$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f31392d3139203d3e203234353235.roa File: 3131342e3139392e39362e302f31392d3139203d3e203234353235.roa (raw, json) Hash identifier: zNWJns+MDhIucW+M8B9CFF66ITvPsuH63oYELVbk4Lg= Subject key identifier: 85:1D:EE:E8:5D:3C:7B:4A:17:95:9E:65:4A:E9:20:B3:66:94:A2:24 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 58863D097EFB2F40B7D268D415BF90C139DD7503 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f31392d3139203d3e203234353235.roa Signing time: Tue 21 May 2024 08:02:39 +0000 ROA not before: Tue 21 May 2024 07:57:39 +0000 ROA not after: Tue 20 May 2025 08:02:39 +0000 asID: 24525 IP address blocks: 114.199.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:86:3d:09:7e:fb:2f:40:b7:d2:68:d4:15:bf:90:c1:39:dd:75:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 21 07:57:39 2024 GMT Not After : May 20 08:02:39 2025 GMT Subject: CN=851DEEE85D3C7B4A17959E654AE920B36694A224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:6d:4d:94:19:33:21:72:9f:0d:c6:86:61: ae:71:c4:8d:df:b0:c9:20:b4:3e:5c:cd:bd:91:07: cc:89:2f:25:e7:6c:ee:a9:a9:92:09:8b:d5:12:5f: 6b:6d:23:79:e4:5a:49:fb:92:1a:8f:45:66:a1:4d: 1a:e8:32:44:5d:97:f9:1b:81:95:20:42:3d:64:40: 85:44:9b:82:b9:47:fc:ff:9e:24:0b:81:a7:b4:74: 6a:93:68:09:0f:83:4d:b9:d3:4f:90:fa:ae:23:80: 77:c1:07:ce:c6:25:16:2c:2c:38:f6:79:1f:13:42: 1b:3f:99:d1:f4:1e:c0:be:e4:41:a2:74:3a:3f:6f: c5:b6:c5:c3:31:49:ae:c2:fa:3a:f9:55:71:78:41: 89:3c:dc:2e:ee:66:05:8d:ab:9b:3e:27:64:4f:b2: 48:dc:ae:94:ea:08:b7:22:e6:69:f4:59:8f:4d:eb: c3:18:a7:95:06:a8:b6:30:3f:d9:5a:47:b1:2c:12: e5:c0:df:e2:87:96:5b:52:35:40:a0:57:06:94:80: 0c:cb:c5:a5:65:b4:a5:56:17:2a:07:98:b9:c1:07: f4:93:84:81:58:e7:ca:c2:6d:f7:ff:3d:1d:79:07: be:a5:48:52:85:b1:e7:c6:2d:5f:73:a3:2d:22:7e: b3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1D:EE:E8:5D:3C:7B:4A:17:95:9E:65:4A:E9:20:B3:66:94:A2:24 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f31392d3139203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.96.0/19 Signature Algorithm: sha256WithRSAEncryption c1:45:01:d6:28:5e:fc:7e:e6:66:40:c4:15:9c:4b:b6:3a:bf: b2:19:c4:a1:2b:2f:68:7f:c5:04:80:37:44:dd:f4:77:54:41: 2e:51:dc:dc:d3:cb:61:85:a0:f9:5c:8a:ab:f7:c9:c8:6d:2b: ba:a9:38:6f:43:12:83:3e:71:1c:ac:f4:be:c9:f2:16:0f:23: 1f:65:f9:58:d3:c8:53:88:91:cb:9c:c3:b9:3c:f5:c0:54:38: 7a:70:ec:f9:32:50:d4:b6:95:48:d6:68:f1:fa:25:24:cb:03: 3a:9c:e6:e7:0e:9b:ea:08:54:33:58:d5:86:c2:80:ea:af:56: 65:ce:1a:58:c8:63:fa:51:e8:f3:4f:6e:1e:b0:32:1e:7f:f9: cf:2b:17:d9:ca:88:49:f3:66:5b:70:a8:86:69:c7:7a:2d:33: 06:2d:09:97:87:f3:c6:9b:9f:c8:c7:8c:5f:39:58:7d:40:81: 29:59:af:bc:60:8b:66:0f:6e:ab:d5:34:56:ff:9f:2f:a2:ba: 5e:6e:49:1d:01:8d:49:92:d8:b6:da:8c:ba:c8:bf:6f:cf:53: 50:08:f8:2a:6e:e1:7b:32:f4:bf:61:9f:8f:00:d0:d4:6c:a8: 60:43:c0:e4:e0:ef:b4:8b:43:bc:21:d2:9b:e8:0d:d9:ab:86: 74:ec:f5:5b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWIY9CX77L0C30mjUFb+QwTnddQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA1MjEwNzU3MzlaFw0yNTA1MjAwODAyMzlaMDMxMTAvBgNV BAMTKDg1MURFRUU4NUQzQzdCNEExNzk1OUU2NTRBRTkyMEIzNjY5NEEyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWm1NlBkzIXKfDcaGYa5xxI3f sMkgtD5czb2RB8yJLyXnbO6pqZIJi9USX2ttI3nkWkn7khqPRWahTRroMkRdl/kb gZUgQj1kQIVEm4K5R/z/niQLgae0dGqTaAkPg02500+Q+q4jgHfBB87GJRYsLDj2 eR8TQhs/mdH0HsC+5EGidDo/b8W2xcMxSa7C+jr5VXF4QYk83C7uZgWNq5s+J2RP skjcrpTqCLci5mn0WY9N68MYp5UGqLYwP9laR7EsEuXA3+KHlltSNUCgVwaUgAzL xaVltKVWFyoHmLnBB/SThIFY58rCbff/PR15B76lSFKFsefGLV9zoy0ifrMLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhR3u6F08e0oXlZ5lSukgs2aUoiQwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzOTM2MmUzMDJmMzEz OTJkMzEzOTIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXLHYDANBgkqhkiG 9w0BAQsFAAOCAQEAwUUB1ihe/H7mZkDEFZxLtjq/shnEoSsvaH/FBIA3RN30d1RB LlHc3NPLYYWg+VyKq/fJyG0ruqk4b0MSgz5xHKz0vsnyFg8jH2X5WNPIU4iRy5zD uTz1wFQ4enDs+TJQ1LaVSNZo8folJMsDOpzm5w6b6ghUM1jVhsKA6q9WZc4aWMhj +lHo809uHrAyHn/5zysX2cqISfNmW3CohmnHei0zBi0Jl4fzxpufyMeMXzlYfUCB KVmvvGCLZg9uq9U0Vv+fL6K6Xm5JHQGNSZLYttqMusi/b89TUAj4Km7hezL0v2Gf jwDQ1GyoYEPA5ODvtItDvCHSm+gN2auGdOz1Ww== -----END CERTIFICATE-----Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org