$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa File: 3131362e36382e3235342e302f32342d3234203d3e203338353030.roa (raw, json) Hash identifier: sqXKysj0fZFVuk+mIqTT6h3SqroUnTVlNsOViQQ3BHg= Subject key identifier: 66:F0:FC:2A:63:82:7D:98:3A:4C:B4:3E:F7:8E:7F:5D:11:59:EE:63 Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Certificate serial: 66E2F3592A69E79675D5FC07A205533A2F7D227D Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa Signing time: Mon 01 Jul 2024 01:04:42 +0000 ROA not before: Mon 01 Jul 2024 00:59:42 +0000 ROA not after: Mon 30 Jun 2025 01:04:42 +0000 asID: 38500 IP address blocks: 116.68.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e2:f3:59:2a:69:e7:96:75:d5:fc:07:a2:05:53:3a:2f:7d:22:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Validity Not Before: Jul 1 00:59:42 2024 GMT Not After : Jun 30 01:04:42 2025 GMT Subject: CN=66F0FC2A63827D983A4CB43EF78E7F5D1159EE63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:e7:0b:c9:39:75:fb:fc:27:97:31:19:9c: 8c:4d:8f:79:23:ba:fd:d0:47:6d:d8:6f:69:f0:94: 5c:cd:9a:42:92:30:dd:eb:8a:e0:6c:31:46:5c:21: 39:25:dd:7b:2f:47:5a:b6:6b:0e:69:23:4a:bb:d4: a2:f9:69:ba:f2:5b:aa:a8:f7:de:f0:54:b5:79:d0: 79:fc:24:93:24:44:d4:27:7a:cf:1e:f7:8f:79:71: f6:13:e1:3c:f3:32:5c:ab:fb:f8:78:13:d4:6b:34: 7a:8f:16:2f:22:ba:06:79:34:31:e2:cd:bf:bc:23: 8b:ca:37:8d:43:8a:ac:48:85:62:01:fb:fe:f0:88: 09:5a:db:55:18:70:95:4b:b1:fa:91:a7:53:9c:84: 00:5a:d8:3d:69:1e:a6:db:a4:de:40:8b:79:58:c7: 97:c9:b2:a3:bd:74:bc:22:3d:1b:12:55:2a:1a:04: 29:a2:df:3f:e3:67:34:17:a2:6a:61:37:f4:2d:bc: 5b:e0:6e:96:e3:50:11:f2:99:b4:6e:ee:a8:49:eb: 7c:6b:89:e3:07:5a:a0:97:a8:e4:47:b1:16:3d:59: cb:3e:2e:5c:b1:dd:06:f3:24:c9:03:72:16:17:ac: 7a:70:51:fa:a0:26:15:3a:32:2b:38:84:00:0f:2c: e5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F0:FC:2A:63:82:7D:98:3A:4C:B4:3E:F7:8E:7F:5D:11:59:EE:63 X509v3 Authority Key Identifier: keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.68.254.0/24 Signature Algorithm: sha256WithRSAEncryption 69:8e:18:75:f5:e3:6e:7c:cc:f7:d8:33:31:c4:64:bd:1a:b1: 04:e9:4a:b9:e4:b1:eb:10:aa:89:1c:0e:f0:12:d2:25:90:05: 9f:5d:60:7b:eb:6c:22:7f:c0:84:8b:3b:54:82:d2:e3:48:b0: 6f:4b:c3:1f:9d:a4:06:3a:c9:87:e2:09:11:fc:c7:94:d8:38: 2b:9c:c8:fa:52:f3:85:86:6e:94:a2:bd:6f:12:f1:f8:96:8f: b0:06:08:fb:1b:98:de:6f:51:41:8f:6b:ca:2e:99:cd:a4:9c: 31:18:af:63:c9:0b:e6:51:ca:a0:09:43:e4:33:5e:4e:e7:92: e8:48:4e:2c:ea:03:b4:fe:98:8e:a0:30:48:a5:3c:4e:bd:1a: 44:c8:31:52:2e:51:ca:00:51:7c:ea:69:2a:91:fb:e4:96:5f: b8:20:bb:21:44:d1:65:41:8b:ca:1d:1b:76:4e:1e:ab:19:f8: 83:60:1e:9b:b1:d6:c0:9c:8e:39:e5:31:a7:50:1b:ce:91:42: 35:e6:d0:ca:35:fe:22:ba:9c:9c:75:7b:37:19:a6:1d:ef:2b: 5d:89:64:45:b6:9c:f9:1f:a2:7e:75:85:e3:4f:39:20:58:7d: b7:88:5a:6c:65:d4:9f:dd:80:3d:ba:89:e2:68:d2:83:06:2d: 2b:99:8d:75 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZuLzWSpp55Z11fwHogVTOi99In0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD RTFEQjFEMDAeFw0yNDA3MDEwMDU5NDJaFw0yNTA2MzAwMTA0NDJaMDMxMTAvBgNV BAMTKDY2RjBGQzJBNjM4MjdEOTgzQTRDQjQzRUY3OEU3RjVEMTE1OUVFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oucLyTl1+/wnlzEZnIxNj3kj uv3QR23Yb2nwlFzNmkKSMN3riuBsMUZcITkl3XsvR1q2aw5pI0q71KL5abryW6qo 997wVLV50Hn8JJMkRNQnes8e9495cfYT4TzzMlyr+/h4E9RrNHqPFi8iugZ5NDHi zb+8I4vKN41DiqxIhWIB+/7wiAla21UYcJVLsfqRp1OchABa2D1pHqbbpN5Ai3lY x5fJsqO9dLwiPRsSVSoaBCmi3z/jZzQXomphN/QtvFvgbpbjUBHymbRu7qhJ63xr ieMHWqCXqORHsRY9Wcs+Llyx3QbzJMkDchYXrHpwUfqgJhU6Mis4hAAPLOXJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZvD8KmOCfZg6TLQ+945/XRFZ7mMwHwYDVR0j BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE QjFEMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzEzNjJlMzYzODJlMzIzNTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRE/jANBgkqhkiG 9w0BAQsFAAOCAQEAaY4YdfXjbnzM99gzMcRkvRqxBOlKueSx6xCqiRwO8BLSJZAF n11ge+tsIn/AhIs7VILS40iwb0vDH52kBjrJh+IJEfzHlNg4K5zI+lLzhYZulKK9 bxLx+JaPsAYI+xuY3m9RQY9ryi6ZzaScMRivY8kL5lHKoAlD5DNeTueS6EhOLOoD tP6YjqAwSKU8Tr0aRMgxUi5RygBRfOppKpH75JZfuCC7IUTRZUGLyh0bdk4eqxn4 g2Aem7HWwJyOOeUxp1AbzpFCNebQyjX+IrqcnHV7NxmmHe8rXYlkRbac+R+ifnWF 4085IFh9t4habGXUn92APbqJ4mjSgwYtK5mNdQ== -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org