$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131352e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3131352e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: 9xBenMNtTEirfzFU4eoZAOB9GA29zN7VjDCAbkOicmA= Subject key identifier: 68:56:E9:5C:0C:E2:99:5C:C5:D5:33:6D:45:4C:71:51:95:91:82:FB Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 0806D97C7B5C5C74FC43B69A394BF48E127E358B Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131352e302f32342d3234203d3e203234353235.roa Signing time: Sat 01 Jun 2024 08:00:58 +0000 ROA not before: Sat 01 Jun 2024 07:55:58 +0000 ROA not after: Sat 31 May 2025 08:00:58 +0000 asID: 24525 IP address blocks: 114.199.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:06:d9:7c:7b:5c:5c:74:fc:43:b6:9a:39:4b:f4:8e:12:7e:35:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Jun 1 07:55:58 2024 GMT Not After : May 31 08:00:58 2025 GMT Subject: CN=6856E95C0CE2995CC5D5336D454C7151959182FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8b:da:a1:0e:31:81:1c:4a:69:51:d8:78:d4: d0:ce:c1:41:29:e3:17:12:75:1b:8f:40:08:2b:f7: 83:2e:3c:bb:70:06:97:52:02:7f:18:e6:9c:bb:45: e2:4d:8d:b5:cd:a5:86:4e:d6:73:d8:28:c6:b5:e2: 6f:48:7a:64:24:5d:53:00:98:46:00:6e:72:59:66: d6:42:93:85:7d:8d:0b:d1:47:1e:db:20:0c:f6:0d: da:e6:a2:53:92:8c:54:c2:e7:c0:2c:f0:b9:53:91: 34:cd:6c:00:30:c7:2f:26:bf:7f:a5:ce:e4:b5:9e: 74:53:e1:84:03:f4:d2:e3:86:b7:92:1b:4e:b6:a8: fa:07:22:ae:19:3d:ed:91:c5:e6:f8:50:6c:7b:04: 54:18:a5:58:98:b8:b5:83:95:0c:16:47:70:59:9d: 83:c8:c4:96:e0:46:de:a3:c2:50:73:0b:b4:88:15: 30:f6:65:dc:d7:13:34:e4:9f:bb:9a:62:88:94:18: 94:f1:12:7a:39:f3:55:67:53:b0:1c:15:db:4d:e3: 81:ee:8f:f2:d3:15:f4:8c:0a:cb:1d:7e:a7:64:0f: 60:9b:3f:0c:8b:bf:fd:37:fc:1e:df:e5:95:b5:d9: 02:89:a9:ee:82:52:b7:90:fc:4e:43:fd:6a:ec:e3: d3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:E9:5C:0C:E2:99:5C:C5:D5:33:6D:45:4C:71:51:95:91:82:FB X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131352e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.115.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:1f:47:87:1e:77:35:36:ac:21:8f:4e:f0:00:47:e6:bd:e1: e9:c8:3a:50:0d:cd:40:91:21:c2:65:9e:98:2b:e2:3d:71:23: f7:e3:b7:12:18:bf:63:ec:a0:32:ca:79:b8:92:99:90:fa:3d: aa:73:c3:51:32:fb:ac:d7:df:f7:8b:f8:b6:2d:11:ea:c6:36: c5:81:0e:ff:17:b8:a6:12:e6:c7:43:48:17:e8:7c:e4:7c:ee: 83:c9:7e:9f:d0:69:28:ef:45:1c:2e:ed:68:82:ed:24:29:e2: 1c:f8:98:3e:04:3b:55:c3:2e:6f:e0:c0:66:95:cb:6c:0c:9f: 07:39:a2:1d:6e:3f:3d:6d:3a:70:c7:33:2e:c1:91:70:fd:a1: ea:fb:f8:e2:5e:01:cd:13:ee:33:72:46:c7:18:4b:02:8a:12: 87:31:51:36:b8:fe:01:53:ef:46:3c:ff:f7:36:fc:02:c2:4e: 8f:48:26:24:27:4f:48:3d:b6:47:03:bf:0f:79:97:3b:f6:49: 25:fb:4e:e0:90:5e:e4:73:a5:36:84:68:4c:74:83:8f:e1:e8: 13:7e:17:16:9f:cf:a3:4a:e6:bf:0b:16:f4:e4:13:4a:7f:39: ad:1a:06:8e:d5:68:d5:78:67:17:b7:1b:c0:39:7d:9a:c9:ce: 5e:9e:14:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCAbZfHtcXHT8Q7aaOUv0jhJ+NYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA2MDEwNzU1NThaFw0yNTA1MzEwODAwNThaMDMxMTAvBgNV BAMTKDY4NTZFOTVDMENFMjk5NUNDNUQ1MzM2RDQ1NEM3MTUxOTU5MTgyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXi9qhDjGBHEppUdh41NDOwUEp 4xcSdRuPQAgr94MuPLtwBpdSAn8Y5py7ReJNjbXNpYZO1nPYKMa14m9IemQkXVMA mEYAbnJZZtZCk4V9jQvRRx7bIAz2DdrmolOSjFTC58As8LlTkTTNbAAwxy8mv3+l zuS1nnRT4YQD9NLjhreSG062qPoHIq4ZPe2Rxeb4UGx7BFQYpViYuLWDlQwWR3BZ nYPIxJbgRt6jwlBzC7SIFTD2ZdzXEzTkn7uaYoiUGJTxEno581VnU7AcFdtN44Hu j/LTFfSMCssdfqdkD2CbPwyLv/03/B7f5ZW12QKJqe6CUreQ/E5D/Wrs49MzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaFbpXAzimVzF1TNtRUxxUZWRgvswHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdzMA0GCSqG SIb3DQEBCwUAA4IBAQA8H0eHHnc1Nqwhj07wAEfmveHpyDpQDc1AkSHCZZ6YK+I9 cSP347cSGL9j7KAyynm4kpmQ+j2qc8NRMvus19/3i/i2LRHqxjbFgQ7/F7imEubH Q0gX6HzkfO6DyX6f0Gko70UcLu1ogu0kKeIc+Jg+BDtVwy5v4MBmlctsDJ8HOaId bj89bTpwxzMuwZFw/aHq+/jiXgHNE+4zckbHGEsCihKHMVE2uP4BU+9GPP/3NvwC wk6PSCYkJ09IPbZHA78PeZc79kkl+07gkF7kc6U2hGhMdIOP4egTfhcWn8+jSua/ Cxb05BNKfzmtGgaO1WjVeGcXtxvAOX2ayc5enhQy -----END CERTIFICATE-----Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org