$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: CPX2zGxczIBZE+tY4YWlOCgNZWhoz3xx6u4S2M5GO+8= Subject key identifier: 82:B5:7F:6A:FA:D5:F1:9D:C0:AF:52:31:77:1F:43:11:0E:67:52:73 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 760A4D0E2B392BC2DDCF58CAFA9871B6D66A95DB Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa Signing time: Sat 01 Jun 2024 08:01:00 +0000 ROA not before: Sat 01 Jun 2024 07:56:00 +0000 ROA not after: Sat 31 May 2025 08:01:00 +0000 asID: 24525 IP address blocks: 114.199.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 13:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0a:4d:0e:2b:39:2b:c2:dd:cf:58:ca:fa:98:71:b6:d6:6a:95:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Jun 1 07:56:00 2024 GMT Not After : May 31 08:01:00 2025 GMT Subject: CN=82B57F6AFAD5F19DC0AF5231771F43110E675273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:85:6d:1c:3a:67:bc:e8:64:b4:09:95:0a: 19:f5:de:6a:55:53:90:0c:64:c2:66:3c:dc:5c:16: 77:8a:46:a0:07:33:47:25:64:f3:77:9f:ad:3a:2f: 06:fa:11:b1:77:71:bf:90:fb:0a:30:69:89:ca:f1: 62:90:8f:6b:ec:4e:9b:52:16:34:87:ba:99:79:d9: 05:77:f8:50:ee:66:90:dd:b7:e5:2c:a5:bf:0e:90: 9c:70:80:b3:5e:95:5d:62:ac:f0:8c:37:c1:f2:4c: 99:5c:56:e9:be:d2:51:b9:b0:6e:57:30:c9:11:be: 3d:bf:ea:d6:55:90:94:3d:3c:18:cd:2f:9d:1e:12: 06:cf:95:48:28:81:a7:3c:a7:b3:fd:f8:45:51:53: f9:bd:cf:0c:48:76:79:ed:39:f0:c0:56:65:6a:20: e5:0d:2b:3c:29:96:17:61:5b:95:0a:26:2c:34:e0: 32:10:65:d6:ba:8c:a4:40:0f:c2:2e:21:0f:a3:5b: 4a:af:48:79:f1:ad:7a:e0:e1:b4:56:ca:e0:a9:f1: 6d:4a:7c:31:9c:b3:de:28:31:e4:53:47:c0:fb:ea: cf:fb:28:bc:e3:f3:9e:7b:df:23:d5:08:fd:bb:6e: 56:e7:28:4d:c7:2a:37:a5:d5:48:92:5d:c2:4e:60: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B5:7F:6A:FA:D5:F1:9D:C0:AF:52:31:77:1F:43:11:0E:67:52:73 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.100.0/24 Signature Algorithm: sha256WithRSAEncryption 95:c4:36:da:95:f5:35:e0:0b:5f:b4:93:5a:d3:13:b7:66:04: 0d:a4:1f:ce:67:cf:67:fd:8d:c1:b6:1d:29:16:f4:69:36:61: 4c:6e:04:aa:e4:fa:2e:41:a1:07:d8:79:79:04:cb:d4:91:41: 57:31:ae:7e:64:0f:f4:a3:ac:c7:4b:e3:11:37:dd:9e:ef:33: d3:9c:a9:1c:46:46:8b:8b:8c:17:a8:05:30:ed:c8:c4:20:75: 6e:34:d4:37:d2:e0:19:61:7c:b1:60:6b:4c:d5:d4:fc:93:3c: 81:61:cc:75:02:8e:d5:dd:a0:f8:fa:68:81:14:46:e9:8a:42: 18:82:da:32:07:59:0a:27:28:0f:dc:07:9c:59:3f:16:ef:1f: c5:94:e3:91:e3:02:7d:32:ab:d3:ae:dc:25:c0:db:16:7e:0f: 8f:62:3c:b1:d0:54:2c:62:ff:23:90:b4:0d:ac:9e:a7:3c:5c: 3b:a8:64:c4:05:9f:2c:45:cb:4c:87:6d:9e:ac:f3:c5:29:62: 41:2a:56:c7:5c:6a:aa:fa:12:17:21:71:77:dd:e3:a8:d2:b7: ca:1d:59:0e:89:92:3e:53:8c:77:dc:29:87:5f:cf:54:22:a2: 97:f1:fc:ad:f9:cc:a5:37:28:d3:4a:d7:2d:f3:32:d7:67:98: 62:b3:79:23 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdgpNDis5K8Ldz1jK+phxttZqldswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA2MDEwNzU2MDBaFw0yNTA1MzEwODAxMDBaMDMxMTAvBgNV BAMTKDgyQjU3RjZBRkFENUYxOURDMEFGNTIzMTc3MUY0MzExMEU2NzUyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVYVtHDpnvOhktAmVChn13mpV U5AMZMJmPNxcFneKRqAHM0clZPN3n606Lwb6EbF3cb+Q+wowaYnK8WKQj2vsTptS FjSHupl52QV3+FDuZpDdt+Uspb8OkJxwgLNelV1irPCMN8HyTJlcVum+0lG5sG5X MMkRvj2/6tZVkJQ9PBjNL50eEgbPlUgogac8p7P9+EVRU/m9zwxIdnntOfDAVmVq IOUNKzwplhdhW5UKJiw04DIQZda6jKRAD8IuIQ+jW0qvSHnxrXrg4bRWyuCp8W1K fDGcs94oMeRTR8D76s/7KLzj85573yPVCP27blbnKE3HKjel1UiSXcJOYJHZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgrV/avrV8Z3Ar1Ixdx9DEQ5nUnMwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdkMA0GCSqG SIb3DQEBCwUAA4IBAQCVxDbalfU14AtftJNa0xO3ZgQNpB/OZ89n/Y3Bth0pFvRp NmFMbgSq5PouQaEH2Hl5BMvUkUFXMa5+ZA/0o6zHS+MRN92e7zPTnKkcRkaLi4wX qAUw7cjEIHVuNNQ30uAZYXyxYGtM1dT8kzyBYcx1Ao7V3aD4+miBFEbpikIYgtoy B1kKJygP3AecWT8W7x/FlOOR4wJ9MqvTrtwlwNsWfg+PYjyx0FQsYv8jkLQNrJ6n PFw7qGTEBZ8sRctMh22erPPFKWJBKlbHXGqq+hIXIXF33eOo0rfKHVkOiZI+U4x3 3CmHX89UIqKX8fyt+cylNyjTStct8zLXZ5his3kj -----END CERTIFICATE-----Generated at Fri Jun 21 09:35:51 2024 by rpki-client on console-fra.rpki-client.org