$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa File: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (raw, json) Hash identifier: 5GSItKW1Uev+r4sjeuM7sDgT4sKp9lv/DJNQC/LM3pw= Subject key identifier: D0:EA:83:2A:AC:0D:E6:2C:5B:DA:39:C7:F8:39:60:97:A8:DF:1A:F7 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 6FEE33B80941060E47487F3DC37FF377B1D856D0 Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa Signing time: Wed 12 Jun 2024 04:37:33 +0000 ROA not before: Wed 12 Jun 2024 04:32:33 +0000 ROA not after: Wed 11 Jun 2025 04:37:33 +0000 asID: 152437 IP address blocks: 157.20.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 09:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ee:33:b8:09:41:06:0e:47:48:7f:3d:c3:7f:f3:77:b1:d8:56:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Jun 12 04:32:33 2024 GMT Not After : Jun 11 04:37:33 2025 GMT Subject: CN=D0EA832AAC0DE62C5BDA39C7F8396097A8DF1AF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:12:9f:8e:23:4f:e9:e8:5e:a8:83:65:a7: b1:74:af:87:1a:d9:72:65:c2:3b:4a:7e:88:73:31: 0d:77:fa:e2:81:7b:1a:3c:51:e7:b9:d6:cf:d9:ff: a5:8f:83:c2:07:31:02:5d:6a:f5:b5:dc:b7:83:b0: 5b:cb:41:f4:91:0f:26:35:de:6a:13:da:e9:7a:79: 36:80:5c:32:1b:01:cd:0b:5d:3d:23:8f:55:5e:8a: d0:04:4b:dd:dd:03:b1:54:94:47:a9:40:cc:70:05: eb:40:ed:ea:22:35:48:aa:a9:e1:2f:55:7b:9a:17: 39:ab:cd:8b:bb:d1:52:07:63:84:2c:8c:d2:cc:42: dd:58:c5:1c:16:a0:ce:66:c3:5e:f3:2a:e5:fa:2a: 3b:9a:b7:d2:fc:91:7f:12:d8:72:3f:24:cc:9b:26: b7:9c:35:10:6b:26:4c:e6:87:6c:61:3c:8e:ce:52: d8:b1:c7:1e:89:df:e6:67:ad:78:03:bb:b1:87:0d: 2f:9f:c0:0d:3b:40:85:4b:76:65:fe:1e:17:23:cb: b4:91:d9:2a:61:f6:a3:01:11:ff:89:8c:91:6b:b7: 03:1d:77:1c:80:b3:b0:3c:a2:b1:31:af:b0:a1:89: b7:26:71:db:1d:87:a5:35:58:5e:78:56:b3:8b:2d: 00:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EA:83:2A:AC:0D:E6:2C:5B:DA:39:C7:F8:39:60:97:A8:DF:1A:F7 X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.223.0/24 Signature Algorithm: sha256WithRSAEncryption 53:37:50:20:8a:10:88:6c:1a:92:7d:4f:aa:1d:ad:ba:6a:b3: e6:d8:34:c4:64:2e:1e:49:ed:64:f3:96:20:ad:b1:e4:0e:75: 86:23:38:fd:71:3f:a6:08:cc:7c:0d:51:7f:43:65:fe:b0:27: 1b:e4:db:f7:af:3f:49:c1:ec:75:c8:20:f2:18:ea:00:21:2d: 37:a0:a1:45:1f:d8:ae:a7:80:99:8c:8c:fa:b5:8e:8a:7b:51: d0:cc:01:f3:2c:03:6c:7b:e1:d6:0b:f0:b6:8f:66:b5:4b:54: 1d:55:e9:c5:2f:70:8c:d9:1b:e2:d8:52:e3:67:e1:b8:a0:f0: 92:90:ba:a3:64:5c:3d:1d:a4:ab:82:43:4f:e3:a9:5e:0d:18: c1:30:c5:00:5b:09:55:e1:4c:51:7b:85:44:22:27:c2:79:07: 95:b2:0f:52:f7:0c:6c:2b:58:d5:d5:91:49:9c:95:20:e0:a0: ad:5f:e0:b8:33:85:c6:c5:bd:2d:ec:62:8d:66:1c:28:de:98: aa:59:14:41:0e:ab:b6:0b:29:b7:1d:a9:09:0c:00:1d:d4:c9: f0:d5:34:98:4b:91:01:72:e0:09:06:6e:cb:97:c5:7d:46:0b: d3:02:ef:2a:db:1a:c4:aa:b9:f2:29:b6:51:03:12:99:55:9d: b3:26:d3:50 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb+4zuAlBBg5HSH89w3/zd7HYVtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNDA2MTIwNDMyMzNaFw0yNTA2MTEwNDM3MzNaMDMxMTAvBgNV BAMTKEQwRUE4MzJBQUMwREU2MkM1QkRBMzlDN0Y4Mzk2MDk3QThERjFBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdBKfjiNP6eheqINlp7F0r4ca 2XJlwjtKfohzMQ13+uKBexo8Uee51s/Z/6WPg8IHMQJdavW13LeDsFvLQfSRDyY1 3moT2ul6eTaAXDIbAc0LXT0jj1VeitAES93dA7FUlEepQMxwBetA7eoiNUiqqeEv VXuaFzmrzYu70VIHY4QsjNLMQt1YxRwWoM5mw17zKuX6Kjuat9L8kX8S2HI/JMyb JrecNRBrJkzmh2xhPI7OUtixxx6J3+ZnrXgDu7GHDS+fwA07QIVLdmX+Hhcjy7SR 2Sph9qMBEf+JjJFrtwMddxyAs7A8orExr7Chibcmcdsdh6U1WF54VrOLLQCpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0OqDKqwN5ixb2jnH+Dlgl6jfGvcwHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExZjE1YTFkLTVkYWMtNGNjOS04 MTFhLWU0OWNiNGU3YmNlMS8wLzMxMzUzNzJlMzIzMDJlMzIzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTfMA0GCSqG SIb3DQEBCwUAA4IBAQBTN1AgihCIbBqSfU+qHa26arPm2DTEZC4eSe1k85YgrbHk DnWGIzj9cT+mCMx8DVF/Q2X+sCcb5Nv3rz9Jwex1yCDyGOoAIS03oKFFH9iup4CZ jIz6tY6Ke1HQzAHzLANse+HWC/C2j2a1S1QdVenFL3CM2Rvi2FLjZ+G4oPCSkLqj ZFw9HaSrgkNP46leDRjBMMUAWwlV4UxRe4VEIifCeQeVsg9S9wxsK1jV1ZFJnJUg 4KCtX+C4M4XGxb0t7GKNZhwo3piqWRRBDqu2Cym3HakJDAAd1Mnw1TSYS5EBcuAJ Bm7Ll8V9RgvTAu8q2xrEqrnyKbZRAxKZVZ2zJtNQ -----END CERTIFICATE-----Generated at Sun Jun 23 10:11:54 2024 by rpki-client on console-ams.rpki-client.org