$ rpki-client -vvf repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa File: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (raw, json) Hash identifier: wqHFOj2dO5m4a3lfYG+6lBK8bTapD/d8EJpnCFvqcWQ= Subject key identifier: 06:DF:46:0A:B0:F7:B9:09:DE:FD:E4:C5:43:CE:83:9F:90:20:96:FA Certificate issuer: /CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56 Certificate serial: 7599C9C7FABB39B03345775EA4C08AE0DAB4FE10 Authority key identifier: 7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa Signing time: Sun 03 Nov 2024 03:00:00 +0000 ROA not before: Sun 03 Nov 2024 02:55:00 +0000 ROA not after: Sun 02 Nov 2025 03:00:00 +0000 asID: 136052 IP address blocks: 210.79.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:99:c9:c7:fa:bb:39:b0:33:45:77:5e:a4:c0:8a:e0:da:b4:fe:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56 Validity Not Before: Nov 3 02:55:00 2024 GMT Not After : Nov 2 03:00:00 2025 GMT Subject: CN=06DF460AB0F7B909DEFDE4C543CE839F902096FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8b:da:62:b3:89:26:87:30:24:5e:fd:69:e7: 27:ba:bf:0a:4e:97:f8:70:40:ee:40:6a:08:b5:51: 50:dd:8c:1f:2e:7a:c0:58:13:2f:d4:c4:f6:20:27: 8b:b8:e8:32:aa:15:d9:18:a6:6d:49:46:8a:e1:d1: 3e:33:5f:70:d8:60:f8:c9:51:66:b4:d3:01:7a:89: 3c:a2:20:db:98:61:e6:35:47:7a:61:ae:1a:51:7a: 83:b1:dc:de:d1:31:59:e2:78:b5:c6:d4:23:12:ad: 89:ad:34:04:9e:a8:3e:8d:68:b5:57:5f:77:99:0c: 9c:6e:a4:e9:b0:54:ea:31:a5:76:8b:ae:b3:e1:6b: 85:99:66:d3:9c:26:17:f3:1d:15:f2:10:65:b7:fa: 68:f7:d2:cd:5a:12:63:3d:9b:4e:f7:44:87:5c:81: f3:f0:3a:92:c4:22:91:7a:ad:96:dd:b2:7a:f8:44: e0:17:8b:a8:6c:d1:65:f1:c2:6e:14:0a:ec:e3:2b: 08:92:b5:df:4c:46:40:ed:3c:db:76:89:83:d6:ab: f9:22:0d:51:35:94:47:8a:ac:3e:46:ca:93:ad:21: c5:d1:05:34:4f:db:c0:16:93:22:b9:da:3e:94:e2: c9:d7:40:01:fe:b3:69:6a:f9:02:8d:c4:7c:a8:fa: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DF:46:0A:B0:F7:B9:09:DE:FD:E4:C5:43:CE:83:9F:90:20:96:FA X509v3 Authority Key Identifier: keyid:7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.190.0/23 Signature Algorithm: sha256WithRSAEncryption 68:77:91:6b:f7:80:7a:fa:a9:2a:da:cc:ce:bb:c4:ae:29:e1: 52:2e:45:ab:10:fb:7f:ec:e4:2b:da:5d:d9:6c:6a:d5:51:b4: dc:f4:a6:ca:f3:9a:e5:64:dd:73:e3:55:f6:39:46:9f:68:46: b0:40:be:5c:37:31:fe:a5:72:ec:27:1d:d9:c1:f4:4b:db:8e: af:5f:ce:99:54:b8:ce:11:ee:5f:a2:d0:cb:1f:06:d3:fc:e6: 09:cc:b2:94:d0:49:bb:ce:a4:77:38:e7:00:9b:61:b4:01:c9: 79:27:43:54:23:cf:8f:64:30:03:2c:80:81:2b:3c:82:95:7a: 79:9a:ba:7f:73:7e:43:07:a2:7e:f5:ec:22:79:e3:bd:15:2a: 4e:29:25:37:80:ba:09:6c:45:8a:2f:bf:f3:56:26:05:bc:8f: b1:9f:9b:a5:20:71:91:b3:b6:b1:d8:a7:ea:99:45:5e:f6:0c: dd:a4:24:e9:13:c5:13:cd:15:b5:44:11:47:90:b2:c8:d0:c4: 8d:e8:44:37:c8:10:10:42:7c:a2:3d:ec:0e:8f:5b:d1:f5:fe: 15:db:a9:39:e2:44:3d:fd:cc:4f:cc:7e:f6:3b:57:64:ff:c8: e4:b1:2f:34:a5:90:36:77:b8:6c:b7:fe:d3:fc:9b:03:51:11: 3d:32:95:38 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdZnJx/q7ObAzRXdepMCK4Nq0/hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZEQTM4 M0MzM0Q1NjAeFw0yNDExMDMwMjU1MDBaFw0yNTExMDIwMzAwMDBaMDMxMTAvBgNV BAMTKDA2REY0NjBBQjBGN0I5MDlERUZERTRDNTQzQ0U4MzlGOTAyMDk2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRi9pis4kmhzAkXv1p5ye6vwpO l/hwQO5Aagi1UVDdjB8uesBYEy/UxPYgJ4u46DKqFdkYpm1JRorh0T4zX3DYYPjJ UWa00wF6iTyiINuYYeY1R3phrhpReoOx3N7RMVnieLXG1CMSrYmtNASeqD6NaLVX X3eZDJxupOmwVOoxpXaLrrPha4WZZtOcJhfzHRXyEGW3+mj30s1aEmM9m073RIdc gfPwOpLEIpF6rZbdsnr4ROAXi6hs0WXxwm4UCuzjKwiStd9MRkDtPNt2iYPWq/ki DVE1lEeKrD5GypOtIcXRBTRP28AWkyK52j6U4snXQAH+s2lq+QKNxHyo+vwjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBt9GCrD3uQne/eTFQ86Dn5AglvowHwYDVR0j BBgwFoAUeoLF5c/2j1AIzAaOx8pto4PDPVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjYwZjAzYy04OTY4LTQ3MGYtYjYxOC1kM2ViMmM5MjhhNGQvMC83QTgyQzVFNUNG RjY4RjUwMDhDQzA2OEVDN0NBNkRBMzgzQzMzRDU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZEQTM4M0Mz M0Q1Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyNjBmMDNjLTg5NjgtNDcwZi1i NjE4LWQzZWIyYzkyOGE0ZC8wLzMyMzEzMDJlMzczOTJlMzEzOTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0k++MA0GCSqG SIb3DQEBCwUAA4IBAQBod5Fr94B6+qkq2szOu8SuKeFSLkWrEPt/7OQr2l3ZbGrV UbTc9KbK85rlZN1z41X2OUafaEawQL5cNzH+pXLsJx3ZwfRL246vX86ZVLjOEe5f otDLHwbT/OYJzLKU0Em7zqR3OOcAm2G0Acl5J0NUI8+PZDADLICBKzyClXp5mrp/ c35DB6J+9ewieeO9FSpOKSU3gLoJbEWKL7/zViYFvI+xn5ulIHGRs7ax2KfqmUVe 9gzdpCTpE8UTzRW1RBFHkLLI0MSN6EQ3yBAQQnyiPewOj1vR9f4V26k54kQ9/cxP zH72O1dk/8jksS80pZA2d7hst/7T/JsDURE9MpU4 -----END CERTIFICATE-----Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org