$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa File: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: 5QmBgtR4oxoWyv+pDSaUBxvCGSef+sF2loWrmoll8N4= Subject key identifier: 98:04:80:53:0C:01:44:D9:0D:10:96:CB:84:74:23:B5:41:3E:9D:7E Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 7AB5155F32693C33F3E97281B956B87678B30A84 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa Signing time: Sat 04 May 2024 16:15:14 +0000 ROA not before: Sat 04 May 2024 16:10:14 +0000 ROA not after: Sat 03 May 2025 16:15:14 +0000 asID: 133799 IP address blocks: 123.108.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b5:15:5f:32:69:3c:33:f3:e9:72:81:b9:56:b8:76:78:b3:0a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: May 4 16:10:14 2024 GMT Not After : May 3 16:15:14 2025 GMT Subject: CN=980480530C0144D90D1096CB847423B5413E9D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8e:fe:e1:21:76:52:2b:84:83:3d:e0:17:db: bf:9a:79:28:b0:d9:70:a2:0a:2c:ae:a9:88:96:a1: 3b:30:f2:22:59:1a:0f:54:25:8d:aa:a4:f4:fd:94: 56:2b:8c:23:58:33:e1:d1:b6:c2:73:3c:ac:56:2b: 99:b7:a6:c3:55:5c:26:b2:06:b8:fa:03:38:68:92: 23:12:9a:22:62:a5:10:0f:f0:2e:29:8f:be:41:19: 2e:d0:55:6d:85:f5:e9:98:85:f6:13:9c:71:65:6c: 68:55:bf:48:bb:4b:e7:2c:d3:38:9d:a8:5f:ba:4e: 68:63:01:6f:61:9b:88:b1:73:24:d4:5c:fc:a4:fa: 16:92:65:bd:89:a1:43:99:ed:3a:6a:b5:1f:1f:5a: db:f2:ff:5b:1b:f0:e7:f4:8f:0b:5d:55:53:68:09: 40:dd:8d:af:0a:6b:ce:4a:85:96:3b:a4:04:72:83: 0e:cb:5b:9c:fe:39:5c:58:aa:a3:1d:1e:8d:53:6b: 38:a8:28:9f:56:38:74:0a:31:23:db:dd:7c:bb:48: d7:06:50:ec:59:08:5e:ed:dc:54:4c:f1:4f:77:08: 93:c4:f9:83:c5:02:43:e4:42:b1:4e:e1:92:92:7a: 21:88:f2:45:19:1d:53:5b:36:0c:ba:c5:eb:a4:84: 65:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:04:80:53:0C:01:44:D9:0D:10:96:CB:84:74:23:B5:41:3E:9D:7E X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.108.67.0/24 Signature Algorithm: sha256WithRSAEncryption c5:51:93:01:ad:88:c5:27:67:11:d3:8c:3c:4e:d3:61:3c:c5: df:ae:3a:cf:4b:5a:d9:c2:b3:44:51:f0:02:b9:2f:db:55:0e: ec:4b:26:2e:b9:35:94:4f:73:92:23:b7:d5:af:06:40:69:75: e3:94:5d:4e:05:37:87:5c:1e:60:9f:0e:c0:ed:66:14:45:ba: 22:c1:ec:32:11:6a:cf:86:2b:17:d2:08:e2:95:3e:92:10:c0: ec:af:a5:af:1e:ec:b6:bf:fe:e4:95:10:f6:2f:61:98:11:ce: ad:e2:14:08:24:e3:d9:d2:74:37:4e:42:fa:a6:32:2b:1d:45: 31:34:44:1f:df:c8:e4:1f:cc:6d:c9:ec:ef:d6:31:b1:a0:38: 6d:2d:93:76:14:b4:2f:68:c1:5b:4b:1d:71:9d:16:c6:1d:9a: 11:12:b7:de:c2:29:66:ed:e3:de:e9:74:05:93:ea:57:17:98: 42:cb:bb:d8:e4:d1:4e:0b:4a:68:d6:f6:d8:da:a9:cc:d3:23: e6:bb:c4:3b:20:15:74:91:c6:eb:7f:94:0f:68:cd:f2:65:eb: 9d:3e:b3:7d:83:2b:1a:52:b4:3b:e1:e8:01:06:e8:ee:6b:b9: 5b:10:58:dd:b1:45:84:9f:7b:db:69:64:84:06:d8:43:09:ea: 58:6a:37:1e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUerUVXzJpPDPz6XKBuVa4dnizCoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNDA1MDQxNjEwMTRaFw0yNTA1MDMxNjE1MTRaMDMxMTAvBgNV BAMTKDk4MDQ4MDUzMEMwMTQ0RDkwRDEwOTZDQjg0NzQyM0I1NDEzRTlEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgjv7hIXZSK4SDPeAX27+aeSiw 2XCiCiyuqYiWoTsw8iJZGg9UJY2qpPT9lFYrjCNYM+HRtsJzPKxWK5m3psNVXCay Brj6AzhokiMSmiJipRAP8C4pj75BGS7QVW2F9emYhfYTnHFlbGhVv0i7S+cs0zid qF+6TmhjAW9hm4ixcyTUXPyk+haSZb2JoUOZ7TpqtR8fWtvy/1sb8Of0jwtdVVNo CUDdja8Ka85KhZY7pARygw7LW5z+OVxYqqMdHo1TazioKJ9WOHQKMSPb3Xy7SNcG UOxZCF7t3FRM8U93CJPE+YPFAkPkQrFO4ZKSeiGI8kUZHVNbNgy6xeukhGWdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmASAUwwBRNkNEJbLhHQjtUE+nX4wHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzIzMzJlMzEzMDM4MmUzNjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe2xDMA0GCSqG SIb3DQEBCwUAA4IBAQDFUZMBrYjFJ2cR04w8TtNhPMXfrjrPS1rZwrNEUfACuS/b VQ7sSyYuuTWUT3OSI7fVrwZAaXXjlF1OBTeHXB5gnw7A7WYURboiwewyEWrPhisX 0gjilT6SEMDsr6WvHuy2v/7klRD2L2GYEc6t4hQIJOPZ0nQ3TkL6pjIrHUUxNEQf 38jkH8xtyezv1jGxoDhtLZN2FLQvaMFbSx1xnRbGHZoRErfewilm7ePe6XQFk+pX F5hCy7vY5NFOC0po1vbY2qnM0yPmu8Q7IBV0kcbrf5QPaM3yZeudPrN9gysaUrQ7 4egBBujua7lbEFjdsUWEn3vbaWSEBthDCepYajce -----END CERTIFICATE-----Generated at Fri Sep 27 12:47:17 2024 by rpki-client on console-fra.rpki-client.org