$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa File: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (raw, json) Hash identifier: +tnbXI6a+y9gMcFzkXdjWPKAZP6uwEo69yg6QXSsj5E= Subject key identifier: A4:F8:90:44:34:30:17:47:08:0A:9B:46:B9:9E:BC:31:23:E3:12:BA Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 6E77C464E5433F23E1DBDE4E133117B4C4E21F48 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa Signing time: Mon 26 Feb 2024 06:02:28 +0000 ROA not before: Mon 26 Feb 2024 05:57:28 +0000 ROA not after: Mon 24 Feb 2025 06:02:28 +0000 asID: 38320 IP address blocks: 175.103.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:77:c4:64:e5:43:3f:23:e1:db:de:4e:13:31:17:b4:c4:e2:1f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Feb 26 05:57:28 2024 GMT Not After : Feb 24 06:02:28 2025 GMT Subject: CN=A4F8904434301747080A9B46B99EBC3123E312BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:e8:c7:30:a1:c4:07:7e:77:58:79:b8:14: 33:32:9c:88:d0:62:b9:3e:0a:b3:a9:79:57:00:cd: 19:cc:b1:45:d9:db:c0:5a:2f:80:81:e9:91:81:ef: d2:51:d7:a2:94:49:ed:6a:85:55:65:5a:c6:53:dc: 2f:f3:3b:a6:d2:5b:b5:85:ba:29:06:38:d5:d6:e6: fd:22:c6:9d:38:78:c4:2d:ed:ed:ca:c5:83:3a:a8: 1b:ff:39:ee:80:b1:26:79:8a:13:8b:71:07:88:f3: 4d:12:38:47:8b:ee:7a:c7:fb:cd:f1:f1:dc:56:9c: 78:10:6c:7e:1e:9f:ed:e1:d3:8d:92:1b:72:ac:37: ca:0d:99:74:f9:31:2b:2b:6a:9e:f6:c8:e8:13:45: d2:2b:5d:e3:d0:ee:cc:1a:db:d4:73:ac:05:11:ea: 73:6b:6a:34:d5:f7:37:97:64:da:84:53:d2:66:96: e8:9c:c8:d2:a4:bd:e3:ec:be:f8:c5:40:6c:83:ca: c2:ef:1c:35:ec:87:6f:95:2e:1a:ab:b5:ed:5e:e8: 26:c2:fd:6d:d6:45:c5:e9:50:5a:ff:41:73:da:68: 1b:05:a4:da:f9:c2:b8:db:ab:68:5d:64:bf:92:31: e0:2d:e5:e6:3c:26:26:9f:7f:4d:8e:39:c2:bf:f5: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F8:90:44:34:30:17:47:08:0A:9B:46:B9:9E:BC:31:23:E3:12:BA X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.103.33.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:26:c6:97:e4:ea:aa:4e:b7:bf:a2:4f:be:37:94:e2:ee:92: 37:33:a7:e3:fb:7a:c9:85:5a:79:d3:fb:8d:99:89:54:9e:b5: f4:94:7d:a8:4c:c5:a4:2c:16:6c:46:15:75:d1:76:78:78:0f: bb:62:3b:ce:0a:d3:34:1f:f1:34:fd:94:5d:0c:5c:30:f5:dc: 1b:00:fc:3a:58:6c:64:f1:54:38:42:39:bb:91:2d:15:3c:25: a3:e9:70:20:54:ac:bd:11:b9:4b:79:5a:cc:ed:55:5b:a1:99: f4:e8:e4:1b:9a:7f:fd:88:41:84:4a:39:ad:44:0c:78:a3:10: 44:53:81:3a:39:ab:a8:9d:3d:ab:61:b7:9f:f5:7a:36:c3:ff: 96:a4:8e:7f:36:9d:7e:6a:34:ee:5c:b4:10:7d:98:e0:a5:6b: 5d:18:8a:2a:00:9c:b2:0c:c2:f5:84:7e:6c:41:f2:f4:0a:be: 55:9b:dc:9b:9d:a0:0e:14:ae:80:ca:e2:34:79:f9:75:2e:aa: 48:65:b8:76:49:41:2d:25:1b:1c:ed:64:3b:de:74:f1:de:fa: 23:d5:b5:2b:88:28:83:b5:1e:d5:19:e3:73:e7:b4:ba:ce:b6: c1:83:fd:ac:b6:1a:15:3a:37:43:9a:0e:8f:28:55:45:f0:8c: 11:20:43:43 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbnfEZOVDPyPh295OEzEXtMTiH0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNDAyMjYwNTU3MjhaFw0yNTAyMjQwNjAyMjhaMDMxMTAvBgNV BAMTKEE0Rjg5MDQ0MzQzMDE3NDcwODBBOUI0NkI5OUVCQzMxMjNFMzEyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BOjHMKHEB353WHm4FDMynIjQ Yrk+CrOpeVcAzRnMsUXZ28BaL4CB6ZGB79JR16KUSe1qhVVlWsZT3C/zO6bSW7WF uikGONXW5v0ixp04eMQt7e3KxYM6qBv/Oe6AsSZ5ihOLcQeI800SOEeL7nrH+83x 8dxWnHgQbH4en+3h042SG3KsN8oNmXT5MSsrap72yOgTRdIrXePQ7swa29RzrAUR 6nNrajTV9zeXZNqEU9JmluicyNKkvePsvvjFQGyDysLvHDXsh2+VLhqrte1e6CbC /W3WRcXpUFr/QXPaaBsFpNr5wrjbq2hdZL+SMeAt5eY8Jiaff02OOcK/9aI/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUpPiQRDQwF0cICptGuZ68MSPjErowHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzczNTJlMzEzMDMzMmUzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK9nITANBgkqhkiG 9w0BAQsFAAOCAQEALSbGl+Tqqk63v6JPvjeU4u6SNzOn4/t6yYVaedP7jZmJVJ61 9JR9qEzFpCwWbEYVddF2eHgPu2I7zgrTNB/xNP2UXQxcMPXcGwD8OlhsZPFUOEI5 u5EtFTwlo+lwIFSsvRG5S3lazO1VW6GZ9OjkG5p//YhBhEo5rUQMeKMQRFOBOjmr qJ09q2G3n/V6NsP/lqSOfzadfmo07ly0EH2Y4KVrXRiKKgCcsgzC9YR+bEHy9Aq+ VZvcm52gDhSugMriNHn5dS6qSGW4dklBLSUbHO1kO9508d76I9W1K4gog7Ue1Rnj c+e0us62wYP9rLYaFTo3Q5oOjyhVRfCMESBDQw== -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org