$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e38372e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: H/EPvH9Oi+mzwBwTDQlaHVsFR7EA30gdJBwqEp3mQSU= Subject key identifier: 4C:A3:B9:4B:61:17:A1:8C:E6:F8:7B:47:7F:2F:D2:D2:F8:B2:EE:7B Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 64E713C7A0CC79BC7081683011685A9490F723DF Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 11:00:02 +0000 ROA not before: Sat 15 Jun 2024 10:55:02 +0000 ROA not after: Sat 14 Jun 2025 11:00:02 +0000 asID: 17671 IP address blocks: 114.199.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e7:13:c7:a0:cc:79:bc:70:81:68:30:11:68:5a:94:90:f7:23:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 10:55:02 2024 GMT Not After : Jun 14 11:00:02 2025 GMT Subject: CN=4CA3B94B6117A18CE6F87B477F2FD2D2F8B2EE7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4b:62:87:3f:a5:6c:78:b1:e3:26:67:2a:9a: 6c:c0:ce:74:a7:0c:a0:69:7c:99:89:cd:bb:ce:bf: 69:44:89:da:1b:60:52:28:0f:9c:61:46:41:a1:40: 25:00:84:48:15:01:60:66:0b:e5:7e:18:b9:6e:7f: ec:45:22:f0:d3:eb:1c:49:dd:51:3a:cd:e1:5d:e9: df:88:bd:a6:60:c0:d0:29:c9:ac:4d:eb:48:1e:6d: 43:48:9d:57:19:ee:aa:85:8d:5f:66:91:eb:8e:0b: c1:e1:7b:21:14:e3:43:9b:7b:89:72:ec:4a:1e:77: b0:f0:76:4f:99:ed:a4:29:2f:62:02:e6:ab:f1:c8: 3b:16:ab:23:4a:24:3e:29:28:95:03:ac:57:c6:48: 84:df:26:63:29:ae:dc:6d:7d:95:4a:61:2f:a1:a7: 10:73:a2:dd:e8:b9:78:bb:a6:00:e7:d8:90:a5:46: 10:11:27:76:ba:33:94:51:6f:bc:2d:bd:5a:62:0f: 6b:bc:26:ac:9e:81:1d:aa:17:01:b0:f0:a5:6d:7e: ad:91:19:cd:40:2e:ca:9b:f5:6d:af:2e:95:34:d2: ed:fe:22:13:55:01:52:20:48:25:7f:d9:c9:c9:a1: aa:10:29:b9:7d:d1:43:81:7b:23:18:01:43:55:4c: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:B9:4B:61:17:A1:8C:E6:F8:7B:47:7F:2F:D2:D2:F8:B2:EE:7B X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.87.0/24 Signature Algorithm: sha256WithRSAEncryption 01:64:49:19:e7:ea:02:29:eb:15:82:ab:02:bd:9b:71:40:42: 6e:ce:88:97:a4:10:0d:bc:5f:dd:6d:2b:58:26:df:ea:98:4e: fd:a2:e8:95:65:25:bc:f3:ce:16:c7:e6:7a:7c:13:72:e5:19: a0:62:8a:cf:c0:b4:0b:07:3f:cc:99:4b:ec:46:ff:98:6b:35: 37:53:a4:40:37:71:8f:d5:a2:0d:4d:0d:4a:0f:26:ba:f6:a5: 5f:64:65:4e:f9:bd:18:43:59:9e:3c:e6:97:6c:09:2d:7d:bf: 98:b5:00:37:1a:bf:e7:b1:ba:4d:dd:79:f7:0f:e5:d2:30:c0: 9a:39:57:19:5f:19:1b:91:e2:7f:ca:f5:e4:18:ac:79:e8:7f: af:d3:07:6a:8a:cb:66:a4:8c:4d:ba:01:6c:83:4e:73:25:14: fc:65:f1:b8:79:f7:66:15:a9:aa:1d:da:55:0a:1e:cd:e5:26: 24:80:dc:76:22:85:17:f7:7f:b0:f4:b8:84:9a:48:f4:fd:a5: 8b:67:45:c0:b6:87:de:58:0c:89:5b:5c:e8:56:66:23:2f:65: ca:bc:04:00:ab:23:45:60:9a:56:8f:b5:0a:91:9b:fb:92:03: 88:33:c8:4b:ac:0c:b6:16:7f:63:78:63:8c:4a:07:fe:61:2e: 77:9a:d9:22 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZOcTx6DMebxwgWgwEWhalJD3I98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMDU1MDJaFw0yNTA2MTQxMTAwMDJaMDMxMTAvBgNV BAMTKDRDQTNCOTRCNjExN0ExOENFNkY4N0I0NzdGMkZEMkQyRjhCMkVFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHS2KHP6VseLHjJmcqmmzAznSn DKBpfJmJzbvOv2lEidobYFIoD5xhRkGhQCUAhEgVAWBmC+V+GLluf+xFIvDT6xxJ 3VE6zeFd6d+IvaZgwNApyaxN60gebUNInVcZ7qqFjV9mkeuOC8HheyEU40Obe4ly 7Eoed7Dwdk+Z7aQpL2IC5qvxyDsWqyNKJD4pKJUDrFfGSITfJmMprtxtfZVKYS+h pxBzot3ouXi7pgDn2JClRhARJ3a6M5RRb7wtvVpiD2u8JqyegR2qFwGw8KVtfq2R Gc1ALsqb9W2vLpU00u3+IhNVAVIgSCV/2cnJoaoQKbl90UOBeyMYAUNVTF1DAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTKO5S2EXoYzm+HtHfy/S0viy7nswHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHVzANBgkqhkiG 9w0BAQsFAAOCAQEAAWRJGefqAinrFYKrAr2bcUBCbs6Il6QQDbxf3W0rWCbf6phO /aLolWUlvPPOFsfmenwTcuUZoGKKz8C0Cwc/zJlL7Eb/mGs1N1OkQDdxj9WiDU0N Sg8muvalX2RlTvm9GENZnjzml2wJLX2/mLUANxq/57G6Td159w/l0jDAmjlXGV8Z G5Hif8r15Biseeh/r9MHaorLZqSMTboBbINOcyUU/GXxuHn3ZhWpqh3aVQoezeUm JIDcdiKFF/d/sPS4hJpI9P2li2dFwLaH3lgMiVtc6FZmIy9lyrwEAKsjRWCaVo+1 CpGb+5IDiDPIS6wMthZ/Y3hjjEoH/mEud5rZIg== -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org