$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38382e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e38382e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: ZmWJjKS5csT5vAf1SBHrMotQdAPIXO8fifXcttPVTTQ= Subject key identifier: 1D:C5:61:00:11:FC:FD:A5:D3:DB:8E:A0:E8:24:D5:07:EA:A9:26:71 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 4438238641B6B8F8848E35C9AF05F0FE12326698 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38382e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 11:00:03 +0000 ROA not before: Sat 15 Jun 2024 10:55:03 +0000 ROA not after: Sat 14 Jun 2025 11:00:03 +0000 asID: 17671 IP address blocks: 114.199.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:38:23:86:41:b6:b8:f8:84:8e:35:c9:af:05:f0:fe:12:32:66:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 10:55:03 2024 GMT Not After : Jun 14 11:00:03 2025 GMT Subject: CN=1DC5610011FCFDA5D3DB8EA0E824D507EAA92671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:ea:6e:39:39:be:f9:bf:fc:1f:fe:eb:41: c2:d2:c5:e7:fc:1c:d9:0f:b1:87:16:f1:4f:73:aa: b1:ab:98:6c:05:df:ed:a6:0f:8f:43:2e:74:b1:0a: f9:b0:0f:9e:de:b0:6e:8f:8f:34:b2:40:07:1a:f1: 9b:c9:5b:8f:92:a1:b4:d3:a2:d7:44:7b:43:af:97: 63:35:e1:cf:cd:90:dc:cb:d2:3b:c3:46:f1:38:e4: 25:b9:99:e4:90:a2:bb:8b:de:0e:b5:b5:5c:83:fa: 83:05:38:74:21:d6:74:59:7f:36:fe:19:5f:68:b9: 94:35:87:61:8a:a6:28:2e:81:2d:aa:f6:4e:c5:8a: 6d:5e:01:53:f7:db:95:27:3b:01:19:43:3a:42:9d: 52:6b:33:80:f6:23:cf:74:9a:11:d6:88:48:04:a6: e7:56:76:ac:5f:93:c5:2f:0c:f8:cf:49:40:40:57: ac:55:61:bc:6c:c4:4b:dc:e9:a5:bb:bb:3b:68:69: d9:d1:b0:5a:6c:51:82:fe:8a:a7:2e:52:48:6a:01: 75:f3:da:29:0a:48:d2:83:28:af:67:ad:d2:c1:e1: 6e:11:b6:ea:f9:b6:4a:e5:f8:02:6d:c3:56:09:3b: 92:eb:f9:58:38:eb:01:67:fb:c1:23:f9:2c:bd:56: f1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C5:61:00:11:FC:FD:A5:D3:DB:8E:A0:E8:24:D5:07:EA:A9:26:71 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38382e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.88.0/24 Signature Algorithm: sha256WithRSAEncryption b8:b9:b0:6b:fa:eb:b2:1e:3d:ae:3e:c3:a2:9f:e5:8c:ad:b6: a4:34:33:98:75:3c:dd:04:06:68:de:60:90:dd:84:1b:80:77: b6:9c:9c:c1:db:f4:ce:1a:39:a6:61:4e:71:82:cc:be:61:66: 95:a8:10:93:92:b5:fd:97:57:77:d1:fc:7f:f7:18:6f:40:06: 66:41:45:e6:13:e0:f6:a8:72:d8:6a:77:0e:c2:91:f7:04:a8: f3:67:0f:cb:a2:a0:d4:d2:b8:f4:ef:d3:6d:fc:e2:46:55:1b: 7b:fc:e1:d0:ca:49:83:d2:e6:b4:64:cc:81:bc:e3:d4:ef:c7: de:76:55:9a:70:9f:3c:e6:00:2f:7c:9e:5b:69:ac:c5:b2:42: 4c:9c:7e:91:44:15:d6:7c:0f:6d:f1:c7:0b:70:24:56:07:69: 50:0a:06:6d:f6:e2:da:be:7f:d4:f6:49:28:6e:4c:bc:9c:12: 38:55:c3:a4:98:ea:1a:26:9f:40:63:b9:35:c0:c4:c4:9d:93: 65:a1:32:73:90:89:e2:b1:c9:e2:2f:40:89:0f:a2:de:e1:a2: 0c:a1:f1:56:1b:ae:73:7e:21:2d:f5:94:37:74:a0:37:61:95: 76:21:40:98:d6:34:65:f5:fb:bb:93:b6:8e:26:a4:db:5e:46: 5e:bd:50:60 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURDgjhkG2uPiEjjXJrwXw/hIyZpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMDU1MDNaFw0yNTA2MTQxMTAwMDNaMDMxMTAvBgNV BAMTKDFEQzU2MTAwMTFGQ0ZEQTVEM0RCOEVBMEU4MjRENTA3RUFBOTI2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWUupuOTm++b/8H/7rQcLSxef8 HNkPsYcW8U9zqrGrmGwF3+2mD49DLnSxCvmwD57esG6PjzSyQAca8ZvJW4+SobTT otdEe0Ovl2M14c/NkNzL0jvDRvE45CW5meSQoruL3g61tVyD+oMFOHQh1nRZfzb+ GV9ouZQ1h2GKpigugS2q9k7Fim1eAVP325UnOwEZQzpCnVJrM4D2I890mhHWiEgE pudWdqxfk8UvDPjPSUBAV6xVYbxsxEvc6aW7uztoadnRsFpsUYL+iqcuUkhqAXXz 2ikKSNKDKK9nrdLB4W4Rtur5tkrl+AJtw1YJO5Lr+Vg46wFn+8Ej+Sy9VvH3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHcVhABH8/aXT246g6CTVB+qpJnEwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHWDANBgkqhkiG 9w0BAQsFAAOCAQEAuLmwa/rrsh49rj7Dop/ljK22pDQzmHU83QQGaN5gkN2EG4B3 tpycwdv0zho5pmFOcYLMvmFmlagQk5K1/ZdXd9H8f/cYb0AGZkFF5hPg9qhy2Gp3 DsKR9wSo82cPy6Kg1NK49O/TbfziRlUbe/zh0MpJg9LmtGTMgbzj1O/H3nZVmnCf POYAL3yeW2msxbJCTJx+kUQV1nwPbfHHC3AkVgdpUAoGbfbi2r5/1PZJKG5MvJwS OFXDpJjqGiafQGO5NcDExJ2TZaEyc5CJ4rHJ4i9AiQ+i3uGiDKHxVhuuc34hLfWU N3SgN2GVdiFAmNY0ZfX7u5O2jiak215GXr1QYA== -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org