$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa File: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (raw, json) Hash identifier: HWv43/lGQA3zuN61fiauVO9bfPbiLEUzUDy28en+btM= Subject key identifier: 5C:B2:68:C0:96:0B:DD:F6:20:22:09:50:FD:9F:CF:88:15:E3:91:D5 Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 6582E980D5CC68EC94F4B8BB9822E8285B2C1E43 Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa Signing time: Sun 19 May 2024 07:32:38 +0000 ROA not before: Sun 19 May 2024 07:27:38 +0000 ROA not after: Sun 18 May 2025 07:32:38 +0000 asID: 152416 IP address blocks: 157.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:82:e9:80:d5:cc:68:ec:94:f4:b8:bb:98:22:e8:28:5b:2c:1e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: May 19 07:27:38 2024 GMT Not After : May 18 07:32:38 2025 GMT Subject: CN=5CB268C0960BDDF620220950FD9FCF8815E391D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:3c:53:a7:82:80:22:87:50:83:db:12:91: 28:63:05:8a:d8:1a:59:f0:dd:b2:d7:78:17:de:cf: bc:8d:15:c5:5c:0d:e1:7b:d0:11:dc:95:de:25:df: 40:62:f9:64:30:c4:3c:74:6c:f3:2d:43:2f:47:6b: 5f:fd:47:37:67:5e:df:54:ca:2f:03:09:c2:59:e3: 01:00:4b:b0:8d:d1:7c:24:34:35:da:0f:76:00:cc: 55:38:08:93:a9:77:da:c9:f0:47:78:57:db:08:9a: a8:4b:2e:bd:fa:66:ff:00:6c:55:28:1d:73:4a:c0: b8:90:40:6a:9f:e1:ce:19:f5:45:68:08:3a:5c:1e: fc:4d:ad:71:18:75:de:05:65:b8:ab:39:f9:0b:15: 18:c8:44:27:34:17:5d:09:ef:c4:a6:67:06:eb:e0: f3:51:32:19:c6:e8:ef:5e:5e:f2:99:26:26:81:5e: 6b:55:e3:7e:5f:05:c1:86:87:72:96:b5:78:c7:f4: f8:e1:4c:63:e0:55:71:78:c4:dd:82:53:7d:a5:3b: dc:0d:c0:73:aa:4f:e6:9b:5d:d1:9a:df:29:f4:2d: f4:5e:e5:0c:0e:36:fc:80:09:7f:16:03:84:6d:ad: 02:4a:c3:71:34:21:0a:b1:8c:6d:81:f8:1d:41:50: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B2:68:C0:96:0B:DD:F6:20:22:09:50:FD:9F:CF:88:15:E3:91:D5 X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.209.0/24 Signature Algorithm: sha256WithRSAEncryption 90:4f:23:3f:97:e4:fe:53:bc:e8:57:94:f5:80:8c:1b:00:f8: 2f:a0:66:70:ec:6d:63:51:1d:06:c4:69:06:9e:a9:0e:f5:72: b6:19:e1:cc:95:d6:79:0d:d1:e7:29:84:9a:7b:ed:27:7b:ce: 49:59:2f:6d:0f:2a:67:89:10:39:26:c9:b0:91:72:01:de:5b: 26:1d:22:6d:88:f6:38:0f:f0:0c:e1:19:42:04:a5:93:fa:af: 96:9a:34:88:d5:da:69:17:7c:93:96:cc:a5:09:b6:11:5f:53: 43:7d:49:bc:ad:31:04:8c:ff:6e:ac:a0:d1:61:39:cc:ea:bd: ef:02:1b:26:fd:d2:7e:19:50:4c:cd:7b:5a:6e:0b:2d:d4:80: 44:a8:0f:99:6d:c7:c7:99:fe:d6:1a:8f:54:bd:b6:0a:53:b3: 2b:eb:73:46:f8:32:b5:07:e7:62:3e:78:3e:2a:dc:e1:7c:7a: 4c:19:ea:e0:3a:56:f4:1f:83:fd:d6:b8:8b:4f:24:bb:82:e9: 4f:a5:6c:71:61:9f:a2:d4:1a:0d:d6:a3:a8:a8:3d:24:c0:d4: 21:2b:86:07:da:78:1a:49:62:a0:23:47:a5:86:31:61:d2:8f: 9f:4f:c0:5c:99:14:19:a7:3c:15:fa:fe:e0:f5:d4:af:14:f4: 62:29:be:fb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZYLpgNXMaOyU9Li7mCLoKFssHkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNDA1MTkwNzI3MzhaFw0yNTA1MTgwNzMyMzhaMDMxMTAvBgNV BAMTKDVDQjI2OEMwOTYwQkRERjYyMDIyMDk1MEZEOUZDRjg4MTVFMzkxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVjxTp4KAIodQg9sSkShjBYrY Glnw3bLXeBfez7yNFcVcDeF70BHcld4l30Bi+WQwxDx0bPMtQy9Ha1/9RzdnXt9U yi8DCcJZ4wEAS7CN0XwkNDXaD3YAzFU4CJOpd9rJ8Ed4V9sImqhLLr36Zv8AbFUo HXNKwLiQQGqf4c4Z9UVoCDpcHvxNrXEYdd4FZbirOfkLFRjIRCc0F10J78SmZwbr 4PNRMhnG6O9eXvKZJiaBXmtV435fBcGGh3KWtXjH9PjhTGPgVXF4xN2CU32lO9wN wHOqT+abXdGa3yn0LfRe5QwONvyACX8WA4RtrQJKw3E0IQqxjG2B+B1BUBlRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUXLJowJYL3fYgIglQ/Z/PiBXjkdUwHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjNDA5NGQyLWUxOGQtNDg0MC04 NGZhLWM1NzU3YWY1ODBmMS8wLzMxMzUzNzJlMzIzMDJlMzIzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTRMA0GCSqG SIb3DQEBCwUAA4IBAQCQTyM/l+T+U7zoV5T1gIwbAPgvoGZw7G1jUR0GxGkGnqkO 9XK2GeHMldZ5DdHnKYSae+0ne85JWS9tDypniRA5JsmwkXIB3lsmHSJtiPY4D/AM 4RlCBKWT+q+WmjSI1dppF3yTlsylCbYRX1NDfUm8rTEEjP9urKDRYTnM6r3vAhsm /dJ+GVBMzXtabgst1IBEqA+ZbcfHmf7WGo9UvbYKU7Mr63NG+DK1B+diPng+Ktzh fHpMGergOlb0H4P91riLTyS7gulPpWxxYZ+i1BoN1qOoqD0kwNQhK4YH2ngaSWKg I0elhjFh0o+fT8BcmRQZpzwV+v7g9dSvFPRiKb77 -----END CERTIFICATE-----Generated at Sat Jun 22 04:48:37 2024 by rpki-client on console-ams.rpki-client.org