$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e332e302f32342d3234203d3e203338373533.roa File: 32372e3133312e332e302f32342d3234203d3e203338373533.roa (raw, json) Hash identifier: yaHh6FGI5ZG2d2RYRAVwiLsRAnKcDMKcLSCwy8mK/g8= Subject key identifier: F0:5F:13:64:A3:F2:72:8E:00:CB:BE:CD:85:55:F8:62:F6:E5:FD:EB Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 6FC891AB5EA98232CA527A92272E3F2999A76A73 Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e332e302f32342d3234203d3e203338373533.roa Signing time: Fri 31 May 2024 07:00:01 +0000 ROA not before: Fri 31 May 2024 06:55:01 +0000 ROA not after: Fri 30 May 2025 07:00:01 +0000 asID: 38753 IP address blocks: 27.131.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c8:91:ab:5e:a9:82:32:ca:52:7a:92:27:2e:3f:29:99:a7:6a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: May 31 06:55:01 2024 GMT Not After : May 30 07:00:01 2025 GMT Subject: CN=F05F1364A3F2728E00CBBECD8555F862F6E5FDEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:29:8d:8f:35:45:d6:ed:bf:4f:f0:8a:12: a7:11:0d:62:f3:29:7e:b3:72:b1:e7:ce:37:a2:f5: 1a:fc:e8:42:02:d3:71:39:aa:2e:58:ce:ff:5e:bb: 9c:76:8d:b6:05:be:24:b1:4e:ea:47:46:cd:74:55: 56:03:a5:a7:fb:f3:74:ef:fe:f2:1a:a2:ff:58:92: 42:78:14:01:f1:0a:9e:9b:9f:cb:7c:2d:8a:12:80: 84:08:c1:58:eb:70:3b:20:16:6f:4b:64:94:ef:47: 43:7a:0c:ff:aa:d4:59:d1:15:a7:20:73:b3:98:73: 34:9b:a9:40:a3:b9:3f:9f:5b:5c:ec:db:c5:18:79: 89:79:a8:55:07:78:20:a5:27:dc:4f:5a:d9:be:71: 5b:2a:74:7e:dd:40:47:22:31:f8:ab:cc:dd:3c:e1: 1e:2e:88:c7:79:41:6a:5e:b9:6e:6d:76:86:6d:df: 73:5f:83:51:b3:2d:51:88:59:09:21:c6:71:34:39: 59:f0:1c:ad:6d:9d:6e:b4:5a:b7:38:93:19:02:f5: 18:80:13:8c:5c:d7:20:8b:3f:2d:f0:de:d7:25:2d: 75:6d:a2:e9:10:9d:d8:b5:7f:a8:e5:84:30:1f:08: 00:cb:b3:da:47:a0:e3:13:74:41:a6:39:c5:18:d4: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5F:13:64:A3:F2:72:8E:00:CB:BE:CD:85:55:F8:62:F6:E5:FD:EB X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e332e302f32342d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.3.0/24 Signature Algorithm: sha256WithRSAEncryption 61:90:26:d2:6e:c2:a0:c8:cd:18:e7:8a:fc:d5:6e:48:9d:eb: 43:1b:a2:6f:38:f3:9b:c5:54:8f:4f:9c:89:3f:83:75:ea:0c: ec:97:ad:43:7a:71:6c:88:8a:07:16:9e:6f:a3:ac:74:7d:b1: d4:fb:6b:89:c8:b9:d4:99:69:7d:22:a4:69:38:76:b6:79:8c: 89:c1:a3:8a:25:3b:35:dd:42:ea:d2:96:61:83:88:01:d5:66: d6:9d:0e:de:30:48:81:03:d7:b5:fc:a6:bf:38:46:62:ff:92: ce:d5:8b:aa:17:db:4d:2b:14:a5:ef:cf:5e:7e:e9:1b:a9:e8: c7:2c:d3:24:6b:3f:6e:41:d8:b9:a6:8f:c5:6c:d8:0f:ff:9f: 86:93:40:d3:a6:b0:cf:54:53:81:5d:9c:09:d1:1f:1d:0e:ae: 13:fc:5a:b9:b9:09:3d:5a:ef:57:6e:cc:ef:4a:1e:ae:22:7f: 2e:e1:28:25:28:4f:22:d5:cf:8e:70:56:74:c9:01:fb:b3:69: e9:09:67:cb:ad:db:bf:69:18:7b:ec:e9:34:89:2d:21:7c:9b: 57:32:b4:42:25:76:b1:54:30:18:ff:3e:e2:eb:18:b1:0f:ab: 3b:12:e8:fd:42:08:24:98:99:65:a7:1d:64:9b:05:bd:f8:72: d0:f0:05:c5 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUb8iRq16pgjLKUnqSJy4/KZmnanMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNDA1MzEwNjU1MDFaFw0yNTA1MzAwNzAwMDFaMDMxMTAvBgNV BAMTKEYwNUYxMzY0QTNGMjcyOEUwMENCQkVDRDg1NTVGODYyRjZFNUZERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlAimNjzVF1u2/T/CKEqcRDWLz KX6zcrHnzjei9Rr86EIC03E5qi5Yzv9eu5x2jbYFviSxTupHRs10VVYDpaf783Tv /vIaov9YkkJ4FAHxCp6bn8t8LYoSgIQIwVjrcDsgFm9LZJTvR0N6DP+q1FnRFacg c7OYczSbqUCjuT+fW1zs28UYeYl5qFUHeCClJ9xPWtm+cVsqdH7dQEciMfirzN08 4R4uiMd5QWpeuW5tdoZt33Nfg1GzLVGIWQkhxnE0OVnwHK1tnW60Wrc4kxkC9RiA E4xc1yCLPy3w3tclLXVtoukQndi1f6jlhDAfCADLs9pHoOMTdEGmOcUY1F4HAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU8F8TZKPyco4Ay77NhVX4Yvbl/eswHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzIzNzJlMzEzMzMxMmUzMzJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbgwMwDQYJKoZIhvcNAQEL BQADggEBAGGQJtJuwqDIzRjnivzVbkid60Mbom8485vFVI9PnIk/g3XqDOyXrUN6 cWyIigcWnm+jrHR9sdT7a4nIudSZaX0ipGk4drZ5jInBo4olOzXdQurSlmGDiAHV ZtadDt4wSIED17X8pr84RmL/ks7Vi6oX200rFKXvz15+6Rup6Mcs0yRrP25B2Lmm j8Vs2A//n4aTQNOmsM9UU4FdnAnRHx0OrhP8Wrm5CT1a71duzO9KHq4ify7hKCUo TyLVz45wVnTJAfuzaekJZ8ut279pGHvs6TSJLSF8m1cytEIldrFUMBj/PuLrGLEP qzsS6P1CCCSYmWWnHWSbBb34ctDwBcU= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org