$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa File: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (raw, json) Hash identifier: M4G3+2ND4JNQkzKKiPu/TTGwUpDm4YJaaeAdjCfIIk4= Subject key identifier: CB:DC:5C:B3:97:56:82:AD:2C:C0:14:33:0B:F6:3F:EE:C4:55:D2:DE Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 425CE31947751E0C5AFCB3A3946DC36C8833E1FB Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa Signing time: Wed 17 Apr 2024 03:00:01 +0000 ROA not before: Wed 17 Apr 2024 02:55:01 +0000 ROA not after: Wed 16 Apr 2025 03:00:01 +0000 asID: 138818 IP address blocks: 114.141.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5c:e3:19:47:75:1e:0c:5a:fc:b3:a3:94:6d:c3:6c:88:33:e1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: Apr 17 02:55:01 2024 GMT Not After : Apr 16 03:00:01 2025 GMT Subject: CN=CBDC5CB3975682AD2CC014330BF63FEEC455D2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6d:f5:b2:5d:8f:f5:91:cc:4a:61:20:db:1a: 12:86:16:26:0c:ff:3e:69:ed:02:09:eb:ef:fc:3f: c0:98:c1:48:a2:4e:d5:03:ba:dd:ac:a1:f7:e8:73: 81:6a:44:cc:27:34:93:96:3e:5e:9e:37:f8:fd:78: 6b:e8:d6:88:bb:ad:81:6b:50:37:69:fd:66:4a:fa: 60:56:a1:ac:67:a4:f8:74:d9:fa:09:b6:38:82:f1: eb:99:08:f3:43:aa:d7:40:c1:4c:7a:3d:fe:93:4d: d9:02:82:b8:22:2a:4b:9b:de:85:a3:8f:06:bb:4b: 83:a6:35:01:2d:f8:72:63:e0:3b:5b:55:d8:69:fa: 99:59:36:83:06:df:02:ee:22:b8:e8:c7:52:89:57: 83:81:cd:4c:50:f2:b3:06:f6:e0:94:df:c4:63:91: 56:e4:7b:cd:f6:9f:ef:ba:8a:4e:b3:48:16:13:9d: a2:d0:ef:63:b9:ad:78:93:c2:32:42:3e:43:ca:5d: 6e:f9:2c:11:aa:32:80:a4:47:42:62:d5:f1:c6:c7: 51:2b:17:15:10:a7:8d:fa:69:15:4c:e3:69:37:69: 06:4d:8a:0e:bc:70:c7:bb:6f:c3:e9:52:f4:71:af: d0:69:71:9a:84:10:f5:57:c6:79:81:09:8b:2b:7d: 4a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DC:5C:B3:97:56:82:AD:2C:C0:14:33:0B:F6:3F:EE:C4:55:D2:DE X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.141.94.0/24 Signature Algorithm: sha256WithRSAEncryption 98:a0:13:fa:cd:c6:11:30:ea:c5:88:6e:8f:4e:76:5e:09:b9: 09:9c:c1:67:50:01:d9:52:f5:df:c8:26:c1:f8:e5:f9:40:44: cc:9d:7c:14:16:17:82:8a:77:17:f5:87:c5:70:b5:e8:c8:cc: 44:a2:e7:e2:32:fe:71:df:25:7b:6b:39:8a:71:be:ac:a7:da: 66:e3:2b:66:69:0e:19:29:99:f2:fd:90:5f:26:7f:70:5a:11: df:de:5d:52:ee:1a:b5:cc:2a:2a:1a:0b:a8:38:e9:2c:ce:99: 45:73:81:5c:34:c5:99:21:50:75:5d:45:a5:10:b5:ab:aa:ab: a8:e9:76:3a:4c:1f:bd:ac:98:51:fd:68:ef:05:e3:d1:e5:33: 12:ac:38:af:c5:49:61:7c:f7:9f:94:e2:e4:35:df:c0:13:26: ef:e2:6d:b5:8f:3c:12:a0:42:1e:ab:d4:15:0e:ce:51:fc:44: 82:66:57:47:e8:96:f7:ca:c2:81:91:20:b5:f5:77:15:cf:03: 1a:8b:73:19:1b:3a:52:84:b0:20:a6:1b:6c:37:c9:0e:8f:9d: 5a:b0:21:aa:7a:06:ae:63:8d:d4:27:1b:ab:21:19:9b:9b:18: a9:a7:ab:09:78:fc:8f:1a:31:ee:1d:3f:88:52:97:81:64:d7: 5d:d3:80:9f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQlzjGUd1Hgxa/LOjlG3DbIgz4fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNDA0MTcwMjU1MDFaFw0yNTA0MTYwMzAwMDFaMDMxMTAvBgNV BAMTKENCREM1Q0IzOTc1NjgyQUQyQ0MwMTQzMzBCRjYzRkVFQzQ1NUQyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbfWyXY/1kcxKYSDbGhKGFiYM /z5p7QIJ6+/8P8CYwUiiTtUDut2soffoc4FqRMwnNJOWPl6eN/j9eGvo1oi7rYFr UDdp/WZK+mBWoaxnpPh02foJtjiC8euZCPNDqtdAwUx6Pf6TTdkCgrgiKkub3oWj jwa7S4OmNQEt+HJj4DtbVdhp+plZNoMG3wLuIrjox1KJV4OBzUxQ8rMG9uCU38Rj kVbke832n++6ik6zSBYTnaLQ72O5rXiTwjJCPkPKXW75LBGqMoCkR0Ji1fHGx1Er FxUQp436aRVM42k3aQZNig68cMe7b8PpUvRxr9BpcZqEEPVXxnmBCYsrfUovAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUy9xcs5dWgq0swBQzC/Y/7sRV0t4wHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3ZmM1NGZiLTcyNGUtNDMxNi1i OWJjLTFjNGIwNmVhNTdhZS8wLzMxMzEzNDJlMzEzNDMxMmUzOTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAco1eMA0GCSqG SIb3DQEBCwUAA4IBAQCYoBP6zcYRMOrFiG6PTnZeCbkJnMFnUAHZUvXfyCbB+OX5 QETMnXwUFheCincX9YfFcLXoyMxEoufiMv5x3yV7azmKcb6sp9pm4ytmaQ4ZKZny /ZBfJn9wWhHf3l1S7hq1zCoqGguoOOkszplFc4FcNMWZIVB1XUWlELWrqquo6XY6 TB+9rJhR/WjvBePR5TMSrDivxUlhfPeflOLkNd/AEybv4m21jzwSoEIeq9QVDs5R /ESCZldH6Jb3ysKBkSC19XcVzwMai3MZGzpShLAgphtsN8kOj51asCGqegauY43U JxurIRmbmxipp6sJePyPGjHuHT+IUpeBZNdd04Cf -----END CERTIFICATE-----Generated at Wed Nov 20 18:42:09 2024 by rpki-client on console-fra.rpki-client.org