$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa File: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (raw, json) Hash identifier: inPl6XZ2YHidAUYkG6K1Xa0/KfzuKUU82DOCwt66GWE= Subject key identifier: 6D:D2:53:D6:AA:86:A0:4A:12:32:69:CE:C8:F5:2E:32:14:8D:C2:8E Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 12CD75F31FB018205B38D91854E7243674978CC9 Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa Signing time: Tue 17 Sep 2024 00:36:45 +0000 ROA not before: Tue 17 Sep 2024 00:31:45 +0000 ROA not after: Tue 16 Sep 2025 00:36:45 +0000 asID: 38149 IP address blocks: 150.129.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cd:75:f3:1f:b0:18:20:5b:38:d9:18:54:e7:24:36:74:97:8c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Sep 17 00:31:45 2024 GMT Not After : Sep 16 00:36:45 2025 GMT Subject: CN=6DD253D6AA86A04A123269CEC8F52E32148DC28E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:08:c1:3c:53:91:4d:e6:bf:1d:88:66:7b: 2c:19:0a:ed:07:73:5f:39:5e:02:a2:27:7f:48:b7: 30:9e:e4:1d:29:c7:04:e9:0a:f7:54:d3:22:66:36: f3:70:a4:0f:4e:da:23:7a:08:6d:8c:2d:8e:e4:39: 7b:37:e5:21:36:2d:62:c7:49:7b:44:e7:a9:c8:99: 64:ce:01:2c:e3:8e:b2:ca:8b:88:9c:a5:c7:3f:07: 51:af:92:be:ab:cc:c1:14:ff:3d:be:41:2d:4a:30: 95:85:ac:da:82:8d:90:79:12:f0:5e:6e:bc:e0:e1: 08:23:16:22:de:68:02:bc:d8:53:d1:22:4d:8d:dc: 0c:a8:41:76:e1:84:bc:26:52:ee:8b:9c:db:0c:4a: a0:32:69:d3:95:c3:45:2a:0c:ce:11:5e:f8:b1:be: fe:04:09:b8:26:aa:f7:70:6d:7d:3c:d5:f3:d7:d8: 8f:06:92:5e:c1:15:fd:38:50:5d:54:80:76:07:41: 40:9f:5c:0c:c2:b7:37:cb:82:7d:54:49:ec:b2:0d: ba:78:78:14:51:89:82:36:4a:54:7a:e6:05:98:c3: 57:34:bf:33:e8:93:c4:72:ed:5c:c3:10:6a:66:b0: 92:fc:a4:d7:0c:5a:41:70:ea:34:de:13:b9:6d:a1: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D2:53:D6:AA:86:A0:4A:12:32:69:CE:C8:F5:2E:32:14:8D:C2:8E X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.129.189.0/24 Signature Algorithm: sha256WithRSAEncryption 41:af:d3:9e:7a:5e:2e:2a:4c:32:0c:6b:34:a8:79:72:54:0c: f1:bb:24:70:9e:9a:9c:7c:88:ed:8c:1f:7e:cf:36:93:c7:bb: b3:5b:4c:84:28:04:e8:97:10:a2:15:c4:3e:bf:3b:cb:5d:58: 0a:43:f0:82:9e:19:9e:62:b0:f3:39:58:aa:81:58:b0:50:d6: f0:e0:37:3d:bb:79:f8:f3:79:d8:f0:40:75:af:4a:cf:66:b7: 8e:7c:6c:6c:5e:05:09:89:56:0b:ec:0b:0e:b0:bd:c8:14:6a: 70:c2:97:28:43:c5:23:f9:2f:77:85:c1:4f:c4:c5:15:d3:59: c2:06:83:af:61:f3:d2:9c:24:3e:49:2e:5d:16:7e:33:34:3c: cb:4a:56:1a:2c:a1:d8:73:de:ab:28:a2:8f:a1:3e:66:9b:36: 8b:ca:c0:2b:b2:70:40:d5:7e:38:df:83:bf:6b:cf:f8:84:b9: bf:96:ed:03:fa:b9:97:f6:d1:75:84:b0:ca:18:76:3d:43:c1: ad:3b:99:eb:81:36:79:36:59:4a:2f:42:67:da:de:00:ed:b2: 1a:7d:05:de:4d:9e:9c:f4:59:ac:00:b0:33:9b:ac:92:19:29: 1f:48:40:e5:95:d2:f5:7a:be:b8:90:0c:28:d6:d7:81:a3:84: 0b:54:76:5a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEs118x+wGCBbONkYVOckNnSXjMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNDA5MTcwMDMxNDVaFw0yNTA5MTYwMDM2NDVaMDMxMTAvBgNV BAMTKDZERDI1M0Q2QUE4NkEwNEExMjMyNjlDRUM4RjUyRTMyMTQ4REMyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFwjBPFORTea/HYhmeywZCu0H c185XgKiJ39ItzCe5B0pxwTpCvdU0yJmNvNwpA9O2iN6CG2MLY7kOXs35SE2LWLH SXtE56nImWTOASzjjrLKi4icpcc/B1Gvkr6rzMEU/z2+QS1KMJWFrNqCjZB5EvBe brzg4QgjFiLeaAK82FPRIk2N3AyoQXbhhLwmUu6LnNsMSqAyadOVw0UqDM4RXvix vv4ECbgmqvdwbX081fPX2I8Gkl7BFf04UF1UgHYHQUCfXAzCtzfLgn1USeyyDbp4 eBRRiYI2SlR65gWYw1c0vzPok8Ry7VzDEGpmsJL8pNcMWkFw6jTeE7ltoVuxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbdJT1qqGoEoSMmnOyPUuMhSNwo4wHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzUzMDJlMzEzMjM5MmUzMTM4MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAloG9MA0GCSqG SIb3DQEBCwUAA4IBAQBBr9Oeel4uKkwyDGs0qHlyVAzxuyRwnpqcfIjtjB9+zzaT x7uzW0yEKATolxCiFcQ+vzvLXVgKQ/CCnhmeYrDzOViqgViwUNbw4Dc9u3n483nY 8EB1r0rPZreOfGxsXgUJiVYL7AsOsL3IFGpwwpcoQ8Uj+S93hcFPxMUV01nCBoOv YfPSnCQ+SS5dFn4zNDzLSlYaLKHYc96rKKKPoT5mmzaLysArsnBA1X4434O/a8/4 hLm/lu0D+rmX9tF1hLDKGHY9Q8GtO5nrgTZ5NllKL0Jn2t4A7bIafQXeTZ6c9Fms ALAzm6ySGSkfSEDlldL1er64kAwo1teBo4QLVHZa -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org