$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa File: 3131342e3139392e39362e302f32322d3232203d3e203234353235.roa (raw, json) Hash identifier: nohWrGirFkLwEtrfdUxI4SBLNspq9xlkeLn+H4NotVE= Subject key identifier: 4E:7D:F1:42:BB:C5:CD:F7:E6:0A:75:54:09:E3:62:E0:F4:B1:44:9B Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 32DD8A93AD514938AB29123738BAC41E6AD53733 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa Signing time: Tue 21 May 2024 08:02:40 +0000 ROA not before: Tue 21 May 2024 07:57:40 +0000 ROA not after: Tue 20 May 2025 08:02:40 +0000 asID: 24525 IP address blocks: 114.199.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:dd:8a:93:ad:51:49:38:ab:29:12:37:38:ba:c4:1e:6a:d5:37:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 21 07:57:40 2024 GMT Not After : May 20 08:02:40 2025 GMT Subject: CN=4E7DF142BBC5CDF7E60A755409E362E0F4B1449B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:65:0c:4c:ba:8e:d5:30:10:bb:60:39:55:7c: 65:ed:ae:c0:96:b7:3d:25:e1:b0:30:68:80:88:bd: af:84:07:cb:fe:f8:d3:ff:b6:d6:dd:d1:9f:5f:d3: 97:a7:f1:9d:bc:8d:49:df:1c:8a:8f:83:01:6b:d8: 4e:93:75:d4:d7:27:a7:b2:59:07:a0:59:b1:32:89: ae:79:42:8a:54:13:df:ac:40:d0:ac:70:0f:40:ac: d9:99:5b:22:c1:0e:1b:f3:3b:5e:81:4b:0d:06:a2: 97:89:69:81:a3:aa:54:73:4a:51:90:f1:61:e4:60: cc:c6:1b:23:54:8a:93:38:21:fc:06:6e:e1:d8:36: 45:9e:7f:5a:1f:73:66:20:c1:de:2b:29:61:fa:19: 78:95:a6:93:6a:85:79:70:05:a9:3f:52:3e:52:c3: bf:ba:4d:ea:9d:28:9c:bb:25:93:4b:39:9c:67:3a: a4:ca:43:b7:82:9e:0e:0e:c7:ca:dd:8f:d8:0b:29: 59:e3:02:a4:d9:c7:d1:b6:10:3b:ae:e2:ad:46:3c: af:2d:f8:5a:fe:4c:ae:09:30:ea:c8:25:0b:5c:a9: c1:6f:58:e5:da:6a:73:3d:dc:3f:76:8b:02:fb:86: 7d:20:b7:01:d0:36:76:5f:a9:fb:d0:d0:3b:6f:04: c9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7D:F1:42:BB:C5:CD:F7:E6:0A:75:54:09:E3:62:E0:F4:B1:44:9B X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.96.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:31:f2:66:cf:1f:31:31:bc:e3:3e:57:65:82:b2:60:d2:4c: c8:df:02:3b:cb:b1:33:0c:ef:df:ee:51:ce:6f:69:c7:4e:5e: cb:c8:fa:ac:a5:01:3c:31:0f:41:b8:c1:ed:75:c1:39:13:94: d1:0e:14:c4:e7:7e:43:14:7e:2a:d4:f9:08:4a:65:3f:e8:72: cf:5a:17:65:a1:2d:50:5f:03:98:b6:83:5d:83:88:3d:6b:2d: 79:0b:c1:37:9d:07:02:3f:27:46:c9:05:0c:2b:7b:58:f7:34: 26:07:e3:c8:7c:c0:63:1f:25:db:f1:21:8f:2e:14:40:31:5a: 33:b3:47:51:e5:16:62:48:6a:ee:86:f5:ff:4f:a8:8a:65:a7: b1:9b:b7:1c:b7:39:31:f0:f3:7c:02:7f:c9:be:20:79:8c:cf: 65:f3:2a:42:8e:d5:e2:ce:09:7b:c0:17:41:f3:86:a0:cf:66: 07:2a:76:ea:ef:52:64:e9:24:80:e9:f5:9a:9a:e3:3d:03:cd: 3e:e9:e7:d4:72:fb:d5:2a:f5:88:89:84:17:09:20:a8:d0:ca: d4:e5:5b:55:d7:e5:e0:c2:1a:eb:66:01:f1:58:66:7a:73:a5: 7e:ba:ac:0f:0c:c8:d2:39:dc:6a:a6:4c:ff:08:a2:08:5a:68: 86:2c:b3:23 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMt2Kk61RSTirKRI3OLrEHmrVNzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA1MjEwNzU3NDBaFw0yNTA1MjAwODAyNDBaMDMxMTAvBgNV BAMTKDRFN0RGMTQyQkJDNUNERjdFNjBBNzU1NDA5RTM2MkUwRjRCMTQ0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZQxMuo7VMBC7YDlVfGXtrsCW tz0l4bAwaICIva+EB8v++NP/ttbd0Z9f05en8Z28jUnfHIqPgwFr2E6TddTXJ6ey WQegWbEyia55QopUE9+sQNCscA9ArNmZWyLBDhvzO16BSw0GopeJaYGjqlRzSlGQ 8WHkYMzGGyNUipM4IfwGbuHYNkWef1ofc2Ygwd4rKWH6GXiVppNqhXlwBak/Uj5S w7+6TeqdKJy7JZNLOZxnOqTKQ7eCng4Ox8rdj9gLKVnjAqTZx9G2EDuu4q1GPK8t +Fr+TK4JMOrIJQtcqcFvWOXaanM93D92iwL7hn0gtwHQNnZfqfvQ0DtvBMkhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTn3xQrvFzffmCnVUCeNi4PSxRJswHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzOTM2MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnLHYDANBgkqhkiG 9w0BAQsFAAOCAQEAezHyZs8fMTG84z5XZYKyYNJMyN8CO8uxMwzv3+5Rzm9px05e y8j6rKUBPDEPQbjB7XXBOROU0Q4UxOd+QxR+KtT5CEplP+hyz1oXZaEtUF8DmLaD XYOIPWsteQvBN50HAj8nRskFDCt7WPc0JgfjyHzAYx8l2/Ehjy4UQDFaM7NHUeUW Ykhq7ob1/0+oimWnsZu3HLc5MfDzfAJ/yb4geYzPZfMqQo7V4s4Je8AXQfOGoM9m Byp26u9SZOkkgOn1mprjPQPNPunn1HL71Sr1iImEFwkgqNDK1OVbVdfl4MIa62YB 8VhmenOlfrqsDwzI0jncaqZM/wiiCFpohiyzIw== -----END CERTIFICATE-----Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org