$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa File: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: 3YmVYCRoqYFKWuEsCMHpjQbrzfUppnYkdN1P8sml9nk= Subject key identifier: 61:3C:E4:15:35:9A:85:6C:CE:0D:F2:27:A5:61:54:5D:2E:D3:9D:75 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 1F8A30A061DB897533343ADE35F03A28442D2457 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa Signing time: Sat 04 May 2024 16:13:55 +0000 ROA not before: Sat 04 May 2024 16:08:55 +0000 ROA not after: Sat 03 May 2025 16:13:55 +0000 asID: 133799 IP address blocks: 123.108.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8a:30:a0:61:db:89:75:33:34:3a:de:35:f0:3a:28:44:2d:24:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: May 4 16:08:55 2024 GMT Not After : May 3 16:13:55 2025 GMT Subject: CN=613CE415359A856CCE0DF227A561545D2ED39D75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:aa:2f:87:37:02:b4:fe:f5:57:6c:14:9c:ca: 3d:98:ff:ce:fc:53:94:b4:6a:5e:54:9d:4d:da:97: bc:d6:b1:3c:c0:81:49:4b:b0:49:b8:56:6d:88:90: 75:7c:05:23:d1:1d:c0:3d:09:7d:69:be:0b:c6:03: 03:69:3e:bd:bd:75:73:da:c5:52:f2:a1:18:33:68: 93:b4:b9:ee:8e:d5:85:51:7c:a3:3f:15:e7:d0:79: 13:75:fd:80:f7:95:34:95:5a:46:91:dc:ba:33:f8: a3:76:e5:90:2e:b0:c5:8f:63:e1:f1:d7:7d:92:3d: cd:a6:6c:a2:4d:b1:fb:6c:0f:ba:3b:a3:d9:7b:1b: 29:3f:93:d4:f8:96:86:5b:82:9b:64:2f:a5:66:ec: 45:57:27:56:ad:a6:7d:5e:d3:9e:86:55:44:4a:ff: 6a:36:dd:8e:fa:ac:3b:d3:ab:c1:79:f4:5f:8a:41: 0e:da:bc:f5:ca:89:7a:6a:1d:18:0d:1f:dc:08:2c: f5:77:e2:c4:07:0f:66:57:e2:1c:39:48:50:7a:32: 90:c3:62:b9:25:ff:bc:5e:e3:dc:20:ba:73:e7:a2: 3c:44:8d:e2:4e:ce:3a:b3:c5:1c:ac:31:5b:d1:05: ff:61:1d:8b:af:00:d2:5f:f0:2b:40:dd:f9:de:b5: c4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3C:E4:15:35:9A:85:6C:CE:0D:F2:27:A5:61:54:5D:2E:D3:9D:75 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.108.64.0/24 Signature Algorithm: sha256WithRSAEncryption 84:63:a3:e4:07:8c:4f:72:3d:ec:24:78:94:96:4d:fe:be:2b: ae:24:c0:40:f3:9f:0e:07:cd:bf:8c:2c:ad:c6:64:8c:54:a9: f7:ee:f0:88:91:43:cf:10:c0:bc:a2:1a:53:49:9a:33:0d:5d: 30:2c:46:55:e9:3a:b3:b5:9f:6a:07:77:f6:6c:50:1b:e1:04: 31:57:af:29:e9:f8:e8:b3:ea:10:b8:e4:5a:0d:d5:5d:1a:2e: 2f:d9:b6:37:f7:26:06:7c:b7:5f:2f:56:ac:22:9b:ad:2e:06: 1a:e9:75:5b:2c:e1:13:a3:20:87:f3:6c:9a:27:37:ce:07:92: 0b:d6:d3:82:da:c9:53:2c:42:e8:8b:34:5d:a1:bb:94:5d:c3: d4:e0:0a:97:67:c8:81:a5:97:fb:42:3f:03:70:ba:72:98:2f: f0:15:03:9c:e2:16:5b:6c:5f:60:59:66:0e:a4:79:c2:90:90: 7c:71:55:f4:f6:12:33:07:5c:74:d2:4d:a1:a7:b7:76:d2:65: ba:b8:13:62:7a:8b:24:d5:85:3e:48:c2:d4:f8:87:50:5f:0f: f7:b4:5e:7f:5a:14:4f:16:0b:56:91:14:06:93:08:4a:aa:c3: 4d:f7:85:69:b2:c4:f1:5a:da:fb:af:82:25:89:3f:37:17:9b: 27:b9:44:71 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUH4owoGHbiXUzNDreNfA6KEQtJFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNDA1MDQxNjA4NTVaFw0yNTA1MDMxNjEzNTVaMDMxMTAvBgNV BAMTKDYxM0NFNDE1MzU5QTg1NkNDRTBERjIyN0E1NjE1NDVEMkVEMzlENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJqi+HNwK0/vVXbBScyj2Y/878 U5S0al5UnU3al7zWsTzAgUlLsEm4Vm2IkHV8BSPRHcA9CX1pvgvGAwNpPr29dXPa xVLyoRgzaJO0ue6O1YVRfKM/FefQeRN1/YD3lTSVWkaR3Loz+KN25ZAusMWPY+Hx 132SPc2mbKJNsftsD7o7o9l7Gyk/k9T4loZbgptkL6Vm7EVXJ1atpn1e056GVURK /2o23Y76rDvTq8F59F+KQQ7avPXKiXpqHRgNH9wILPV34sQHD2ZX4hw5SFB6MpDD Yrkl/7xe49wgunPnojxEjeJOzjqzxRysMVvRBf9hHYuvANJf8CtA3fnetcT7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYTzkFTWahWzODfInpWFUXS7TnXUwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzIzMzJlMzEzMDM4MmUzNjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe2xAMA0GCSqG SIb3DQEBCwUAA4IBAQCEY6PkB4xPcj3sJHiUlk3+viuuJMBA858OB82/jCytxmSM VKn37vCIkUPPEMC8ohpTSZozDV0wLEZV6TqztZ9qB3f2bFAb4QQxV68p6fjos+oQ uORaDdVdGi4v2bY39yYGfLdfL1asIputLgYa6XVbLOEToyCH82yaJzfOB5IL1tOC 2slTLELoizRdobuUXcPU4AqXZ8iBpZf7Qj8DcLpymC/wFQOc4hZbbF9gWWYOpHnC kJB8cVX09hIzB1x00k2hp7d20mW6uBNieosk1YU+SMLU+IdQXw/3tF5/WhRPFgtW kRQGkwhKqsNN94VpssTxWtr7r4IliT83F5snuURx -----END CERTIFICATE-----Generated at Fri Sep 27 12:47:17 2024 by rpki-client on console-fra.rpki-client.org