$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa File: 3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa (raw, json) Hash identifier: s6AOupuIm/I+0HuyPevqvPS6wLo0OiLBTLdZkEx1w0k= Subject key identifier: 5E:B2:FA:D2:D0:FD:86:82:E6:F1:DB:94:DA:F1:6C:63:55:C6:20:59 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 42E708D8ABC59507C863036249DB36C9483C54B4 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa Signing time: Tue 21 May 2024 08:02:40 +0000 ROA not before: Tue 21 May 2024 07:57:40 +0000 ROA not after: Tue 20 May 2025 08:02:40 +0000 asID: 24525 IP address blocks: 114.199.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 13:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e7:08:d8:ab:c5:95:07:c8:63:03:62:49:db:36:c9:48:3c:54:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 21 07:57:40 2024 GMT Not After : May 20 08:02:40 2025 GMT Subject: CN=5EB2FAD2D0FD8682E6F1DB94DAF16C6355C62059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bc:9c:3c:9b:ea:9f:66:91:60:22:8c:e5:86: 72:67:bf:82:c3:31:91:e9:7e:52:51:56:2b:53:47: 54:89:95:74:f7:b8:d5:d1:95:e4:4a:82:51:41:47: 28:88:c3:b9:2b:f0:b3:69:bc:1a:4c:c2:4d:8c:f7: 06:cb:dc:1a:7e:37:5c:2a:f1:8e:13:8e:87:c5:53: 1b:c3:ee:fa:b1:ed:2e:08:f4:b3:04:55:d1:c5:b5: ae:e0:48:40:bf:d1:a1:3b:5b:61:fc:f5:d9:00:ff: 91:26:fe:2a:3b:cf:1d:9b:3c:df:fc:f4:b4:f5:e7: 82:e0:13:92:2b:3a:37:8a:d8:2e:d1:43:e4:15:9b: 55:8d:a9:d7:31:2b:63:ad:dc:2c:6b:eb:56:34:64: 42:cf:a0:13:db:94:b0:e7:07:6d:f7:3a:81:70:e4: 55:5e:56:df:c8:f3:32:47:d3:5b:d6:c2:b1:61:69: e8:f1:9e:f0:a5:ae:58:94:50:99:b0:2e:4e:ef:f2: c2:41:0e:b8:83:38:0c:9b:f8:3c:1a:c8:58:30:4d: 0c:e7:8e:cc:7d:b4:ec:51:b5:f6:bd:9e:d8:db:03: 38:18:e8:3e:e3:e5:98:cc:ea:81:17:98:da:8a:af: df:36:81:64:bf:00:b4:8d:86:91:98:74:c3:08:66: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B2:FA:D2:D0:FD:86:82:E6:F1:DB:94:DA:F1:6C:63:55:C6:20:59 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.126.0/23 Signature Algorithm: sha256WithRSAEncryption 04:8b:6f:c7:46:c0:ca:2d:38:f4:e3:a2:65:3f:c7:aa:f5:f3: 84:c8:43:27:ce:4c:6e:51:0b:b3:0e:1c:b7:9e:a1:ff:e9:40: a2:43:23:02:46:f0:26:cc:ad:39:d2:09:c3:bb:b7:62:23:ab: d4:55:29:a0:55:8e:ed:8f:23:e7:23:12:38:80:cc:a5:05:02: d7:09:e6:69:20:d8:3c:94:9c:f3:41:b0:f9:f0:89:cf:b2:ab: 38:a0:bd:7b:21:5b:90:58:26:a4:2e:85:2c:2f:5c:77:3a:53: 3c:6e:88:97:13:3a:b5:0d:51:16:e7:24:50:48:27:ef:24:ac: 72:c4:b2:46:dc:4d:f4:2d:10:22:18:4b:58:6b:fa:eb:9a:71: 1c:6d:e7:ff:7b:20:97:a3:17:32:89:35:70:cb:90:a9:c0:32: 08:98:e5:c4:1a:52:37:92:b4:c9:ff:9e:e4:7a:50:b4:8d:fa: 0d:b2:f1:98:ae:77:98:3d:de:dd:38:87:cb:10:99:d0:fc:fd: a2:0d:f6:73:a7:20:e5:f0:2a:88:67:6b:c8:1c:66:fe:e6:fb: d0:e0:0c:6e:67:d0:e0:7e:3f:09:76:8d:7a:a5:eb:0f:47:d4: e9:f8:53:8e:98:26:a6:ae:17:24:27:be:91:37:bf:0f:f1:9d: 7f:f0:66:fb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQucI2KvFlQfIYwNiSds2yUg8VLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA1MjEwNzU3NDBaFw0yNTA1MjAwODAyNDBaMDMxMTAvBgNV BAMTKDVFQjJGQUQyRDBGRDg2ODJFNkYxREI5NERBRjE2QzYzNTVDNjIwNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnvJw8m+qfZpFgIozlhnJnv4LD MZHpflJRVitTR1SJlXT3uNXRleRKglFBRyiIw7kr8LNpvBpMwk2M9wbL3Bp+N1wq 8Y4TjofFUxvD7vqx7S4I9LMEVdHFta7gSEC/0aE7W2H89dkA/5Em/io7zx2bPN/8 9LT154LgE5IrOjeK2C7RQ+QVm1WNqdcxK2Ot3Cxr61Y0ZELPoBPblLDnB233OoFw 5FVeVt/I8zJH01vWwrFhaejxnvClrliUUJmwLk7v8sJBDriDOAyb+DwayFgwTQzn jsx9tOxRtfa9ntjbAzgY6D7j5ZjM6oEXmNqKr982gWS/ALSNhpGYdMMIZhpzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUXrL60tD9hoLm8duU2vFsY1XGIFkwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBcsd+MA0GCSqG SIb3DQEBCwUAA4IBAQAEi2/HRsDKLTj046JlP8eq9fOEyEMnzkxuUQuzDhy3nqH/ 6UCiQyMCRvAmzK050gnDu7diI6vUVSmgVY7tjyPnIxI4gMylBQLXCeZpINg8lJzz QbD58InPsqs4oL17IVuQWCakLoUsL1x3OlM8boiXEzq1DVEW5yRQSCfvJKxyxLJG 3E30LRAiGEtYa/rrmnEcbef/eyCXoxcyiTVwy5CpwDIImOXEGlI3krTJ/57kelC0 jfoNsvGYrneYPd7dOIfLEJnQ/P2iDfZzpyDl8CqIZ2vIHGb+5vvQ4AxuZ9Dgfj8J do16pesPR9Tp+FOOmCamrhckJ76RN78P8Z1/8Gb7 -----END CERTIFICATE-----Generated at Fri Jun 21 09:35:52 2024 by rpki-client on console-fra.rpki-client.org