$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137342e302f32342d3234203d3e203436303330.roa File: 3138322e34382e3137342e302f32342d3234203d3e203436303330.roa (raw, json) Hash identifier: cGitK55x4/e0mnc8p8NPISgyJ0orLGwNlfFzH6C3lxQ= Subject key identifier: E1:A2:D1:C7:9B:BD:EE:1D:8D:08:E8:EE:14:AD:84:AE:32:84:FD:1F Certificate issuer: /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Certificate serial: 072B83DBEDAD213E43D29695929FB68A2B03644B Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137342e302f32342d3234203d3e203436303330.roa Signing time: Fri 18 Oct 2024 12:00:02 +0000 ROA not before: Fri 18 Oct 2024 11:55:02 +0000 ROA not after: Fri 17 Oct 2025 12:00:02 +0000 asID: 46030 IP address blocks: 182.48.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2b:83:db:ed:ad:21:3e:43:d2:96:95:92:9f:b6:8a:2b:03:64:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Validity Not Before: Oct 18 11:55:02 2024 GMT Not After : Oct 17 12:00:02 2025 GMT Subject: CN=E1A2D1C79BBDEE1D8D08E8EE14AD84AE3284FD1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:52:40:33:6b:d1:3d:64:15:2b:8a:1c:ee:1b: 7c:ab:15:a3:80:ec:ce:7e:9f:c3:04:a1:02:71:e6: 31:1a:42:ba:92:f6:c3:25:51:57:c3:70:34:cb:72: 66:10:9c:12:0a:13:be:c6:c8:5d:6d:aa:73:9c:ef: c4:29:ec:33:90:f7:55:17:44:e1:be:11:5f:a8:be: 2d:94:f0:8c:f2:33:b0:7d:8d:9a:f0:f1:20:42:db: cb:0c:7c:5d:2d:1a:51:d9:18:74:87:d1:92:67:89: 1c:ff:08:6c:83:6c:ba:27:e9:d0:48:89:e6:5f:3e: d5:9b:89:8a:51:6e:da:4d:15:fb:2b:39:95:e2:19: 90:9d:b3:ca:ed:5a:48:2c:bc:29:5d:ab:ef:80:5a: c0:c1:fc:0c:8b:82:b0:a3:07:3c:a6:19:bb:7f:73: 03:63:16:55:07:57:76:10:de:06:78:93:b3:9b:1d: 76:ad:f6:0e:db:f2:e8:87:ad:0d:c2:6c:38:64:f5: 51:fa:97:8b:54:57:0a:69:52:71:54:dc:3b:4b:3a: ab:7f:81:73:a0:69:cf:8b:9f:cf:fc:3e:aa:a1:89: 87:b8:a9:5e:f5:86:ff:11:7b:31:42:1a:25:ee:8f: 2e:d5:0b:bf:ef:58:12:10:ed:cf:54:9b:dd:b6:b5: ab:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A2:D1:C7:9B:BD:EE:1D:8D:08:E8:EE:14:AD:84:AE:32:84:FD:1F X509v3 Authority Key Identifier: keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137342e302f32342d3234203d3e203436303330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.48.174.0/24 Signature Algorithm: sha256WithRSAEncryption 13:59:88:35:e5:59:69:fd:86:07:e0:1e:96:ed:43:19:f7:eb: 3b:a4:e5:c4:92:5e:35:91:05:2e:4b:2c:fe:77:de:a7:e3:ec: 00:77:af:aa:23:c8:7d:2a:b6:ba:01:6d:32:7f:52:f1:6a:2f: a2:83:16:3a:d9:fa:ec:ba:da:1c:8f:cc:8c:22:70:de:57:51: 36:52:99:ec:80:d3:13:d8:1d:10:43:c5:ab:1a:3e:b6:54:46: 30:a6:ae:b7:15:5c:6d:6c:ef:ab:ef:e0:5a:df:50:bb:91:21: 85:8e:01:d3:20:85:53:6a:6a:0f:70:3f:d0:08:be:58:8c:95: 29:b0:26:d4:75:1d:66:87:31:32:ab:11:69:1d:a3:e7:34:cc: 1c:d6:3e:3a:bf:f3:e3:c8:8b:1e:ea:8b:25:6c:1d:39:50:bf: 97:71:aa:f5:77:3c:e7:05:fc:1e:65:17:7a:21:1b:d6:54:62: 11:09:25:bf:f3:af:42:54:6c:75:94:e2:c8:f6:7c:1b:35:29: fe:c1:1c:ff:b1:a1:00:ed:b6:b0:70:cd:e8:5f:a4:06:42:32: 02:14:25:41:cb:b1:8f:38:28:1e:c1:e4:ad:48:59:ba:11:f5: 40:0e:6d:84:f9:46:d2:af:6e:69:07:22:f2:8d:6b:7c:13:28: 0b:33:0d:d2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUByuD2+2tIT5D0paVkp+2iisDZEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0 MEZCMDU1NjAeFw0yNDEwMTgxMTU1MDJaFw0yNTEwMTcxMjAwMDJaMDMxMTAvBgNV BAMTKEUxQTJEMUM3OUJCREVFMUQ4RDA4RThFRTE0QUQ4NEFFMzI4NEZEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUkAza9E9ZBUrihzuG3yrFaOA 7M5+n8MEoQJx5jEaQrqS9sMlUVfDcDTLcmYQnBIKE77GyF1tqnOc78Qp7DOQ91UX ROG+EV+ovi2U8IzyM7B9jZrw8SBC28sMfF0tGlHZGHSH0ZJniRz/CGyDbLon6dBI ieZfPtWbiYpRbtpNFfsrOZXiGZCds8rtWkgsvCldq++AWsDB/AyLgrCjBzymGbt/ cwNjFlUHV3YQ3gZ4k7ObHXat9g7b8uiHrQ3CbDhk9VH6l4tUVwppUnFU3DtLOqt/ gXOgac+Ln8/8PqqhiYe4qV71hv8RezFCGiXujy7VC7/vWBIQ7c9Um922tauTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU4aLRx5u97h2NCOjuFK2ErjKE/R8wHwYDVR0j BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwrjANBgkqhkiG 9w0BAQsFAAOCAQEAE1mINeVZaf2GB+Aelu1DGffrO6TlxJJeNZEFLkss/nfep+Ps AHevqiPIfSq2ugFtMn9S8WovooMWOtn67LraHI/MjCJw3ldRNlKZ7IDTE9gdEEPF qxo+tlRGMKautxVcbWzvq+/gWt9Qu5EhhY4B0yCFU2pqD3A/0Ai+WIyVKbAm1HUd ZocxMqsRaR2j5zTMHNY+Or/z48iLHuqLJWwdOVC/l3Gq9Xc85wX8HmUXeiEb1lRi EQklv/OvQlRsdZTiyPZ8GzUp/sEc/7GhAO22sHDN6F+kBkIyAhQlQcuxjzgoHsHk rUhZuhH1QA5thPlG0q9uaQci8o1rfBMoCzMN0g== -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org