$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: dtt/pgXtAtAASL0c1K6/OMcl6bk3pQGQ/R0u4c9cNoc= Subject key identifier: BD:66:7F:07:6B:4A:8D:8B:AE:8E:2D:E7:7F:CD:6C:D5:49:1F:0E:8B Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 021E272312CDC8334C916E6998D2CFC1BA9EF514 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa Signing time: Sat 01 Jun 2024 08:00:58 +0000 ROA not before: Sat 01 Jun 2024 07:55:58 +0000 ROA not after: Sat 31 May 2025 08:00:58 +0000 asID: 24525 IP address blocks: 114.199.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1e:27:23:12:cd:c8:33:4c:91:6e:69:98:d2:cf:c1:ba:9e:f5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Jun 1 07:55:58 2024 GMT Not After : May 31 08:00:58 2025 GMT Subject: CN=BD667F076B4A8D8BAE8E2DE77FCD6CD5491F0E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:10:9a:2a:87:fc:37:b9:8a:36:12:44:4e: bc:95:48:f8:29:da:8a:f2:9b:8e:b3:28:f6:64:0d: 0f:8c:b9:5a:5d:86:f2:16:47:e2:74:41:d2:ac:92: 61:d3:b1:f2:45:eb:3a:84:92:dd:3b:af:99:03:4d: 86:81:b1:20:a7:00:58:72:85:ff:7c:ab:ac:05:70: 64:37:ca:1f:88:4f:d9:34:03:cc:40:49:8e:cd:4b: f1:5c:ac:80:5d:dd:e7:2a:da:4a:4c:85:92:20:ea: 52:96:8a:e6:c0:cb:fb:89:f2:54:d6:2c:0c:94:c3: 7c:79:3e:28:4c:42:66:6a:75:23:27:2d:d9:fe:e6: c0:cf:f1:5b:e0:81:70:21:b3:68:3e:c6:57:13:72: 1a:7d:2a:c3:59:53:c5:7c:fb:6c:79:10:1e:59:03: 11:c4:ab:b8:a6:a1:71:46:99:b9:98:f5:7f:f3:a3: 35:ea:74:13:5c:fe:64:2a:03:9a:22:be:18:69:68: 1d:6c:f6:4f:b1:8d:69:e9:11:88:42:34:6d:40:8f: ce:53:5e:c2:e3:1d:83:a5:6c:56:39:4d:0e:59:10: 64:14:78:4e:15:ba:c4:ab:21:06:83:f2:2f:8d:44: 3d:97:c1:ec:c5:15:46:bf:c8:dd:e4:db:61:05:7c: f5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:66:7F:07:6B:4A:8D:8B:AE:8E:2D:E7:7F:CD:6C:D5:49:1F:0E:8B X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.121.0/24 Signature Algorithm: sha256WithRSAEncryption b9:dd:ca:ff:48:1f:2c:97:94:8b:67:fc:64:68:d0:48:24:55: e4:4a:bc:07:2b:92:28:f3:53:67:ca:c4:52:ef:96:14:72:39: 1f:5e:07:04:a2:3c:8b:1a:92:a7:df:64:89:33:2c:cd:e6:73: aa:89:b2:d0:89:b6:07:2a:c2:67:95:26:aa:88:4a:2a:63:db: 17:65:9a:a9:db:aa:80:af:72:b7:d6:78:47:49:bc:40:71:a2: 9a:81:22:33:4d:8a:d1:a1:fb:4c:e8:1b:43:c3:7b:04:98:87: fb:c6:d3:4b:42:b7:58:33:eb:10:14:eb:28:ac:19:3f:b6:c0: ac:1a:23:43:03:57:6d:7a:d8:5c:19:ab:c4:ab:bb:d4:bf:5f: 03:70:4d:03:90:29:34:d2:5d:ba:03:62:c0:43:7e:c0:1b:bc: 89:4d:5e:10:0a:26:c6:f7:25:ae:0c:e7:5a:e9:a0:69:16:04: ea:e3:8e:4f:3e:62:40:47:54:22:81:e5:3a:6c:75:92:5a:8a: 34:11:f1:55:62:af:7b:ba:3b:47:31:35:45:ee:96:d1:1b:c2: 3c:ab:ba:77:75:44:d4:b0:6c:4e:42:b3:2d:ed:cf:d8:01:3b: 69:fb:85:1e:43:0d:74:7e:45:ab:5a:71:33:c1:dc:aa:29:19: ed:ca:06:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAh4nIxLNyDNMkW5pmNLPwbqe9RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA2MDEwNzU1NThaFw0yNTA1MzEwODAwNThaMDMxMTAvBgNV BAMTKEJENjY3RjA3NkI0QThEOEJBRThFMkRFNzdGQ0Q2Q0Q1NDkxRjBFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcRCaKof8N7mKNhJETryVSPgp 2orym46zKPZkDQ+MuVpdhvIWR+J0QdKskmHTsfJF6zqEkt07r5kDTYaBsSCnAFhy hf98q6wFcGQ3yh+IT9k0A8xASY7NS/FcrIBd3ecq2kpMhZIg6lKWiubAy/uJ8lTW LAyUw3x5PihMQmZqdSMnLdn+5sDP8VvggXAhs2g+xlcTchp9KsNZU8V8+2x5EB5Z AxHEq7imoXFGmbmY9X/zozXqdBNc/mQqA5oivhhpaB1s9k+xjWnpEYhCNG1Aj85T XsLjHYOlbFY5TQ5ZEGQUeE4VusSrIQaD8i+NRD2XwezFFUa/yN3k22EFfPVhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUvWZ/B2tKjYuuji3nf81s1UkfDoswHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsd5MA0GCSqG SIb3DQEBCwUAA4IBAQC53cr/SB8sl5SLZ/xkaNBIJFXkSrwHK5Io81NnysRS75YU cjkfXgcEojyLGpKn32SJMyzN5nOqibLQibYHKsJnlSaqiEoqY9sXZZqp26qAr3K3 1nhHSbxAcaKagSIzTYrRoftM6BtDw3sEmIf7xtNLQrdYM+sQFOsorBk/tsCsGiND A1dtethcGavEq7vUv18DcE0DkCk00l26A2LAQ37AG7yJTV4QCibG9yWuDOda6aBp FgTq445PPmJAR1QigeU6bHWSWoo0EfFVYq97ujtHMTVF7pbRG8I8q7p3dUTUsGxO QrMt7c/YATtp+4UeQw10fkWrWnEzwdyqKRntygYy -----END CERTIFICATE-----Generated at Sat Jun 1 09:09:44 2024 by rpki-client on console-fra.rpki-client.org