$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa File: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (raw, json) Hash identifier: hA9QEKhwCcEF+v9QOt1zRjzED0EcNB8I3mWLTosuopM= Subject key identifier: 6E:B2:E9:6E:1A:7B:C0:36:16:0C:DE:B9:8A:E2:8F:24:8B:E3:21:82 Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 059735F6BF97E1E8320A57D4540486A512EF2C97 Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa Signing time: Mon 29 Apr 2024 05:25:18 +0000 ROA not before: Mon 29 Apr 2024 05:20:18 +0000 ROA not after: Mon 28 Apr 2025 05:25:18 +0000 asID: 152376 IP address blocks: 157.15.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 17:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:97:35:f6:bf:97:e1:e8:32:0a:57:d4:54:04:86:a5:12:ef:2c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Apr 29 05:20:18 2024 GMT Not After : Apr 28 05:25:18 2025 GMT Subject: CN=6EB2E96E1A7BC036160CDEB98AE28F248BE32182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:b4:d8:6d:54:b7:7b:08:8f:f6:5f:8e:2b: 00:27:ac:c6:00:31:be:fe:02:77:ad:74:c6:f0:30: 5e:f8:8f:a1:44:89:c5:d9:d0:4f:c1:b9:f2:c6:c1: e8:a0:de:f6:03:23:15:5a:20:b1:78:ba:03:65:76: 9f:2a:13:86:d5:73:ed:21:a4:f0:f6:35:fd:af:e4: f8:3d:07:42:b1:77:c3:1e:29:64:7d:d4:68:80:25: 31:9c:6e:cd:30:dd:02:74:aa:ee:29:e7:f0:95:e1: dc:d0:76:7e:12:49:3c:aa:fa:79:11:6b:a6:5d:9c: aa:34:05:61:10:c8:97:bf:1e:1c:00:7e:e9:bb:28: 91:e7:d8:39:c7:26:0d:06:22:39:3c:f5:c1:04:f1: 6b:69:73:78:22:8d:09:8f:f7:57:db:64:0e:cf:a8: 8c:d1:dd:39:3e:c1:72:93:f4:3e:0f:f5:c5:68:e3: 1b:a7:1a:38:23:ed:43:31:66:ed:9d:32:0a:a2:38: dd:8b:72:aa:ca:67:cd:3b:cc:dd:3a:a9:3e:f0:10: 3d:3a:21:85:db:64:d5:2c:93:a2:57:b2:40:9c:3c: 63:16:f6:db:fa:5f:a0:f1:a4:88:4b:c6:76:90:7d: 8b:d2:ca:be:f6:3b:34:a3:79:e3:0c:83:5e:39:53: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B2:E9:6E:1A:7B:C0:36:16:0C:DE:B9:8A:E2:8F:24:8B:E3:21:82 X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.144.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:06:f8:40:00:b2:9e:e0:3d:ec:d3:be:2f:43:6b:49:ad:d4: b4:b2:40:7b:ec:13:8d:52:12:75:e0:c6:25:24:13:53:4e:d6: 83:b1:f5:36:1f:91:f0:de:7e:81:5b:70:60:3e:88:25:c7:a1: 82:55:d4:eb:e2:fb:50:bf:32:29:b4:79:95:63:c1:5e:c7:7a: 69:63:30:89:78:b5:10:47:46:9d:10:f6:5a:a4:25:eb:3e:52: a5:c6:01:e6:ae:de:6f:67:20:91:d0:1a:cf:26:a1:66:03:1f: cd:f4:30:f9:d7:e3:d4:38:04:fe:64:e9:c8:e3:b5:77:cd:18: a5:11:6e:d8:c2:39:08:77:d6:aa:ba:ea:ee:99:25:60:80:5a: 0b:f7:18:8d:e7:5c:53:6e:71:c3:ec:36:50:04:00:2b:15:61: a9:2a:fe:dc:f5:b4:60:a0:09:dd:59:43:81:c5:cb:84:7e:07: a1:3d:7d:5b:59:db:e2:19:40:77:70:0a:61:17:d5:5f:81:de: 18:c2:b7:d7:4d:45:be:0d:95:bf:f4:96:b4:c9:54:2c:39:73: 00:73:34:b9:ad:79:4b:b9:07:2a:3a:08:2f:26:b0:03:2c:ce: 7f:71:2d:94:c0:20:8c:9b:60:5b:0f:62:3f:87:5e:48:e4:90: 2c:0a:b1:e6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBZc19r+X4egyClfUVASGpRLvLJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNDA0MjkwNTIwMThaFw0yNTA0MjgwNTI1MThaMDMxMTAvBgNV BAMTKDZFQjJFOTZFMUE3QkMwMzYxNjBDREVCOThBRTI4RjI0OEJFMzIxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0LTYbVS3ewiP9l+OKwAnrMYA Mb7+AnetdMbwMF74j6FEicXZ0E/BufLGweig3vYDIxVaILF4ugNldp8qE4bVc+0h pPD2Nf2v5Pg9B0Kxd8MeKWR91GiAJTGcbs0w3QJ0qu4p5/CV4dzQdn4SSTyq+nkR a6ZdnKo0BWEQyJe/HhwAfum7KJHn2DnHJg0GIjk89cEE8Wtpc3gijQmP91fbZA7P qIzR3Tk+wXKT9D4P9cVo4xunGjgj7UMxZu2dMgqiON2LcqrKZ807zN06qT7wED06 IYXbZNUsk6JXskCcPGMW9tv6X6DxpIhLxnaQfYvSyr72OzSjeeMMg145UyVpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbrLpbhp7wDYWDN65iuKPJIvjIYIwHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1NmVjY2I3LWU5MTctNDBmNS1h Y2VlLTAzZDY4YmU1ZmQ5Ny8wLzMxMzUzNzJlMzEzNTJlMzEzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ+QMA0GCSqG SIb3DQEBCwUAA4IBAQA7BvhAALKe4D3s074vQ2tJrdS0skB77BONUhJ14MYlJBNT TtaDsfU2H5Hw3n6BW3BgPoglx6GCVdTr4vtQvzIptHmVY8Fex3ppYzCJeLUQR0ad EPZapCXrPlKlxgHmrt5vZyCR0BrPJqFmAx/N9DD51+PUOAT+ZOnI47V3zRilEW7Y wjkId9aquurumSVggFoL9xiN51xTbnHD7DZQBAArFWGpKv7c9bRgoAndWUOBxcuE fgehPX1bWdviGUB3cAphF9Vfgd4YwrfXTUW+DZW/9Ja0yVQsOXMAczS5rXlLuQcq OggvJrADLM5/cS2UwCCMm2BbD2I/h15I5JAsCrHm -----END CERTIFICATE-----Generated at Tue Jun 25 07:39:53 2024 by rpki-client on console-ams.rpki-client.org