$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e38302e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: 0iRQYrizE/QmJ24L92WZJvLJcS2XhjsFCyOR3ouV+nE= Subject key identifier: 00:77:F7:5A:01:50:1B:53:AE:76:DD:36:EC:56:9D:D9:FC:4B:38:2F Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 6356F4DA15FC11444D86B3C784AA5D7CBE924998 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 12:01:54 +0000 ROA not before: Sat 15 Jun 2024 11:56:54 +0000 ROA not after: Sat 14 Jun 2025 12:01:54 +0000 asID: 17671 IP address blocks: 114.199.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:56:f4:da:15:fc:11:44:4d:86:b3:c7:84:aa:5d:7c:be:92:49:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 11:56:54 2024 GMT Not After : Jun 14 12:01:54 2025 GMT Subject: CN=0077F75A01501B53AE76DD36EC569DD9FC4B382F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:98:ee:50:e0:b5:d2:03:50:51:17:4e:42:80: a6:8e:23:56:b7:c7:99:d8:fb:54:53:c7:d4:c5:64: ce:95:3f:c5:2d:4a:cd:68:d5:e1:4b:9b:d3:49:8a: 12:d6:8c:2f:57:cb:e7:e6:ee:88:e0:61:d0:cf:1e: 74:54:7c:a6:61:06:9e:89:af:41:08:1b:79:aa:3e: 39:59:24:1c:aa:52:ad:a1:2f:16:42:1e:f6:40:f1: 30:3a:ad:4c:ff:d9:97:88:57:45:42:8b:fc:a6:6a: 2e:3f:78:9f:98:f7:72:62:41:bd:10:72:44:dc:65: 65:f7:ba:a7:9b:1e:bc:ad:1e:7d:c3:31:1a:98:7a: 9b:31:ee:5e:d8:41:da:17:4d:4d:ac:75:7a:19:7e: a7:69:28:69:8a:d0:da:c9:71:52:9d:e5:4c:39:15: 06:f6:bd:2b:a7:07:14:98:71:f7:d1:5f:a2:23:6b: 5e:71:7b:3f:37:4b:92:5f:d5:aa:b6:7d:0f:36:8f: 4f:2d:b8:91:d5:27:e2:be:ed:07:f8:73:3d:d7:28: 3d:c1:a8:95:54:db:1b:da:d0:c7:f6:2c:39:f1:e4: c8:67:ee:57:78:7b:49:aa:2e:c5:34:33:38:d9:12: 94:7a:00:9f:5f:4f:39:9a:8c:f6:68:c9:ae:b8:4c: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:77:F7:5A:01:50:1B:53:AE:76:DD:36:EC:56:9D:D9:FC:4B:38:2F X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.80.0/24 Signature Algorithm: sha256WithRSAEncryption 37:ad:b4:02:0c:cc:10:48:ad:0c:35:78:59:bb:2a:76:01:c6: 2d:00:ed:e9:e1:05:85:cd:c5:8a:e7:5c:74:0f:a3:a0:86:ad: 9b:5c:b9:1e:82:7d:cb:4a:98:2d:d9:59:00:90:90:4a:2c:58: 7e:a8:c6:c5:a6:26:cb:53:10:3a:7b:11:93:53:07:79:84:21: 1d:48:54:68:06:d8:2c:07:0d:26:ee:1c:26:d4:92:e7:c9:c4: 30:7b:ea:60:3a:72:20:24:c0:7a:39:a6:ff:92:b9:3e:91:c0: 61:93:56:28:f8:ca:56:0b:9a:fd:91:42:f2:df:29:9a:f5:cd: 48:83:70:f7:9f:f7:d6:87:f6:00:44:d1:43:43:ab:41:de:94: df:5b:28:b4:4b:53:27:a8:18:50:e8:7e:67:95:86:60:65:2e: fd:ad:83:7c:10:66:a8:bb:1c:4a:4a:5c:a7:2d:c1:d6:24:d4: 82:15:04:6e:7c:14:7f:27:b7:e5:1b:d2:e0:5e:f7:7b:6a:f7: 58:4e:3e:5e:7f:2f:58:dc:4c:bc:28:50:5c:bb:12:95:fd:d8: 73:f3:3e:9d:22:5d:e0:45:9a:c8:05:19:89:0b:7c:d9:ed:ec: 0d:82:77:01:79:52:fb:47:d4:43:28:c2:e5:80:94:f3:32:1f: 2a:e6:11:df -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUY1b02hX8EURNhrPHhKpdfL6SSZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMTU2NTRaFw0yNTA2MTQxMjAxNTRaMDMxMTAvBgNV BAMTKDAwNzdGNzVBMDE1MDFCNTNBRTc2REQzNkVDNTY5REQ5RkM0QjM4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqmO5Q4LXSA1BRF05CgKaOI1a3 x5nY+1RTx9TFZM6VP8UtSs1o1eFLm9NJihLWjC9Xy+fm7ojgYdDPHnRUfKZhBp6J r0EIG3mqPjlZJByqUq2hLxZCHvZA8TA6rUz/2ZeIV0VCi/ymai4/eJ+Y93JiQb0Q ckTcZWX3uqebHrytHn3DMRqYepsx7l7YQdoXTU2sdXoZfqdpKGmK0NrJcVKd5Uw5 FQb2vSunBxSYcffRX6Ija15xez83S5Jf1aq2fQ82j08tuJHVJ+K+7Qf4cz3XKD3B qJVU2xva0Mf2LDnx5Mhn7ld4e0mqLsU0MzjZEpR6AJ9fTzmajPZoya64TEALAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAHf3WgFQG1Oudt027Fad2fxLOC8wHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHUDANBgkqhkiG 9w0BAQsFAAOCAQEAN620AgzMEEitDDV4WbsqdgHGLQDt6eEFhc3FiudcdA+joIat m1y5HoJ9y0qYLdlZAJCQSixYfqjGxaYmy1MQOnsRk1MHeYQhHUhUaAbYLAcNJu4c JtSS58nEMHvqYDpyICTAejmm/5K5PpHAYZNWKPjKVgua/ZFC8t8pmvXNSINw95/3 1of2AETRQ0OrQd6U31sotEtTJ6gYUOh+Z5WGYGUu/a2DfBBmqLscSkpcpy3B1iTU ghUEbnwUfye35RvS4F73e2r3WE4+Xn8vWNxMvChQXLsSlf3Yc/M+nSJd4EWayAUZ iQt82e3sDYJ3AXlS+0fUQyjC5YCU8zIfKuYR3w== -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org