$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa File: 3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa (raw, json) Hash identifier: O2PT5LV0anT+oAmCs6sBCS2cbV5bYb/lKftBe2tUMhE= Subject key identifier: 85:BA:BD:73:50:62:E8:DA:2F:3B:6F:E9:B0:D7:45:20:86:37:41:D0 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 1707F482925ABB76484602198743224B36DEEC77 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa Signing time: Tue 21 May 2024 08:02:40 +0000 ROA not before: Tue 21 May 2024 07:57:40 +0000 ROA not after: Tue 20 May 2025 08:02:40 +0000 asID: 24525 IP address blocks: 114.199.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:07:f4:82:92:5a:bb:76:48:46:02:19:87:43:22:4b:36:de:ec:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 21 07:57:40 2024 GMT Not After : May 20 08:02:40 2025 GMT Subject: CN=85BABD735062E8DA2F3B6FE9B0D74520863741D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:14:aa:e3:86:36:70:ce:74:63:fb:60:c3: dd:e5:5c:0c:46:85:69:91:24:59:95:cc:8d:2f:02: f3:25:04:91:9a:ce:22:70:14:67:f1:09:4b:80:e6: db:a8:2c:17:6b:58:fb:24:c3:2a:d1:75:2c:1a:60: bd:3e:5d:d5:cb:ac:7b:71:fa:7b:b8:37:0e:3a:56: 8f:5a:d3:dc:60:91:a9:5f:1f:14:4b:4a:3f:96:67: dd:8c:7e:0e:30:37:bd:7d:e1:a5:e1:39:b2:5a:bb: a1:46:8d:e4:66:04:2e:3f:cf:1b:47:1e:1a:c1:53: f4:89:f5:2d:7c:50:50:7d:02:cc:34:b1:87:c1:7e: 74:d0:cf:a9:c8:01:86:b2:48:d3:72:a0:ec:6c:7b: 03:61:29:e9:60:b7:aa:48:17:00:c4:a6:f1:c6:48: d7:fc:fa:b4:f1:a8:ab:b0:ef:da:60:22:95:af:0e: 28:0a:fc:c4:d0:df:f9:e9:d4:90:00:f3:df:8b:00: 13:11:c8:dd:90:6a:d2:cb:d6:26:ce:21:30:79:99: 52:f7:98:90:d3:68:a3:c2:a3:3f:d5:78:88:e8:24: 55:15:2a:8b:b3:59:78:33:20:cf:03:28:e8:d0:0e: b1:39:93:93:19:7c:b0:9c:2f:94:d6:26:66:dc:01: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BA:BD:73:50:62:E8:DA:2F:3B:6F:E9:B0:D7:45:20:86:37:41:D0 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.114.0/23 Signature Algorithm: sha256WithRSAEncryption c1:d3:90:69:c9:11:9a:a0:d1:68:c8:d8:17:8f:ed:7d:ad:b0: 74:45:27:8e:35:46:af:17:b0:e7:66:ab:27:88:7e:41:52:86: 44:aa:7c:04:93:04:6a:7a:f8:1a:b2:bb:16:da:e5:c5:4a:88: af:5e:16:6a:12:dd:a2:e8:48:b2:d4:2e:42:ef:99:b3:60:94: 11:1f:4b:3e:43:c7:da:99:6c:34:70:a0:f6:9c:ad:c0:fd:93: 12:b0:db:3c:e0:4c:95:e7:c3:be:18:2d:2e:bb:3a:8d:46:cf: d2:a6:91:19:1c:c4:32:7a:d0:f4:6e:05:17:c1:5b:68:dc:78: 11:0a:35:1a:36:ad:b4:ee:5b:23:65:00:a1:91:2d:5d:b4:93: b9:15:15:d9:7b:bb:f3:49:84:c2:70:c4:d7:1b:88:d7:88:49: 4f:fe:37:01:af:3e:68:e6:7d:e0:c6:12:ff:ac:03:0a:77:7d: 2b:52:d0:d5:a8:44:28:75:2a:5f:7e:a7:03:48:55:b1:1b:39: f1:fc:62:2f:47:a5:94:34:42:21:09:65:11:7c:90:d9:a6:c0: 2e:d7:2e:05:43:89:6e:20:16:d7:48:53:b3:d8:89:b8:7b:f7: 36:4b:69:74:3e:a3:9d:6f:54:0e:61:e3:3b:ce:72:77:59:41: 44:ae:0a:72 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFwf0gpJau3ZIRgIZh0MiSzbe7HcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA1MjEwNzU3NDBaFw0yNTA1MjAwODAyNDBaMDMxMTAvBgNV BAMTKDg1QkFCRDczNTA2MkU4REEyRjNCNkZFOUIwRDc0NTIwODYzNzQxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ehSq44Y2cM50Y/tgw93lXAxG hWmRJFmVzI0vAvMlBJGaziJwFGfxCUuA5tuoLBdrWPskwyrRdSwaYL0+XdXLrHtx +nu4Nw46Vo9a09xgkalfHxRLSj+WZ92Mfg4wN7194aXhObJau6FGjeRmBC4/zxtH HhrBU/SJ9S18UFB9Asw0sYfBfnTQz6nIAYaySNNyoOxsewNhKelgt6pIFwDEpvHG SNf8+rTxqKuw79pgIpWvDigK/MTQ3/np1JAA89+LABMRyN2QatLL1ibOITB5mVL3 mJDTaKPCoz/VeIjoJFUVKouzWXgzIM8DKOjQDrE5k5MZfLCcL5TWJmbcAQ8PAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhbq9c1Bi6NovO2/psNdFIIY3QdAwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBcsdyMA0GCSqG SIb3DQEBCwUAA4IBAQDB05BpyRGaoNFoyNgXj+19rbB0RSeONUavF7DnZqsniH5B UoZEqnwEkwRqevgasrsW2uXFSoivXhZqEt2i6Eiy1C5C75mzYJQRH0s+Q8famWw0 cKD2nK3A/ZMSsNs84EyV58O+GC0uuzqNRs/SppEZHMQyetD0bgUXwVto3HgRCjUa Nq207lsjZQChkS1dtJO5FRXZe7vzSYTCcMTXG4jXiElP/jcBrz5o5n3gxhL/rAMK d30rUtDVqEQodSpffqcDSFWxGznx/GIvR6WUNEIhCWURfJDZpsAu1y4FQ4luIBbX SFOz2Im4e/c2S2l0PqOdb1QOYeM7znJ3WUFErgpy -----END CERTIFICATE-----Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org