$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa File: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (raw, json) Hash identifier: bACh/xBiu9uyeY9yNKlr4VXrCOf1RVYc2MUC47xloUQ= Subject key identifier: 6B:7F:C7:15:C4:18:80:FF:81:AD:73:13:C1:FD:07:5F:B3:96:61:7A Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 6F849713423E80F509B0C35521F1041C7731648E Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa Signing time: Mon 01 Jul 2024 01:03:34 +0000 ROA not before: Mon 01 Jul 2024 00:58:34 +0000 ROA not after: Mon 30 Jun 2025 01:03:34 +0000 asID: 46032 IP address blocks: 118.151.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:84:97:13:42:3e:80:f5:09:b0:c3:55:21:f1:04:1c:77:31:64:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Jul 1 00:58:34 2024 GMT Not After : Jun 30 01:03:34 2025 GMT Subject: CN=6B7FC715C41880FF81AD7313C1FD075FB396617A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:50:65:cb:c1:70:5a:d8:7a:9e:dc:34:2f: b0:69:34:a6:e7:53:ce:d6:b1:66:30:e7:dd:00:5d: 2a:dd:dc:9b:ad:66:ac:f1:a5:b0:17:43:61:af:72: 5f:d5:a6:70:55:91:91:2f:62:44:30:68:32:98:88: d1:68:19:78:37:92:c6:47:76:da:7d:af:26:ba:06: 04:dc:54:65:4b:64:09:89:50:98:b9:2c:44:f0:a8: b7:82:dd:ad:11:74:e8:f5:39:f2:0a:46:a2:7e:f4: 17:ba:35:cf:d7:14:df:94:4d:ad:2b:c3:c2:e8:7d: 27:22:85:29:5f:b6:7b:ca:96:76:43:3f:78:55:c1: 6e:be:63:90:dc:f5:d9:2b:62:51:9f:2a:c2:72:89: 53:07:4d:f0:1f:3d:b4:2a:a3:a6:c0:22:87:3f:07: 13:34:b6:d1:00:7a:d3:53:be:73:41:6f:86:fa:a6: dd:87:f0:fa:ea:8c:b9:05:36:38:61:8d:1a:e1:21: 42:f6:b1:1b:b4:11:62:13:df:f3:7f:a3:b6:3a:b9: d5:33:ec:64:54:46:ce:57:8d:b3:5d:97:4f:55:80: ad:07:24:ce:e9:43:ac:fc:d9:0f:c6:ea:f7:f7:b7: 97:51:91:fe:90:e0:8c:8c:6b:a0:ca:c2:ac:f3:3e: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7F:C7:15:C4:18:80:FF:81:AD:73:13:C1:FD:07:5F:B3:96:61:7A X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.151.221.0/24 Signature Algorithm: sha256WithRSAEncryption 34:5c:4e:ad:57:49:d3:c0:0d:53:94:30:14:30:89:9d:a5:51: 7b:e7:82:7a:9f:a1:78:97:9b:83:4f:fb:c6:04:d5:19:2f:cc: 87:8f:1a:f2:1e:59:f8:7b:52:47:bf:a7:62:3c:46:29:7f:ca: b1:7a:f1:56:d0:5e:60:99:b7:ba:73:d9:f7:9c:17:23:e5:69: a8:98:d8:46:98:2e:97:91:75:94:ad:dc:5d:23:70:ed:b1:61: f4:62:fa:e7:df:cb:45:c3:d1:2d:40:9d:4a:53:ae:5a:46:a2: 40:7f:d2:77:e6:39:9f:f5:04:17:53:ff:b2:bc:ba:45:b9:c0: f6:c5:d7:62:87:57:da:3f:73:7c:f0:82:e6:ad:ef:f3:5b:0d: e6:a4:e2:17:72:2a:86:68:ce:fa:41:a9:b9:4e:1b:e4:fc:f1: 93:e2:5c:b2:97:8d:7b:9f:f7:be:9f:9b:68:22:45:81:b6:3f: bc:1f:88:a7:9a:aa:46:80:d5:8a:a8:8e:13:bb:4c:c3:6f:9c: 3d:14:84:4e:7b:60:5b:c8:46:eb:3a:6a:d8:58:ae:ca:26:06: df:a0:44:2d:b2:35:96:2b:39:4e:33:a2:38:9a:fc:b3:03:7f: de:41:43:1b:2b:11:bd:4e:06:13:bd:9a:a5:26:b7:22:1e:ea: 30:06:eb:1d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb4SXE0I+gPUJsMNVIfEEHHcxZI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNDA3MDEwMDU4MzRaFw0yNTA2MzAwMTAzMzRaMDMxMTAvBgNV BAMTKDZCN0ZDNzE1QzQxODgwRkY4MUFENzMxM0MxRkQwNzVGQjM5NjYxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LFBly8FwWth6ntw0L7BpNKbn U87WsWYw590AXSrd3JutZqzxpbAXQ2Gvcl/VpnBVkZEvYkQwaDKYiNFoGXg3ksZH dtp9rya6BgTcVGVLZAmJUJi5LETwqLeC3a0RdOj1OfIKRqJ+9Be6Nc/XFN+UTa0r w8LofScihSlftnvKlnZDP3hVwW6+Y5Dc9dkrYlGfKsJyiVMHTfAfPbQqo6bAIoc/ BxM0ttEAetNTvnNBb4b6pt2H8PrqjLkFNjhhjRrhIUL2sRu0EWIT3/N/o7Y6udUz 7GRURs5XjbNdl09VgK0HJM7pQ6z82Q/G6vf3t5dRkf6Q4IyMa6DKwqzzPtxRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUa3/HFcQYgP+BrXMTwf0HX7OWYXowHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1N2I5MGNiLThlYmQtNGM3Yi04 YzMxLTEzM2E4YjRlZDY5Yy8wLzMxMzEzODJlMzEzNTMxMmUzMjMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdpfdMA0GCSqG SIb3DQEBCwUAA4IBAQA0XE6tV0nTwA1TlDAUMImdpVF754J6n6F4l5uDT/vGBNUZ L8yHjxryHln4e1JHv6diPEYpf8qxevFW0F5gmbe6c9n3nBcj5WmomNhGmC6XkXWU rdxdI3DtsWH0Yvrn38tFw9EtQJ1KU65aRqJAf9J35jmf9QQXU/+yvLpFucD2xddi h1faP3N88ILmre/zWw3mpOIXciqGaM76Qam5Thvk/PGT4lyyl417n/e+n5toIkWB tj+8H4inmqpGgNWKqI4Tu0zDb5w9FIROe2BbyEbrOmrYWK7KJgbfoEQtsjWWKzlO M6I4mvyzA3/eQUMbKxG9TgYTvZqlJrciHuowBusd -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org