$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa File: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (raw, json) Hash identifier: T+3m1DHWwdH9pyVf+3TS9ljAQPPCINSkU0zaxVHTqm4= Subject key identifier: D6:FB:AC:18:74:38:15:67:17:E9:32:DB:05:67:E0:C8:8E:82:7F:A8 Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 76629EEA59E3E08EEFEE8D0E2A89071B92D04CD9 Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa Signing time: Sat 18 Nov 2023 11:32:32 +0000 ROA not before: Sat 18 Nov 2023 11:27:32 +0000 ROA not after: Sat 16 Nov 2024 11:32:32 +0000 asID: 152026 IP address blocks: 45.123.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:62:9e:ea:59:e3:e0:8e:ef:ee:8d:0e:2a:89:07:1b:92:d0:4c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Nov 18 11:27:32 2023 GMT Not After : Nov 16 11:32:32 2024 GMT Subject: CN=D6FBAC187438156717E932DB0567E0C88E827FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:3d:e8:4e:58:8f:2a:45:66:fa:a0:6a:52: 75:a5:12:30:3e:11:23:9b:3d:a5:32:d7:d5:96:6a: 65:5d:70:56:2d:7f:6a:e7:e9:2b:f4:1a:84:61:05: 2e:5e:23:72:e5:6b:13:82:f4:a8:53:94:95:64:67: 1d:aa:62:df:f1:cb:72:dd:89:08:13:fe:fa:14:f7: f2:09:65:b1:58:67:b1:95:e7:d4:ab:2c:23:4c:db: d5:11:ad:52:39:d8:6d:14:00:b2:a5:00:6f:33:e1: 90:fd:5a:c4:53:bc:48:63:21:0e:78:85:e3:67:db: 43:b9:38:e9:c6:72:82:1e:3e:09:fe:45:23:c0:b6: 41:5a:82:28:26:5c:01:e1:a1:06:a4:ac:0a:42:65: a5:52:f3:5c:d5:ef:2a:6b:ea:6d:e8:de:a5:2f:84: 47:ed:60:b0:6c:7e:a4:63:29:df:d0:7e:6f:c1:56: ba:1e:51:62:53:3c:e1:05:60:33:d3:a3:81:27:26: 1e:43:90:7c:2c:8b:0d:2b:7f:50:e1:97:02:8f:6b: ce:7a:55:99:d2:73:0c:05:fc:33:e6:27:8d:89:e6: 0a:08:d0:9c:86:8f:f6:c4:7f:10:04:95:04:43:1d: 4b:1a:14:cf:69:65:25:2e:17:67:9f:f3:3f:6e:f9: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FB:AC:18:74:38:15:67:17:E9:32:DB:05:67:E0:C8:8E:82:7F:A8 X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.142.0/24 Signature Algorithm: sha256WithRSAEncryption 16:98:a4:b3:5e:f8:94:6d:2d:b4:21:30:ed:9e:3e:42:14:d0: 39:df:57:ee:23:dd:24:2c:8d:5d:dc:17:ba:0c:26:69:a4:ba: 74:44:2e:bb:6e:46:7b:cc:42:9b:52:b8:83:1e:0f:6b:e0:f1: da:ff:ef:67:08:70:76:a5:4f:c4:52:3d:c1:fa:d1:f4:2c:65: dd:b6:d6:aa:df:c1:d3:b8:89:33:c0:45:79:58:59:ae:8c:b1: 68:7d:2c:7a:42:52:4e:17:ae:2c:f9:64:26:78:93:d0:0e:56: 51:cf:b3:1c:0f:45:6f:70:1f:8b:0b:39:4e:c4:f1:e9:55:fe: c4:a1:6a:38:73:90:e8:a3:be:e2:73:7c:bc:35:b4:94:0c:16: 7a:a0:85:d3:af:f4:7f:84:78:5f:e7:cd:fb:3d:9d:c9:9c:70: 34:c0:52:c8:6f:b0:d5:3c:21:a2:4c:be:c0:ef:c5:2c:a6:1b: da:da:ac:e6:30:e9:62:85:2f:16:de:ac:31:21:38:97:91:29: 90:96:57:6e:02:4b:6e:72:58:0f:52:fd:e5:58:9e:68:bc:2e: fa:23:55:1e:06:23:12:0b:f0:d0:1f:fa:52:8f:f1:1e:49:ca: 55:0d:f9:ba:75:bf:a3:0d:6d:0b:73:0d:17:67:82:d9:43:af: 4f:0f:73:18 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdmKe6lnj4I7v7o0OKokHG5LQTNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yMzExMTgxMTI3MzJaFw0yNDExMTYxMTMyMzJaMDMxMTAvBgNV BAMTKEQ2RkJBQzE4NzQzODE1NjcxN0U5MzJEQjA1NjdFMEM4OEU4MjdGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mz3oTliPKkVm+qBqUnWlEjA+ ESObPaUy19WWamVdcFYtf2rn6Sv0GoRhBS5eI3LlaxOC9KhTlJVkZx2qYt/xy3Ld iQgT/voU9/IJZbFYZ7GV59SrLCNM29URrVI52G0UALKlAG8z4ZD9WsRTvEhjIQ54 heNn20O5OOnGcoIePgn+RSPAtkFagigmXAHhoQakrApCZaVS81zV7ypr6m3o3qUv hEftYLBsfqRjKd/Qfm/BVroeUWJTPOEFYDPTo4EnJh5DkHwsiw0rf1DhlwKPa856 VZnScwwF/DPmJ42J5goI0JyGj/bEfxAElQRDHUsaFM9pZSUuF2ef8z9u+SvJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1vusGHQ4FWcX6TLbBWfgyI6Cf6gwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3NGExNTI3LTVjOGUtNGJkMy1h MWM3LTlkMWVkMmQyM2UxNC8wLzM0MzUyZTMxMzIzMzJlMzEzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXuOMA0GCSqG SIb3DQEBCwUAA4IBAQAWmKSzXviUbS20ITDtnj5CFNA531fuI90kLI1d3Be6DCZp pLp0RC67bkZ7zEKbUriDHg9r4PHa/+9nCHB2pU/EUj3B+tH0LGXdttaq38HTuIkz wEV5WFmujLFofSx6QlJOF64s+WQmeJPQDlZRz7McD0VvcB+LCzlOxPHpVf7EoWo4 c5Doo77ic3y8NbSUDBZ6oIXTr/R/hHhf5837PZ3JnHA0wFLIb7DVPCGiTL7A78Us phva2qzmMOlihS8W3qwxITiXkSmQllduAktuclgPUv3lWJ5ovC76I1UeBiMSC/DQ H/pSj/EeScpVDfm6db+jDW0Lcw0XZ4LZQ69PD3MY -----END CERTIFICATE-----Generated at Sun Jun 23 02:49:04 2024 by rpki-client on console-fra.rpki-client.org