$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa File: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (raw, json) Hash identifier: YdgVrIhwigf5vVjBfE6W9Ix4PmwssBDwnjxMo0ci8Oo= Subject key identifier: 8B:8E:5C:32:28:D7:01:8E:D2:4C:E7:BB:04:A1:26:2F:E3:B8:F6:F4 Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 0F2B69F9427E3FA4CD0E85A135559A2D416174A6 Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa Signing time: Mon 01 Jul 2024 01:03:35 +0000 ROA not before: Mon 01 Jul 2024 00:58:35 +0000 ROA not after: Mon 30 Jun 2025 01:03:35 +0000 asID: 131745 IP address blocks: 210.247.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2b:69:f9:42:7e:3f:a4:cd:0e:85:a1:35:55:9a:2d:41:61:74:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Jul 1 00:58:35 2024 GMT Not After : Jun 30 01:03:35 2025 GMT Subject: CN=8B8E5C3228D7018ED24CE7BB04A1262FE3B8F6F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:3c:39:1d:ff:b1:c2:1f:b7:f5:d4:8a:05: 6d:af:6f:34:03:0b:60:33:f2:2e:f7:d4:a2:ed:5f: a9:a3:19:f9:49:4d:2c:fd:8b:69:1a:d5:38:cb:05: b6:8c:50:83:6b:12:47:a2:18:3a:59:30:7d:d9:2e: 7a:44:08:a3:65:25:3a:73:1b:46:a8:81:1a:15:4c: a1:ae:dd:25:52:9b:ae:c2:10:e4:17:51:51:cc:ab: f8:50:5f:b4:60:19:4d:5c:cb:6e:f7:a5:fb:0a:c6: ad:94:cb:29:c4:4d:8d:9b:7f:9b:d2:4e:b2:5e:d9: 7c:d5:81:e8:f2:3e:92:d5:b7:b2:a0:ed:7f:e0:64: d6:9b:54:01:9e:0a:9c:2c:e5:4f:50:cb:c1:fb:c4: f9:3f:f1:ee:d0:58:18:e6:55:a8:82:2b:e8:37:90: 76:fa:52:c8:79:1b:93:c2:e7:4c:33:a5:27:36:d6: a1:db:81:cd:fd:a9:10:1e:ae:d1:03:41:3e:e5:db: 3d:6c:01:35:3f:7f:4b:f6:b0:78:ba:5e:b6:36:8a: a6:f7:f3:61:cd:be:af:22:32:bd:82:00:4f:d7:72: 14:11:70:1b:63:81:88:85:19:38:c1:e1:7e:f0:4b: 22:65:ad:50:42:41:46:c9:cb:9a:58:d0:8f:38:62: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:5C:32:28:D7:01:8E:D2:4C:E7:BB:04:A1:26:2F:E3:B8:F6:F4 X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.247.246.0/24 Signature Algorithm: sha256WithRSAEncryption 48:4b:43:fe:7e:6f:15:6f:96:b7:76:5c:50:a1:d4:20:d1:c8: ce:4f:b8:46:8e:f3:67:46:43:8f:d8:82:8f:c6:cf:10:0e:65: 42:04:fd:a7:2c:4c:1b:31:87:43:a2:00:2e:b3:f6:86:79:4b: a6:8a:89:72:b0:b9:2a:86:f2:75:f4:3d:0b:35:19:6e:a9:67: 0a:6d:d9:bf:32:2b:8d:59:c8:a8:c9:be:a9:3d:b1:38:b6:56: 6a:4e:fd:d8:99:22:4b:e7:c2:46:47:6f:9b:79:43:51:ed:f0: 84:b6:89:92:63:1a:a7:85:42:4e:cb:62:8b:96:ae:b7:f9:58: 10:c9:f2:06:52:8e:fb:44:5b:6b:35:ee:03:12:1d:a8:c8:34: 89:bc:3f:07:0f:39:3c:a3:83:59:0e:ad:99:e2:c6:27:6e:b6: 31:11:be:c8:e1:d4:d3:78:d4:42:cc:9a:17:ef:b0:5d:8e:11: e3:13:c2:65:86:15:4c:a6:e9:f8:8b:91:17:b6:20:b5:d9:8d: 23:62:9a:de:b0:64:01:77:82:63:b5:92:98:54:e3:7e:fc:2f: f5:48:56:df:de:86:fd:5a:8b:79:3c:7d:5c:68:c1:6a:81:c1: 16:29:27:51:bb:26:4d:e3:0a:fc:7c:89:8f:06:c8:14:2c:69: 15:f3:a0:73 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDytp+UJ+P6TNDoWhNVWaLUFhdKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNDA3MDEwMDU4MzVaFw0yNTA2MzAwMTAzMzVaMDMxMTAvBgNV BAMTKDhCOEU1QzMyMjhENzAxOEVEMjRDRTdCQjA0QTEyNjJGRTNCOEY2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MDw5Hf+xwh+39dSKBW2vbzQD C2Az8i731KLtX6mjGflJTSz9i2ka1TjLBbaMUINrEkeiGDpZMH3ZLnpECKNlJTpz G0aogRoVTKGu3SVSm67CEOQXUVHMq/hQX7RgGU1cy273pfsKxq2UyynETY2bf5vS TrJe2XzVgejyPpLVt7Kg7X/gZNabVAGeCpws5U9Qy8H7xPk/8e7QWBjmVaiCK+g3 kHb6Ush5G5PC50wzpSc21qHbgc39qRAertEDQT7l2z1sATU/f0v2sHi6XrY2iqb3 82HNvq8iMr2CAE/XchQRcBtjgYiFGTjB4X7wSyJlrVBCQUbJy5pY0I84YuNxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUi45cMijXAY7STOe7BKEmL+O49vQwHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2MTI0MzI5LWVjMjAtNDQ2MC1h YzMxLTljMzZjZjk0ZjNmYi8wLzMyMzEzMDJlMzIzNDM3MmUzMjM0MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS9/YwDQYJ KoZIhvcNAQELBQADggEBAEhLQ/5+bxVvlrd2XFCh1CDRyM5PuEaO82dGQ4/Ygo/G zxAOZUIE/acsTBsxh0OiAC6z9oZ5S6aKiXKwuSqG8nX0PQs1GW6pZwpt2b8yK41Z yKjJvqk9sTi2VmpO/diZIkvnwkZHb5t5Q1Ht8IS2iZJjGqeFQk7LYouWrrf5WBDJ 8gZSjvtEW2s17gMSHajINIm8PwcPOTyjg1kOrZnixidutjERvsjh1NN41ELMmhfv sF2OEeMTwmWGFUym6fiLkRe2ILXZjSNimt6wZAF3gmO1kphU4378L/VIVt/ehv1a i3k8fVxowWqBwRYpJ1G7Jk3jCvx8iY8GyBQsaRXzoHM= -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:01 2024 by rpki-client on console-ams.rpki-client.org