$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa File: 3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (raw, json) Hash identifier: gPNjsSU5+9iS+C4i5vo8aUC2h5KXAUnW7Wq+CZX5bnw= Subject key identifier: 84:9F:6F:22:E3:D9:11:FA:16:FE:44:22:3D:FB:76:BC:6E:E3:EB:A9 Certificate issuer: /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC Certificate serial: 321D1D94F60E02200060C584AD9D4CE1D0EFDA66 Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa Signing time: Wed 15 May 2024 09:00:56 +0000 ROA not before: Wed 15 May 2024 08:55:56 +0000 ROA not after: Wed 14 May 2025 09:00:56 +0000 asID: 136106 IP address blocks: 123.176.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1d:1d:94:f6:0e:02:20:00:60:c5:84:ad:9d:4c:e1:d0:ef:da:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC Validity Not Before: May 15 08:55:56 2024 GMT Not After : May 14 09:00:56 2025 GMT Subject: CN=849F6F22E3D911FA16FE44223DFB76BC6EE3EBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:d0:47:42:d5:52:9a:a2:5b:c6:70:82:80: 80:49:16:4a:66:aa:8a:6e:83:09:15:25:d3:4c:f1: 46:79:a0:fc:07:44:4a:96:de:0a:38:e8:a5:59:f3: 58:8e:4e:30:0d:16:8c:25:d0:58:d1:bc:54:86:6c: 84:8d:e3:32:f4:f4:7a:1d:6b:08:44:9c:c9:b2:3c: 00:08:fd:e6:0d:f4:2a:6c:41:0b:f5:e2:12:eb:05: 77:9c:5c:81:a9:8d:21:dc:f0:68:09:93:46:4d:53: df:ee:77:b8:04:03:12:85:87:aa:09:b5:3f:85:69: 97:81:50:80:b3:35:66:50:8f:84:53:e0:c5:f8:a4: 97:ee:a6:aa:6b:df:87:ff:60:72:08:3e:f6:0a:ea: 2e:e5:00:8f:76:98:2d:53:3c:45:3f:1d:c5:6d:57: 85:ba:81:3d:25:7b:d8:0c:93:1e:61:5a:67:93:8f: c0:0f:9c:20:b9:f2:0f:f4:f8:a7:c9:91:bd:28:11: f8:66:a1:8f:ea:53:26:32:04:0a:d0:01:4a:8f:ba: 16:d8:d2:87:5a:69:a3:64:91:5c:54:73:63:d7:f3: 58:95:4c:d4:96:8e:cd:37:ba:76:c3:86:63:52:1f: e7:76:53:c8:df:52:3f:f3:06:62:98:60:0e:32:c9: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9F:6F:22:E3:D9:11:FA:16:FE:44:22:3D:FB:76:BC:6E:E3:EB:A9 X509v3 Authority Key Identifier: keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.176.121.0/24 Signature Algorithm: sha256WithRSAEncryption 32:9d:e0:de:4f:1b:e3:9a:e0:63:40:7f:90:c9:bb:29:26:9c: 99:0a:5e:c3:1e:8c:cc:7e:ff:c6:34:02:17:6c:1f:d2:6e:7b: 88:d8:b5:22:66:d2:ba:98:b8:4b:02:f4:b4:c9:9d:71:4b:07: 6d:2b:bd:37:16:d9:fa:e2:a4:0e:0a:75:f5:48:30:07:43:ed: 87:a1:f2:b3:8d:14:08:eb:f1:e0:74:33:99:e6:fc:6a:36:c6: e3:5d:12:3c:2d:9c:7b:86:e6:e0:dd:f4:be:4f:d3:dd:f1:c4: 2a:63:1a:73:b7:e1:d9:f8:82:a8:6b:ea:45:c9:7e:f8:3b:bc: e4:46:a8:b2:a6:f5:f5:38:fa:31:a3:f0:e6:f3:ec:e3:41:4e: 6d:d2:0b:d6:0d:d0:9b:a7:6e:0c:6d:13:70:fa:91:55:b2:b4: 5a:71:e5:55:e5:8a:17:20:ea:d4:e3:cb:94:df:f4:a4:fe:32: ec:87:fb:33:6b:0f:44:7e:04:47:a7:b9:a9:fc:d3:22:40:26: fb:5e:7e:f6:bb:02:29:4d:34:07:db:26:2e:4c:bb:51:0f:6d: 12:b8:4d:14:4c:1a:19:56:44:c7:a8:e0:73:38:f0:19:2c:6b: 67:20:11:73:c0:ea:32:de:ce:0a:f0:3e:4b:a0:36:29:51:9b: ca:d8:19:40 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMh0dlPYOAiAAYMWErZ1M4dDv2mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJB RkY2MzRDQzAeFw0yNDA1MTUwODU1NTZaFw0yNTA1MTQwOTAwNTZaMDMxMTAvBgNV BAMTKDg0OUY2RjIyRTNEOTExRkExNkZFNDQyMjNERkI3NkJDNkVFM0VCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpdBHQtVSmqJbxnCCgIBJFkpm qopugwkVJdNM8UZ5oPwHREqW3go46KVZ81iOTjANFowl0FjRvFSGbISN4zL09Hod awhEnMmyPAAI/eYN9CpsQQv14hLrBXecXIGpjSHc8GgJk0ZNU9/ud7gEAxKFh6oJ tT+FaZeBUICzNWZQj4RT4MX4pJfupqpr34f/YHIIPvYK6i7lAI92mC1TPEU/HcVt V4W6gT0le9gMkx5hWmeTj8APnCC58g/0+KfJkb0oEfhmoY/qUyYyBArQAUqPuhbY 0odaaaNkkVxUc2PX81iVTNSWjs03unbDhmNSH+d2U8jfUj/zBmKYYA4yybI/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhJ9vIuPZEfoW/kQiPft2vG7j66kwHwYDVR0j BBgwFoAUVf6Snz3xjktbxDCXaapscq/2NMwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Yzk3NmVjNS1iMDVhLTQ4MGYtODZkYS1kNTU3Zjg0YTIzNjQvMC81NUZFOTI5RjNE RjE4RTRCNUJDNDMwOTc2OUFBNkM3MkFGRjYzNENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJBRkY2 MzRDQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjOTc2ZWM1LWIwNWEtNDgwZi04 NmRhLWQ1NTdmODRhMjM2NC8wLzMxMzIzMzJlMzEzNzM2MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzMTMwMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7sHkwDQYJ KoZIhvcNAQELBQADggEBADKd4N5PG+Oa4GNAf5DJuykmnJkKXsMejMx+/8Y0Ahds H9Jue4jYtSJm0rqYuEsC9LTJnXFLB20rvTcW2fripA4KdfVIMAdD7Yeh8rONFAjr 8eB0M5nm/Go2xuNdEjwtnHuG5uDd9L5P093xxCpjGnO34dn4gqhr6kXJfvg7vORG qLKm9fU4+jGj8Obz7ONBTm3SC9YN0JunbgxtE3D6kVWytFpx5VXlihcg6tTjy5Tf 9KT+MuyH+zNrD0R+BEenuan80yJAJvtefva7AilNNAfbJi5Mu1EPbRK4TRRMGhlW RMeo4HM48Bksa2cgEXPA6jLezgrwPkugNilRm8rYGUA= -----END CERTIFICATE-----Generated at Sat Jun 22 10:10:56 2024 by rpki-client on console-fra.rpki-client.org