$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32322d3234203d3e203535363533.roa File: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (raw, json) Hash identifier: TM3GYewxHHLLEzakQI/e4lcxtVAjFWl7n3OxdIcy9do= Subject key identifier: BE:85:50:42:25:C5:F6:0F:8F:5C:AB:42:AF:84:F0:6B:71:CF:D0:02 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 71DE0299DF245AEB1A21D86523F4D77882DE19B4 Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32322d3234203d3e203535363533.roa Signing time: Mon 01 Jul 2024 01:05:00 +0000 ROA not before: Mon 01 Jul 2024 01:00:00 +0000 ROA not after: Mon 30 Jun 2025 01:05:00 +0000 asID: 55653 IP address blocks: 14.102.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:de:02:99:df:24:5a:eb:1a:21:d8:65:23:f4:d7:78:82:de:19:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Jul 1 01:00:00 2024 GMT Not After : Jun 30 01:05:00 2025 GMT Subject: CN=BE85504225C5F60F8F5CAB42AF84F06B71CFD002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:02:58:71:de:8f:d6:93:48:f4:35:76:f6:24: 0b:98:1f:a9:29:38:fb:42:65:69:85:35:ad:e0:38: 70:57:f5:94:ca:06:40:08:6e:a1:00:67:11:c6:02: ac:dc:99:b8:1b:fe:35:d2:7f:03:a1:bf:9e:af:cc: fc:6b:4a:bd:28:c4:4f:61:c5:34:6b:37:89:38:4d: 07:4e:99:9e:db:a7:ad:ee:23:e8:53:d2:dd:6f:9b: 07:34:31:33:0a:76:8e:c8:3b:22:4b:9e:92:a8:54: c1:c0:4a:1d:e3:0f:7e:49:2c:32:dc:24:a6:4d:3e: ee:a0:c3:23:df:14:ea:63:1f:50:76:b1:c3:94:58: 1f:56:18:81:83:60:e7:8e:10:52:95:f6:21:8c:87: af:31:5e:81:af:cb:0c:4f:5d:d0:23:f6:1f:32:f1: 6e:6c:19:71:9e:09:ef:ac:79:f9:3b:cf:6b:cb:15: a1:1c:41:51:44:3b:ac:2a:c9:d2:1d:f1:47:e3:00: b5:ea:9b:e1:4e:d1:20:42:4d:fd:ab:b5:96:9f:f0: bd:fe:20:ba:7f:d8:a5:8f:0d:91:80:74:c8:16:8f: c6:15:e5:17:4c:3a:59:27:bc:28:78:7a:d5:c7:7c: 12:75:da:64:4c:50:85:9d:39:b7:a9:fe:5b:48:41: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:50:42:25:C5:F6:0F:8F:5C:AB:42:AF:84:F0:6B:71:CF:D0:02 X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32322d3234203d3e203535363533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.152.0/22 Signature Algorithm: sha256WithRSAEncryption 21:c2:99:ba:c9:d6:bf:d1:35:b3:ed:7e:0f:ff:3e:78:71:ff: b3:f0:29:98:0e:ac:94:86:c6:b6:04:37:77:47:04:c0:6e:ff: 72:61:b6:aa:d2:cf:93:b8:c5:58:bc:cc:85:1a:b8:81:8e:91: 79:f0:0f:ed:a4:2a:04:09:fb:fc:c3:21:a4:40:2a:59:52:54: 74:ed:2c:a2:d0:82:da:ae:c3:10:b8:e5:4b:5f:a7:e3:e8:fe: 98:ac:aa:ae:34:a7:67:05:0a:ee:d8:53:04:80:68:db:fd:d0: 26:32:fe:20:4d:cb:b8:a4:f5:40:91:63:31:e0:f6:ab:dc:b7: 6b:b8:80:05:4a:6f:91:a8:aa:75:e7:62:d6:7e:7b:85:02:9e: 77:fb:b8:13:26:96:e0:be:2a:5c:83:18:30:ce:c8:c1:cb:26: 5f:f3:8a:84:53:6f:02:57:21:f2:b1:77:e9:7c:6d:6e:a9:42: 4b:7f:3b:8f:ab:b4:74:ec:5f:1c:3c:c2:42:bf:1b:88:92:37: ee:5a:f4:2b:64:9a:74:ca:6b:f4:f0:59:61:f6:a9:8e:4a:92: b4:09:bf:2c:bd:c0:ad:88:75:48:4f:6e:c8:f0:ca:a7:17:78: 25:8a:62:e4:67:3f:95:fe:ff:99:9a:3e:be:50:79:13:eb:c5: 08:18:4c:8c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcd4Cmd8kWusaIdhlI/TXeILeGbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNDA3MDEwMTAwMDBaFw0yNTA2MzAwMTA1MDBaMDMxMTAvBgNV BAMTKEJFODU1MDQyMjVDNUY2MEY4RjVDQUI0MkFGODRGMDZCNzFDRkQwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoAlhx3o/Wk0j0NXb2JAuYH6kp OPtCZWmFNa3gOHBX9ZTKBkAIbqEAZxHGAqzcmbgb/jXSfwOhv56vzPxrSr0oxE9h xTRrN4k4TQdOmZ7bp63uI+hT0t1vmwc0MTMKdo7IOyJLnpKoVMHASh3jD35JLDLc JKZNPu6gwyPfFOpjH1B2scOUWB9WGIGDYOeOEFKV9iGMh68xXoGvywxPXdAj9h8y 8W5sGXGeCe+sefk7z2vLFaEcQVFEO6wqydId8UfjALXqm+FO0SBCTf2rtZaf8L3+ ILp/2KWPDZGAdMgWj8YV5RdMOlknvCh4etXHfBJ12mRMUIWdObep/ltIQar9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUvoVQQiXF9g+PXKtCr4Twa3HP0AIwHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5NzQ2NWUzLTc4YTAtNDk2NS1h ZTE0LWU0Y2I0ZDBmYzE4NS8wLzMxMzQyZTMxMzAzMjJlMzEzNTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzNTM2MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAg5mmDANBgkqhkiG 9w0BAQsFAAOCAQEAIcKZusnWv9E1s+1+D/8+eHH/s/ApmA6slIbGtgQ3d0cEwG7/ cmG2qtLPk7jFWLzMhRq4gY6RefAP7aQqBAn7/MMhpEAqWVJUdO0sotCC2q7DELjl S1+n4+j+mKyqrjSnZwUK7thTBIBo2/3QJjL+IE3LuKT1QJFjMeD2q9y3a7iABUpv kaiqdedi1n57hQKed/u4EyaW4L4qXIMYMM7IwcsmX/OKhFNvAlch8rF36XxtbqlC S387j6u0dOxfHDzCQr8biJI37lr0K2SadMpr9PBZYfapjkqStAm/LL3ArYh1SE9u yPDKpxd4JYpi5Gc/lf7/mZo+vlB5E+vFCBhMjA== -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:40 2024 by rpki-client on console-ams.rpki-client.org