$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e39332e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: kn1tY3Y2sFfKGjaur371vcDoFZlGACRXVlSqDDiCpkA= Subject key identifier: 82:40:7B:3B:EB:84:C1:09:DD:B5:9E:62:13:A4:A5:2A:94:80:F1:3B Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 7C627706167B7290551343B368F8C971C50F46EE Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 11:00:02 +0000 ROA not before: Sat 15 Jun 2024 10:55:02 +0000 ROA not after: Sat 14 Jun 2025 11:00:02 +0000 asID: 17671 IP address blocks: 114.199.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:62:77:06:16:7b:72:90:55:13:43:b3:68:f8:c9:71:c5:0f:46:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 10:55:02 2024 GMT Not After : Jun 14 11:00:02 2025 GMT Subject: CN=82407B3BEB84C109DDB59E6213A4A52A9480F13B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:e9:9f:0a:04:15:8d:58:ef:c3:f0:35:5a: bf:1e:1d:60:82:ac:7e:98:19:bc:2f:35:2c:f3:85: 4a:72:7f:ce:e5:71:1b:47:6b:6b:f5:f1:00:a3:8c: b8:6f:f5:e5:88:f7:cc:f0:e8:33:1e:58:3c:1a:5b: 71:44:06:f0:fc:41:f0:b1:94:88:e9:5b:56:75:bd: 41:ea:da:b6:98:46:47:0f:b0:95:5d:43:4c:43:38: 02:2a:3c:da:c6:19:90:93:6f:3a:9b:73:6b:9a:13: 48:dc:86:ce:5f:21:a8:a0:bf:da:3b:a7:a2:a0:0a: a3:65:c5:62:61:03:35:7c:70:bf:95:35:50:02:6c: 1f:c4:db:dc:5e:63:5c:7f:24:0e:fe:9c:f0:73:aa: ae:1c:d2:c7:57:26:ca:0d:ee:3d:32:ce:8d:f1:94: 35:3c:c7:00:69:94:5e:f2:fb:58:4c:56:92:7a:f3: 76:92:e5:a5:96:72:17:cf:98:16:04:0f:07:a7:c6: 3d:76:78:95:2f:c5:4b:18:f1:d9:2a:0f:23:d0:93: 70:b3:03:c7:f5:23:b1:f0:e3:d2:01:dd:76:5e:81: 19:00:90:8a:1d:64:52:2a:35:44:0c:5e:4b:ec:47: db:cd:e8:71:8e:7d:4c:12:45:05:1b:d9:40:5a:23: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:40:7B:3B:EB:84:C1:09:DD:B5:9E:62:13:A4:A5:2A:94:80:F1:3B X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.93.0/24 Signature Algorithm: sha256WithRSAEncryption 36:e1:49:d5:dc:0a:63:9c:bb:cc:3b:43:94:e7:6a:d5:06:d3: 25:6d:6a:27:cd:4c:22:fa:de:1c:67:4e:0b:33:ce:ab:2d:3c: f6:28:6d:f8:7f:6d:65:a7:ba:7c:e7:0e:95:07:6b:2b:13:12: 84:67:79:b2:ac:ad:ab:42:aa:b9:15:89:5f:4b:27:a9:0e:e4: 19:3e:c2:2e:b2:56:e4:21:14:b3:86:97:80:fa:5d:3e:0d:89: d6:4d:77:71:20:32:df:bd:fb:c3:ac:49:82:b7:57:ba:34:ec: 71:67:3d:11:99:4d:e7:b2:5a:50:4a:46:4c:8b:e1:5a:0d:54: 7c:0f:b3:d9:9f:04:1f:d2:05:6b:19:f1:3f:a1:ff:10:c0:69: 6b:9e:be:cb:60:d9:2c:15:b4:f3:54:be:84:73:05:0c:80:1e: aa:a1:1e:45:a8:14:e5:f3:4c:f1:73:cd:e5:2f:d6:66:6b:09: f4:96:19:8d:e4:9b:64:4e:34:37:c9:b1:ad:2b:21:2e:13:d5: e0:fa:4a:7b:43:de:e0:27:d2:ac:5e:fa:cf:2f:61:43:e4:6b: 72:13:22:83:eb:9a:8b:f7:f4:82:bc:2f:0e:60:40:e2:09:cb: c7:ab:55:0e:fc:3b:1c:dc:f5:bd:93:f4:e1:2c:74:26:54:10: 09:30:37:17 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfGJ3BhZ7cpBVE0OzaPjJccUPRu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMDU1MDJaFw0yNTA2MTQxMTAwMDJaMDMxMTAvBgNV BAMTKDgyNDA3QjNCRUI4NEMxMDlEREI1OUU2MjEzQTRBNTJBOTQ4MEYxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7umfCgQVjVjvw/A1Wr8eHWCC rH6YGbwvNSzzhUpyf87lcRtHa2v18QCjjLhv9eWI98zw6DMeWDwaW3FEBvD8QfCx lIjpW1Z1vUHq2raYRkcPsJVdQ0xDOAIqPNrGGZCTbzqbc2uaE0jchs5fIaigv9o7 p6KgCqNlxWJhAzV8cL+VNVACbB/E29xeY1x/JA7+nPBzqq4c0sdXJsoN7j0yzo3x lDU8xwBplF7y+1hMVpJ683aS5aWWchfPmBYEDwenxj12eJUvxUsY8dkqDyPQk3Cz A8f1I7Hw49IB3XZegRkAkIodZFIqNUQMXkvsR9vN6HGOfUwSRQUb2UBaI8LxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgkB7O+uEwQndtZ5iE6SlKpSA8TswHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzOTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHXTANBgkqhkiG 9w0BAQsFAAOCAQEANuFJ1dwKY5y7zDtDlOdq1QbTJW1qJ81MIvreHGdOCzPOqy08 9iht+H9tZae6fOcOlQdrKxMShGd5sqytq0KquRWJX0snqQ7kGT7CLrJW5CEUs4aX gPpdPg2J1k13cSAy3737w6xJgrdXujTscWc9EZlN57JaUEpGTIvhWg1UfA+z2Z8E H9IFaxnxP6H/EMBpa56+y2DZLBW081S+hHMFDIAeqqEeRagU5fNM8XPN5S/WZmsJ 9JYZjeSbZE40N8mxrSshLhPV4PpKe0Pe4CfSrF76zy9hQ+RrchMig+uai/f0grwv DmBA4gnLx6tVDvw7HNz1vZP04Sx0JlQQCTA3Fw== -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org