$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa File: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (raw, json) Hash identifier: FvOPITybWRzIs1S1g5FFlGun2wfYZCtWZ4+3+p45v+s= Subject key identifier: 53:34:21:72:69:5C:C7:C8:B6:F7:73:AD:AF:A0:25:F4:01:85:DF:D3 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 5158FD74B55C2008CC37B7BF2388C83F3D277BCF Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa Signing time: Tue 19 Nov 2024 12:16:59 +0000 ROA not before: Tue 19 Nov 2024 12:11:59 +0000 ROA not after: Tue 18 Nov 2025 12:16:59 +0000 asID: 152758 IP address blocks: 157.66.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:58:fd:74:b5:5c:20:08:cc:37:b7:bf:23:88:c8:3f:3d:27:7b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Nov 19 12:11:59 2024 GMT Not After : Nov 18 12:16:59 2025 GMT Subject: CN=53342172695CC7C8B6F773ADAFA025F40185DFD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:f5:7c:a5:91:1f:52:a9:1c:8e:ac:60:5d: 2a:f1:b3:e3:d5:8d:c6:4d:40:60:37:0d:51:5e:c6: 62:da:05:c2:ec:5e:aa:e0:be:b5:12:29:69:21:67: 8e:53:d6:be:30:97:19:95:53:ef:7a:97:e6:b0:18: f7:d7:c9:ec:3b:e6:0d:e3:45:3d:40:8b:c6:7d:c9: 8f:59:83:e5:e5:8d:b4:cf:1c:ce:b6:eb:0f:71:0d: d5:cc:63:b6:83:2c:bd:ed:71:51:55:9b:90:02:a4: d1:4e:3c:e5:e7:c5:37:c2:06:f5:6d:b1:fe:82:f6: 05:8d:f0:cf:a6:31:72:6e:8b:ab:bb:b8:df:22:08: 6e:f5:81:2f:88:cb:1c:4c:45:e8:19:b9:63:af:a2: 75:db:5c:7e:b5:b9:7b:95:ed:60:e8:bc:30:5e:dd: a3:04:da:d6:ab:64:8e:d4:73:80:3e:01:05:7c:f1: 59:be:15:8c:aa:3a:d7:e0:cc:32:6d:f7:c2:4c:f0: 02:9e:b7:68:21:eb:df:65:46:cf:44:6f:ec:e2:7f: 2c:b4:e4:75:d8:dc:48:4d:4d:2b:98:8c:46:6f:81: 5c:b5:5f:d0:c1:36:9e:cf:38:21:f3:0d:d3:00:51: 12:4e:14:1a:96:11:39:9a:a1:36:d1:b2:a0:15:66: c4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:34:21:72:69:5C:C7:C8:B6:F7:73:AD:AF:A0:25:F4:01:85:DF:D3 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.238.0/24 Signature Algorithm: sha256WithRSAEncryption 96:6a:42:03:6f:56:4f:57:dc:d7:37:5e:39:e2:35:18:42:69: a9:02:65:0b:b8:37:1f:b7:eb:84:06:3c:24:87:71:18:97:41: 96:84:90:b1:ee:a0:a4:f4:5d:d7:90:4c:2e:70:a0:c2:51:79: aa:6a:ab:70:59:c6:70:74:3f:d6:0f:82:ce:a6:02:90:c4:6b: 3e:e5:cf:69:2a:d4:02:76:b7:7c:8a:0d:5d:13:d6:cd:17:72: 1c:5a:54:9c:7b:8b:95:f9:97:21:68:dc:78:31:ab:ec:99:f6: ab:7d:d7:e1:30:33:4b:80:05:4b:2a:86:a3:32:15:50:5e:6b: 14:7e:53:91:e2:ea:51:32:7d:5b:dd:8f:55:f8:71:61:a8:db: 9d:fe:22:50:e0:59:fb:a2:2a:79:63:80:11:8a:ee:da:ff:77: c6:04:cb:e9:75:c7:a9:2e:a3:64:23:76:db:73:80:78:03:b3: 14:c7:fc:cb:64:b7:6e:93:bd:29:6d:1b:8a:46:0f:cf:cf:a8: 1e:8d:6c:23:dd:3b:e0:99:87:2e:dc:09:50:8b:9c:25:d3:03: dd:65:f5:79:68:c1:9f:99:83:ad:07:34:58:6f:66:d6:25:e8: 22:a6:12:81:3e:a3:e5:3f:07:60:02:aa:f7:50:e2:6c:2e:a9: d6:f9:8b:97 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUVj9dLVcIAjMN7e/I4jIPz0ne88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNDExMTkxMjExNTlaFw0yNTExMTgxMjE2NTlaMDMxMTAvBgNV BAMTKDUzMzQyMTcyNjk1Q0M3QzhCNkY3NzNBREFGQTAyNUY0MDE4NURGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcs/V8pZEfUqkcjqxgXSrxs+PV jcZNQGA3DVFexmLaBcLsXqrgvrUSKWkhZ45T1r4wlxmVU+96l+awGPfXyew75g3j RT1Ai8Z9yY9Zg+XljbTPHM626w9xDdXMY7aDLL3tcVFVm5ACpNFOPOXnxTfCBvVt sf6C9gWN8M+mMXJui6u7uN8iCG71gS+IyxxMRegZuWOvonXbXH61uXuV7WDovDBe 3aME2tarZI7Uc4A+AQV88Vm+FYyqOtfgzDJt98JM8AKet2gh699lRs9Eb+zifyy0 5HXY3EhNTSuYjEZvgVy1X9DBNp7POCHzDdMAURJOFBqWETmaoTbRsqAVZsS/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUzQhcmlcx8i293Otr6Al9AGF39MwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZGQyNTE5LTMwNzgtNDdkMy05 ZTg2LTQ4ZmQzYmRlNzZjOC8wLzMxMzUzNzJlMzYzNjJlMzIzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnULuMA0GCSqG SIb3DQEBCwUAA4IBAQCWakIDb1ZPV9zXN1454jUYQmmpAmULuDcft+uEBjwkh3EY l0GWhJCx7qCk9F3XkEwucKDCUXmqaqtwWcZwdD/WD4LOpgKQxGs+5c9pKtQCdrd8 ig1dE9bNF3IcWlSce4uV+ZchaNx4MavsmfarfdfhMDNLgAVLKoajMhVQXmsUflOR 4upRMn1b3Y9V+HFhqNud/iJQ4Fn7oip5Y4ARiu7a/3fGBMvpdcepLqNkI3bbc4B4 A7MUx/zLZLduk70pbRuKRg/Pz6gejWwj3TvgmYcu3AlQi5wl0wPdZfV5aMGfmYOt BzRYb2bWJegiphKBPqPlPwdgAqr3UOJsLqnW+YuX -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org