$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa File: 3131362e36382e3234392e302f32342d3234203d3e203338353030.roa (raw, json) Hash identifier: doz0syypEeupoVAOwQQlcwSdntvReHRWO19LrOE5tlw= Subject key identifier: 45:14:ED:AF:18:29:51:79:D9:D6:F9:06:EC:D4:81:E9:59:07:07:BB Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Certificate serial: 7F707EBD9778A569AC1DEAD2307CCC93242B3CB7 Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa Signing time: Mon 01 Jul 2024 01:04:41 +0000 ROA not before: Mon 01 Jul 2024 00:59:41 +0000 ROA not after: Mon 30 Jun 2025 01:04:41 +0000 asID: 38500 IP address blocks: 116.68.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:70:7e:bd:97:78:a5:69:ac:1d:ea:d2:30:7c:cc:93:24:2b:3c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Validity Not Before: Jul 1 00:59:41 2024 GMT Not After : Jun 30 01:04:41 2025 GMT Subject: CN=4514EDAF18295179D9D6F906ECD481E9590707BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:4a:7c:54:30:8d:d9:ef:6d:a8:e6:39:5d: 33:a5:26:76:a5:ff:74:73:f3:cd:4e:fd:3e:f4:45: 83:65:47:12:e2:8b:84:b3:32:dc:39:b7:61:ba:70: c5:01:ce:5a:4f:d7:c3:89:f5:fd:47:34:a0:fe:cf: b9:4e:ef:f9:53:1c:ef:8c:a1:39:13:cf:6c:c9:08: e4:30:ca:44:e5:cd:57:97:0e:f8:12:17:83:e9:cb: 06:1f:55:c1:cf:53:e7:f5:47:12:6c:91:c2:e8:d5: 50:a7:be:1a:a2:3f:7a:77:b6:bd:28:e7:cd:fc:be: 47:d2:ee:5c:3a:fc:3f:58:7f:5d:72:26:6c:c4:50: 16:b7:57:cf:04:91:3d:33:cd:73:2b:2c:d4:03:53: 6f:85:7c:62:03:3c:04:00:86:d6:5f:eb:9b:93:02: d0:12:f5:f2:eb:24:8c:35:02:01:1f:fc:13:03:d5: 33:70:94:76:d7:7d:b0:c5:c9:e7:3d:18:16:c5:f0: ad:c8:65:4a:73:fd:de:52:84:f5:82:0a:2c:b7:0c: d6:37:2f:bb:c1:d6:45:cc:4b:74:a9:6f:f3:13:38: 9f:16:2f:ff:1d:d1:ee:6e:23:ff:51:94:ad:2b:10: b7:0a:54:6f:5c:2c:97:f2:63:f0:72:9d:82:ac:e5: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:14:ED:AF:18:29:51:79:D9:D6:F9:06:EC:D4:81:E9:59:07:07:BB X509v3 Authority Key Identifier: keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.68.249.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a5:d1:d0:49:81:d9:84:b6:b7:66:da:3e:dc:7c:3b:94:cd: 7b:13:94:41:1e:d5:98:15:fa:fa:1d:c2:4c:39:1b:12:79:37: e7:52:54:01:e9:4b:c9:7f:28:0e:b7:8b:72:8f:50:88:82:90: ba:47:9b:dc:b6:0b:51:ef:bd:4f:39:3b:d7:de:78:d0:22:41: 79:95:59:6e:d8:85:eb:13:b0:03:9d:43:62:27:04:d0:30:d1: 6e:cf:09:0e:90:3e:f1:81:5d:76:c0:9b:00:5e:bd:df:24:e0: 46:68:87:46:26:b2:c4:80:13:e7:a8:90:78:bf:70:4e:65:98: c1:62:b0:a4:30:b5:27:d7:9c:97:4a:0e:10:ee:b3:a2:7d:44: c5:dd:9c:35:66:4c:9d:1b:ab:84:5f:61:47:82:48:42:fc:52: 85:d3:f2:0b:e5:3e:1b:95:33:49:1b:0e:85:f0:3f:96:99:fb: d0:42:71:77:5f:6a:30:3a:fe:63:9f:50:12:0a:9e:45:c1:75: dd:ab:d2:53:92:48:35:0e:e2:e1:bc:b5:7e:3c:fc:66:5d:9f: f6:3d:b2:c8:93:28:ed:49:99:e4:b9:c3:47:de:a4:90:a3:fd: 5d:2d:b1:a8:f1:60:43:61:24:ea:39:45:b6:88:64:24:13:d9: 2e:2b:df:1e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUf3B+vZd4pWmsHerSMHzMkyQrPLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD RTFEQjFEMDAeFw0yNDA3MDEwMDU5NDFaFw0yNTA2MzAwMTA0NDFaMDMxMTAvBgNV BAMTKDQ1MTRFREFGMTgyOTUxNzlEOUQ2RjkwNkVDRDQ4MUU5NTkwNzA3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbzUp8VDCN2e9tqOY5XTOlJnal /3Rz881O/T70RYNlRxLii4SzMtw5t2G6cMUBzlpP18OJ9f1HNKD+z7lO7/lTHO+M oTkTz2zJCOQwykTlzVeXDvgSF4PpywYfVcHPU+f1RxJskcLo1VCnvhqiP3p3tr0o 5838vkfS7lw6/D9Yf11yJmzEUBa3V88EkT0zzXMrLNQDU2+FfGIDPAQAhtZf65uT AtAS9fLrJIw1AgEf/BMD1TNwlHbXfbDFyec9GBbF8K3IZUpz/d5ShPWCCiy3DNY3 L7vB1kXMS3Spb/MTOJ8WL/8d0e5uI/9RlK0rELcKVG9cLJfyY/BynYKs5cg9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQURRTtrxgpUXnZ1vkG7NSB6VkHB7swHwYDVR0j BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE QjFEMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzEzNjJlMzYzODJlMzIzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRE+TANBgkqhkiG 9w0BAQsFAAOCAQEAAKXR0EmB2YS2t2baPtx8O5TNexOUQR7VmBX6+h3CTDkbEnk3 51JUAelLyX8oDreLco9QiIKQukeb3LYLUe+9Tzk719540CJBeZVZbtiF6xOwA51D YicE0DDRbs8JDpA+8YFddsCbAF693yTgRmiHRiayxIAT56iQeL9wTmWYwWKwpDC1 J9ecl0oOEO6zon1Exd2cNWZMnRurhF9hR4JIQvxShdPyC+U+G5UzSRsOhfA/lpn7 0EJxd19qMDr+Y59QEgqeRcF13avSU5JINQ7i4by1fjz8Zl2f9j2yyJMo7UmZ5LnD R96kkKP9XS2xqPFgQ2Ek6jlFtohkJBPZLivfHg== -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org