$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3137362e302f32302d3234203d3e203333363137.roa File: 3132342e3135382e3137362e302f32302d3234203d3e203333363137.roa (raw, json) Hash identifier: CoKX+Ae1nQiIhnrYE4ABLlvN4b7vuEk/1a8RzD6i60Y= Subject key identifier: B5:33:A6:58:C6:63:D9:62:32:11:75:4D:9B:C7:55:0E:56:3B:EF:3D Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 46590C3C3153963F298DBF1FE2DF1AF2511455F1 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3137362e302f32302d3234203d3e203333363137.roa Signing time: Mon 29 Jul 2024 15:02:58 +0000 ROA not before: Mon 29 Jul 2024 14:57:58 +0000 ROA not after: Mon 28 Jul 2025 15:02:58 +0000 asID: 33617 IP address blocks: 124.158.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Oct 2024 08:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:59:0c:3c:31:53:96:3f:29:8d:bf:1f:e2:df:1a:f2:51:14:55:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Jul 29 14:57:58 2024 GMT Not After : Jul 28 15:02:58 2025 GMT Subject: CN=B533A658C663D9623211754D9BC7550E563BEF3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:89:11:e7:4a:53:bb:30:7f:33:09:e6:6e: 08:68:91:6f:85:3b:3d:90:1e:c4:25:64:3a:08:e5: 2e:c3:3d:02:65:37:06:db:1a:5f:64:9c:fe:60:62: 9f:10:e5:3c:79:a3:0c:42:f7:b6:01:ee:d3:3c:bf: 8d:84:09:50:8d:d3:d1:02:d0:83:64:93:52:3a:a3: f7:5d:df:c1:84:a0:62:c4:c2:54:78:a0:57:b2:13: 1e:2f:ed:0c:e3:5a:75:34:f6:4d:77:a3:76:df:1e: ed:1c:ca:35:d6:27:59:15:c8:90:62:e2:20:a9:c1: 87:93:01:3d:92:32:bd:bd:e7:04:4a:60:d0:14:89: 90:d0:20:1a:30:0d:36:29:ce:f5:f2:04:36:e1:66: b9:a3:8f:c3:b9:04:f2:72:e2:90:ee:97:67:38:96: 20:30:fa:7f:fb:b0:a9:55:7c:5a:59:c5:26:70:07: 60:5e:88:e4:b8:3b:3b:49:13:60:8e:4f:1c:a0:7e: 28:b4:40:d6:a2:82:cd:46:3e:e6:89:f1:b5:69:bc: df:ec:9f:18:a6:21:22:88:9b:c7:36:5b:55:30:22: ba:14:c5:55:64:e5:cc:0a:52:73:f5:58:db:e7:0e: bf:5f:ce:d4:fe:8f:c6:3e:f7:6b:3b:cc:1b:3e:b6: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:33:A6:58:C6:63:D9:62:32:11:75:4D:9B:C7:55:0E:56:3B:EF:3D X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3137362e302f32302d3234203d3e203333363137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.176.0/20 Signature Algorithm: sha256WithRSAEncryption 57:3d:55:3b:82:b8:4a:28:59:c4:cc:c4:2c:f4:75:1c:c5:fe: 02:c8:c4:29:9b:ae:dd:97:f1:5a:5f:d4:60:13:99:63:ef:8c: 4b:13:c8:62:75:ff:13:a1:ab:52:81:aa:f7:0d:85:a6:5a:29: 1f:1c:7d:6a:3c:90:91:81:68:b1:12:25:f7:ca:06:6d:a9:6f: bc:88:e3:84:a6:9a:7e:3d:81:49:0a:da:f6:9a:91:0c:e0:03: 43:21:1e:83:d9:83:a9:b2:d0:96:22:42:e2:25:d3:1a:79:69: 90:55:59:b3:9e:bf:27:13:77:89:00:c2:6c:4d:ac:73:92:b9: 1b:e9:33:c5:52:f7:81:87:29:5f:04:f8:84:7c:d4:d3:01:c6: f1:37:9e:61:03:6e:0b:2d:59:80:4a:b0:60:1c:93:69:0b:86: 73:56:84:92:78:b2:6d:87:76:59:bc:7b:c2:30:dc:fc:5e:7d: e0:fc:d4:f0:1a:e7:2d:f2:59:38:74:7e:59:e5:7e:a7:27:60: b0:cb:0c:35:c7:88:9c:e1:c1:08:11:79:2f:e5:18:4a:20:08: 46:26:03:96:0d:f0:f4:04:69:06:7b:dc:09:32:36:38:61:d9: de:fc:8e:7f:24:86:7b:d8:fa:f7:b6:af:f4:f4:76:d1:7c:d7: 30:a6:80:7d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURlkMPDFTlj8pjb8f4t8a8lEUVfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNDA3MjkxNDU3NThaFw0yNTA3MjgxNTAyNThaMDMxMTAvBgNV BAMTKEI1MzNBNjU4QzY2M0Q5NjIzMjExNzU0RDlCQzc1NTBFNTYzQkVGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUYkR50pTuzB/MwnmbghokW+F Oz2QHsQlZDoI5S7DPQJlNwbbGl9knP5gYp8Q5Tx5owxC97YB7tM8v42ECVCN09EC 0INkk1I6o/dd38GEoGLEwlR4oFeyEx4v7QzjWnU09k13o3bfHu0cyjXWJ1kVyJBi 4iCpwYeTAT2SMr295wRKYNAUiZDQIBowDTYpzvXyBDbhZrmjj8O5BPJy4pDul2c4 liAw+n/7sKlVfFpZxSZwB2BeiOS4OztJE2COTxygfii0QNaigs1GPuaJ8bVpvN/s nximISKIm8c2W1UwIroUxVVk5cwKUnP1WNvnDr9fztT+j8Y+92s7zBs+tiYnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtTOmWMZj2WIyEXVNm8dVDlY77z0wHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzIzNDJlMzEzNTM4MmUzMTM3MzYyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzMzMzMzYzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEfJ6wMA0GCSqG SIb3DQEBCwUAA4IBAQBXPVU7grhKKFnEzMQs9HUcxf4CyMQpm67dl/FaX9RgE5lj 74xLE8hidf8ToatSgar3DYWmWikfHH1qPJCRgWixEiX3ygZtqW+8iOOEppp+PYFJ Ctr2mpEM4ANDIR6D2YOpstCWIkLiJdMaeWmQVVmznr8nE3eJAMJsTaxzkrkb6TPF UveBhylfBPiEfNTTAcbxN55hA24LLVmASrBgHJNpC4ZzVoSSeLJth3ZZvHvCMNz8 Xn3g/NTwGuct8lk4dH5Z5X6nJ2Cwyww1x4ic4cEIEXkv5RhKIAhGJgOWDfD0BGkG e9wJMjY4Ydne/I5/JIZ72Pr3tq/09HbRfNcwpoB9 -----END CERTIFICATE-----Generated at Thu Oct 24 04:52:34 2024 by rpki-client on console-ams.rpki-client.org