$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa File: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (raw, json) Hash identifier: eoNruYNwvZyUby6dZXw5bw0e22Qs6MDR2TbE8xL2nTA= Subject key identifier: B3:1D:57:B3:AA:24:C9:59:81:A6:FC:62:A9:E7:F6:99:6D:72:36:60 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 7E3EEFF1EB8EB18224A2398986CBF75436DA01B2 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa Signing time: Tue 19 Nov 2024 12:29:25 +0000 ROA not before: Tue 19 Nov 2024 12:24:25 +0000 ROA not after: Tue 18 Nov 2025 12:29:25 +0000 asID: 152758 IP address blocks: 157.66.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3e:ef:f1:eb:8e:b1:82:24:a2:39:89:86:cb:f7:54:36:da:01:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Nov 19 12:24:25 2024 GMT Not After : Nov 18 12:29:25 2025 GMT Subject: CN=B31D57B3AA24C95981A6FC62A9E7F6996D723660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c6:d5:32:d3:44:8b:cd:f1:bf:0d:3e:9c:15: db:f0:4d:5b:0b:b8:06:31:0e:33:8c:ba:6d:46:dd: ab:ae:be:c6:9a:a8:ea:d7:0b:7d:38:38:ac:86:fa: c3:10:fa:17:9c:63:fd:b9:99:a9:4c:66:6a:e5:ac: 51:1c:81:0b:75:1b:e3:a3:18:97:52:10:1d:62:a0: 60:82:b8:d5:9a:3b:70:4b:2b:22:ae:5f:f3:75:e6: 67:03:79:b7:5d:00:20:75:70:0e:50:b1:b6:a4:31: 42:05:68:92:6a:03:ee:73:7b:9b:03:bd:7a:fc:19: eb:b2:a5:18:65:fa:de:36:b3:d8:91:fc:18:20:fa: 90:56:6b:41:37:12:af:a9:38:aa:5b:23:3e:96:6c: b4:a5:67:86:93:a3:a9:a0:41:de:6d:7d:70:39:d8: 31:80:68:86:59:03:65:07:bd:41:62:69:9d:28:9b: 1d:65:20:e5:26:48:b3:9a:7d:1c:bb:c7:ea:a1:d4: ee:d7:14:35:44:8d:c0:32:4a:e2:56:81:fb:66:b9: ff:36:4f:87:5e:dc:83:91:15:7b:c7:99:ed:65:da: 5a:14:d3:82:ed:62:f9:e3:5a:62:d3:34:e7:a6:6b: 7f:f2:1e:d7:75:93:52:81:72:43:81:37:b0:62:4c: f8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1D:57:B3:AA:24:C9:59:81:A6:FC:62:A9:E7:F6:99:6D:72:36:60 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.238.0/23 Signature Algorithm: sha256WithRSAEncryption b9:56:f0:b2:2e:75:82:1b:ff:ff:9f:9c:0c:ae:7a:7d:25:34: 49:bf:b2:e7:a1:07:1b:b7:a7:d1:ab:5f:ff:fd:9e:c3:5d:cd: 7d:82:29:7d:bb:22:fc:ab:0b:a1:2d:f2:c3:c0:0d:e3:ef:8a: 34:e3:0c:c0:25:1e:fc:da:29:ba:0f:ed:69:0d:d6:2c:3a:bb: bb:d2:78:80:9b:de:46:45:f9:34:88:ad:df:40:71:50:29:02: c9:2d:c5:1a:3c:73:c9:2c:f6:e7:91:c6:dd:fb:32:b1:6b:11: ba:ea:58:33:d5:16:8c:ff:9d:4a:95:09:15:fa:7c:b2:71:5e: af:67:83:6b:c5:2a:7f:7d:ad:41:11:5e:15:fc:fc:72:d1:89: fc:c2:af:38:a8:e9:62:ae:7c:c7:4b:be:7f:4a:57:13:55:2b: ed:a4:63:23:df:b6:5d:74:73:01:32:07:34:f2:82:76:20:8a: b5:16:3c:5a:48:c0:15:24:93:26:9d:99:21:e0:bf:87:a5:55: 58:a3:50:08:e2:fb:48:27:64:28:eb:db:6f:02:ac:59:4d:7f: ff:9e:42:2b:30:23:32:c9:65:ad:43:46:8b:19:ec:cf:8e:d6: a8:9d:ff:44:6f:38:3b:a3:01:e6:94:e3:4d:94:2b:94:2c:26: 4f:d5:e2:dd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfj7v8euOsYIkojmJhsv3VDbaAbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNDExMTkxMjI0MjVaFw0yNTExMTgxMjI5MjVaMDMxMTAvBgNV BAMTKEIzMUQ1N0IzQUEyNEM5NTk4MUE2RkM2MkE5RTdGNjk5NkQ3MjM2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdxtUy00SLzfG/DT6cFdvwTVsL uAYxDjOMum1G3auuvsaaqOrXC304OKyG+sMQ+hecY/25malMZmrlrFEcgQt1G+Oj GJdSEB1ioGCCuNWaO3BLKyKuX/N15mcDebddACB1cA5QsbakMUIFaJJqA+5ze5sD vXr8GeuypRhl+t42s9iR/Bgg+pBWa0E3Eq+pOKpbIz6WbLSlZ4aTo6mgQd5tfXA5 2DGAaIZZA2UHvUFiaZ0omx1lIOUmSLOafRy7x+qh1O7XFDVEjcAySuJWgftmuf82 T4de3IORFXvHme1l2loU04LtYvnjWmLTNOema3/yHtd1k1KBckOBN7BiTPhVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsx1Xs6okyVmBpvxiqef2mW1yNmAwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZGQyNTE5LTMwNzgtNDdkMy05 ZTg2LTQ4ZmQzYmRlNzZjOC8wLzMxMzUzNzJlMzYzNjJlMzIzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnULuMA0GCSqG SIb3DQEBCwUAA4IBAQC5VvCyLnWCG///n5wMrnp9JTRJv7LnoQcbt6fRq1///Z7D Xc19gil9uyL8qwuhLfLDwA3j74o04wzAJR782im6D+1pDdYsOru70niAm95GRfk0 iK3fQHFQKQLJLcUaPHPJLPbnkcbd+zKxaxG66lgz1RaM/51KlQkV+nyycV6vZ4Nr xSp/fa1BEV4V/Pxy0Yn8wq84qOlirnzHS75/SlcTVSvtpGMj37ZddHMBMgc08oJ2 IIq1FjxaSMAVJJMmnZkh4L+HpVVYo1AI4vtIJ2Qo69tvAqxZTX//nkIrMCMyyWWt Q0aLGezPjtaonf9Ebzg7owHmlONNlCuULCZP1eLd -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org