$ rpki-client -vvf repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa File: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (raw, json) Hash identifier: ZpWIDOrW4AQnfmFxeBUFFYynOv9NAjRD2YkimpoSr6Y= Subject key identifier: 37:1B:70:33:63:C3:A2:35:5F:D6:73:CB:82:FE:55:22:35:F7:3F:F1 Certificate issuer: /CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Certificate serial: 68D2B83904ACA9C6B520AAFFC5E9209A03BCFDFC Authority key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa Signing time: Sun 04 Aug 2024 15:25:14 +0000 ROA not before: Sun 04 Aug 2024 15:20:14 +0000 ROA not after: Sun 03 Aug 2025 15:25:14 +0000 asID: 152346 IP address blocks: 157.10.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d2:b8:39:04:ac:a9:c6:b5:20:aa:ff:c5:e9:20:9a:03:bc:fd:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Validity Not Before: Aug 4 15:20:14 2024 GMT Not After : Aug 3 15:25:14 2025 GMT Subject: CN=371B703363C3A2355FD673CB82FE552235F73FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:3d:b5:bb:bb:1c:32:f7:c3:ca:77:b5:92: 17:dd:5e:34:7e:2b:00:62:af:7a:73:be:39:d6:3e: 62:b4:70:9d:ba:28:fb:6d:d0:95:51:dd:c4:54:0b: c0:f5:6d:bf:c5:56:8f:a9:26:f1:86:65:fe:5d:34: f9:40:26:27:88:3b:19:f0:c7:84:13:c2:17:55:ab: ba:2e:e8:e6:a5:23:39:ce:3a:43:3d:00:c0:7a:eb: 4c:3c:b8:fc:86:a7:ff:55:97:f1:16:9f:5d:ff:2c: e0:8f:c2:77:2b:5b:02:39:5c:d1:05:32:14:0e:ff: 36:8b:73:42:53:5e:d2:79:c5:42:73:0f:76:a9:b3: 30:b2:21:72:1e:63:5d:91:26:2f:9c:63:0b:6d:7e: e5:f0:be:c4:87:ca:f6:8f:e6:5b:e7:92:ee:15:f6: dd:35:57:c7:38:4f:ca:bf:f2:da:e8:bc:71:89:7b: e2:40:20:e4:0d:cd:ba:a9:3b:ce:b5:64:17:63:42: 01:6a:61:9e:3b:2b:92:63:da:79:8b:ef:8b:29:a5: 4b:fc:a7:e4:7c:4b:ed:e2:f3:8b:3a:1a:66:b2:6c: 8e:bb:3d:d4:9c:4c:b0:5e:40:3d:ec:9e:d5:44:7f: 5a:21:aa:d0:80:87:bd:f9:68:de:a6:5c:3e:12:8c: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1B:70:33:63:C3:A2:35:5F:D6:73:CB:82:FE:55:22:35:F7:3F:F1 X509v3 Authority Key Identifier: keyid:B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.179.0/24 Signature Algorithm: sha256WithRSAEncryption 36:e3:29:51:09:08:e4:6b:3d:41:f9:88:b3:03:f4:7b:d4:2f: 7a:61:1a:dc:fe:65:31:fa:ca:82:06:22:cb:6f:9e:4d:7d:cb: 6d:4b:12:28:97:bf:b4:cd:ef:04:6d:dc:11:26:2c:a3:f7:72: 4e:65:2e:71:b4:4e:a7:6c:f4:7b:6e:7f:ca:da:b3:9e:2a:2c: ab:ce:a0:c3:7b:ac:64:96:4d:66:6d:5a:85:74:87:34:60:df: c1:37:14:8a:29:9a:c7:50:cf:6a:92:c3:00:59:b5:2d:97:17: 78:b4:27:b2:34:d9:ac:f1:c3:b7:0c:63:9c:50:4c:e3:7f:23: f7:a7:14:cc:16:a1:b5:b6:71:03:1e:1a:32:19:86:e0:26:9d: 62:8c:86:1b:b9:20:3f:80:a2:20:f6:15:8e:a0:52:4b:51:1a: 9e:3b:1a:fa:ba:a7:1a:37:3a:e3:4f:f1:6f:70:2e:69:49:0c: 1e:a2:62:5b:78:01:70:c4:d7:35:15:95:b8:7d:9d:1e:57:07: eb:23:8f:c0:82:fb:92:b7:62:88:38:a5:59:f9:bd:9e:73:c6: 2c:32:dd:21:b5:c2:7c:56:46:c9:be:9e:3c:65:44:25:b5:d6: 24:72:f1:3e:c4:90:1e:df:f7:90:aa:8c:27:d1:10:72:67:a7: e9:94:14:76 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaNK4OQSsqca1IKr/xekgmgO8/fwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIw MTk2MkI1QjAeFw0yNDA4MDQxNTIwMTRaFw0yNTA4MDMxNTI1MTRaMDMxMTAvBgNV BAMTKDM3MUI3MDMzNjNDM0EyMzU1RkQ2NzNDQjgyRkU1NTIyMzVGNzNGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bD21u7scMvfDyne1khfdXjR+ KwBir3pzvjnWPmK0cJ26KPtt0JVR3cRUC8D1bb/FVo+pJvGGZf5dNPlAJieIOxnw x4QTwhdVq7ou6OalIznOOkM9AMB660w8uPyGp/9Vl/EWn13/LOCPwncrWwI5XNEF MhQO/zaLc0JTXtJ5xUJzD3apszCyIXIeY12RJi+cYwttfuXwvsSHyvaP5lvnku4V 9t01V8c4T8q/8trovHGJe+JAIOQNzbqpO861ZBdjQgFqYZ47K5Jj2nmL74sppUv8 p+R8S+3i84s6GmaybI67PdScTLBeQD3sntVEf1ohqtCAh735aN6mXD4SjDU/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUNxtwM2PDojVf1nPLgv5VIjX3P/EwHwYDVR0j BBgwFoAUuRTGGl2xxl5mzlr2TD4gwgGWK1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRjMTNmZi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMC9COTE0QzYxQTVE QjFDNjVFNjZDRTVBRjY0QzNFMjBDMjAxOTYyQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIwMTk2 MkI1Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4ZGMxM2ZmLTViMTAtNDRhNi1i NmYzLThmMDM1ZTU4OTdkOC8wLzMxMzUzNzJlMzEzMDJlMzEzNzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQqzMA0GCSqG SIb3DQEBCwUAA4IBAQA24ylRCQjkaz1B+YizA/R71C96YRrc/mUx+sqCBiLLb55N fcttSxIol7+0ze8EbdwRJiyj93JOZS5xtE6nbPR7bn/K2rOeKiyrzqDDe6xklk1m bVqFdIc0YN/BNxSKKZrHUM9qksMAWbUtlxd4tCeyNNms8cO3DGOcUEzjfyP3pxTM FqG1tnEDHhoyGYbgJp1ijIYbuSA/gKIg9hWOoFJLURqeOxr6uqcaNzrjT/FvcC5p SQweomJbeAFwxNc1FZW4fZ0eVwfrI4/AgvuSt2KIOKVZ+b2ec8YsMt0htcJ8VkbJ vp48ZUQltdYkcvE+xJAe3/eQqown0RByZ6fplBR2 -----END CERTIFICATE-----Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org