$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131302e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3131302e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: yIAigTyoEkZSGeaqiH06aoA+dX4G53KqXCUX7Kpl06k= Subject key identifier: F4:8D:4D:29:3A:D2:5C:13:A3:B7:B0:7B:53:CC:5A:F8:FC:F9:42:43 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 6FC3F483C2C6C83E62BC603735A82A646FC76319 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131302e302f32342d3234203d3e203234353235.roa Signing time: Sat 01 Jun 2024 08:00:58 +0000 ROA not before: Sat 01 Jun 2024 07:55:58 +0000 ROA not after: Sat 31 May 2025 08:00:58 +0000 asID: 24525 IP address blocks: 114.199.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c3:f4:83:c2:c6:c8:3e:62:bc:60:37:35:a8:2a:64:6f:c7:63:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Jun 1 07:55:58 2024 GMT Not After : May 31 08:00:58 2025 GMT Subject: CN=F48D4D293AD25C13A3B7B07B53CC5AF8FCF94243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:ff:a6:26:1b:5f:80:d2:80:78:ac:28:02: eb:be:0d:08:52:ef:36:37:a6:ad:aa:1b:c3:2a:36: 68:c9:d0:e8:c7:31:5e:2d:88:7e:c8:63:b2:54:48: 4f:00:92:2d:79:06:cd:bc:b1:d0:c0:37:ef:9a:0a: 41:92:fe:bb:4c:58:af:b5:aa:d4:40:9a:a3:9a:f8: 7b:1a:e7:af:66:97:8b:26:e1:56:4e:b1:1c:07:2e: 60:51:f9:d4:08:d8:b5:7d:be:4f:ad:f8:64:9c:2a: 7d:cf:5d:03:d0:1d:d9:c7:9a:b9:91:1a:c1:fb:2f: 6e:0f:25:cc:a9:61:f6:f2:eb:2f:19:01:fe:1e:77: 56:a6:60:ba:18:7b:bc:e8:0d:a7:6e:24:ff:c5:97: 11:d1:f1:22:bf:a7:91:bc:bd:bb:72:7f:7c:d1:fc: 21:b6:1f:f4:72:9c:9d:27:03:10:6d:cd:d9:64:7b: a7:bd:49:cf:7f:d2:cf:bd:44:e5:9d:50:5e:38:c9: 59:69:1d:07:72:79:1c:f7:97:71:36:a4:01:c0:93: 28:d6:17:fa:c9:ff:d2:09:3e:32:9b:04:c5:3b:4b: 78:28:a6:fa:4a:1a:70:a1:05:89:6d:67:9d:92:21: 2e:54:4e:6c:ff:5a:73:8f:2f:33:c7:06:c9:f7:2a: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8D:4D:29:3A:D2:5C:13:A3:B7:B0:7B:53:CC:5A:F8:FC:F9:42:43 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131302e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.110.0/24 Signature Algorithm: sha256WithRSAEncryption 74:0c:e5:18:38:0c:70:c0:07:f1:3d:47:60:2d:ac:d8:46:64: 6e:38:0f:14:2d:ff:e8:96:4f:47:79:2f:ba:49:ac:9a:1b:60: 59:47:02:35:6f:99:cd:47:c8:04:1b:ff:c0:2b:1e:fc:3a:61: bb:4f:74:9e:ce:c2:d8:2e:8b:ef:8c:de:01:24:03:56:27:b4: 8b:2b:27:16:f9:bd:66:11:9e:d7:4a:8c:5c:da:2d:92:50:44: 27:d4:9b:2d:3e:8d:65:2f:ac:46:71:f7:88:dd:e2:5d:aa:64: 77:e8:09:fa:d8:c9:d2:1c:76:81:05:9a:d9:92:a3:02:ff:3f: c6:51:4a:88:1f:07:2d:b0:4a:a8:58:6c:bb:6f:dd:52:f1:31: b5:25:04:00:97:bf:08:80:ab:ba:44:bd:55:ea:4c:7f:5f:ac: 3a:79:ac:4b:4b:3d:b6:ec:e7:63:fa:50:ea:bc:87:c3:69:53: 04:cb:62:f6:41:c0:1e:35:04:e8:70:b8:15:c2:33:c5:99:eb: 13:c1:b3:65:30:cf:80:c8:b3:97:b6:b4:af:f8:36:9f:b5:4c: bc:72:ba:d7:78:e4:ec:c2:be:1e:52:59:6c:fa:8b:2c:06:d0: 8d:6d:80:13:b8:08:8f:31:d5:4b:e9:85:46:30:b1:ca:60:4e: ff:de:d7:ae -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb8P0g8LGyD5ivGA3NagqZG/HYxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA2MDEwNzU1NThaFw0yNTA1MzEwODAwNThaMDMxMTAvBgNV BAMTKEY0OEQ0RDI5M0FEMjVDMTNBM0I3QjA3QjUzQ0M1QUY4RkNGOTQyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2y/+mJhtfgNKAeKwoAuu+DQhS 7zY3pq2qG8MqNmjJ0OjHMV4tiH7IY7JUSE8Aki15Bs28sdDAN++aCkGS/rtMWK+1 qtRAmqOa+Hsa569ml4sm4VZOsRwHLmBR+dQI2LV9vk+t+GScKn3PXQPQHdnHmrmR GsH7L24PJcypYfby6y8ZAf4ed1amYLoYe7zoDaduJP/FlxHR8SK/p5G8vbtyf3zR /CG2H/RynJ0nAxBtzdlke6e9Sc9/0s+9ROWdUF44yVlpHQdyeRz3l3E2pAHAkyjW F/rJ/9IJPjKbBMU7S3gopvpKGnChBYltZ52SIS5UTmz/WnOPLzPHBsn3KgyDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9I1NKTrSXBOjt7B7U8xa+Pz5QkMwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsduMA0GCSqG SIb3DQEBCwUAA4IBAQB0DOUYOAxwwAfxPUdgLazYRmRuOA8ULf/olk9HeS+6Saya G2BZRwI1b5nNR8gEG//AKx78OmG7T3SezsLYLovvjN4BJANWJ7SLKycW+b1mEZ7X Soxc2i2SUEQn1JstPo1lL6xGcfeI3eJdqmR36An62MnSHHaBBZrZkqMC/z/GUUqI HwctsEqoWGy7b91S8TG1JQQAl78IgKu6RL1V6kx/X6w6eaxLSz227Odj+lDqvIfD aVMEy2L2QcAeNQTocLgVwjPFmesTwbNlMM+AyLOXtrSv+DaftUy8crrXeOTswr4e Ulls+ossBtCNbYATuAiPMdVL6YVGMLHKYE7/3teu -----END CERTIFICATE-----Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org