$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33382e302f32342d3234203d3e20313439373436.roa File: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (raw, json) Hash identifier: XsokazWYyrH8hmyykS91vIf9A8hAZD2XExNJhM3r7Sg= Subject key identifier: 5E:49:2B:79:52:98:C6:95:69:E8:11:51:C7:2B:84:8A:38:A5:1F:36 Certificate issuer: /CN=C00163880F235714759920507217F2A7D557C953 Certificate serial: 4CB20820C1227887B605E72FFA8B7844C7606F57 Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33382e302f32342d3234203d3e20313439373436.roa Signing time: Sat 20 Jan 2024 17:08:57 +0000 ROA not before: Sat 20 Jan 2024 17:03:57 +0000 ROA not after: Sat 18 Jan 2025 17:08:57 +0000 asID: 149746 IP address blocks: 112.78.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b2:08:20:c1:22:78:87:b6:05:e7:2f:fa:8b:78:44:c7:60:6f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00163880F235714759920507217F2A7D557C953 Validity Not Before: Jan 20 17:03:57 2024 GMT Not After : Jan 18 17:08:57 2025 GMT Subject: CN=5E492B795298C69569E81151C72B848A38A51F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:ba:2a:4a:9e:14:c1:75:26:4d:35:ba:f9: 3d:61:6b:42:82:05:d0:55:74:56:39:00:05:90:ec: 56:b5:94:ac:13:ce:c4:25:51:c8:68:2c:aa:bf:fe: 3a:3e:cb:a7:b4:49:58:43:4b:b1:44:9b:65:88:bf: 8d:df:1b:44:a6:96:76:81:9c:3b:d7:0a:0a:45:20: 2d:5a:d4:19:80:a2:37:5c:17:3b:7b:0f:67:3d:98: 5f:7b:33:80:a3:19:b1:cf:81:3e:22:57:6c:66:68: 43:da:34:43:42:e8:a6:41:e8:fc:53:31:7a:b5:43: 86:ad:be:3b:15:d7:bc:55:02:da:c2:16:53:00:c1: 8a:8a:cf:77:80:ab:15:fd:b8:b5:f7:b5:fe:b5:49: 50:3f:b7:83:be:3f:e5:f7:e6:22:64:82:2b:06:b3: e9:6e:2c:6c:2a:09:97:97:0c:b4:ba:cb:4a:cd:c3: 0b:ca:da:00:3f:98:d5:3d:3c:23:eb:b9:8d:1f:a1: 3b:bf:22:36:59:25:08:ff:10:d2:1f:0f:b7:82:f6: ff:cd:18:fc:9f:02:0d:72:9e:65:fd:2b:73:28:b3: dc:c5:9b:6d:7a:da:32:8c:83:de:28:cd:df:32:52: ad:c7:17:6e:07:00:46:f6:a1:a4:4b:91:7a:08:79: 7d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:49:2B:79:52:98:C6:95:69:E8:11:51:C7:2B:84:8A:38:A5:1F:36 X509v3 Authority Key Identifier: keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33382e302f32342d3234203d3e20313439373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.78.38.0/24 Signature Algorithm: sha256WithRSAEncryption bd:50:f0:78:7b:91:a9:71:f8:43:6e:80:b7:b5:16:4f:fc:4d: b1:91:86:a8:4a:54:e6:1a:c2:bc:8a:02:7a:00:14:0f:89:56: f8:06:bc:fa:e3:d5:15:c0:44:fc:8a:d0:09:77:13:ac:70:9d: 3c:46:ad:0a:03:35:d4:16:87:37:1d:68:5b:01:4e:95:68:00: 46:10:6a:96:e2:29:e1:ea:94:6b:b7:f4:13:4b:3c:d7:71:4c: b6:57:e6:4e:47:99:4e:c1:2e:31:e7:12:a7:f7:5f:7e:51:cc: 9d:55:cb:2b:c7:b2:19:73:18:73:bc:29:72:43:2e:5a:3e:7d: 64:d7:a5:bd:8c:4d:6f:5b:0e:8d:b6:17:2c:23:81:19:32:0b: c8:f4:df:88:d9:37:df:66:c7:ea:6c:9a:7e:54:c2:ae:20:a2: b1:9f:56:0f:f2:01:87:b7:07:77:9b:74:0f:b1:f8:77:90:7b: d8:83:4c:60:68:d2:bb:c5:11:c0:ba:da:6f:92:69:b2:d1:b2: 7c:79:e8:79:5b:50:f8:4f:0d:16:32:ed:07:63:33:ac:03:83: e8:75:7b:2e:9b:2c:f0:42:cd:88:75:41:9d:2b:ba:f1:ce:c3: ef:76:ed:61:32:d2:90:7f:b6:71:9e:e6:15:3a:6d:ed:03:20: 78:3c:bb:9c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTLIIIMEieIe2Becv+ot4RMdgb1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE NTU3Qzk1MzAeFw0yNDAxMjAxNzAzNTdaFw0yNTAxMTgxNzA4NTdaMDMxMTAvBgNV BAMTKDVFNDkyQjc5NTI5OEM2OTU2OUU4MTE1MUM3MkI4NDhBMzhBNTFGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGroqSp4UwXUmTTW6+T1ha0KC BdBVdFY5AAWQ7Fa1lKwTzsQlUchoLKq//jo+y6e0SVhDS7FEm2WIv43fG0SmlnaB nDvXCgpFIC1a1BmAojdcFzt7D2c9mF97M4CjGbHPgT4iV2xmaEPaNENC6KZB6PxT MXq1Q4atvjsV17xVAtrCFlMAwYqKz3eAqxX9uLX3tf61SVA/t4O+P+X35iJkgisG s+luLGwqCZeXDLS6y0rNwwvK2gA/mNU9PCPruY0foTu/IjZZJQj/ENIfD7eC9v/N GPyfAg1ynmX9K3Mos9zFm2162jKMg94ozd8yUq3HF24HAEb2oaRLkXoIeX27AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXkkreVKYxpVp6BFRxyuEijilHzYwHwYDVR0j BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3 Qzk1My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04 MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzEzMjJlMzczODJlMzMzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHBOJjANBgkqhkiG 9w0BAQsFAAOCAQEAvVDweHuRqXH4Q26At7UWT/xNsZGGqEpU5hrCvIoCegAUD4lW +Aa8+uPVFcBE/IrQCXcTrHCdPEatCgM11BaHNx1oWwFOlWgARhBqluIp4eqUa7f0 E0s813FMtlfmTkeZTsEuMecSp/dfflHMnVXLK8eyGXMYc7wpckMuWj59ZNelvYxN b1sOjbYXLCOBGTILyPTfiNk332bH6myaflTCriCisZ9WD/IBh7cHd5t0D7H4d5B7 2INMYGjSu8URwLrab5JpstGyfHnoeVtQ+E8NFjLtB2MzrAOD6HV7Lpss8ELNiHVB nSu68c7D73btYTLSkH+2cZ7mFTpt7QMgeDy7nA== -----END CERTIFICATE-----Generated at Sat Jun 1 15:52:57 2024 by rpki-client on console-ams.rpki-client.org