pQUnto8AVYc6x30YB3GSZdkfADwO/ROUkqaVIDaQp2OKr+ TkLi0+bT7AJcOGb5gyP3dPor8Ja8R562npTV03mnL13fiqSQlm0JfQzdkCs1KCnM 9FGqxopzT75l7NyHHX1FK287BY5p1U0Vm93MOjWn0mlUjJc+V3n4QYD2RvslAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGTE8MEzn5FErRvElGWlg3JOqDlYwHwYDVR0j BBgwFoAUgRXTAJH4lIt2rgqsi09oVQ2jIc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmRiYmMwOC00ZThlLTQ0YmEtYTRjZi0wNWUyMzNkZGEzYTUvMC84MTE1RDMwMDkx Rjg5NDhCNzZBRTBBQUM4QjRGNjg1NTBEQTMyMUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUwREEz MjFDRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZGJiYzA4LTRlOGUtNDRiYS1h NGNmLTA1ZTIzM2RkYTNhNS8wLzMxMzgzMDJlMzIzMzM1MmUzMTM0MzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNDM1MzczMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtOuUMA0GCSqG SIb3DQEBCwUAA4IBAQA8D5S7z2AoRXec6+jHutGdnPdnSvPkxQmbgIGe8SeMC4cl MnIB8wPBNu1CqKhE1o4JyoEmV5AkPTlwsRMR9Djbv/m8ikA/4lUeCwY4Ia478k8W gCETtFuIhg73eDJIEfMdB9iNOLfgyN2kTuyPXnUgO7oT6CdVaTFGQiMe7GAdDRuo Q+mc1nRU3JwuMcNDa6/2fthn1qceS5RVYX/DiGAgUPQpFQ2vKSS8Sz+JDonXi5sN xpQbTVuXhx5tfLXPVbso0r/L7+ep2DBio/wFif1q0SyNTVBvIev96qhN4WMX2TPs NcP3f8ICIlk2Ic+JGBybbX4AyJCCgaiRpK8XCBRG -----END CERTIFICATE-----Generated at Mon Jun 24 01:27:24 2024 by rpki-client on console-ams.rpki-client.org