$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32342d3234203d3e203138303539.roa File: 3135302e3130372e3130382e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: y9BUG9FKdgC1eMGN2jFTHKVJSN/sQOYLuG2F1u7ls14= Subject key identifier: FF:D9:36:2C:85:2E:8C:45:6B:90:D2:29:4D:D5:53:0B:91:F7:A3:84 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 65DB8530AEDBC47CB0AC480EC98529CB0D8CEED0 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32342d3234203d3e203138303539.roa Signing time: Fri 25 Oct 2024 05:00:01 +0000 ROA not before: Fri 25 Oct 2024 04:55:01 +0000 ROA not after: Fri 24 Oct 2025 05:00:01 +0000 asID: 18059 IP address blocks: 150.107.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:db:85:30:ae:db:c4:7c:b0:ac:48:0e:c9:85:29:cb:0d:8c:ee:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Oct 25 04:55:01 2024 GMT Not After : Oct 24 05:00:01 2025 GMT Subject: CN=FFD9362C852E8C456B90D2294DD5530B91F7A384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:70:39:34:f4:82:cd:d6:e2:85:0f:e7:a8: 2b:33:45:f6:e6:dc:17:04:e7:ce:5e:68:7f:f5:71: 2e:2f:11:a6:2e:0b:09:b6:82:6e:bb:03:32:f1:02: 16:f3:43:44:3a:80:7f:09:4c:1b:c7:de:78:14:82: 4f:83:d2:4e:7e:83:a7:2c:18:9f:89:9d:98:ae:fb: 9e:8a:27:39:41:b6:11:7a:c5:c3:69:13:e4:2a:26: 88:6a:b3:3f:22:bd:79:af:da:fc:0d:2e:51:04:92: 3d:ec:b8:5a:50:f6:11:15:b1:49:8c:a8:5b:a5:c3: 8a:73:e8:40:9a:ab:b5:4a:f2:b4:eb:54:c0:8b:f5: c5:a7:40:f8:86:a5:44:71:55:79:bc:0e:79:34:36: f4:b7:c7:d0:3c:90:76:72:8a:92:cc:99:6a:ab:70: 6e:c8:8a:dd:83:e0:cf:7a:3f:ac:1a:af:90:11:7d: 9c:cf:f8:2b:00:01:6e:cc:e1:e3:3f:df:bc:49:8f: e7:ce:aa:75:42:f2:fd:1d:aa:67:23:e2:36:90:45: 89:3e:7f:f3:df:5c:9e:1b:be:39:c6:1e:32:6c:a3: 59:4a:9f:a4:1e:eb:d8:ae:06:e5:ce:57:1c:a2:c6: 13:85:e2:26:b5:35:92:41:f4:96:64:bd:14:07:49: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D9:36:2C:85:2E:8C:45:6B:90:D2:29:4D:D5:53:0B:91:F7:A3:84 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.108.0/24 Signature Algorithm: sha256WithRSAEncryption 12:b3:85:17:e5:53:99:54:d7:f9:10:2d:5c:2d:c6:de:8c:85: 8d:6e:42:c5:48:25:a3:21:ce:3c:70:2b:de:b0:ca:41:d0:30: 6a:aa:f9:21:4e:1c:06:d9:8e:f4:57:70:e9:92:b3:08:ee:da: 70:6f:4d:91:6f:82:0b:4c:88:97:ad:c4:3a:1b:42:6a:0b:cc: 17:2a:1e:91:bc:4c:53:1f:e7:37:2c:5c:72:85:13:9f:b5:31: c9:ec:b5:c3:c1:6a:d1:ca:3e:ee:53:65:33:3a:12:e5:98:9b: a6:94:a0:fe:f6:14:91:c4:0f:8f:1d:65:90:d8:0f:f4:3b:49: 8b:6c:2e:1d:d7:22:7f:b9:af:85:96:e1:e3:87:ae:aa:0d:98: 4f:e3:f5:4b:05:e2:64:ea:36:d8:0d:fe:12:92:0a:94:65:14: cc:5a:ee:a6:0a:33:4e:c9:10:35:ac:7f:a2:5c:8c:d9:02:d1: 6a:2b:fe:2d:9a:d5:b6:19:61:94:c4:23:8f:f7:b9:c3:71:db: 06:84:02:8b:4e:d2:a2:e7:74:26:2b:67:68:03:22:fa:07:ee: 8d:05:9c:4b:d2:e4:9d:58:6e:94:bc:80:67:5d:60:b5:12:a4: d4:99:e3:a7:1c:57:97:f6:08:60:ea:ed:ee:d2:56:ba:29:32: 30:03:0a:70 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZduFMK7bxHywrEgOyYUpyw2M7tAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNDEwMjUwNDU1MDFaFw0yNTEwMjQwNTAwMDFaMDMxMTAvBgNV BAMTKEZGRDkzNjJDODUyRThDNDU2QjkwRDIyOTRERDU1MzBCOTFGN0EzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwz3A5NPSCzdbihQ/nqCszRfbm 3BcE585eaH/1cS4vEaYuCwm2gm67AzLxAhbzQ0Q6gH8JTBvH3ngUgk+D0k5+g6cs GJ+JnZiu+56KJzlBthF6xcNpE+QqJohqsz8ivXmv2vwNLlEEkj3suFpQ9hEVsUmM qFulw4pz6ECaq7VK8rTrVMCL9cWnQPiGpURxVXm8Dnk0NvS3x9A8kHZyipLMmWqr cG7Iit2D4M96P6war5ARfZzP+CsAAW7M4eM/37xJj+fOqnVC8v0dqmcj4jaQRYk+ f/PfXJ4bvjnGHjJso1lKn6Qe69iuBuXOVxyixhOF4ia1NZJB9JZkvRQHSa17AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/9k2LIUujEVrkNIpTdVTC5H3o4QwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzUzMDJlMzEzMDM3MmUzMTMwMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmtsMA0GCSqG SIb3DQEBCwUAA4IBAQASs4UX5VOZVNf5EC1cLcbejIWNbkLFSCWjIc48cCvesMpB 0DBqqvkhThwG2Y70V3DpkrMI7tpwb02Rb4ILTIiXrcQ6G0JqC8wXKh6RvExTH+c3 LFxyhROftTHJ7LXDwWrRyj7uU2UzOhLlmJumlKD+9hSRxA+PHWWQ2A/0O0mLbC4d 1yJ/ua+FluHjh66qDZhP4/VLBeJk6jbYDf4SkgqUZRTMWu6mCjNOyRA1rH+iXIzZ AtFqK/4tmtW2GWGUxCOP97nDcdsGhAKLTtKi53QmK2doAyL6B+6NBZxL0uSdWG6U vIBnXWC1EqTUmeOnHFeX9ghg6u3u0la6KTIwAwpw -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org