$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32342d3234203d3e203435323936.roa File: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (raw, json) Hash identifier: ea794U0mB9D7yt1RLUOewhCL7ZzhCbLteGL9jlKUQmM= Subject key identifier: E4:1B:87:38:8F:D8:25:71:C6:B9:2D:4D:47:FA:15:48:22:43:32:BB Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 156648B5A1D78106FA8350AF5958B62688E3B36F Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32342d3234203d3e203435323936.roa Signing time: Mon 27 May 2024 09:00:00 +0000 ROA not before: Mon 27 May 2024 08:55:00 +0000 ROA not after: Mon 26 May 2025 09:00:00 +0000 asID: 45296 IP address blocks: 113.59.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 03:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:66:48:b5:a1:d7:81:06:fa:83:50:af:59:58:b6:26:88:e3:b3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: May 27 08:55:00 2024 GMT Not After : May 26 09:00:00 2025 GMT Subject: CN=E41B87388FD82571C6B92D4D47FA1548224332BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:2d:ef:94:a3:60:d5:3a:17:4c:b7:38:e8: a0:3e:45:ab:0a:c1:03:a0:e4:e9:6f:92:dc:a4:05: 0b:40:5a:3d:58:28:e1:62:a4:7c:c3:4b:ea:79:8e: 56:ff:2f:0e:88:35:6c:1a:70:5b:d9:6d:93:d0:18: 24:e4:ae:a6:a1:c8:00:b4:00:55:ff:2b:a6:51:bd: e3:86:2d:81:5a:60:69:73:2e:cc:7b:3b:a3:20:f1: 5a:71:96:b0:4d:cd:13:d4:fd:01:40:06:58:ce:92: 66:de:98:b4:54:10:b8:26:29:bb:0e:93:3c:41:52: 0a:f8:2b:9c:36:77:bc:ab:59:f0:ce:ea:38:d3:e1: bd:28:0e:80:47:24:3b:a6:84:6d:c2:2a:45:f1:36: 72:18:20:18:29:02:9f:58:1b:a4:ae:eb:6a:6e:93: ca:29:bf:a9:2c:f2:ab:7f:27:6e:9b:8c:61:d3:2a: 69:37:10:14:20:c9:29:bf:ab:b9:13:17:6b:ad:8d: c2:d4:76:74:1c:36:24:f4:64:91:b6:13:2b:82:bb: e8:56:c6:0b:44:df:7a:6f:e1:a5:3c:ba:d1:4b:fb: 79:54:09:10:12:94:85:4b:42:d4:1a:e3:07:ef:3c: a3:99:82:0b:29:02:47:50:29:17:24:5e:8b:a0:1b: 5a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1B:87:38:8F:D8:25:71:C6:B9:2D:4D:47:FA:15:48:22:43:32:BB X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32342d3234203d3e203435323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.59.234.0/24 Signature Algorithm: sha256WithRSAEncryption 35:e8:f8:7c:53:11:16:41:26:44:32:d9:e9:2f:a3:0a:a8:76: 9a:e0:0e:c8:96:e2:b5:d6:e6:65:41:62:b0:9e:c8:aa:e4:fd: a9:ef:66:2c:df:7f:90:ff:0a:25:b6:a8:a1:86:52:59:b5:1c: fa:c7:1a:a1:55:9f:56:1c:52:d1:cb:90:1f:c6:a6:42:b4:79: cc:11:86:68:a9:fc:e2:85:89:58:07:63:47:a9:96:cf:74:0f: 5a:d3:0c:5f:81:2e:54:5a:f1:e9:97:e2:d7:40:d3:c1:1b:4c: 1e:ce:a2:d7:43:c1:28:cd:7b:9a:83:09:3b:a4:9a:20:4b:3d: bc:ee:96:72:8a:d1:95:87:ac:44:d0:e4:eb:49:63:b6:1b:8f: 0f:d6:cd:33:58:fe:0a:01:c5:6b:66:32:9c:ce:2d:2a:63:a1: 93:10:d3:1e:20:6c:a0:ca:98:49:c2:33:ef:b7:9f:97:d5:ec: 17:88:2c:6a:86:dd:70:9d:6f:52:00:53:42:69:69:fa:3f:19: e3:62:80:6e:36:4a:a7:86:eb:85:dd:f3:a7:cf:39:2a:66:5a: 86:b2:aa:90:7e:7a:7f:f3:5d:05:a3:32:d2:8e:83:db:d7:2a: 64:28:d1:92:96:5e:87:f7:77:f8:f8:25:15:5b:9d:04:04:77: 4d:7c:7a:9c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFWZItaHXgQb6g1CvWVi2Jojjs28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNDA1MjcwODU1MDBaFw0yNTA1MjYwOTAwMDBaMDMxMTAvBgNV BAMTKEU0MUI4NzM4OEZEODI1NzFDNkI5MkQ0RDQ3RkExNTQ4MjI0MzMyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVyC3vlKNg1ToXTLc46KA+RasK wQOg5OlvktykBQtAWj1YKOFipHzDS+p5jlb/Lw6INWwacFvZbZPQGCTkrqahyAC0 AFX/K6ZRveOGLYFaYGlzLsx7O6Mg8VpxlrBNzRPU/QFABljOkmbemLRUELgmKbsO kzxBUgr4K5w2d7yrWfDO6jjT4b0oDoBHJDumhG3CKkXxNnIYIBgpAp9YG6Su62pu k8opv6ks8qt/J26bjGHTKmk3EBQgySm/q7kTF2utjcLUdnQcNiT0ZJG2EyuCu+hW xgtE33pv4aU8utFL+3lUCRASlIVLQtQa4wfvPKOZggspAkdQKRckXougG1oxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5BuHOI/YJXHGuS1NR/oVSCJDMrswHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2MDY3MThmLWY0YzYtNDc3NS04 OTU3LTk5ZDJiZDY2NjM2My8wLzMxMzEzMzJlMzUzOTJlMzIzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHE76jANBgkqhkiG 9w0BAQsFAAOCAQEANej4fFMRFkEmRDLZ6S+jCqh2muAOyJbitdbmZUFisJ7IquT9 qe9mLN9/kP8KJbaooYZSWbUc+scaoVWfVhxS0cuQH8amQrR5zBGGaKn84oWJWAdj R6mWz3QPWtMMX4EuVFrx6Zfi10DTwRtMHs6i10PBKM17moMJO6SaIEs9vO6WcorR lYesRNDk60ljthuPD9bNM1j+CgHFa2YynM4tKmOhkxDTHiBsoMqYScIz77efl9Xs F4gsaobdcJ1vUgBTQmlp+j8Z42KAbjZKp4brhd3zp885KmZahrKqkH56f/NdBaMy 0o6D29cqZCjRkpZeh/d3+PglFVudBAR3TXx6nA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:29 2024 by rpki-client on console-ams.rpki-client.org