$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa File: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (raw, json) Hash identifier: 9wNgftNU3iv+7DPLldtRXqlQId6fVC+L0PN5+MslgcY= Subject key identifier: F9:BE:32:95:52:30:82:A8:06:6F:FD:F6:14:FB:2C:24:EE:77:8D:55 Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 4276B677E1AA0A12B64B1F855F2D3C15B4C0DFE9 Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa Signing time: Fri 05 Apr 2024 04:22:34 +0000 ROA not before: Fri 05 Apr 2024 04:17:34 +0000 ROA not after: Fri 04 Apr 2025 04:22:34 +0000 asID: 152389 IP address blocks: 157.15.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jul 2024 22:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:76:b6:77:e1:aa:0a:12:b6:4b:1f:85:5f:2d:3c:15:b4:c0:df:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Apr 5 04:17:34 2024 GMT Not After : Apr 4 04:22:34 2025 GMT Subject: CN=F9BE3295523082A8066FFDF614FB2C24EE778D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:8b:46:73:90:58:b7:cb:4d:7d:ac:13:d3: e3:9a:3c:33:ef:91:57:7c:2a:4d:1e:6b:fb:0a:38: e2:1c:7b:3a:a9:65:e4:be:2f:7e:f2:3f:a9:6c:1a: da:da:d7:8b:15:8a:64:bd:e0:82:9c:92:df:ee:d2: 7b:ec:31:bf:33:f4:fd:00:ae:05:97:b8:3c:5a:5c: eb:94:5e:f5:29:ea:7a:3e:c6:a1:6c:1a:78:a0:86: f6:50:82:f5:76:ac:16:1c:59:ea:5e:a4:16:7e:f7: 13:0c:b9:64:e6:47:ab:e3:59:0e:f5:1e:96:0e:95: 72:c0:5c:79:45:da:73:41:46:85:68:36:37:ac:12: 74:35:e7:dd:9c:1f:a9:38:f2:b3:bf:a6:61:89:54: a9:ee:b1:f8:07:26:31:98:a9:90:df:38:6c:d4:1e: 90:90:4c:27:e5:ab:3d:bd:88:19:ea:ac:6c:13:c1: e3:22:1b:bd:79:f3:fd:9b:29:97:8a:b4:8c:94:f0: cc:60:e2:3b:1c:77:47:24:ac:68:05:42:70:87:ac: 16:f6:83:d9:d5:ab:c6:d4:cb:bb:1e:c0:c8:72:3a: c7:77:71:70:54:13:7b:5b:5f:16:2b:13:86:90:a0: b3:f8:0c:35:53:51:c2:23:e2:a4:19:b0:01:9a:3a: e9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BE:32:95:52:30:82:A8:06:6F:FD:F6:14:FB:2C:24:EE:77:8D:55 X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.216.0/23 Signature Algorithm: sha256WithRSAEncryption ac:b6:5c:1a:ed:aa:60:8e:67:52:6a:c2:6e:a9:eb:df:d3:96: 32:a8:63:23:72:62:64:b7:60:91:4f:ac:88:6f:af:02:da:73: 60:f2:5a:56:e1:86:38:78:11:99:b6:b5:31:fc:ec:02:aa:44: 9a:8f:95:ce:54:92:74:a5:03:15:8e:e5:d4:cc:53:35:88:a3: 70:f9:d3:c8:cb:d7:91:85:83:21:a0:9c:18:5d:f0:f4:b2:a7: 81:ed:92:d9:3e:5e:8f:3e:6e:c6:80:e5:d7:e1:b3:a5:5f:7c: 68:ff:ef:68:36:e6:68:85:5c:9f:df:cb:d9:e0:c3:e3:4f:57: 32:f6:8e:9a:d8:26:12:b1:09:f3:a9:be:42:26:4d:48:fd:09: a3:a0:99:5d:cb:1d:1c:ee:8c:5d:71:49:eb:d3:c6:c2:f7:1a: 6d:f9:8c:26:3c:cf:c6:eb:e9:51:64:b0:0d:b5:29:5f:15:b4: 45:00:c6:07:92:2a:95:ca:4e:73:b0:ed:e7:66:c2:ea:26:13: 78:70:a1:8a:7f:17:bb:e4:36:89:cf:02:8a:8b:de:f7:29:f5: 34:07:d1:df:12:51:f2:0b:d3:40:e3:36:5e:1d:a1:81:7b:21: 08:f7:aa:37:85:85:c6:db:cd:25:f3:9f:04:c8:22:6b:3c:92: 47:47:b9:09 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQna2d+GqChK2Sx+FXy08FbTA3+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNDA0MDUwNDE3MzRaFw0yNTA0MDQwNDIyMzRaMDMxMTAvBgNV BAMTKEY5QkUzMjk1NTIzMDgyQTgwNjZGRkRGNjE0RkIyQzI0RUU3NzhENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKWYtGc5BYt8tNfawT0+OaPDPv kVd8Kk0ea/sKOOIcezqpZeS+L37yP6lsGtra14sVimS94IKckt/u0nvsMb8z9P0A rgWXuDxaXOuUXvUp6no+xqFsGnighvZQgvV2rBYcWepepBZ+9xMMuWTmR6vjWQ71 HpYOlXLAXHlF2nNBRoVoNjesEnQ1592cH6k48rO/pmGJVKnusfgHJjGYqZDfOGzU HpCQTCflqz29iBnqrGwTweMiG7158/2bKZeKtIyU8Mxg4jscd0ckrGgFQnCHrBb2 g9nVq8bUy7sewMhyOsd3cXBUE3tbXxYrE4aQoLP4DDVTUcIj4qQZsAGaOulRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+b4ylVIwgqgGb/32FPssJO53jVUwHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwZjdjNzkwLTc2YjUtNDk2Ny1i NmZmLTEyZGM3NTZiYmY3ZC8wLzMxMzUzNzJlMzEzNTJlMzIzMTM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQ/YMA0GCSqG SIb3DQEBCwUAA4IBAQCstlwa7apgjmdSasJuqevf05YyqGMjcmJkt2CRT6yIb68C 2nNg8lpW4YY4eBGZtrUx/OwCqkSaj5XOVJJ0pQMVjuXUzFM1iKNw+dPIy9eRhYMh oJwYXfD0sqeB7ZLZPl6PPm7GgOXX4bOlX3xo/+9oNuZohVyf38vZ4MPjT1cy9o6a 2CYSsQnzqb5CJk1I/QmjoJldyx0c7oxdcUnr08bC9xpt+YwmPM/G6+lRZLANtSlf FbRFAMYHkiqVyk5zsO3nZsLqJhN4cKGKfxe75DaJzwKKi973KfU0B9HfElHyC9NA 4zZeHaGBeyEI96o3hYXG280l858EyCJrPJJHR7kJ -----END CERTIFICATE-----Generated at Sat Jun 29 19:20:11 2024 by rpki-client on console-ams.rpki-client.org