$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa File: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (raw, json) Hash identifier: Ne+xWBVvKSD+/1jLkHaEYc7MadrBl7ZDHgsUapYRpJY= Subject key identifier: BB:AD:2D:A0:54:06:79:86:CA:16:3F:2C:92:F6:93:B2:2D:EC:34:63 Certificate issuer: /CN=C00163880F235714759920507217F2A7D557C953 Certificate serial: 226665C59F146912A205F6274444B68230B85F8D Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa Signing time: Mon 31 Jul 2023 00:14:34 +0000 ROA not before: Mon 31 Jul 2023 00:09:34 +0000 ROA not after: Mon 29 Jul 2024 00:14:34 +0000 asID: 55666 IP address blocks: 116.254.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:66:65:c5:9f:14:69:12:a2:05:f6:27:44:44:b6:82:30:b8:5f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00163880F235714759920507217F2A7D557C953 Validity Not Before: Jul 31 00:09:34 2023 GMT Not After : Jul 29 00:14:34 2024 GMT Subject: CN=BBAD2DA054067986CA163F2C92F693B22DEC3463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:6d:fc:87:f4:19:c5:e7:17:fb:98:f9:6e: 98:29:1b:90:15:af:90:69:64:7f:d4:3d:3b:53:4c: c5:3c:f1:bf:20:ef:ac:ea:95:98:73:53:7f:5f:be: 41:c4:c4:b5:78:51:94:d2:0d:f6:6f:ad:7a:f8:dd: 1e:13:d6:31:d0:95:e9:67:b3:cf:9d:52:2f:24:95: d5:e8:50:d7:0d:f3:ba:ef:50:b9:ee:67:d1:6e:89: b9:43:78:2e:15:94:e8:6a:7a:cb:02:66:20:ba:62: 93:c2:ef:3e:86:08:43:ac:31:6b:52:fd:cb:e5:ff: f8:3d:31:30:20:d9:17:b6:29:bf:55:2b:06:33:e2: 4d:03:7c:eb:8a:38:17:cc:05:a4:6e:7d:8d:e0:20: 4f:a9:90:0d:66:b9:26:4d:f9:f8:87:0d:8a:76:30: 9e:08:9b:b1:ea:cc:83:b6:32:76:1a:2e:50:ce:0a: b7:00:a8:c1:16:4c:d5:60:4a:b3:51:65:5d:f1:58: 57:38:99:73:1c:08:ad:1b:df:8c:c3:31:34:27:02: a0:6d:ae:7c:c5:af:dc:37:fd:0d:aa:fe:1a:f3:9e: e2:93:56:49:e3:18:0d:34:a9:51:e1:4b:fa:6d:b1: dd:e3:c0:54:eb:97:2e:f8:60:72:47:77:e7:3a:50: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AD:2D:A0:54:06:79:86:CA:16:3F:2C:92:F6:93:B2:2D:EC:34:63 X509v3 Authority Key Identifier: keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.254.112.0/21 Signature Algorithm: sha256WithRSAEncryption 47:e1:a8:fe:9b:a6:08:34:e6:36:7b:01:4c:64:3e:f8:27:ae: 97:c8:cd:d1:1f:1d:9c:cb:59:4b:b0:8a:db:0c:67:35:6e:2f: 62:ac:c8:29:32:11:70:63:68:c8:7e:ed:f3:0b:67:fb:b5:fb: 1b:a3:46:1e:6f:7e:52:01:e8:7d:55:62:06:bb:3f:0f:9f:0d: 14:71:86:eb:6f:6b:9d:20:9d:79:52:06:64:cc:60:3e:34:27: f8:a8:9d:da:7c:5e:74:af:19:88:b4:68:19:8d:77:bb:ce:92: 66:86:4a:9a:ea:8d:08:0b:62:ac:7e:71:49:ee:d9:d1:9b:36: 94:05:32:ac:57:72:d6:1d:a2:24:6b:22:2a:b2:19:16:76:15: 05:27:0e:ad:9f:70:10:95:91:b1:ff:c7:82:10:7a:21:77:d1: 33:40:f8:48:4b:1f:9e:60:29:67:87:39:b0:49:f3:ab:b0:f4: 86:14:f9:f0:1d:e0:40:2e:60:86:f0:2a:a2:ad:81:fe:eb:2e: a8:b2:ee:41:b9:b0:67:d5:90:c4:0f:f1:34:6b:14:b0:7b:35: 85:94:10:95:eb:21:71:f2:c2:26:89:cd:12:35:3d:a4:59:11: 9d:7f:cc:a1:8a:72:29:53:a5:fb:5f:b1:ad:44:27:cb:62:04: 0c:16:a9:87 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUImZlxZ8UaRKiBfYnRES2gjC4X40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE NTU3Qzk1MzAeFw0yMzA3MzEwMDA5MzRaFw0yNDA3MjkwMDE0MzRaMDMxMTAvBgNV BAMTKEJCQUQyREEwNTQwNjc5ODZDQTE2M0YyQzkyRjY5M0IyMkRFQzM0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV1m38h/QZxecX+5j5bpgpG5AV r5BpZH/UPTtTTMU88b8g76zqlZhzU39fvkHExLV4UZTSDfZvrXr43R4T1jHQleln s8+dUi8kldXoUNcN87rvULnuZ9FuiblDeC4VlOhqessCZiC6YpPC7z6GCEOsMWtS /cvl//g9MTAg2Re2Kb9VKwYz4k0DfOuKOBfMBaRufY3gIE+pkA1muSZN+fiHDYp2 MJ4Im7HqzIO2MnYaLlDOCrcAqMEWTNVgSrNRZV3xWFc4mXMcCK0b34zDMTQnAqBt rnzFr9w3/Q2q/hrznuKTVknjGA00qVHhS/ptsd3jwFTrly74YHJHd+c6UFWpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUu60toFQGeYbKFj8skvaTsi3sNGMwHwYDVR0j BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3 Qzk1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04 MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzEzNjJlMzIzNTM0MmUzMTMxMzIyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzNTM1MzYzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDdP5wMA0GCSqG SIb3DQEBCwUAA4IBAQBH4aj+m6YINOY2ewFMZD74J66XyM3RHx2cy1lLsIrbDGc1 bi9irMgpMhFwY2jIfu3zC2f7tfsbo0Yeb35SAeh9VWIGuz8Pnw0UcYbrb2udIJ15 UgZkzGA+NCf4qJ3afF50rxmItGgZjXe7zpJmhkqa6o0IC2KsfnFJ7tnRmzaUBTKs V3LWHaIkayIqshkWdhUFJw6tn3AQlZGx/8eCEHohd9EzQPhISx+eYClnhzmwSfOr sPSGFPnwHeBALmCG8CqirYH+6y6osu5BubBn1ZDED/E0axSwezWFlBCV6yFx8sIm ic0SNT2kWRGdf8yhinIpU6X7X7GtRCfLYgQMFqmH -----END CERTIFICATE-----Generated at Fri May 3 04:35:14 2024 by rpki-client on console-ams.rpki-client.org