$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa File: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (raw, json) Hash identifier: 0DOfWeqjfqxK+dz4JWxf20Rpc5VV4htMDEtmcjdPHYI= Subject key identifier: AD:C5:C5:59:82:34:0B:63:DB:09:FB:72:10:D4:8F:CB:34:FB:BD:2B Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 727C77F0B973D6675290A8EE1BE9AC1B65430F06 Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa Signing time: Sun 19 May 2024 07:30:57 +0000 ROA not before: Sun 19 May 2024 07:25:57 +0000 ROA not after: Sun 18 May 2025 07:30:57 +0000 asID: 152416 IP address blocks: 157.20.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7c:77:f0:b9:73:d6:67:52:90:a8:ee:1b:e9:ac:1b:65:43:0f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: May 19 07:25:57 2024 GMT Not After : May 18 07:30:57 2025 GMT Subject: CN=ADC5C55982340B63DB09FB7210D48FCB34FBBD2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:47:e6:d3:a9:fa:7f:82:15:44:90:dc:f8: ab:7f:5c:1f:23:67:84:fd:7e:14:15:cb:bc:81:aa: 85:67:91:61:49:aa:0d:2a:f9:f9:3d:9b:36:c9:c6: 9c:d5:e4:c3:52:ad:51:f2:48:f8:00:f6:58:ae:08: 26:71:fb:6e:40:bc:50:f4:e3:ae:9e:90:d2:09:86: f9:33:7a:d0:69:72:88:a3:a4:7f:3f:91:b4:6f:87: 9a:a3:45:49:40:6b:0d:0e:37:94:67:de:e0:41:34: 71:91:42:b8:6c:b1:0d:1a:b3:ae:da:c8:16:e6:bb: e9:30:0f:19:a4:53:c7:0b:c2:e3:4c:ad:ef:5b:95: ff:f4:0d:9f:b6:18:ea:03:bd:d2:b2:92:e7:31:67: 0a:54:70:9c:59:a0:08:56:7c:d1:40:6e:3a:f7:95: 18:f9:32:96:77:33:99:31:49:6f:c1:da:3e:b5:97: 1d:35:d5:cd:c0:be:ae:4a:eb:fb:9c:79:ca:e0:e1: 79:99:9b:4d:18:23:d2:ec:1c:46:3a:66:50:23:8b: 17:1b:6f:77:83:9e:a9:3f:71:38:77:29:b7:22:8c: 34:7e:26:5c:1b:7a:34:d1:d0:f8:43:ac:38:c3:9a: 43:bb:65:0e:b1:a1:b0:a8:b1:30:53:26:14:b1:70: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C5:C5:59:82:34:0B:63:DB:09:FB:72:10:D4:8F:CB:34:FB:BD:2B X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.208.0/24 Signature Algorithm: sha256WithRSAEncryption b2:fe:bf:17:fe:6e:1e:22:f0:98:f4:19:85:5a:92:cf:c4:63: ba:a4:50:98:bf:5b:ee:d6:8b:e0:8a:b8:08:3e:8b:2a:e1:42: 92:b8:c9:7e:a5:db:fc:75:8f:00:3c:df:8f:a8:d9:9a:64:4c: 11:ec:85:01:a2:91:ab:9e:6c:fd:9d:89:d8:70:5e:78:86:a2: a9:30:e5:b7:71:e7:7e:03:b0:78:f0:1e:64:99:85:51:ae:f1: f5:58:2b:c8:af:83:8e:38:df:47:88:97:ef:b3:10:27:09:a8: c2:87:b3:dc:27:3b:e2:aa:6c:5b:61:f3:d4:ed:7c:20:14:4a: 99:e5:c7:6d:f5:87:88:be:d4:18:df:f6:87:9e:20:41:50:02: 48:62:e6:13:fa:63:23:a2:0f:22:52:ac:e5:ad:aa:69:ca:2a: 8e:46:62:d6:d9:37:e9:21:a2:f9:b5:b3:46:90:f5:ff:85:df: f5:9d:20:a3:62:17:4a:7a:51:fc:08:2f:35:92:96:05:0b:80: a7:94:8a:09:b7:4e:6b:a7:6d:d2:83:f2:76:eb:15:78:96:34: c6:6b:4b:cf:19:1d:70:72:a9:96:7d:9c:d6:ed:50:45:a7:3a: aa:5e:3c:c1:20:42:90:01:18:bb:40:cf:f1:d3:cf:bc:53:7e: 3b:a7:78:f4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcnx38Llz1mdSkKjuG+msG2VDDwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNDA1MTkwNzI1NTdaFw0yNTA1MTgwNzMwNTdaMDMxMTAvBgNV BAMTKEFEQzVDNTU5ODIzNDBCNjNEQjA5RkI3MjEwRDQ4RkNCMzRGQkJEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohUfm06n6f4IVRJDc+Kt/XB8j Z4T9fhQVy7yBqoVnkWFJqg0q+fk9mzbJxpzV5MNSrVHySPgA9liuCCZx+25AvFD0 466ekNIJhvkzetBpcoijpH8/kbRvh5qjRUlAaw0ON5Rn3uBBNHGRQrhssQ0as67a yBbmu+kwDxmkU8cLwuNMre9blf/0DZ+2GOoDvdKykucxZwpUcJxZoAhWfNFAbjr3 lRj5MpZ3M5kxSW/B2j61lx011c3Avq5K6/ucecrg4XmZm00YI9LsHEY6ZlAjixcb b3eDnqk/cTh3KbcijDR+JlwbejTR0PhDrDjDmkO7ZQ6xobCosTBTJhSxcGyNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrcXFWYI0C2PbCftyENSPyzT7vSswHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjNDA5NGQyLWUxOGQtNDg0MC04 NGZhLWM1NzU3YWY1ODBmMS8wLzMxMzUzNzJlMzIzMDJlMzIzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTQMA0GCSqG SIb3DQEBCwUAA4IBAQCy/r8X/m4eIvCY9BmFWpLPxGO6pFCYv1vu1ovgirgIPosq 4UKSuMl+pdv8dY8APN+PqNmaZEwR7IUBopGrnmz9nYnYcF54hqKpMOW3ced+A7B4 8B5kmYVRrvH1WCvIr4OOON9HiJfvsxAnCajCh7PcJzviqmxbYfPU7XwgFEqZ5cdt 9YeIvtQY3/aHniBBUAJIYuYT+mMjog8iUqzlrappyiqORmLW2TfpIaL5tbNGkPX/ hd/1nSCjYhdKelH8CC81kpYFC4CnlIoJt05rp23Sg/J26xV4ljTGa0vPGR1wcqmW fZzW7VBFpzqqXjzBIEKQARi7QM/x08+8U347p3j0 -----END CERTIFICATE-----Generated at Sat Jun 22 04:28:06 2024 by rpki-client on console-fra.rpki-client.org