$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa File: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (raw, json) Hash identifier: YRDtjy6dGfctkwwFkOVZ0Lht6L/ZRO27ITtMgAgG90E= Subject key identifier: D9:8D:99:F6:D7:8B:20:1C:F0:FA:E9:34:FF:13:36:45:B2:38:88:6C Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 182C6A9DFB5B57E60F234A4E7F86077841F7B8B9 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa Signing time: Mon 28 Oct 2024 11:00:02 +0000 ROA not before: Mon 28 Oct 2024 10:55:02 +0000 ROA not after: Mon 27 Oct 2025 11:00:02 +0000 asID: 138120 IP address blocks: 175.111.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:2c:6a:9d:fb:5b:57:e6:0f:23:4a:4e:7f:86:07:78:41:f7:b8:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Oct 28 10:55:02 2024 GMT Not After : Oct 27 11:00:02 2025 GMT Subject: CN=D98D99F6D78B201CF0FAE934FF133645B238886C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:06:e3:c5:33:10:14:b0:c6:4e:ec:93:71: f4:3f:89:9c:97:47:c6:a5:42:bc:4e:cc:4b:28:e4: cd:6c:de:91:26:5a:13:9c:47:a1:63:49:e7:bb:61: ee:12:f6:c8:be:22:a8:1a:fc:e8:e1:e3:bd:c7:d7: e2:4a:34:33:44:dd:d9:09:f1:6b:58:07:02:df:c9: 29:bb:07:7a:d3:e9:f0:4e:ac:3a:c9:aa:68:3f:80: 15:61:76:0d:17:50:58:79:07:da:db:a1:4c:9e:cc: 4e:ea:9f:a6:55:30:bf:18:f5:e9:93:51:f0:d1:e2: 15:60:b7:82:5b:50:00:2d:f1:09:05:76:49:d3:67: ff:e1:cd:27:06:12:83:ba:ab:6c:35:6c:e4:be:41: 4d:d1:6f:cd:f0:ad:dd:5d:34:79:63:07:85:da:a4: cf:15:b0:fc:c4:de:04:fa:f8:d9:8e:e8:f4:ff:ac: c9:54:9d:7c:1e:2d:9f:4a:b8:8f:78:0e:0e:bb:9a: b4:0d:9c:a6:32:0e:03:8a:66:5a:fc:df:12:8c:62: 7a:42:f6:32:61:a6:72:dc:9b:62:45:56:74:09:6b: 49:df:af:52:11:27:43:12:06:cb:e4:71:3b:c2:16: ef:fc:4a:11:6d:4c:9c:86:78:45:00:ea:c0:c6:99: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8D:99:F6:D7:8B:20:1C:F0:FA:E9:34:FF:13:36:45:B2:38:88:6C X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.99.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:35:3e:a1:89:ee:8f:12:d3:07:a0:51:c0:74:65:15:5f:f4: bd:4a:a2:35:0f:bb:fd:1c:6e:a9:8b:9a:6c:c3:6e:71:b0:a4: 92:f5:53:68:c7:c1:3f:fb:72:00:44:54:b0:d9:61:ce:ff:6e: 8b:ee:d3:ce:06:92:98:83:7f:c4:ef:3e:8e:2d:46:7d:b5:36: 8a:cc:0e:19:e6:0a:0d:37:5e:85:28:64:bc:6c:99:be:d2:b0: b5:69:e9:07:ac:f0:3f:a5:7f:19:fc:55:ad:1e:ba:bf:9d:4f: 6c:14:6c:a1:48:f4:89:08:66:47:43:05:0f:dc:31:7c:c9:3b: 3a:23:2a:23:99:99:ba:8d:3d:89:7e:3d:f3:43:46:df:df:17: d2:36:a9:bd:c6:88:ce:59:81:6c:59:0c:6c:d0:14:3e:08:f3: 6f:81:e8:52:80:01:ca:62:67:b3:9f:93:a2:cf:64:50:3a:74: 27:67:30:ec:ad:bd:37:e2:c7:51:d3:76:e8:ad:b3:e7:28:dc: de:aa:8d:ea:12:36:25:9c:a0:80:77:64:03:f6:fc:cc:a9:e1: 37:25:f9:12:6d:0c:ba:7f:7f:fb:2c:8c:d4:4b:27:37:24:81: 49:da:fd:fb:72:86:48:2f:38:93:8f:e1:fa:c0:a5:e0:25:0a: d9:6a:92:3d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGCxqnftbV+YPI0pOf4YHeEH3uLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNDEwMjgxMDU1MDJaFw0yNTEwMjcxMTAwMDJaMDMxMTAvBgNV BAMTKEQ5OEQ5OUY2RDc4QjIwMUNGMEZBRTkzNEZGMTMzNjQ1QjIzODg4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQwbjxTMQFLDGTuyTcfQ/iZyX R8alQrxOzEso5M1s3pEmWhOcR6FjSee7Ye4S9si+Iqga/Ojh473H1+JKNDNE3dkJ 8WtYBwLfySm7B3rT6fBOrDrJqmg/gBVhdg0XUFh5B9rboUyezE7qn6ZVML8Y9emT UfDR4hVgt4JbUAAt8QkFdknTZ//hzScGEoO6q2w1bOS+QU3Rb83wrd1dNHljB4Xa pM8VsPzE3gT6+NmO6PT/rMlUnXweLZ9KuI94Dg67mrQNnKYyDgOKZlr83xKMYnpC 9jJhpnLcm2JFVnQJa0nfr1IRJ0MSBsvkcTvCFu/8ShFtTJyGeEUA6sDGmRLzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2Y2Z9teLIBzw+uk0/xM2RbI4iGwwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiYThjZjY1LWQ0NjgtNDMwOS05 ZjMwLTliOWYyNmQ5Y2UyZC8wLzMxMzczNTJlMzEzMTMxMmUzOTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr29jMA0GCSqG SIb3DQEBCwUAA4IBAQB7NT6hie6PEtMHoFHAdGUVX/S9SqI1D7v9HG6pi5psw25x sKSS9VNox8E/+3IARFSw2WHO/26L7tPOBpKYg3/E7z6OLUZ9tTaKzA4Z5goNN16F KGS8bJm+0rC1aekHrPA/pX8Z/FWtHrq/nU9sFGyhSPSJCGZHQwUP3DF8yTs6Iyoj mZm6jT2Jfj3zQ0bf3xfSNqm9xojOWYFsWQxs0BQ+CPNvgehSgAHKYmezn5Oiz2RQ OnQnZzDsrb034sdR03borbPnKNzeqo3qEjYlnKCAd2QD9vzMqeE3JfkSbQy6f3/7 LIzUSyc3JIFJ2v37coZILziTj+H6wKXgJQrZapI9 -----END CERTIFICATE-----Generated at Sun Nov 24 13:13:45 2024 by rpki-client on console-fra.rpki-client.org