$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136332e302f32342d3234203d3e203436303330.roa File: 3138322e34382e3136332e302f32342d3234203d3e203436303330.roa (raw, json) Hash identifier: fz7pE6lsWM9JX0ijg+ZHjfZgq5viOkafk0ivlWyKRSU= Subject key identifier: A0:BC:53:6B:D1:0C:C9:5A:F2:0E:11:C0:C8:CA:CD:73:68:D2:ED:B7 Certificate issuer: /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Certificate serial: 06496943D5B0D317FAA38DE57BE4F571ADB03841 Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136332e302f32342d3234203d3e203436303330.roa Signing time: Fri 18 Oct 2024 12:00:02 +0000 ROA not before: Fri 18 Oct 2024 11:55:02 +0000 ROA not after: Fri 17 Oct 2025 12:00:02 +0000 asID: 46030 IP address blocks: 182.48.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:49:69:43:d5:b0:d3:17:fa:a3:8d:e5:7b:e4:f5:71:ad:b0:38:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Validity Not Before: Oct 18 11:55:02 2024 GMT Not After : Oct 17 12:00:02 2025 GMT Subject: CN=A0BC536BD10CC95AF20E11C0C8CACD7368D2EDB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:3c:92:ed:58:cb:f4:86:9f:27:ca:4b:97: af:ec:06:41:71:32:1a:7f:8f:b9:29:4e:5f:e6:c6: b5:ff:cd:0c:d1:f7:a6:3d:5f:d2:fc:9b:3f:00:70: e2:06:b7:32:d0:bd:a7:00:65:c3:3e:4d:13:76:65: 59:98:21:16:65:8f:ee:9f:f6:ab:f2:36:c8:0c:54: f9:d4:24:26:5f:11:44:39:ec:45:01:db:83:4d:83: 5d:3c:ac:4e:ab:a6:d5:47:bd:76:ef:98:5f:43:fb: 84:b0:e5:b3:7d:d5:35:c3:fa:cd:30:f9:8b:68:94: ff:02:dd:f1:f0:ed:8e:32:a3:9a:d6:99:3d:93:85: 41:96:b2:59:b4:43:4e:2c:6e:20:56:6d:53:39:48: bb:a9:61:2f:f2:34:dc:54:08:54:32:97:e0:48:6a: 64:b6:32:0b:f9:72:28:79:2f:93:72:5e:06:39:af: 21:94:72:3e:0c:21:bc:91:8c:8a:19:83:42:a6:da: 7a:1a:58:36:bf:93:02:77:0d:64:02:ca:03:95:dc: 1d:bf:1d:cc:14:c1:e9:83:a5:23:0c:67:68:32:69: 6c:40:83:96:e6:0e:c0:a7:e7:09:be:af:9e:81:ea: 1d:a3:11:00:2f:e3:26:c2:ea:b6:1e:5e:74:ee:4f: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BC:53:6B:D1:0C:C9:5A:F2:0E:11:C0:C8:CA:CD:73:68:D2:ED:B7 X509v3 Authority Key Identifier: keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136332e302f32342d3234203d3e203436303330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.48.163.0/24 Signature Algorithm: sha256WithRSAEncryption 16:f5:81:c7:17:a4:61:e8:73:64:a3:67:b6:80:bf:75:3e:5b: 69:c9:8e:1d:b5:76:71:d4:6c:c2:0f:01:16:a1:f2:02:f1:63: 8d:e1:47:b9:46:1a:61:d2:70:97:f8:31:dd:94:7a:d3:49:b3: c6:9d:0e:bf:4d:ea:87:4b:f2:66:0f:67:a4:c2:12:ba:da:6e: c6:3d:19:2f:c0:a6:46:10:cf:f4:7b:bd:ad:e5:ab:d2:ee:f3: b1:f7:cc:db:2e:ed:b7:89:3a:7e:a8:50:cb:54:3b:7a:31:7d: b4:5b:a0:79:a8:20:6d:ee:7c:68:48:a7:03:56:f8:80:f7:96: 42:cf:57:4e:e8:70:0f:5a:77:4c:48:e9:b5:a7:2f:12:5a:d2: 05:d1:94:95:3e:25:f1:bf:2b:3e:df:1b:75:0f:ec:d7:bd:46: e1:c9:71:ae:d5:b8:7f:40:cd:7f:47:f0:f7:ad:19:46:9d:cc: 4b:10:1b:3a:d5:1f:1c:a1:6b:a6:20:73:37:d4:5f:6b:de:61: b8:00:59:33:af:b0:2a:92:b2:e5:b1:c3:5f:df:2f:c9:47:65: 4c:20:c9:20:b0:ea:57:5a:eb:91:93:65:68:be:50:1d:fe:c8: 15:42:85:58:dc:84:6c:dd:90:07:20:a3:4b:ef:86:7e:a8:db: 8b:c2:20:de -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBklpQ9Ww0xf6o43le+T1ca2wOEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0 MEZCMDU1NjAeFw0yNDEwMTgxMTU1MDJaFw0yNTEwMTcxMjAwMDJaMDMxMTAvBgNV BAMTKEEwQkM1MzZCRDEwQ0M5NUFGMjBFMTFDMEM4Q0FDRDczNjhEMkVEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gzyS7VjL9IafJ8pLl6/sBkFx Mhp/j7kpTl/mxrX/zQzR96Y9X9L8mz8AcOIGtzLQvacAZcM+TRN2ZVmYIRZlj+6f 9qvyNsgMVPnUJCZfEUQ57EUB24NNg108rE6rptVHvXbvmF9D+4Sw5bN91TXD+s0w +YtolP8C3fHw7Y4yo5rWmT2ThUGWslm0Q04sbiBWbVM5SLupYS/yNNxUCFQyl+BI amS2Mgv5cih5L5NyXgY5ryGUcj4MIbyRjIoZg0Km2noaWDa/kwJ3DWQCygOV3B2/ HcwUwemDpSMMZ2gyaWxAg5bmDsCn5wm+r56B6h2jEQAv4ybC6rYeXnTuTzJTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUoLxTa9EMyVryDhHAyMrNc2jS7bcwHwYDVR0j BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwozANBgkqhkiG 9w0BAQsFAAOCAQEAFvWBxxekYehzZKNntoC/dT5bacmOHbV2cdRswg8BFqHyAvFj jeFHuUYaYdJwl/gx3ZR600mzxp0Ov03qh0vyZg9npMISutpuxj0ZL8CmRhDP9Hu9 reWr0u7zsffM2y7tt4k6fqhQy1Q7ejF9tFugeaggbe58aEinA1b4gPeWQs9XTuhw D1p3TEjptacvElrSBdGUlT4l8b8rPt8bdQ/s171G4clxrtW4f0DNf0fw960ZRp3M SxAbOtUfHKFrpiBzN9Rfa95huABZM6+wKpKy5bHDX98vyUdlTCDJILDqV1rrkZNl aL5QHf7IFUKFWNyEbN2QByCjS++Gfqjbi8Ig3g== -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org