$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa File: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (raw, json) Hash identifier: 0KAosvjpHvrfXIDCySn2lyFy3PmNVa0x+DND5sWhq6s= Subject key identifier: 29:A6:15:EF:E7:2C:C0:2C:A3:E7:99:23:B6:FD:E6:F7:3C:EE:10:6F Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 5F13BE094C581B6CDCF5A8E69767B53D25774CFF Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa Signing time: Tue 09 Apr 2024 08:51:42 +0000 ROA not before: Tue 09 Apr 2024 08:46:42 +0000 ROA not after: Tue 08 Apr 2025 08:51:42 +0000 asID: 152414 IP address blocks: 157.20.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 17:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:13:be:09:4c:58:1b:6c:dc:f5:a8:e6:97:67:b5:3d:25:77:4c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Apr 9 08:46:42 2024 GMT Not After : Apr 8 08:51:42 2025 GMT Subject: CN=29A615EFE72CC02CA3E79923B6FDE6F73CEE106F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:73:37:6c:ff:e1:f5:29:70:ef:74:6d:76: dd:0e:b5:c8:d3:32:f6:7f:23:01:9e:3e:04:2d:6f: 3c:3a:a8:f1:c3:bc:c3:bd:c9:76:89:b0:c7:54:a3: 12:59:c7:d2:3e:2d:87:0e:8f:a1:72:31:a5:7c:17: ea:67:5f:41:b9:6f:73:a0:bf:76:f5:be:b3:45:52: d8:c7:68:14:ac:7a:99:71:6e:99:23:b3:0a:44:b3: 8f:b2:e6:e7:1a:35:00:1a:bb:af:90:34:de:cb:cd: c8:19:e9:13:14:cd:60:f0:ff:6e:8a:7e:a7:6a:82: b9:f1:12:a2:7d:49:71:20:56:11:24:a2:bb:01:ce: 8d:bb:c1:e4:e7:5f:b4:99:0a:60:9b:2e:32:61:97: a8:e2:ed:83:8a:5c:3e:2c:44:44:8a:ac:0a:a1:f6: a7:fe:0c:2a:a9:2a:82:83:50:fc:57:29:cf:43:03: f6:fd:0b:a4:71:43:86:8c:6c:f5:7a:7c:77:e8:fc: 79:0d:b4:25:ef:52:6e:93:e2:a1:2b:50:0c:87:d4: 49:bb:59:e4:22:6b:66:c3:28:24:52:16:34:ce:92: cd:be:cf:f2:c6:76:09:b9:08:9d:c3:3f:41:c3:40: 17:5f:f7:6f:d1:33:f9:94:dc:83:e1:e0:e5:d5:66: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A6:15:EF:E7:2C:C0:2C:A3:E7:99:23:B6:FD:E6:F7:3C:EE:10:6F X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.130.0/24 Signature Algorithm: sha256WithRSAEncryption 38:75:56:c6:55:f7:cc:f8:68:46:22:87:7f:e5:f2:e7:60:64: 4c:28:00:71:72:71:b0:d9:ec:fc:50:98:b9:66:59:94:a9:e2: 3f:c1:eb:c8:18:9c:11:51:98:46:38:fb:31:70:78:a9:78:87: 32:94:d3:75:b1:12:2d:76:6a:8c:b9:39:eb:bb:81:78:d2:f4: c1:ea:38:7b:18:a7:83:b8:14:30:db:78:8c:25:30:76:ef:d4: a6:93:1b:71:81:33:84:f5:18:4c:30:6e:03:34:bc:65:ed:44: 0e:00:e5:47:37:45:dc:ab:b0:c3:98:32:78:21:00:54:0e:02: 6f:d5:bf:5d:6b:ce:6d:7c:eb:b3:4c:08:55:80:f5:1b:5d:b5: d9:3d:6c:2a:3c:6a:ec:60:fd:e6:2f:c5:eb:22:3f:23:07:70: 59:34:f6:72:d3:79:50:6b:ed:77:4c:ad:57:5d:b7:61:dc:8a: 28:57:69:41:1d:47:19:b8:08:40:5e:1a:24:0a:31:23:7f:89: f9:1c:95:d3:56:ea:a0:fa:e4:85:cf:38:d1:d0:84:fe:96:5a: 13:01:c4:5f:ac:b4:b2:48:e2:c5:e7:47:f0:0c:0e:84:42:fc: 89:e1:de:1b:93:19:b5:44:25:01:a3:3e:e6:9c:de:7e:41:cc: 89:ce:14:84 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXxO+CUxYG2zc9ajml2e1PSV3TP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNDA0MDkwODQ2NDJaFw0yNTA0MDgwODUxNDJaMDMxMTAvBgNV BAMTKDI5QTYxNUVGRTcyQ0MwMkNBM0U3OTkyM0I2RkRFNkY3M0NFRTEwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNB3M3bP/h9Slw73Rtdt0OtcjT MvZ/IwGePgQtbzw6qPHDvMO9yXaJsMdUoxJZx9I+LYcOj6FyMaV8F+pnX0G5b3Og v3b1vrNFUtjHaBSseplxbpkjswpEs4+y5ucaNQAau6+QNN7LzcgZ6RMUzWDw/26K fqdqgrnxEqJ9SXEgVhEkorsBzo27weTnX7SZCmCbLjJhl6ji7YOKXD4sRESKrAqh 9qf+DCqpKoKDUPxXKc9DA/b9C6RxQ4aMbPV6fHfo/HkNtCXvUm6T4qErUAyH1Em7 WeQia2bDKCRSFjTOks2+z/LGdgm5CJ3DP0HDQBdf92/RM/mU3IPh4OXVZtXLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKaYV7+cswCyj55kjtv3m9zzuEG8wHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4NmZmMjY0LWZmMjUtNGZlNi04 NmVmLWQ4NGI3ZDI4ODM1NC8wLzMxMzUzNzJlMzIzMDJlMzEzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSCMA0GCSqG SIb3DQEBCwUAA4IBAQA4dVbGVffM+GhGIod/5fLnYGRMKABxcnGw2ez8UJi5ZlmU qeI/wevIGJwRUZhGOPsxcHipeIcylNN1sRItdmqMuTnru4F40vTB6jh7GKeDuBQw 23iMJTB279SmkxtxgTOE9RhMMG4DNLxl7UQOAOVHN0Xcq7DDmDJ4IQBUDgJv1b9d a85tfOuzTAhVgPUbXbXZPWwqPGrsYP3mL8XrIj8jB3BZNPZy03lQa+13TK1XXbdh 3IooV2lBHUcZuAhAXhokCjEjf4n5HJXTVuqg+uSFzzjR0IT+lloTAcRfrLSySOLF 50fwDA6EQvyJ4d4bkxm1RCUBoz7mnN5+QcyJzhSE -----END CERTIFICATE-----Generated at Mon Jun 24 19:35:47 2024 by rpki-client on console-fra.rpki-client.org