$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa File: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (raw, json) Hash identifier: EalNqK7fN+uMVwzoEzqTg9FoUorTzcn6dWS2phuXyqc= Subject key identifier: 09:FA:C5:45:45:55:26:0F:02:EA:06:E6:B7:CA:FC:56:B8:00:9E:34 Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 6FC23EF5C9714A36E648FA567EAC0B1C57E07AB0 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa Signing time: Thu 03 Oct 2024 04:01:44 +0000 ROA not before: Thu 03 Oct 2024 03:56:44 +0000 ROA not after: Thu 02 Oct 2025 04:01:44 +0000 asID: 151592 IP address blocks: 45.126.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c2:3e:f5:c9:71:4a:36:e6:48:fa:56:7e:ac:0b:1c:57:e0:7a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Oct 3 03:56:44 2024 GMT Not After : Oct 2 04:01:44 2025 GMT Subject: CN=09FAC5454555260F02EA06E6B7CAFC56B8009E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:43:6d:ae:2b:0d:03:dd:52:0c:00:e1:de: f3:01:30:26:37:c9:1e:71:02:c9:6e:d6:2b:1f:d3: 24:db:27:2a:85:63:c1:81:b2:e4:5e:8d:6b:cb:69: 24:d8:e6:0a:cb:c7:3e:3e:98:a8:18:ca:05:c2:05: 8a:b4:3f:64:4c:f8:a0:ca:43:b4:a5:02:18:a3:0c: 61:c7:4e:1b:71:3a:65:80:86:72:ec:cd:be:be:86: 29:58:2e:18:10:1a:84:10:ed:b3:89:5d:7a:28:2d: c0:fd:83:73:71:d8:d0:15:7a:56:fb:69:7c:90:b1: 73:a5:e9:42:7c:05:10:58:98:c6:8d:6d:ea:dd:bf: 81:ba:05:7f:2c:18:ef:0e:93:54:5a:cc:d1:89:51: 6b:37:51:52:0b:fa:2d:cd:05:da:75:f0:68:70:e2: a8:ec:08:3f:de:5e:fa:39:6f:25:c3:24:2d:c9:01: 66:ef:35:8b:0d:2a:75:46:de:88:9c:51:7a:c4:f4: 16:b0:79:5d:00:70:f3:1c:65:b1:56:c7:22:17:6c: cb:bb:48:55:53:26:f5:d0:d6:0b:1f:f7:96:34:62: d5:81:3c:6b:3c:83:b5:e2:77:a2:ad:91:79:76:7d: 25:87:b6:1c:6f:25:8b:50:ed:66:e3:18:4a:58:be: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FA:C5:45:45:55:26:0F:02:EA:06:E6:B7:CA:FC:56:B8:00:9E:34 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.43.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:31:03:83:e6:a5:49:41:76:1c:6b:d3:c3:62:b9:71:fc:9f: cd:25:3f:93:72:46:d6:ad:55:23:f0:23:1e:5b:e4:2d:9f:fb: c1:29:be:91:cd:e4:a2:cd:bc:36:36:f2:73:90:ba:20:83:e2: d3:b7:38:25:6f:42:8c:6f:b2:96:2b:2f:cd:3f:76:34:9f:ce: 76:3d:85:85:d3:7c:d4:f4:dc:c2:0c:b8:b1:1f:fe:43:1f:e1: d7:ad:ff:db:50:49:98:ec:92:6f:82:dd:7d:73:cf:a9:e9:54: 14:f3:1a:9c:5d:0b:03:9a:84:41:97:68:3d:0f:ba:58:32:38: d3:7b:11:f6:4a:7f:2a:92:d0:4d:b2:11:54:7d:6f:31:21:6e: 21:79:84:b0:48:f7:b2:48:71:7b:05:2f:b6:89:94:2b:90:c3: a6:b9:75:a6:db:c9:40:2f:f8:00:1a:04:87:be:0c:ec:2f:1f: 6e:9e:9b:54:6a:18:e4:3b:aa:73:ca:48:fa:b3:b7:e1:5e:ca: f4:0f:9f:bf:11:13:9e:cf:01:e2:a9:7e:e9:2a:69:69:5b:04: 8d:8e:4e:06:73:57:f8:3b:03:a8:9a:d4:72:70:22:c0:86:f2: d1:75:09:95:d3:e3:10:71:33:45:cb:4c:07:5a:77:93:43:79: ae:89:52:c7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUb8I+9clxSjbmSPpWfqwLHFfgerAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNDEwMDMwMzU2NDRaFw0yNTEwMDIwNDAxNDRaMDMxMTAvBgNV BAMTKDA5RkFDNTQ1NDU1NTI2MEYwMkVBMDZFNkI3Q0FGQzU2QjgwMDlFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTUNtrisNA91SDADh3vMBMCY3 yR5xAslu1isf0yTbJyqFY8GBsuRejWvLaSTY5grLxz4+mKgYygXCBYq0P2RM+KDK Q7SlAhijDGHHThtxOmWAhnLszb6+hilYLhgQGoQQ7bOJXXooLcD9g3Nx2NAVelb7 aXyQsXOl6UJ8BRBYmMaNberdv4G6BX8sGO8Ok1RazNGJUWs3UVIL+i3NBdp18Ghw 4qjsCD/eXvo5byXDJC3JAWbvNYsNKnVG3oicUXrE9BaweV0AcPMcZbFWxyIXbMu7 SFVTJvXQ1gsf95Y0YtWBPGs8g7Xid6KtkXl2fSWHthxvJYtQ7WbjGEpYvs75AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCfrFRUVVJg8C6gbmt8r8VrgAnjQwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxZjdjMjViLTQxMGItNDgyYS05 NDM2LTIyMWFiMDc5ZDM2OC8wLzM0MzUyZTMxMzIzNjJlMzQzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMTM1MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1+KzANBgkqhkiG 9w0BAQsFAAOCAQEAnDEDg+alSUF2HGvTw2K5cfyfzSU/k3JG1q1VI/AjHlvkLZ/7 wSm+kc3kos28Njbyc5C6IIPi07c4JW9CjG+ylisvzT92NJ/Odj2FhdN81PTcwgy4 sR/+Qx/h163/21BJmOySb4LdfXPPqelUFPManF0LA5qEQZdoPQ+6WDI403sR9kp/ KpLQTbIRVH1vMSFuIXmEsEj3skhxewUvtomUK5DDprl1ptvJQC/4ABoEh74M7C8f bp6bVGoY5Duqc8pI+rO34V7K9A+fvxETns8B4ql+6SppaVsEjY5OBnNX+DsDqJrU cnAiwIby0XUJldPjEHEzRctMB1p3k0N5rolSxw== -----END CERTIFICATE-----Generated at Wed Nov 20 11:08:52 2024 by rpki-client on console-ams.rpki-client.org