$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/3135372e36362e352e302f32342d3234203d3e20313336383633.roa File: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (raw, json) Hash identifier: zeqqpYlzSASW3l6lPxw9nrAjQuYfJsvurrqe3le+/S0= Subject key identifier: F4:48:CE:4F:35:0C:21:C2:F1:79:DB:86:26:6D:6B:A9:ED:F6:BA:27 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 763A69D99157ABAC517ECDE5CAD2199944D9A61D Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/3135372e36362e352e302f32342d3234203d3e20313336383633.roa Signing time: Sat 01 Jun 2024 03:39:24 +0000 ROA not before: Sat 01 Jun 2024 03:34:24 +0000 ROA not after: Sat 31 May 2025 03:39:24 +0000 asID: 136863 IP address blocks: 157.66.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 10:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3a:69:d9:91:57:ab:ac:51:7e:cd:e5:ca:d2:19:99:44:d9:a6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Jun 1 03:34:24 2024 GMT Not After : May 31 03:39:24 2025 GMT Subject: CN=F448CE4F350C21C2F179DB86266D6BA9EDF6BA27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:d1:14:59:53:32:0a:57:23:19:0e:7b:19: 95:30:51:c8:f5:82:61:3b:b8:e9:2a:7c:0d:64:d1: 5e:5b:4a:8f:9d:0f:ab:44:16:54:85:49:09:45:a8: 88:19:fe:a9:53:f3:97:14:98:d1:38:c4:42:a4:85: fb:02:5d:9a:cb:7d:f2:10:93:5a:d3:03:15:35:33: 0f:5a:14:6b:bd:0a:c3:bf:9b:a1:89:61:87:ee:8d: 8f:20:5d:8d:c5:e0:74:83:46:22:c1:40:b6:01:0b: 27:c2:9c:1d:16:8d:6c:df:42:32:3a:55:7c:e8:d9: 12:75:97:b6:46:46:e7:22:03:07:77:0b:c8:0b:22: 4f:2a:dd:f2:af:09:7b:1e:67:29:e8:fe:c0:e2:ae: 43:32:30:5f:66:e4:2f:d0:42:69:0d:0e:28:35:f8: 34:f3:1e:7c:08:de:c9:2b:03:6b:82:85:b5:95:16: 36:b2:e4:a9:59:5b:bb:9d:f5:e7:d8:bc:5c:c1:5d: 46:b8:e8:e3:91:4c:5a:da:da:71:07:7a:6b:a4:cf: e0:66:0c:15:83:4a:6f:bb:7f:7b:ca:0d:b7:37:34: d1:4d:c7:b6:d4:be:7f:b9:08:b9:98:61:40:f7:1d: fa:f7:68:29:40:ce:52:d2:0b:b1:8a:56:12:67:9d: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:48:CE:4F:35:0C:21:C2:F1:79:DB:86:26:6D:6B:A9:ED:F6:BA:27 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/3135372e36362e352e302f32342d3234203d3e20313336383633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.5.0/24 Signature Algorithm: sha256WithRSAEncryption b3:c0:d6:e0:b6:49:c5:48:05:db:1e:1d:cd:64:cc:26:c5:ae: 4a:38:94:43:56:4b:8a:1e:41:34:52:0f:da:ab:97:38:ca:34: e2:de:a3:8a:0d:05:b6:79:fe:85:85:59:5b:00:a9:fa:89:f0: 73:64:cc:ec:da:b1:47:3e:09:48:eb:88:73:5c:e4:ad:23:22: d3:e1:5c:72:c2:0b:6b:3c:3e:f6:dd:d1:ef:53:9f:80:32:ef: 52:b6:99:32:f6:65:8c:11:3c:dd:0f:73:80:f8:fb:36:4a:62: 36:18:1c:18:ca:33:6d:f7:6f:50:f8:fe:5c:f3:e2:1b:26:2f: 0b:f3:91:33:31:36:7b:e2:76:1b:c0:30:0d:56:de:f3:28:13: 58:11:13:2f:d8:b9:c6:59:aa:62:a4:a6:c5:2e:73:30:7d:68: 64:b2:37:90:19:58:20:1c:7b:04:69:81:28:c9:a7:3b:dc:fa: 69:5d:ae:be:9d:19:22:6f:03:8b:46:f7:14:ad:36:8f:8f:fc: d2:df:0e:aa:44:21:c6:ff:6b:9c:45:74:6d:0a:95:11:da:23: 9a:f9:8f:a4:f7:7f:92:38:3d:32:99:9a:5e:f2:c4:b2:f5:5a: 74:f1:2b:c2:ed:a5:b5:eb:0b:e5:8c:00:55:45:a3:d5:16:af: 0e:72:fb:51 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUdjpp2ZFXq6xRfs3lytIZmUTZph0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNDA2MDEwMzM0MjRaFw0yNTA1MzEwMzM5MjRaMDMxMTAvBgNV BAMTKEY0NDhDRTRGMzUwQzIxQzJGMTc5REI4NjI2NkQ2QkE5RURGNkJBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVctEUWVMyClcjGQ57GZUwUcj1 gmE7uOkqfA1k0V5bSo+dD6tEFlSFSQlFqIgZ/qlT85cUmNE4xEKkhfsCXZrLffIQ k1rTAxU1Mw9aFGu9CsO/m6GJYYfujY8gXY3F4HSDRiLBQLYBCyfCnB0WjWzfQjI6 VXzo2RJ1l7ZGRuciAwd3C8gLIk8q3fKvCXseZyno/sDirkMyMF9m5C/QQmkNDig1 +DTzHnwI3skrA2uChbWVFjay5KlZW7ud9efYvFzBXUa46OORTFra2nEHemukz+Bm DBWDSm+7f3vKDbc3NNFNx7bUvn+5CLmYYUD3Hfr3aClAzlLSC7GKVhJnnWQBAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU9EjOTzUMIcLxeduGJm1rqe32uicwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyNjRiZmIyLWQ0MWQtNDMxNy1i OTJkLWJiOTQ0MWZkMGRjZi8wLzMxMzUzNzJlMzYzNjJlMzUyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzYzODM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdQgUwDQYJKoZIhvcN AQELBQADggEBALPA1uC2ScVIBdseHc1kzCbFrko4lENWS4oeQTRSD9qrlzjKNOLe o4oNBbZ5/oWFWVsAqfqJ8HNkzOzasUc+CUjriHNc5K0jItPhXHLCC2s8Pvbd0e9T n4Ay71K2mTL2ZYwRPN0Pc4D4+zZKYjYYHBjKM233b1D4/lzz4hsmLwvzkTMxNnvi dhvAMA1W3vMoE1gREy/YucZZqmKkpsUuczB9aGSyN5AZWCAcewRpgSjJpzvc+mld rr6dGSJvA4tG9xStNo+P/NLfDqpEIcb/a5xFdG0KlRHaI5r5j6T3f5I4PTKZml7y xLL1WnTxK8LtpbXrC+WMAFVFo9UWrw5y+1E= -----END CERTIFICATE-----Generated at Fri Sep 27 18:43:28 2024 by rpki-client on console-fra.rpki-client.org