$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa File: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (raw, json) Hash identifier: Hz/P540tQCAD7Joj9Cnl8/Cvk9mtd9SX29+QidTIXjo= Subject key identifier: B6:1F:08:0F:9B:CB:78:39:C9:48:9D:12:A2:EF:7B:A6:E2:3D:1C:29 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 2167EAEC0FD6AE2A1E08D0DD8205E48DF0BA02A9 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa Signing time: Mon 08 Jul 2024 10:47:49 +0000 ROA not before: Mon 08 Jul 2024 10:42:49 +0000 ROA not after: Mon 07 Jul 2025 10:47:49 +0000 asID: 152765 IP address blocks: 157.66.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 07:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:67:ea:ec:0f:d6:ae:2a:1e:08:d0:dd:82:05:e4:8d:f0:ba:02:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Jul 8 10:42:49 2024 GMT Not After : Jul 7 10:47:49 2025 GMT Subject: CN=B61F080F9BCB7839C9489D12A2EF7BA6E23D1C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:90:91:d2:97:2d:ae:b3:7b:15:ec:ff:a7: bc:7e:cc:3b:ab:1c:64:32:d3:21:27:ec:d5:9f:22: 97:4c:53:1e:ba:2c:f5:97:1b:08:34:b0:d3:8b:e8: 2a:2e:30:a5:0b:39:35:3a:fd:5b:ab:77:5a:c6:14: 3c:be:24:be:9d:a0:b8:b0:56:b8:e5:ff:fd:df:4a: 07:e4:9f:57:52:61:5b:df:d3:29:3f:b6:ca:32:1f: af:4c:a8:c2:4a:d2:0e:ae:e3:18:33:c6:74:7e:b8: 95:6c:e1:d3:db:b3:de:bb:41:44:b8:9a:3a:eb:18: 33:c4:11:60:82:16:3f:f8:11:5d:61:c6:84:d0:76: 36:88:e4:0b:c2:ad:fe:85:ce:e7:86:27:12:7c:ab: be:ea:77:25:96:8a:2b:e1:bc:f0:34:74:fe:23:df: cd:58:19:fa:12:b0:32:c1:5f:13:84:3c:ee:5a:bb: 35:82:28:7c:be:c2:9a:9a:a7:fc:4f:af:f2:74:01: 48:01:bf:16:e1:46:32:1f:bd:e2:74:4b:0d:55:a7: 62:9f:50:36:87:14:30:e7:00:3b:f1:51:a9:ce:13: 78:5a:51:d8:d2:65:c8:4c:f1:f5:4f:4a:5c:05:cd: 94:38:35:31:b6:87:2a:40:5e:34:29:e0:c7:b3:7e: d2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1F:08:0F:9B:CB:78:39:C9:48:9D:12:A2:EF:7B:A6:E2:3D:1C:29 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.250.0/23 Signature Algorithm: sha256WithRSAEncryption a3:cb:fd:25:7d:23:da:91:e9:0a:37:57:83:32:c6:f8:37:8e: 59:de:29:87:36:6c:3d:09:d8:45:24:73:cb:39:10:d2:c9:5b: 6c:37:36:3a:bd:68:05:f2:23:33:1d:b6:4a:6f:1e:6f:dc:26: ba:ce:4b:87:d0:d4:b2:48:ef:88:af:40:3d:13:8b:48:c3:29: 78:63:8d:3e:bc:87:9b:84:fe:84:ad:3a:f8:17:ad:f9:9c:5c: f3:f3:26:15:df:af:bf:d5:eb:4c:88:32:d5:98:19:b0:b6:96: 01:eb:ba:de:a8:d0:a5:30:34:a7:c8:2e:4c:76:b7:9a:a2:7c: 6f:73:42:22:66:65:6f:ad:95:eb:02:e0:39:54:16:d6:9e:e9: 66:2d:aa:65:b3:7b:55:03:08:8b:10:26:91:08:8e:f0:fd:48: f6:e7:ea:d3:73:13:ec:5d:85:86:38:eb:90:68:9c:d3:fb:27: 62:98:95:4c:35:14:e2:04:88:2a:b7:13:b6:21:cc:34:8e:73: bd:f3:46:c1:78:67:51:f9:8e:e7:d9:21:e8:1c:7b:4d:f9:af: 36:f2:71:8d:67:2e:53:9d:53:5c:d8:43:51:5a:93:cb:d6:0f: 7e:63:84:7e:ef:5c:fa:bc:c6:33:bf:cf:bb:d9:e3:04:e8:03: f2:c2:90:0c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIWfq7A/WrioeCNDdggXkjfC6AqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNDA3MDgxMDQyNDlaFw0yNTA3MDcxMDQ3NDlaMDMxMTAvBgNV BAMTKEI2MUYwODBGOUJDQjc4MzlDOTQ4OUQxMkEyRUY3QkE2RTIzRDFDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8ZCR0pctrrN7Fez/p7x+zDur HGQy0yEn7NWfIpdMUx66LPWXGwg0sNOL6CouMKULOTU6/Vurd1rGFDy+JL6doLiw Vrjl//3fSgfkn1dSYVvf0yk/tsoyH69MqMJK0g6u4xgzxnR+uJVs4dPbs967QUS4 mjrrGDPEEWCCFj/4EV1hxoTQdjaI5AvCrf6FzueGJxJ8q77qdyWWiivhvPA0dP4j 381YGfoSsDLBXxOEPO5auzWCKHy+wpqap/xPr/J0AUgBvxbhRjIfveJ0Sw1Vp2Kf UDaHFDDnADvxUanOE3haUdjSZchM8fVPSlwFzZQ4NTG2hypAXjQp4MezftKFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUth8ID5vLeDnJSJ0Sou97puI9HCkwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxMmJmODYzLWExZjAtNDJkMC05 ZTNhLTNmOWZmNjlhMmQxNS8wLzMxMzUzNzJlMzYzNjJlMzIzNTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUL6MA0GCSqG SIb3DQEBCwUAA4IBAQCjy/0lfSPakekKN1eDMsb4N45Z3imHNmw9CdhFJHPLORDS yVtsNzY6vWgF8iMzHbZKbx5v3Ca6zkuH0NSySO+Ir0A9E4tIwyl4Y40+vIebhP6E rTr4F635nFzz8yYV36+/1etMiDLVmBmwtpYB67reqNClMDSnyC5Mdreaonxvc0Ii ZmVvrZXrAuA5VBbWnulmLapls3tVAwiLECaRCI7w/Uj25+rTcxPsXYWGOOuQaJzT +ydimJVMNRTiBIgqtxO2Icw0jnO980bBeGdR+Y7n2SHoHHtN+a828nGNZy5TnVNc 2ENRWpPL1g9+Y4R+71z6vMYzv8+72eME6APywpAM -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:12 2025 by rpki-client