$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3134392e302f32342d3234203d3e203538333937.roa File: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (raw, json) Hash identifier: JtGsbR94Q0VAwqm3d3PJL5RkFU8vnmgz3ScXJMqleEw= Subject key identifier: 59:64:19:92:7C:9A:DE:9D:EF:79:31:55:E2:1A:B7:C0:3B:BD:AB:95 Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 768B2909D7DA17B08959C1A18E4DC4CFBCA77B70 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3134392e302f32342d3234203d3e203538333937.roa Signing time: Fri 08 Dec 2023 21:00:02 +0000 ROA not before: Fri 08 Dec 2023 20:55:02 +0000 ROA not after: Fri 06 Dec 2024 21:00:02 +0000 asID: 58397 IP address blocks: 117.53.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 23:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8b:29:09:d7:da:17:b0:89:59:c1:a1:8e:4d:c4:cf:bc:a7:7b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Dec 8 20:55:02 2023 GMT Not After : Dec 6 21:00:02 2024 GMT Subject: CN=596419927C9ADE9DEF793155E21AB7C03BBDAB95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:5b:88:4f:9e:35:93:35:9e:44:89:69:87: c0:f4:f6:84:03:81:91:67:66:15:fc:04:24:e4:9d: a2:7e:6b:b1:b9:8c:8d:d1:47:31:88:28:1a:79:0f: d8:9f:f3:a7:16:03:5d:a9:c7:6a:ce:db:65:91:61: e8:5a:90:ba:5c:cb:17:cd:f1:c9:5b:e5:c2:ed:f8: d7:57:a4:ff:2e:9c:7d:eb:dd:a9:47:e1:28:b8:fe: 60:c6:9d:96:bf:16:2a:09:03:0d:14:10:7d:c2:ad: b2:a5:82:44:78:ea:0a:3c:84:1a:b4:4c:52:42:b8: 9a:4c:ed:fd:10:7d:c9:0e:58:85:4c:8b:99:53:a2: 29:0f:bc:04:8c:ee:0d:10:46:cc:73:4f:38:f3:7f: ac:33:18:68:5c:d0:fb:0d:5c:f5:66:e7:8e:8a:c1: b2:f5:af:d5:63:c9:c2:d2:be:14:6e:4f:19:7b:e0: a5:98:64:6b:f3:2c:d5:15:20:9f:d8:c8:56:16:2d: 5b:6f:19:e0:08:5d:15:ed:16:b5:e2:03:ab:00:54: d6:4b:48:4a:7d:a0:96:67:ce:7c:97:6b:7a:2f:10: 66:93:43:db:93:2a:6d:3a:97:dd:94:03:71:f4:ea: 8d:8c:a7:a6:93:d7:70:c9:6f:15:74:9d:20:d9:51: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:19:92:7C:9A:DE:9D:EF:79:31:55:E2:1A:B7:C0:3B:BD:AB:95 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3134392e302f32342d3234203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.53.149.0/24 Signature Algorithm: sha256WithRSAEncryption 28:f3:b2:fd:e0:6d:a8:1d:69:9a:55:d5:b1:ae:7d:4b:f9:ce: c7:07:c3:f0:e3:de:2d:43:67:bc:5a:70:58:cf:c6:e3:d7:3e: 83:04:c4:c5:c6:fc:9a:ca:de:4a:9c:58:db:79:cc:1e:11:9c: e4:10:47:1e:32:d8:12:a2:5a:1e:a5:05:59:12:bf:bf:c1:1a: a8:24:92:a8:31:dd:b4:68:31:89:d0:19:69:65:92:e4:cc:fe: 6a:45:e6:cb:85:93:16:57:9c:cf:57:16:da:78:44:ad:cd:4e: 3e:62:4e:fe:ec:e7:3f:e7:a0:76:d6:3c:9b:8a:d2:c6:b2:99: fa:65:59:02:cb:15:a5:49:f0:d8:70:b8:eb:69:da:20:99:90: 48:c5:01:3c:aa:8f:2b:b9:e2:03:d1:3e:c0:42:a3:66:df:22: 1c:39:76:43:8f:1e:ca:85:3b:8a:98:d9:94:f3:5f:50:57:3c: bd:8f:52:cf:28:1f:05:27:3b:ad:52:b6:8c:53:2c:74:95:2f: 0c:e0:d2:6c:e9:d0:ce:e4:b7:7d:6f:3d:d6:d6:71:bc:e1:65: 0a:ae:62:74:23:5d:ec:ad:49:37:f6:14:93:48:c7:16:a7:4c: c6:15:b4:1d:e7:26:81:47:06:7a:cc:0d:7d:0b:9b:d7:ac:63: 5d:04:43:91 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdospCdfaF7CJWcGhjk3Ez7yne3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yMzEyMDgyMDU1MDJaFw0yNDEyMDYyMTAwMDJaMDMxMTAvBgNV BAMTKDU5NjQxOTkyN0M5QURFOURFRjc5MzE1NUUyMUFCN0MwM0JCREFCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwluIT541kzWeRIlph8D09oQD gZFnZhX8BCTknaJ+a7G5jI3RRzGIKBp5D9if86cWA12px2rO22WRYehakLpcyxfN 8clb5cLt+NdXpP8unH3r3alH4Si4/mDGnZa/FioJAw0UEH3CrbKlgkR46go8hBq0 TFJCuJpM7f0QfckOWIVMi5lToikPvASM7g0QRsxzTzjzf6wzGGhc0PsNXPVm546K wbL1r9VjycLSvhRuTxl74KWYZGvzLNUVIJ/YyFYWLVtvGeAIXRXtFrXiA6sAVNZL SEp9oJZnznyXa3ovEGaTQ9uTKm06l92UA3H06o2Mp6aT13DJbxV0nSDZUVgbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWWQZknya3p3veTFV4hq3wDu9q5UwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJhNDVlLWY1ZGEtNDU4MS1i ZmU1LWMxNjE2YzMwZWZhYi8wLzMxMzEzNzJlMzUzMzJlMzEzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHU1lTANBgkqhkiG 9w0BAQsFAAOCAQEAKPOy/eBtqB1pmlXVsa59S/nOxwfD8OPeLUNnvFpwWM/G49c+ gwTExcb8msreSpxY23nMHhGc5BBHHjLYEqJaHqUFWRK/v8EaqCSSqDHdtGgxidAZ aWWS5Mz+akXmy4WTFlecz1cW2nhErc1OPmJO/uznP+egdtY8m4rSxrKZ+mVZAssV pUnw2HC462naIJmQSMUBPKqPK7niA9E+wEKjZt8iHDl2Q48eyoU7ipjZlPNfUFc8 vY9SzygfBSc7rVK2jFMsdJUvDODSbOnQzuS3fW891tZxvOFlCq5idCNd7K1JN/YU k0jHFqdMxhW0HecmgUcGeswNfQub16xjXQRDkQ== -----END CERTIFICATE-----Generated at Thu May 2 17:16:34 2024 by rpki-client on console-ams.rpki-client.org