$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa File: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (raw, json) Hash identifier: xpET03ZY7J+readhaJ1QYHRYS1mjCgsf+hUmxPF8BxA= Subject key identifier: DC:B4:10:73:EC:DC:7E:C5:10:3A:A5:31:94:36:19:29:21:0E:D5:65 Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087 Certificate serial: 20EE0F2BC8CBF5681BB3C7283374BB2E603A4EFC Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa Signing time: Mon 01 Jul 2024 01:02:43 +0000 ROA not before: Mon 01 Jul 2024 00:57:43 +0000 ROA not after: Mon 30 Jun 2025 01:02:43 +0000 asID: 131717 IP address blocks: 45.118.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ee:0f:2b:c8:cb:f5:68:1b:b3:c7:28:33:74:bb:2e:60:3a:4e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087 Validity Not Before: Jul 1 00:57:43 2024 GMT Not After : Jun 30 01:02:43 2025 GMT Subject: CN=DCB41073ECDC7EC5103AA53194361929210ED565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:55:b6:84:1c:3e:f8:64:7c:35:40:b1:5e: b2:41:77:35:a7:3a:e8:ae:a2:63:3d:d1:e3:8c:7e: 21:c6:b3:6a:ee:07:eb:dc:68:a9:3d:19:6b:1d:9c: cf:64:91:7f:9f:19:20:ac:e2:d1:29:07:28:32:df: 73:05:de:a3:de:f6:fd:a3:d0:5e:97:7f:3c:1f:0c: e0:b7:2d:fb:f0:c9:a6:6b:84:ce:66:63:c7:15:af: 94:9b:9e:f6:45:71:87:b6:52:1f:13:7d:12:bf:c2: fa:53:79:28:c3:8e:fa:9d:83:50:ea:57:c2:e1:00: c2:43:5c:9f:28:11:68:1d:fd:b2:d4:13:3b:31:76: 2b:7f:42:01:22:f4:ba:8e:a9:5f:35:6a:a7:cd:05: e7:7d:d8:38:e7:6a:f1:af:51:41:a7:e6:0c:a2:d4: 50:05:5b:72:2e:4a:08:ca:1d:ef:4b:1a:03:9d:7f: 7a:cd:c7:6a:f6:26:1d:54:11:e4:cb:57:14:09:40: 6b:2b:6e:08:af:4f:89:bd:28:3f:da:fc:2f:b0:86: 26:93:da:13:68:1f:36:20:14:ab:9a:43:41:0b:9f: 69:ce:b5:c4:c1:a4:3e:87:ac:01:a1:e6:f0:ee:ff: 02:29:ac:74:31:bd:5e:61:18:c1:70:ce:14:f7:ef: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B4:10:73:EC:DC:7E:C5:10:3A:A5:31:94:36:19:29:21:0E:D5:65 X509v3 Authority Key Identifier: keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.118.113.0/24 Signature Algorithm: sha256WithRSAEncryption 30:e7:e8:b1:4d:ae:1e:3c:68:e2:f0:58:e9:50:29:12:12:5b: 9b:e3:8b:fa:8f:9d:bc:7b:1f:e5:27:04:8a:49:f9:b0:3d:ef: 4b:b6:38:9a:ce:d8:fd:b7:14:f8:51:98:7a:bf:35:cb:b6:95: 8f:ce:b0:16:69:e9:e4:ab:35:00:4a:0c:94:4d:0b:05:98:2a: 3d:7b:c9:e1:a1:a5:e3:e0:11:d8:e2:b9:b1:65:ad:11:1b:d8: ae:3f:67:b0:3f:c2:ab:e4:b6:0e:e0:70:1c:3e:94:f8:0e:a1: 8c:98:12:a4:9a:3b:ad:2c:71:42:f8:bc:b5:2b:84:31:12:c0: 86:06:f9:6e:d1:f3:a9:e2:46:4c:8e:71:55:af:f8:d4:96:2d: b7:94:8d:ca:72:b8:13:62:af:81:57:b2:00:41:ac:d2:12:cc: 03:15:07:7d:b8:f8:f1:b7:f5:d2:3b:0a:b8:18:71:fe:d3:a5: 3f:63:48:83:a0:b9:5f:dc:66:e6:b9:eb:7d:fe:76:9e:03:c9: 69:f5:da:a0:39:52:15:b3:d0:4a:e3:4d:7a:1f:58:0e:20:97: 3b:ea:d5:16:ce:3e:1e:60:e0:80:53:91:33:ec:56:69:73:49: 20:21:24:6c:24:27:8f:fa:a9:96:b2:68:d5:e1:cc:3c:8a:f6: 24:f3:3d:09 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIO4PK8jL9Wgbs8coM3S7LmA6TvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4 MTg2NTA4NzAeFw0yNDA3MDEwMDU3NDNaFw0yNTA2MzAwMTAyNDNaMDMxMTAvBgNV BAMTKERDQjQxMDczRUNEQzdFQzUxMDNBQTUzMTk0MzYxOTI5MjEwRUQ1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC421W2hBw++GR8NUCxXrJBdzWn OuiuomM90eOMfiHGs2ruB+vcaKk9GWsdnM9kkX+fGSCs4tEpBygy33MF3qPe9v2j 0F6XfzwfDOC3LfvwyaZrhM5mY8cVr5SbnvZFcYe2Uh8TfRK/wvpTeSjDjvqdg1Dq V8LhAMJDXJ8oEWgd/bLUEzsxdit/QgEi9LqOqV81aqfNBed92DjnavGvUUGn5gyi 1FAFW3IuSgjKHe9LGgOdf3rNx2r2Jh1UEeTLVxQJQGsrbgivT4m9KD/a/C+whiaT 2hNoHzYgFKuaQ0ELn2nOtcTBpD6HrAGh5vDu/wIprHQxvV5hGMFwzhT37/AdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3LQQc+zcfsUQOqUxlDYZKSEO1WUwHwYDVR0j BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2 NTA4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzM0MzUyZTMxMzEzODJlMzEzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXZxMA0GCSqG SIb3DQEBCwUAA4IBAQAw5+ixTa4ePGji8FjpUCkSElub44v6j528ex/lJwSKSfmw Pe9Ltjiaztj9txT4UZh6vzXLtpWPzrAWaenkqzUASgyUTQsFmCo9e8nhoaXj4BHY 4rmxZa0RG9iuP2ewP8Kr5LYO4HAcPpT4DqGMmBKkmjutLHFC+Ly1K4QxEsCGBvlu 0fOp4kZMjnFVr/jUli23lI3KcrgTYq+BV7IAQazSEswDFQd9uPjxt/XSOwq4GHH+ 06U/Y0iDoLlf3Gbmuet9/naeA8lp9dqgOVIVs9BK4016H1gOIJc76tUWzj4eYOCA U5Ez7FZpc0kgISRsJCeP+qmWsmjV4cw8ivYk8z0J -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:38 2024 by rpki-client on console-ams.rpki-client.org