$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa File: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (raw, json) Hash identifier: SbxBJwcyRNjmcJAEw7SuNTFi3HhmkmBhtQkXMEm7WeI= Subject key identifier: A9:5F:AF:BA:EC:5B:56:F6:F7:FF:7B:7B:83:FB:67:32:C5:B6:61:31 Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 1BCB0E083144FF6E8A8412E689F403350D79C040 Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa Signing time: Mon 01 Jul 2024 01:03:36 +0000 ROA not before: Mon 01 Jul 2024 00:58:36 +0000 ROA not after: Mon 30 Jun 2025 01:03:36 +0000 asID: 131745 IP address blocks: 210.247.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cb:0e:08:31:44:ff:6e:8a:84:12:e6:89:f4:03:35:0d:79:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Jul 1 00:58:36 2024 GMT Not After : Jun 30 01:03:36 2025 GMT Subject: CN=A95FAFBAEC5B56F6F7FF7B7B83FB6732C5B66131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:29:b6:a8:d3:55:72:03:fe:a2:52:3f:0d: 2d:e6:a6:7b:f5:04:9a:b0:e0:cb:af:32:1a:d8:49: 55:06:96:c4:26:82:3f:35:cd:0d:7c:a9:0e:73:42: f7:2c:32:59:d1:45:e0:c1:4e:ec:b4:79:80:99:af: 9a:0c:6d:ca:c8:c5:67:ec:9c:b9:bb:20:af:67:2e: 42:a3:d2:65:ac:f8:5d:ee:44:c8:e4:80:33:06:fa: 15:42:2c:25:da:5c:8d:1e:f8:46:d3:ab:7a:a9:8c: 68:f5:9d:fa:93:dc:61:f8:ea:2b:df:40:5b:42:82: b1:7c:55:e8:5b:d0:73:ef:d6:3f:53:a4:90:4a:ae: ab:84:ea:03:22:e3:14:9f:1d:cc:af:88:c1:ce:aa: 7e:de:a6:dd:dc:0f:d1:8a:f0:c5:ef:a1:f4:37:72: e9:9d:88:7d:e9:50:ac:66:26:84:9b:4c:05:55:d8: b6:4b:55:ab:ec:aa:23:d3:fc:fb:31:bf:14:fc:27: 15:97:e3:b0:53:62:04:8b:2e:66:7b:41:8f:58:5c: 4b:dd:f5:f6:89:59:0a:fa:56:84:9c:73:83:6a:ab: 2a:83:3f:f9:8e:8e:30:58:b6:c4:d8:4f:b3:ae:d0: 81:26:e9:c9:b9:44:b7:30:35:94:89:5c:ac:51:f1: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5F:AF:BA:EC:5B:56:F6:F7:FF:7B:7B:83:FB:67:32:C5:B6:61:31 X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.247.244.0/24 Signature Algorithm: sha256WithRSAEncryption a8:5f:2c:88:85:c9:d4:48:29:6e:ba:4b:69:e3:61:12:28:2e: af:3f:df:68:cd:5b:a2:5a:9c:11:8a:f3:26:79:9a:41:af:03: 68:19:1c:1d:34:bf:df:8b:24:54:66:93:09:42:e0:b7:bb:27: 9a:be:9c:c8:81:9a:c6:58:44:0c:8a:6e:bd:d3:e3:b0:8e:e5: 9d:60:ea:9e:43:bc:d8:ba:d0:33:25:a2:e0:46:c3:46:0d:a0: 1f:0e:29:96:58:eb:7d:df:67:8c:a2:f6:92:d5:dc:69:f4:a6: af:26:da:3d:b5:a4:e7:b8:7b:53:e1:83:d7:b5:0d:d8:49:6a: d1:3e:36:e0:23:19:0a:22:be:c4:71:a6:03:4e:47:b9:1a:c3: 87:9f:f5:f5:65:81:51:8d:69:0f:ba:1e:43:5d:27:6f:4f:03: 9b:bf:26:d4:81:ef:1e:f0:e3:2a:84:42:64:3d:70:09:c6:df: ba:63:93:5a:4b:af:e9:81:09:8d:3c:62:1f:bf:f2:5c:86:de: 66:df:bc:6c:75:06:43:5d:cd:18:b4:83:47:92:68:fb:1f:ec: 91:4f:8a:bb:a4:68:ab:9f:93:44:0a:84:3b:a3:5e:e9:d8:78: 7b:d5:7f:e3:3f:f2:f4:0c:4e:53:a9:2e:45:82:07:74:e4:e2: 28:f5:14:92 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUG8sOCDFE/26KhBLmifQDNQ15wEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNDA3MDEwMDU4MzZaFw0yNTA2MzAwMTAzMzZaMDMxMTAvBgNV BAMTKEE5NUZBRkJBRUM1QjU2RjZGN0ZGN0I3QjgzRkI2NzMyQzVCNjYxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpym2qNNVcgP+olI/DS3mpnv1 BJqw4MuvMhrYSVUGlsQmgj81zQ18qQ5zQvcsMlnRReDBTuy0eYCZr5oMbcrIxWfs nLm7IK9nLkKj0mWs+F3uRMjkgDMG+hVCLCXaXI0e+EbTq3qpjGj1nfqT3GH46ivf QFtCgrF8Vehb0HPv1j9TpJBKrquE6gMi4xSfHcyviMHOqn7ept3cD9GK8MXvofQ3 cumdiH3pUKxmJoSbTAVV2LZLVavsqiPT/PsxvxT8JxWX47BTYgSLLmZ7QY9YXEvd 9faJWQr6VoScc4NqqyqDP/mOjjBYtsTYT7Ou0IEm6cm5RLcwNZSJXKxR8XEfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUqV+vuuxbVvb3/3t7g/tnMsW2YTEwHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2MTI0MzI5LWVjMjAtNDQ2MC1h YzMxLTljMzZjZjk0ZjNmYi8wLzMyMzEzMDJlMzIzNDM3MmUzMjM0MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS9/QwDQYJ KoZIhvcNAQELBQADggEBAKhfLIiFydRIKW66S2njYRIoLq8/32jNW6JanBGK8yZ5 mkGvA2gZHB00v9+LJFRmkwlC4Le7J5q+nMiBmsZYRAyKbr3T47CO5Z1g6p5DvNi6 0DMlouBGw0YNoB8OKZZY633fZ4yi9pLV3Gn0pq8m2j21pOe4e1Phg9e1DdhJatE+ NuAjGQoivsRxpgNOR7kaw4ef9fVlgVGNaQ+6HkNdJ29PA5u/JtSB7x7w4yqEQmQ9 cAnG37pjk1pLr+mBCY08Yh+/8lyG3mbfvGx1BkNdzRi0g0eSaPsf7JFPirukaKuf k0QKhDujXunYeHvVf+M/8vQMTlOpLkWCB3Tk4ij1FJI= -----END CERTIFICATE-----Generated at Fri Nov 22 23:37:26 2024 by rpki-client on console-fra.rpki-client.org