$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa File: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (raw, json) Hash identifier: ax01vkbIK29IQaPMOtL4UaEdAFFntCppP1NSNhQX5iY= Subject key identifier: 4E:DD:58:A9:08:A2:B9:1A:F0:03:28:4C:71:5E:AB:25:79:83:69:D2 Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087 Certificate serial: 71D81332999AF873E41B3C78155AA34CA6F33142 Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa Signing time: Mon 01 Jul 2024 01:02:45 +0000 ROA not before: Mon 01 Jul 2024 00:57:45 +0000 ROA not after: Mon 30 Jun 2025 01:02:45 +0000 asID: 131717 IP address blocks: 45.118.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d8:13:32:99:9a:f8:73:e4:1b:3c:78:15:5a:a3:4c:a6:f3:31:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087 Validity Not Before: Jul 1 00:57:45 2024 GMT Not After : Jun 30 01:02:45 2025 GMT Subject: CN=4EDD58A908A2B91AF003284C715EAB25798369D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4e:95:52:4d:c7:a2:04:15:dd:59:97:66:ef: e0:ab:00:a9:31:5a:7f:ed:3e:66:dc:e0:93:07:14: 1c:3c:42:60:d6:e3:48:40:c8:62:e0:b1:60:eb:4a: c4:b0:84:11:85:ea:7c:dd:04:f2:63:1d:76:d3:b5: 43:5d:ff:5e:40:88:27:ed:02:6a:c8:4d:59:4b:90: eb:04:63:77:e3:81:7d:a7:0b:e9:28:1d:22:7d:6f: 01:8a:21:4e:0e:7d:dc:a5:f2:31:23:f5:76:ea:e7: f7:5d:88:e5:2b:4a:6a:3c:62:9d:fe:52:1a:95:c1: 12:02:7a:bb:a8:02:b9:37:62:c2:1b:8d:fa:79:68: 2a:7e:52:32:9b:9a:8c:b6:f7:e4:be:d4:e6:f9:91: fc:19:38:6d:2e:31:f7:01:54:b2:66:66:06:46:ee: a7:c1:49:c4:0f:4f:44:d3:6c:1b:2c:86:bd:e2:9d: c4:97:b9:ea:58:cf:7c:ac:bd:5b:81:69:95:08:b8: c5:1f:0f:2b:9b:e7:64:82:15:6f:f5:ca:e6:ef:03: e3:33:15:24:cc:88:c9:07:1d:b4:1c:b6:d7:63:8a: e2:69:08:ae:22:2c:3b:43:d5:70:76:25:7a:fe:f5: 0f:8b:85:84:58:c8:03:85:b2:d5:22:0c:69:01:bd: 6b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DD:58:A9:08:A2:B9:1A:F0:03:28:4C:71:5E:AB:25:79:83:69:D2 X509v3 Authority Key Identifier: keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.118.112.0/24 Signature Algorithm: sha256WithRSAEncryption 92:65:ca:bc:7b:ef:5c:9a:80:88:15:06:9a:ae:56:c5:bc:72: 07:ea:ce:3c:8a:eb:78:c0:ef:1b:de:97:24:c1:73:8e:aa:e7: 0b:bd:4f:ea:71:88:db:83:0d:82:70:4a:7f:f1:8b:fb:fb:52: ff:f0:bb:0e:04:60:c5:dd:24:ec:49:e5:f9:74:86:e9:ca:bc: c2:71:96:a6:62:d1:c9:05:e0:97:31:5a:1e:0a:74:52:0a:02: a4:0a:03:db:4b:e8:05:3c:59:56:e1:cc:a9:03:f4:96:1c:d5: 36:ce:4e:a2:98:bb:f8:9a:ad:6a:0d:a9:6b:26:5e:85:13:f1: ce:41:51:1c:a7:2f:6a:e8:77:fc:3d:41:4b:c8:73:d5:d8:a8: 02:d3:6f:97:83:7d:c1:b4:d9:bf:f2:ed:4a:df:2a:88:d8:8c: 60:9f:4d:72:2a:90:18:e0:b9:65:e1:b0:65:cf:cd:ea:9b:72: e6:2b:29:c4:b0:a5:76:0f:5c:17:19:63:7f:39:ea:e2:7f:07: 55:83:29:01:75:4b:2d:87:a5:82:73:50:de:30:18:60:b6:3c: 74:56:cb:5f:65:11:b3:7b:d0:dd:4e:74:03:cf:f5:56:27:c8: 0f:26:6b:5d:d8:db:39:d6:d1:3a:ae:c3:f3:59:b7:fa:a3:68: f3:4a:b1:2d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcdgTMpma+HPkGzx4FVqjTKbzMUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4 MTg2NTA4NzAeFw0yNDA3MDEwMDU3NDVaFw0yNTA2MzAwMTAyNDVaMDMxMTAvBgNV BAMTKDRFREQ1OEE5MDhBMkI5MUFGMDAzMjg0QzcxNUVBQjI1Nzk4MzY5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYTpVSTceiBBXdWZdm7+CrAKkx Wn/tPmbc4JMHFBw8QmDW40hAyGLgsWDrSsSwhBGF6nzdBPJjHXbTtUNd/15AiCft AmrITVlLkOsEY3fjgX2nC+koHSJ9bwGKIU4Ofdyl8jEj9Xbq5/ddiOUrSmo8Yp3+ UhqVwRICeruoArk3YsIbjfp5aCp+UjKbmoy29+S+1Ob5kfwZOG0uMfcBVLJmZgZG 7qfBScQPT0TTbBsshr3incSXuepYz3ysvVuBaZUIuMUfDyub52SCFW/1yubvA+Mz FSTMiMkHHbQcttdjiuJpCK4iLDtD1XB2JXr+9Q+LhYRYyAOFstUiDGkBvWtBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTt1YqQiiuRrwAyhMcV6rJXmDadIwHwYDVR0j BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2 NTA4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzM0MzUyZTMxMzEzODJlMzEzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXZwMA0GCSqG SIb3DQEBCwUAA4IBAQCSZcq8e+9cmoCIFQaarlbFvHIH6s48iut4wO8b3pckwXOO qucLvU/qcYjbgw2CcEp/8Yv7+1L/8LsOBGDF3STsSeX5dIbpyrzCcZamYtHJBeCX MVoeCnRSCgKkCgPbS+gFPFlW4cypA/SWHNU2zk6imLv4mq1qDalrJl6FE/HOQVEc py9q6Hf8PUFLyHPV2KgC02+Xg33BtNm/8u1K3yqI2Ixgn01yKpAY4Lll4bBlz83q m3LmKynEsKV2D1wXGWN/OerifwdVgykBdUsth6WCc1DeMBhgtjx0VstfZRGze9Dd TnQDz/VWJ8gPJmtd2Ns51tE6rsPzWbf6o2jzSrEt -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:20 2024 by rpki-client on console-fra.rpki-client.org