$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa File: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (raw, json) Hash identifier: kkfWGgBDhBj9LbPcLWN3LfoUckDAFJQR8XFtjGluTfk= Subject key identifier: 9B:E0:7A:9E:34:5D:02:51:E5:90:0C:6B:DA:97:84:04:1D:5E:20:10 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 7DC3F2EE0603BA919803888376025F79FBEAB3CD Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa Signing time: Fri 19 Jul 2024 09:22:04 +0000 ROA not before: Fri 19 Jul 2024 09:17:04 +0000 ROA not after: Fri 18 Jul 2025 09:22:04 +0000 asID: 152777 IP address blocks: 157.66.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c3:f2:ee:06:03:ba:91:98:03:88:83:76:02:5f:79:fb:ea:b3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Jul 19 09:17:04 2024 GMT Not After : Jul 18 09:22:04 2025 GMT Subject: CN=9BE07A9E345D0251E5900C6BDA9784041D5E2010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:39:98:d4:50:12:f3:36:7f:95:5c:5b:15: 75:29:36:00:a8:fb:00:c8:09:00:24:6b:2d:20:42: 18:bb:4a:b6:80:aa:61:29:5a:8c:b6:df:f0:d7:37: 80:7d:2c:34:da:fd:a9:84:3f:2b:97:31:b2:86:89: f1:88:83:c3:4c:9e:dc:da:50:2b:35:f7:54:e4:15: 5b:cd:60:c9:7f:54:e2:39:2c:24:18:cc:17:1a:6a: 7f:7f:6e:ec:93:1f:f1:be:65:16:1f:2c:29:cf:e9: e7:ac:d5:88:99:f8:5c:70:71:4b:39:94:cb:c9:30: 35:bd:f5:34:d6:0a:01:79:a9:51:1b:54:a6:f8:00: 82:08:b5:dd:11:0c:4f:d0:ef:b5:fe:5e:be:4b:89: df:79:e6:cb:44:05:3d:d2:19:5c:fe:75:62:1c:a2: ab:21:7e:57:ad:86:8f:a6:51:36:96:81:bb:08:ba: 68:7c:9b:13:71:e7:f9:83:fc:d9:c1:99:7f:7e:6e: eb:f1:0c:40:fa:bb:ce:26:f9:04:71:8d:96:04:26: 4b:6c:ff:e4:8f:6e:db:82:b2:5a:ab:f1:e3:c9:dd: f7:c8:ee:15:0d:13:b2:1e:74:fc:1c:4d:b6:07:fe: ea:79:48:7d:84:80:d7:67:f5:ef:83:64:0e:3e:0f: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E0:7A:9E:34:5D:02:51:E5:90:0C:6B:DA:97:84:04:1D:5E:20:10 X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.170.0/23 Signature Algorithm: sha256WithRSAEncryption 58:94:ae:b9:09:94:8c:86:ee:7a:51:ea:6d:58:db:8e:e5:f7: 16:94:73:4c:c1:bf:35:08:5f:ec:e0:15:da:d8:09:e5:77:8d: 45:94:36:f6:7f:89:ff:eb:db:85:6a:41:3a:21:62:bd:b3:7b: 16:9a:c6:4b:3d:49:23:3b:aa:1c:c8:80:c9:f0:c5:43:0c:58: ed:de:b9:9b:c9:60:95:0b:0e:85:b8:40:96:72:e0:f4:64:3d: 5b:ff:47:19:26:e0:e1:bf:67:a6:d1:1b:99:e0:51:ff:1d:92: 47:44:a6:95:47:15:28:5b:a5:d6:08:f8:26:31:2b:d0:5e:01: 19:4a:fc:5f:cc:99:19:fc:93:5b:f0:19:fa:7c:2f:6f:89:04: 53:9d:73:b6:10:d4:17:9a:45:3f:19:2b:fb:1c:95:ef:31:49: a5:4c:c2:93:e5:da:8e:64:ea:8b:08:92:51:e9:5c:a1:00:4a: 38:be:6e:41:8a:7f:c8:18:84:31:6a:68:c6:69:0a:84:9a:04: b4:66:e5:17:df:25:24:e3:b3:6a:35:b0:e2:d0:1f:94:f6:1c: fe:b4:d8:9a:94:0b:80:0d:fa:d8:c3:de:14:7b:74:c2:03:13: 45:a4:d1:0a:6e:05:da:7e:7d:11:d7:21:ef:ea:14:b7:0d:38: 6b:ce:c3:7c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfcPy7gYDupGYA4iDdgJfefvqs80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNDA3MTkwOTE3MDRaFw0yNTA3MTgwOTIyMDRaMDMxMTAvBgNV BAMTKDlCRTA3QTlFMzQ1RDAyNTFFNTkwMEM2QkRBOTc4NDA0MUQ1RTIwMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5TmY1FAS8zZ/lVxbFXUpNgCo +wDICQAkay0gQhi7SraAqmEpWoy23/DXN4B9LDTa/amEPyuXMbKGifGIg8NMntza UCs191TkFVvNYMl/VOI5LCQYzBcaan9/buyTH/G+ZRYfLCnP6ees1YiZ+FxwcUs5 lMvJMDW99TTWCgF5qVEbVKb4AIIItd0RDE/Q77X+Xr5Lid955stEBT3SGVz+dWIc oqshfletho+mUTaWgbsIumh8mxNx5/mD/NnBmX9+buvxDED6u84m+QRxjZYEJkts /+SPbtuCslqr8ePJ3ffI7hUNE7IedPwcTbYH/up5SH2EgNdn9e+DZA4+D3tNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUm+B6njRdAlHlkAxr2peEBB1eIBAwHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1NDgxNjA2LWQ1ZmQtNDE5Ni1h YmNkLTU4ZTZjNzYyNDNjNS8wLzMxMzUzNzJlMzYzNjJlMzEzNzMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzczNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUKqMA0GCSqG SIb3DQEBCwUAA4IBAQBYlK65CZSMhu56UeptWNuO5fcWlHNMwb81CF/s4BXa2Anl d41FlDb2f4n/69uFakE6IWK9s3sWmsZLPUkjO6ocyIDJ8MVDDFjt3rmbyWCVCw6F uECWcuD0ZD1b/0cZJuDhv2em0RuZ4FH/HZJHRKaVRxUoW6XWCPgmMSvQXgEZSvxf zJkZ/JNb8Bn6fC9viQRTnXO2ENQXmkU/GSv7HJXvMUmlTMKT5dqOZOqLCJJR6Vyh AEo4vm5Bin/IGIQxamjGaQqEmgS0ZuUX3yUk47NqNbDi0B+U9hz+tNialAuADfrY w94Ue3TCAxNFpNEKbgXafn0R1yHv6hS3DThrzsN8 -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org