$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32312d3231203d3e203234353235.roa File: 3131342e3139392e39362e302f32312d3231203d3e203234353235.roa (raw, json) Hash identifier: W2nbRynsVVxCJyUEFo+eq48pddAvUGWKWkcILbTz0Aw= Subject key identifier: 1E:92:6D:4C:3A:5E:50:9A:C3:28:62:40:AA:E8:2F:DA:EA:64:A2:25 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 348F9001DE6FC2274A8C866BC87C0503A5C91396 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32312d3231203d3e203234353235.roa Signing time: Tue 21 May 2024 07:00:01 +0000 ROA not before: Tue 21 May 2024 06:55:01 +0000 ROA not after: Tue 20 May 2025 07:00:01 +0000 asID: 24525 IP address blocks: 114.199.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8f:90:01:de:6f:c2:27:4a:8c:86:6b:c8:7c:05:03:a5:c9:13:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 21 06:55:01 2024 GMT Not After : May 20 07:00:01 2025 GMT Subject: CN=1E926D4C3A5E509AC3286240AAE82FDAEA64A225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:6e:7d:8a:4f:17:08:19:00:53:8f:21:c4:60: b1:15:61:5f:ac:1e:a8:42:f2:45:81:ce:fe:3c:40: 51:5a:74:84:dd:46:30:29:ad:f3:b5:85:24:58:f8: 31:63:f8:e2:d8:11:56:bb:b7:0d:86:c0:b9:88:91: 9c:e0:f6:76:98:50:95:53:28:d8:61:ef:04:43:05: 55:a2:6c:8a:ea:6d:ef:68:28:5e:f0:18:b8:85:ee: 59:02:a4:10:b7:8b:ed:ba:9e:65:d4:6f:6b:0d:78: 40:4c:52:27:e7:b1:4c:01:46:ea:e5:20:da:e9:81: b4:20:00:5f:1f:c5:41:c8:87:1c:73:76:72:6f:37: 4b:95:2b:79:0f:88:0c:8d:e8:d9:67:ce:a2:49:24: dc:fb:2b:16:55:5b:b6:eb:97:48:1b:2a:55:a8:46: 57:23:95:b5:06:08:0c:45:b0:69:0e:b2:18:fc:c8: 57:e2:0f:94:5b:7a:1a:ec:95:9c:69:96:ca:47:6e: de:e2:39:5a:ab:b8:e4:f3:6f:25:3b:8c:4a:06:86: 4f:df:23:18:ba:5f:84:8f:53:f1:2b:a8:2f:b1:78: 53:d2:64:5a:b2:ed:f7:3a:1d:be:cb:b6:9e:8b:05: 7a:1d:03:f1:65:b8:54:87:62:79:14:6f:ea:29:57: d7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:6D:4C:3A:5E:50:9A:C3:28:62:40:AA:E8:2F:DA:EA:64:A2:25 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32312d3231203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.96.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:59:ed:e5:a4:53:19:f6:dd:39:f8:e3:9c:dd:a7:0d:67:f4: 5a:ee:a9:eb:29:27:61:40:28:02:38:2e:b0:0b:bb:1b:6b:f6: 68:8c:bd:2f:3a:0a:c8:c0:42:ec:79:40:12:22:7c:28:85:94: 1e:ba:73:40:13:fc:0e:0b:62:a9:2a:20:d9:a5:af:3c:0f:76: 20:31:93:50:7f:a6:1e:42:d6:12:2c:64:e2:13:30:9a:55:3d: ca:84:5e:ce:bb:4a:55:89:ab:01:dd:fb:4a:f1:ec:5e:a3:c6: 6b:a4:ac:f3:cc:d7:10:da:c2:63:5e:91:f7:12:aa:09:63:74: 0a:65:4d:e8:40:75:87:a1:01:81:5d:af:2a:90:fe:24:26:6e: a2:22:bc:f3:e0:9a:de:63:e6:f6:cc:31:e6:37:5a:b5:ee:52: df:8e:32:41:d9:68:2d:88:f0:68:56:1c:2e:f2:7f:21:59:a2: df:12:bb:94:20:f6:5a:72:12:ec:10:0e:cb:c3:fd:27:10:6c: 36:33:3c:51:19:1c:69:66:c2:a8:1e:8a:83:ca:f4:ab:0b:4d: e3:08:4b:da:0f:5d:9b:ce:d9:59:c4:98:86:f0:68:02:d8:0c: cc:b0:b6:0f:52:c2:e4:c8:71:e8:4e:36:b8:cb:d2:b8:9f:51: 06:1e:ea:c1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNI+QAd5vwidKjIZryHwFA6XJE5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA1MjEwNjU1MDFaFw0yNTA1MjAwNzAwMDFaMDMxMTAvBgNV BAMTKDFFOTI2RDRDM0E1RTUwOUFDMzI4NjI0MEFBRTgyRkRBRUE2NEEyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2bn2KTxcIGQBTjyHEYLEVYV+s HqhC8kWBzv48QFFadITdRjAprfO1hSRY+DFj+OLYEVa7tw2GwLmIkZzg9naYUJVT KNhh7wRDBVWibIrqbe9oKF7wGLiF7lkCpBC3i+26nmXUb2sNeEBMUifnsUwBRurl INrpgbQgAF8fxUHIhxxzdnJvN0uVK3kPiAyN6NlnzqJJJNz7KxZVW7brl0gbKlWo RlcjlbUGCAxFsGkOshj8yFfiD5RbehrslZxplspHbt7iOVqruOTzbyU7jEoGhk/f Ixi6X4SPU/ErqC+xeFPSZFqy7fc6Hb7Ltp6LBXodA/FluFSHYnkUb+opV9ePAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHpJtTDpeUJrDKGJAqugv2upkoiUwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzOTM2MmUzMDJmMzIz MTJkMzIzMTIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3LHYDANBgkqhkiG 9w0BAQsFAAOCAQEAfVnt5aRTGfbdOfjjnN2nDWf0Wu6p6yknYUAoAjgusAu7G2v2 aIy9LzoKyMBC7HlAEiJ8KIWUHrpzQBP8DgtiqSog2aWvPA92IDGTUH+mHkLWEixk 4hMwmlU9yoRezrtKVYmrAd37SvHsXqPGa6Ss88zXENrCY16R9xKqCWN0CmVN6EB1 h6EBgV2vKpD+JCZuoiK88+Ca3mPm9swx5jdate5S344yQdloLYjwaFYcLvJ/IVmi 3xK7lCD2WnIS7BAOy8P9JxBsNjM8URkcaWbCqB6Kg8r0qwtN4whL2g9dm87ZWcSY hvBoAtgMzLC2D1LC5Mhx6E42uMvSuJ9RBh7qwQ== -----END CERTIFICATE-----Generated at Sat Jun 1 09:09:44 2024 by rpki-client on console-fra.rpki-client.org