$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32312d3231203d3e203436303439.roa File: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (raw, json) Hash identifier: 1XpGe+qbE1OOWK8DTNkeP+L7ndY3082zjqj/g6hwuD8= Subject key identifier: CE:D8:1B:B3:4B:9F:F9:DA:F3:09:9A:BF:58:61:DB:9E:90:B4:D2:BE Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Certificate serial: 410E2C74FCB3F5DA4FAE83DAEFDF1BD3432883D9 Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32312d3231203d3e203436303439.roa Signing time: Thu 18 Jul 2024 09:00:42 +0000 ROA not before: Thu 18 Jul 2024 08:55:42 +0000 ROA not after: Thu 17 Jul 2025 09:00:42 +0000 asID: 46049 IP address blocks: 182.255.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0e:2c:74:fc:b3:f5:da:4f:ae:83:da:ef:df:1b:d3:43:28:83:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Validity Not Before: Jul 18 08:55:42 2024 GMT Not After : Jul 17 09:00:42 2025 GMT Subject: CN=CED81BB34B9FF9DAF3099ABF5861DB9E90B4D2BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:00:8b:40:85:81:62:fc:a2:90:77:eb:8e: 04:5b:39:58:09:b0:95:2c:ea:36:4d:77:3c:34:f9: e5:4f:3b:56:11:c7:33:85:ec:a0:7f:d0:22:11:b0: bf:fd:20:df:1d:0a:94:05:f8:ca:4d:fc:75:2e:9b: a7:95:56:51:51:56:98:66:41:1e:07:b3:1b:65:37: 2d:7d:21:56:a8:6e:3d:29:73:02:8f:6e:95:e6:42: 31:10:dc:02:5a:7a:39:76:20:f6:07:02:4e:78:2a: d9:ad:a7:7b:c6:f6:da:40:a1:ab:7a:28:09:b8:39: a2:2a:35:e9:b9:18:17:a7:3d:c8:9a:11:a2:84:d7: 1f:f7:31:5b:22:30:03:79:81:7b:39:8b:b7:85:87: e7:8b:23:c0:47:43:89:06:39:5c:75:b9:d3:7f:bb: 09:8f:ee:18:a0:0e:1b:6d:aa:86:99:f9:74:62:f4: 92:0d:60:49:c7:25:23:3a:91:36:c7:b6:2a:8e:af: 59:83:13:9a:98:06:0b:8a:d9:00:6b:7d:0e:98:a7: b8:4b:98:8f:50:44:ca:a8:55:c4:23:3b:2e:36:e6: 24:b5:fa:c1:fe:25:fc:96:d3:c6:ab:5d:8d:00:a6: 5a:ac:18:31:b1:15:d1:c9:22:4f:cb:9c:3d:38:c0: e6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:1B:B3:4B:9F:F9:DA:F3:09:9A:BF:58:61:DB:9E:90:B4:D2:BE X509v3 Authority Key Identifier: keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32312d3231203d3e203436303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.255.0.0/21 Signature Algorithm: sha256WithRSAEncryption 89:92:de:90:95:a4:80:c4:03:bd:f6:bb:ed:cc:b9:3c:3e:8f: 75:3e:81:62:7b:9e:d4:5e:88:8b:17:56:fd:76:ea:72:f9:fe: cc:e1:11:93:d1:71:6d:0b:5c:5c:b6:e7:e6:35:bd:f1:39:02: e1:e6:06:af:e5:77:ff:01:91:42:d3:ff:a9:74:83:0b:4b:31: 92:24:28:1c:e8:32:07:38:5a:76:54:ba:f6:15:ad:b7:6d:61: 8f:83:ee:1c:73:01:2c:b4:69:06:6b:0e:8f:d7:e7:9b:45:5f: f8:5f:5e:75:ab:84:48:cf:18:7a:55:dc:8d:9c:60:6d:85:7d: 58:59:c0:c7:f7:4c:a2:52:87:ff:29:9b:d1:0c:a6:ca:09:c8: fe:2e:d7:c0:de:40:7d:30:93:84:35:36:01:e8:d7:63:15:89: 60:ee:cb:fe:71:2c:38:b1:41:d8:b3:0d:cf:b9:30:16:c0:26: 37:8f:ce:3a:12:9c:af:66:4f:b2:76:24:18:b9:77:e5:e6:73: ec:96:fa:3d:f2:58:48:a8:41:88:4d:af:10:52:5d:1e:fe:91: 60:8e:f6:31:42:4e:c4:a9:c1:dd:75:10:14:96:c5:ef:d2:f9: f1:35:ab:ab:50:32:58:ec:e6:c4:8b:e1:33:db:a7:1e:10:07: 7d:1d:f8:c1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUQQ4sdPyz9dpProPa798b00Mog9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz MDlCM0YzQjAeFw0yNDA3MTgwODU1NDJaFw0yNTA3MTcwOTAwNDJaMDMxMTAvBgNV BAMTKENFRDgxQkIzNEI5RkY5REFGMzA5OUFCRjU4NjFEQjlFOTBCNEQyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOuQCLQIWBYvyikHfrjgRbOVgJ sJUs6jZNdzw0+eVPO1YRxzOF7KB/0CIRsL/9IN8dCpQF+MpN/HUum6eVVlFRVphm QR4HsxtlNy19IVaobj0pcwKPbpXmQjEQ3AJaejl2IPYHAk54Ktmtp3vG9tpAoat6 KAm4OaIqNem5GBenPciaEaKE1x/3MVsiMAN5gXs5i7eFh+eLI8BHQ4kGOVx1udN/ uwmP7higDhttqoaZ+XRi9JINYEnHJSM6kTbHtiqOr1mDE5qYBguK2QBrfQ6Yp7hL mI9QRMqoVcQjOy425iS1+sH+JfyW08arXY0AplqsGDGxFdHJIk/LnD04wOaZAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUztgbs0uf+drzCZq/WGHbnpC00r4wHwYDVR0j BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC M0YzQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODZiMDkyLTUyN2QtNDg4Zi1h OWY3LTI0Nzk3ZDk3NzRjYi8wLzMxMzgzMjJlMzIzNTM1MmUzMDJlMzAyZjMyMzEy ZDMyMzEyMDNkM2UyMDM0MzYzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO2/wAwDQYJKoZIhvcN AQELBQADggEBAImS3pCVpIDEA732u+3MuTw+j3U+gWJ7ntReiIsXVv126nL5/szh EZPRcW0LXFy25+Y1vfE5AuHmBq/ld/8BkULT/6l0gwtLMZIkKBzoMgc4WnZUuvYV rbdtYY+D7hxzASy0aQZrDo/X55tFX/hfXnWrhEjPGHpV3I2cYG2FfVhZwMf3TKJS h/8pm9EMpsoJyP4u18DeQH0wk4Q1NgHo12MViWDuy/5xLDixQdizDc+5MBbAJjeP zjoSnK9mT7J2JBi5d+Xmc+yW+j3yWEioQYhNrxBSXR7+kWCO9jFCTsSpwd11EBSW xe/S+fE1q6tQMljs5sSL4TPbpx4QB30d+ME= -----END CERTIFICATE-----Generated at Sun Nov 24 08:35:26 2024 by rpki-client on console-ams.rpki-client.org