$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa File: 3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa (raw, json) Hash identifier: XRb2eO5mVbF5mMvV7WuUQ2M5B28bUJLqBZFEPLw0M5g= Subject key identifier: 79:62:CC:C2:05:EB:0C:9B:59:49:F6:F1:BE:AD:A0:84:EA:B1:AE:50 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 33AD4CCD9A6E694A974C60D0703A1595DC02F5AE Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa Signing time: Tue 21 May 2024 07:00:01 +0000 ROA not before: Tue 21 May 2024 06:55:01 +0000 ROA not after: Tue 20 May 2025 07:00:01 +0000 asID: 24525 IP address blocks: 114.199.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 13:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ad:4c:cd:9a:6e:69:4a:97:4c:60:d0:70:3a:15:95:dc:02:f5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 21 06:55:01 2024 GMT Not After : May 20 07:00:01 2025 GMT Subject: CN=7962CCC205EB0C9B5949F6F1BEADA084EAB1AE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:8b:e8:81:c9:c0:a3:ae:0c:a4:48:4d:05: 00:c3:12:f9:fe:d4:fb:bc:0d:08:3f:0e:36:b6:5f: a5:e4:b8:35:91:ce:fd:1a:62:b4:44:6e:38:ec:f8: 08:58:fe:a3:6f:00:04:71:4f:a9:b3:77:32:cc:eb: a6:f6:78:70:c9:d6:f1:e3:96:01:24:14:43:30:35: 97:b0:fe:8b:e1:e2:bf:0e:12:3c:0f:50:fa:8e:44: 8d:bd:6d:07:79:30:40:ce:e9:71:64:72:34:79:9c: 7b:09:97:f6:4e:01:9f:98:85:96:0d:c8:48:09:12: 7a:94:c5:cd:ac:4c:da:ab:87:89:29:5b:ee:9b:87: 65:b1:93:3b:e0:8d:87:3e:00:b7:6c:31:71:f7:2a: cd:28:3f:00:09:19:fb:a0:b1:1f:99:49:c2:bd:df: f9:43:ef:f6:85:3a:0d:71:79:23:da:39:2c:33:05: 2d:2a:97:11:87:1c:48:4f:6f:9f:56:a7:39:cb:7a: 33:f6:ad:64:67:b9:d8:54:82:ab:7d:76:d0:14:ae: 44:a1:98:73:8b:85:ca:7c:65:96:15:14:bd:60:e6: d7:c6:1d:a4:f2:8a:40:ba:d9:3c:1b:ff:b4:81:2d: 95:de:02:d5:42:23:76:f4:79:35:9b:dd:0e:05:7d: ab:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:CC:C2:05:EB:0C:9B:59:49:F6:F1:BE:AD:A0:84:EA:B1:AE:50 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.120.0/23 Signature Algorithm: sha256WithRSAEncryption b1:3d:2e:ce:86:94:cd:21:14:d9:d2:b3:d6:a1:08:e1:ff:f6: 2d:c7:e4:a0:88:c3:ab:f2:58:47:c9:8e:a7:d8:fd:e1:0a:22: f4:40:da:c6:70:f4:7a:95:61:81:50:b8:4a:19:2c:5d:19:0e: 28:4a:e9:02:60:0f:76:51:7c:01:03:43:f5:04:22:11:db:28: 5c:4e:ef:3a:59:ea:b0:44:26:f1:6c:e6:7b:a1:b4:58:94:31: 1a:24:59:00:4e:58:6f:06:1b:f5:8b:4c:6c:57:3b:76:56:0f: 27:f9:20:92:40:02:6e:e2:56:76:39:b0:ed:d2:92:e7:2b:3a: e4:1d:d3:cf:28:4f:38:8b:54:ad:06:7c:de:24:4f:03:d4:4d: 6e:0f:96:84:f5:24:2e:e5:a5:4a:b3:47:29:7d:7a:14:ba:0a: b2:06:33:36:bf:fa:02:32:38:9b:99:02:de:b4:c2:66:34:1b: 8f:85:ea:1d:b0:46:7d:59:4e:22:a5:db:bc:4d:4b:88:ff:31: 25:73:bf:41:dd:f6:c2:e5:5e:2b:95:68:13:44:d6:db:4b:1a: 4e:62:7d:1b:68:ce:4b:35:b7:1e:13:5c:68:1c:8c:2d:83:41: 6a:db:1d:24:7b:c4:8d:cc:13:b0:f4:44:72:73:94:60:48:52: 21:e2:f5:f8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUM61MzZpuaUqXTGDQcDoVldwC9a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA1MjEwNjU1MDFaFw0yNTA1MjAwNzAwMDFaMDMxMTAvBgNV BAMTKDc5NjJDQ0MyMDVFQjBDOUI1OTQ5RjZGMUJFQURBMDg0RUFCMUFFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WIvogcnAo64MpEhNBQDDEvn+ 1Pu8DQg/Dja2X6XkuDWRzv0aYrREbjjs+AhY/qNvAARxT6mzdzLM66b2eHDJ1vHj lgEkFEMwNZew/ovh4r8OEjwPUPqORI29bQd5MEDO6XFkcjR5nHsJl/ZOAZ+YhZYN yEgJEnqUxc2sTNqrh4kpW+6bh2WxkzvgjYc+ALdsMXH3Ks0oPwAJGfugsR+ZScK9 3/lD7/aFOg1xeSPaOSwzBS0qlxGHHEhPb59WpznLejP2rWRnudhUgqt9dtAUrkSh mHOLhcp8ZZYVFL1g5tfGHaTyikC62Twb/7SBLZXeAtVCI3b0eTWb3Q4FfatVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeWLMwgXrDJtZSfbxvq2ghOqxrlAwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBcsd4MA0GCSqG SIb3DQEBCwUAA4IBAQCxPS7OhpTNIRTZ0rPWoQjh//Ytx+SgiMOr8lhHyY6n2P3h CiL0QNrGcPR6lWGBULhKGSxdGQ4oSukCYA92UXwBA0P1BCIR2yhcTu86WeqwRCbx bOZ7obRYlDEaJFkATlhvBhv1i0xsVzt2Vg8n+SCSQAJu4lZ2ObDt0pLnKzrkHdPP KE84i1StBnzeJE8D1E1uD5aE9SQu5aVKs0cpfXoUugqyBjM2v/oCMjibmQLetMJm NBuPheodsEZ9WU4ipdu8TUuI/zElc79B3fbC5V4rlWgTRNbbSxpOYn0baM5LNbce E1xoHIwtg0Fq2x0ke8SNzBOw9ERyc5RgSFIh4vX4 -----END CERTIFICATE-----Generated at Fri Jun 21 09:14:56 2024 by rpki-client on console-ams.rpki-client.org