$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e38362e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: DKrRSsXeTdIMLRcqIMzpajk5F3quaDcS85Qx1fDbdzU= Subject key identifier: 78:FF:1C:E9:D0:63:60:F3:84:6A:40:75:CB:39:11:34:99:4A:10:92 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 1E3F52C7D7ADE397D988D7B2ABA6D7707488E1D9 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 12:01:54 +0000 ROA not before: Sat 15 Jun 2024 11:56:54 +0000 ROA not after: Sat 14 Jun 2025 12:01:54 +0000 asID: 17671 IP address blocks: 114.199.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3f:52:c7:d7:ad:e3:97:d9:88:d7:b2:ab:a6:d7:70:74:88:e1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 11:56:54 2024 GMT Not After : Jun 14 12:01:54 2025 GMT Subject: CN=78FF1CE9D06360F3846A4075CB391134994A1092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:c9:01:a1:12:6d:f3:43:5c:3b:57:2e:be: 88:7d:8b:f6:e4:73:4a:10:d0:34:4c:da:b9:e9:65: 82:df:9c:38:a1:d9:f2:59:e6:91:6f:ae:aa:64:d5: 0e:9d:74:2c:06:97:75:0d:cc:f8:56:50:68:66:ec: a3:cf:18:6b:59:ee:e1:3e:83:8c:57:28:a0:86:b3: 56:4d:92:13:74:2a:28:cb:5e:2b:94:d4:67:2d:73: 24:bc:01:f4:f2:5e:bd:b3:45:5f:0b:30:c4:1b:1d: 55:ff:ab:8a:ca:64:94:72:17:ae:4c:ee:98:90:bb: 9d:4a:51:2c:0f:fd:1f:50:f1:82:0c:76:65:0a:f9: ec:31:c6:01:00:38:2f:bd:99:7b:05:64:3a:6f:5e: a6:a8:28:e8:5f:9a:ea:1a:77:ab:2d:d6:4f:c1:0b: 02:09:ac:dd:26:70:a7:79:87:c9:06:55:55:e0:88: 8a:a9:15:4a:5d:66:b2:a6:14:52:50:40:20:e1:20: 19:94:0f:f9:c4:bd:ee:49:f3:47:ea:54:ab:ac:22: 82:83:0e:4d:77:3e:ef:ac:56:f4:b0:73:65:f6:29: 1f:53:b6:75:5b:5e:52:a7:60:de:13:b0:6e:9a:24: 46:1d:41:bc:e2:d6:2f:6f:26:fe:d8:57:95:d1:50: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FF:1C:E9:D0:63:60:F3:84:6A:40:75:CB:39:11:34:99:4A:10:92 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.86.0/24 Signature Algorithm: sha256WithRSAEncryption 57:ba:97:e7:95:d8:f2:33:86:a3:c1:40:58:26:2d:0e:8d:27: 7e:7f:ec:65:62:95:e4:4b:b0:fc:38:8b:9e:ee:a3:7a:41:9f: 4f:51:9f:30:70:3b:13:dc:83:16:ad:91:25:b5:f2:e5:00:8d: 57:03:0a:a0:6e:80:86:1d:97:f4:dd:02:d9:40:e5:6c:ed:63: 39:a9:f3:2b:4e:5f:a9:20:08:0c:0f:d0:ec:e2:a6:96:81:2c: 44:55:15:d2:70:22:d9:db:24:fa:16:88:fd:ec:73:47:a1:55: 59:7a:48:db:04:84:da:f2:fe:03:c8:65:13:8d:52:7d:8d:0c: e5:0f:df:84:ed:98:cf:63:ff:2c:74:0b:54:65:fe:2c:8f:04: 05:5f:42:5d:0c:78:ac:a9:f7:74:b5:30:5c:27:52:1b:81:9c: 7a:9d:87:4a:6f:f9:e1:82:4a:cb:26:9a:2f:da:4e:c4:8b:bf: 56:f3:a2:b3:c0:5b:5d:2b:63:f4:1d:47:81:99:66:d4:62:1b: 73:5c:c1:7c:4e:92:9d:2a:12:b8:7a:64:68:73:75:f3:42:51: cd:10:7f:d9:81:90:ab:06:33:c8:2d:17:d8:1e:7e:81:d9:92: 0b:cf:79:63:77:7e:d8:2f:f3:b3:e4:bc:99:d8:3c:b3:5a:ab: 59:eb:eb:6f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHj9Sx9et45fZiNeyq6bXcHSI4dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMTU2NTRaFw0yNTA2MTQxMjAxNTRaMDMxMTAvBgNV BAMTKDc4RkYxQ0U5RDA2MzYwRjM4NDZBNDA3NUNCMzkxMTM0OTk0QTEwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fckBoRJt80NcO1cuvoh9i/bk c0oQ0DRM2rnpZYLfnDih2fJZ5pFvrqpk1Q6ddCwGl3UNzPhWUGhm7KPPGGtZ7uE+ g4xXKKCGs1ZNkhN0KijLXiuU1GctcyS8AfTyXr2zRV8LMMQbHVX/q4rKZJRyF65M 7piQu51KUSwP/R9Q8YIMdmUK+ewxxgEAOC+9mXsFZDpvXqaoKOhfmuoad6st1k/B CwIJrN0mcKd5h8kGVVXgiIqpFUpdZrKmFFJQQCDhIBmUD/nEve5J80fqVKusIoKD Dk13Pu+sVvSwc2X2KR9TtnVbXlKnYN4TsG6aJEYdQbzi1i9vJv7YV5XRUDRvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUeP8c6dBjYPOEakB1yzkRNJlKEJIwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHVjANBgkqhkiG 9w0BAQsFAAOCAQEAV7qX55XY8jOGo8FAWCYtDo0nfn/sZWKV5Euw/DiLnu6jekGf T1GfMHA7E9yDFq2RJbXy5QCNVwMKoG6Ahh2X9N0C2UDlbO1jOanzK05fqSAIDA/Q 7OKmloEsRFUV0nAi2dsk+haI/exzR6FVWXpI2wSE2vL+A8hlE41SfY0M5Q/fhO2Y z2P/LHQLVGX+LI8EBV9CXQx4rKn3dLUwXCdSG4Gcep2HSm/54YJKyyaaL9pOxIu/ VvOis8BbXStj9B1HgZlm1GIbc1zBfE6SnSoSuHpkaHN180JRzRB/2YGQqwYzyC0X 2B5+gdmSC895Y3d+2C/zs+S8mdg8s1qrWevrbw== -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org