$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132342e302f32322d3232203d3e203234353235.roa File: 3131342e3139392e3132342e302f32322d3232203d3e203234353235.roa (raw, json) Hash identifier: 49yFkom7Qh6GjfiKJNQ1af/TL9/q0VgQRz99LUhkJBE= Subject key identifier: 1A:8E:C4:B0:A3:55:85:AE:BE:8A:7C:58:0D:54:A0:86:1F:5E:B7:98 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 4C24A3B155A99ABBC135C595C2392B5BA3EA3E93 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132342e302f32322d3232203d3e203234353235.roa Signing time: Tue 21 May 2024 08:02:42 +0000 ROA not before: Tue 21 May 2024 07:57:42 +0000 ROA not after: Tue 20 May 2025 08:02:42 +0000 asID: 24525 IP address blocks: 114.199.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:24:a3:b1:55:a9:9a:bb:c1:35:c5:95:c2:39:2b:5b:a3:ea:3e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 21 07:57:42 2024 GMT Not After : May 20 08:02:42 2025 GMT Subject: CN=1A8EC4B0A35585AEBE8A7C580D54A0861F5EB798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:31:69:ec:f0:4d:11:be:67:13:1c:63:9d: b1:3a:64:a7:03:a2:36:4f:1b:fe:5c:e4:45:c2:1f: 2e:68:db:47:de:2b:4d:f4:5a:56:4a:1a:c0:4b:96: 1c:74:e7:a4:27:39:7d:5c:d3:5f:8f:b0:54:2f:3c: cf:7a:42:79:23:59:2f:33:68:98:df:fe:cc:2b:e7: ab:6b:05:e9:94:61:f8:27:39:ad:ca:43:c6:bd:dd: d4:25:48:94:7f:6f:c4:8b:2b:9c:0c:cd:23:2f:ab: d9:7d:8b:de:54:7f:09:3b:a3:e9:85:80:fa:15:9b: 25:68:d4:2e:92:03:16:00:d3:d6:af:7e:13:90:dd: 2c:dc:6c:ae:72:bc:d3:f2:9e:ce:43:1c:f7:c7:21: 84:d9:1f:c9:df:fd:07:12:1c:5b:86:19:98:d5:59: 37:15:a0:9a:93:53:67:de:dd:74:54:71:11:f2:42: af:44:1a:ba:19:cc:60:ca:07:9a:94:47:40:b4:ea: f2:f0:9b:df:e4:e2:1b:63:d0:18:4b:8e:70:67:48: b6:a9:33:0d:e0:44:2a:68:cd:ec:d1:03:90:0a:4c: 49:3f:66:18:cd:85:bf:c1:be:47:79:1b:26:13:f7: 69:51:ee:f3:dc:7a:bf:51:13:0f:a5:bc:63:10:fb: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8E:C4:B0:A3:55:85:AE:BE:8A:7C:58:0D:54:A0:86:1F:5E:B7:98 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132342e302f32322d3232203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.124.0/22 Signature Algorithm: sha256WithRSAEncryption 30:e0:1f:f5:26:eb:54:82:06:1d:90:5b:6d:35:91:cb:9d:02: 43:1e:54:ea:98:69:14:fd:b2:0c:39:72:98:76:04:60:43:35: dd:67:99:12:0a:d8:d8:a5:e7:66:82:ee:64:12:81:38:f8:60: b8:cb:3f:0a:dd:9a:3d:52:48:29:27:f9:ec:32:ad:42:ff:67: 14:e8:14:21:ab:84:56:84:45:c3:d1:6d:95:9a:97:6b:ca:f7: 39:a7:7a:53:71:dd:b5:16:1c:f1:7c:f8:58:7c:1b:96:3b:f3: 8a:08:2c:82:0e:3d:37:1b:92:0a:eb:43:db:56:22:17:cf:32: d8:12:29:6e:5b:77:ac:19:a3:40:35:62:fc:42:30:7f:f5:b5: 08:5a:cc:8f:50:e1:0f:0d:76:77:1d:97:9a:ed:b5:5e:b4:f3: 52:2a:c2:cf:a1:89:8b:86:b2:12:aa:3f:d8:5d:51:9f:27:0c: c7:a2:21:7f:c3:a0:13:1f:22:03:59:b4:ea:e5:5f:e0:a1:81: ed:ce:e4:c3:10:4c:a6:b0:30:a7:f5:11:63:65:a8:a3:13:40: ad:de:c9:57:d3:1b:fa:9a:b3:26:8e:81:6a:3f:17:05:65:f3: b3:b3:d2:37:53:3c:ec:97:8a:c8:24:af:f3:2f:fa:0a:dd:bc: d4:fd:66:e4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTCSjsVWpmrvBNcWVwjkrW6PqPpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA1MjEwNzU3NDJaFw0yNTA1MjAwODAyNDJaMDMxMTAvBgNV BAMTKDFBOEVDNEIwQTM1NTg1QUVCRThBN0M1ODBENTRBMDg2MUY1RUI3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDezFp7PBNEb5nExxjnbE6ZKcD ojZPG/5c5EXCHy5o20feK030WlZKGsBLlhx056QnOX1c01+PsFQvPM96QnkjWS8z aJjf/swr56trBemUYfgnOa3KQ8a93dQlSJR/b8SLK5wMzSMvq9l9i95Ufwk7o+mF gPoVmyVo1C6SAxYA09avfhOQ3SzcbK5yvNPyns5DHPfHIYTZH8nf/QcSHFuGGZjV WTcVoJqTU2fe3XRUcRHyQq9EGroZzGDKB5qUR0C06vLwm9/k4htj0BhLjnBnSLap Mw3gRCpozezRA5AKTEk/ZhjNhb/Bvkd5GyYT92lR7vPcer9REw+lvGMQ+5URAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGo7EsKNVha6+inxYDVSghh9et5gwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzQyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCcsd8MA0GCSqG SIb3DQEBCwUAA4IBAQAw4B/1JutUggYdkFttNZHLnQJDHlTqmGkU/bIMOXKYdgRg QzXdZ5kSCtjYpedmgu5kEoE4+GC4yz8K3Zo9UkgpJ/nsMq1C/2cU6BQhq4RWhEXD 0W2Vmpdryvc5p3pTcd21FhzxfPhYfBuWO/OKCCyCDj03G5IK60PbViIXzzLYEilu W3esGaNANWL8QjB/9bUIWsyPUOEPDXZ3HZea7bVetPNSKsLPoYmLhrISqj/YXVGf JwzHoiF/w6ATHyIDWbTq5V/goYHtzuTDEEymsDCn9RFjZaijE0Ct3slX0xv6mrMm joFqPxcFZfOzs9I3Uzzsl4rIJK/zL/oK3bzU/Wbk -----END CERTIFICATE-----Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org