$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa File: 3130312e302e342e302f32322d3234203d3e203438343635.roa (raw, json) Hash identifier: 8mh8KupdLyWQUvBNib+4skF1x/A11Hrwfuz1jJcLVAs= Subject key identifier: A9:75:71:8D:70:7E:A2:EA:67:8A:4E:EF:6B:D3:1E:BD:DB:59:E2:0E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 5458F3617792D034E028E8C603E58939A0E68F19 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa Signing time: Mon 15 Jul 2024 03:04:18 +0000 ROA not before: Mon 15 Jul 2024 02:59:18 +0000 ROA not after: Mon 14 Jul 2025 03:04:18 +0000 asID: 48465 IP address blocks: 101.0.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 10:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:58:f3:61:77:92:d0:34:e0:28:e8:c6:03:e5:89:39:a0:e6:8f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Jul 15 02:59:18 2024 GMT Not After : Jul 14 03:04:18 2025 GMT Subject: CN=A975718D707EA2EA678A4EEF6BD31EBDDB59E20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:ad:1f:bd:1d:dd:db:a1:1f:b9:3a:f6:63: a8:4a:6b:09:00:6c:77:19:33:e0:51:d2:ab:08:4b: 34:b1:1b:db:ed:31:fd:a0:00:57:5a:c5:47:ad:31: 1d:08:8b:3c:c4:2a:aa:33:25:d9:f5:39:60:6c:21: f6:97:57:73:69:fc:10:db:09:da:67:84:98:37:7b: c7:9c:32:f6:35:d2:42:81:c2:e7:c2:83:e8:d9:dc: 43:3d:36:d9:18:f2:27:9d:c3:2d:e2:4f:2e:8f:a8: bb:cc:26:ad:53:37:44:b7:c8:2f:5a:ae:02:34:50: 7b:28:8a:4a:ba:73:66:c3:11:d7:2c:c1:60:36:4d: 5c:09:2d:77:85:ab:42:2c:30:27:4f:5d:de:81:f5: 22:52:10:c2:5a:6b:b0:a0:f5:0f:6b:93:14:4e:d1: fa:3a:93:80:2d:bc:72:82:52:ef:2f:cc:42:70:32: 14:76:2b:73:d4:2d:2b:83:c9:31:be:e0:d9:21:90: 37:ec:79:ef:33:b8:59:3e:de:25:19:79:f2:5c:00: 71:dc:2a:b5:48:55:20:46:6d:89:01:3b:6a:cb:11: 59:b6:52:01:3f:4c:e3:3e:00:b1:9b:ad:6d:ac:7d: eb:cd:be:19:56:56:60:00:31:7e:df:68:94:db:15: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:75:71:8D:70:7E:A2:EA:67:8A:4E:EF:6B:D3:1E:BD:DB:59:E2:0E X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.0.4.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:8a:88:83:17:9c:7b:81:fc:e8:4e:1f:91:75:a3:b0:22:c0: 45:17:c1:8c:c3:6a:a6:bf:48:7a:ae:af:1e:60:94:17:ff:78: 9c:6e:17:30:27:28:59:30:3f:17:8a:b4:16:83:27:35:f4:47: 57:c9:87:08:81:3c:3c:09:eb:64:24:e2:17:2f:96:8e:65:56: c0:60:10:49:a8:89:ce:4f:9d:a4:28:e6:6d:0f:9a:1d:f4:8b: 26:64:98:19:64:99:57:f0:ee:fa:c7:bb:76:f7:fd:d7:b1:d1: a7:5d:69:49:7f:1f:20:51:b0:5c:48:23:5b:d0:bf:9a:bc:4b: 2e:55:37:67:0b:b7:55:8a:ea:ca:7c:b1:0e:81:55:17:a5:14: 6e:1b:ea:4b:97:03:56:ca:81:4a:2c:4c:d7:ce:d2:54:da:0d: 2b:0b:1d:cc:c7:92:d5:1c:c5:d2:4c:6b:3a:94:0c:bc:cd:c2: 5d:58:2b:4a:23:6f:34:ad:41:c3:28:0f:e2:91:44:2a:45:09: 62:af:c3:ea:d2:4e:b6:3c:54:96:3b:a3:a0:c3:6f:28:21:e2: 4e:23:b6:68:47:84:a2:0b:f6:29:3c:3f:80:ae:21:27:f3:40: f4:18:bb:37:ba:ff:10:08:02:b2:32:4f:86:09:e0:24:3c:02: ba:2d:27:3b -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUVFjzYXeS0DTgKOjGA+WJOaDmjxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNDA3MTUwMjU5MThaFw0yNTA3MTQwMzA0MThaMDMxMTAvBgNV BAMTKEE5NzU3MThENzA3RUEyRUE2NzhBNEVFRjZCRDMxRUJEREI1OUUyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImK0fvR3d26EfuTr2Y6hKawkA bHcZM+BR0qsISzSxG9vtMf2gAFdaxUetMR0IizzEKqozJdn1OWBsIfaXV3Np/BDb CdpnhJg3e8ecMvY10kKBwufCg+jZ3EM9NtkY8iedwy3iTy6PqLvMJq1TN0S3yC9a rgI0UHsoikq6c2bDEdcswWA2TVwJLXeFq0IsMCdPXd6B9SJSEMJaa7Cg9Q9rkxRO 0fo6k4AtvHKCUu8vzEJwMhR2K3PULSuDyTG+4NkhkDfsee8zuFk+3iUZefJcAHHc KrVIVSBGbYkBO2rLEVm2UgE/TOM+ALGbrW2sfevNvhlWVmAAMX7faJTbFZttAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUqXVxjXB+oupnik7va9MevdtZ4g4wHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvMzEzMDMxMmUzMDJlMzQyZTMwMmYzMjMyMmQzMjM0 MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZQAEMA0GCSqGSIb3DQEBCwUA A4IBAQCdioiDF5x7gfzoTh+RdaOwIsBFF8GMw2qmv0h6rq8eYJQX/3icbhcwJyhZ MD8XirQWgyc19EdXyYcIgTw8CetkJOIXL5aOZVbAYBBJqInOT52kKOZtD5od9Ism ZJgZZJlX8O76x7t29/3XsdGnXWlJfx8gUbBcSCNb0L+avEsuVTdnC7dViurKfLEO gVUXpRRuG+pLlwNWyoFKLEzXztJU2g0rCx3Mx5LVHMXSTGs6lAy8zcJdWCtKI280 rUHDKA/ikUQqRQlir8Pq0k62PFSWO6Ogw28oIeJOI7ZoR4SiC/YpPD+AriEn80D0 GLs3uv8QCAKyMk+GCeAkPAK6LSc7 -----END CERTIFICATE-----Generated at Wed Nov 20 08:42:52 2024 by rpki-client on console-fra.rpki-client.org