$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa File: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (raw, json) Hash identifier: Lxbv9g4Tc4zr/yZca8M8S2X24CLaJFBuvzgxl8QAASI= Subject key identifier: C7:8D:2A:D4:95:00:0F:C8:D6:E4:60:28:05:24:B3:B5:82:29:C0:64 Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 158695840A73B02EB8501091F0AABDECEEF7CD37 Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa Signing time: Mon 18 Nov 2024 09:11:39 +0000 ROA not before: Mon 18 Nov 2024 09:06:39 +0000 ROA not after: Mon 17 Nov 2025 09:11:39 +0000 asID: 141142 IP address blocks: 122.248.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:86:95:84:0a:73:b0:2e:b8:50:10:91:f0:aa:bd:ec:ee:f7:cd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Nov 18 09:06:39 2024 GMT Not After : Nov 17 09:11:39 2025 GMT Subject: CN=C78D2AD495000FC8D6E460280524B3B58229C064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:75:e6:3e:ea:cf:de:19:a0:d0:fa:c1:99:91: 9f:ce:de:78:dc:a9:d5:40:22:65:ce:fa:56:56:17: 9f:6d:8b:cf:cd:7e:f6:a2:02:9b:23:05:2d:89:3f: 5d:25:b8:5e:23:6b:91:a4:76:09:7a:31:6e:28:b8: b3:c4:cc:5a:b5:29:4e:86:68:6c:1c:a3:7f:45:ad: 35:3b:3d:78:7f:e3:de:72:85:79:35:af:a8:8e:ab: 07:65:59:1e:5a:9a:80:d2:2a:8e:91:9e:0d:72:3f: 0b:0c:5e:b8:f4:72:12:ac:a3:b0:6b:bc:83:f6:e2: 8c:cb:89:5b:85:17:e9:a4:ba:cb:28:72:27:37:93: 21:a3:1d:28:60:0f:3d:4f:b7:36:a8:30:4c:94:24: f9:ee:28:25:cb:f6:21:1c:4b:d9:04:f6:06:48:80: f7:3c:9f:f4:b4:c4:e7:be:19:ee:db:88:4b:31:16: 47:28:2a:43:8a:49:22:94:01:e2:75:b3:92:0a:13: 5d:e2:f6:a6:14:e1:24:ea:19:3f:89:b0:59:ed:18: 8c:b3:88:db:4c:a5:b1:9b:78:54:77:bf:84:ca:1d: 6c:23:51:76:60:62:78:d5:cb:bd:39:85:9e:7c:91: 85:7e:56:6c:03:a0:88:dc:a5:20:79:df:32:d3:fb: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8D:2A:D4:95:00:0F:C8:D6:E4:60:28:05:24:B3:B5:82:29:C0:64 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.37.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:e6:45:b3:9c:13:73:51:21:03:3e:8d:40:bf:20:ac:40:c3: 58:c1:71:3e:fc:e1:f0:35:10:70:75:d3:23:62:d3:82:7d:d2: 75:03:ea:a4:49:5b:6a:8e:d1:94:e3:f6:0e:f1:ea:84:b9:a9: 95:35:90:47:2a:ff:7b:7a:cb:44:c4:ef:d3:e5:05:a5:bd:aa: 76:16:25:7b:23:6f:86:a5:c5:46:ff:c7:13:e9:4a:b3:a0:05: a1:98:69:6c:fb:e9:dc:22:00:d1:a1:da:40:62:8b:50:be:4f: 4a:f6:54:22:b8:67:7c:f0:6e:d8:4d:6e:a1:c3:0e:ee:80:61: 08:45:dd:e3:42:70:08:f6:31:d8:4b:01:d0:ff:b3:67:fa:57: a0:4d:be:de:27:78:eb:ea:82:11:bd:1e:d7:f8:b2:4d:4c:22: 51:f9:7e:ab:bf:14:28:92:e2:57:b2:6a:47:89:25:8f:dd:51: a5:21:e1:67:8a:9a:a8:e1:3f:a7:c3:65:16:3e:21:8f:a8:d9: 25:07:15:ba:4a:0d:43:31:27:ee:2d:32:05:d0:16:f8:10:6f: 37:89:b7:c0:40:df:c5:b8:3b:c1:70:f4:c5:3d:26:6e:cc:60: e5:09:6a:c3:7f:13:1b:a9:d8:f7:fc:7a:5a:4b:d0:3a:97:fc: 54:3f:28:b8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFYaVhApzsC64UBCR8Kq97O73zTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNDExMTgwOTA2MzlaFw0yNTExMTcwOTExMzlaMDMxMTAvBgNV BAMTKEM3OEQyQUQ0OTUwMDBGQzhENkU0NjAyODA1MjRCM0I1ODIyOUMwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDadeY+6s/eGaDQ+sGZkZ/O3njc qdVAImXO+lZWF59ti8/NfvaiApsjBS2JP10luF4ja5Gkdgl6MW4ouLPEzFq1KU6G aGwco39FrTU7PXh/495yhXk1r6iOqwdlWR5amoDSKo6Rng1yPwsMXrj0chKso7Br vIP24ozLiVuFF+mkussocic3kyGjHShgDz1PtzaoMEyUJPnuKCXL9iEcS9kE9gZI gPc8n/S0xOe+Ge7biEsxFkcoKkOKSSKUAeJ1s5IKE13i9qYU4STqGT+JsFntGIyz iNtMpbGbeFR3v4TKHWwjUXZgYnjVy705hZ58kYV+VmwDoIjcpSB53zLT+8QzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUx40q1JUAD8jW5GAoBSSztYIpwGQwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAevglMA0GCSqG SIb3DQEBCwUAA4IBAQBv5kWznBNzUSEDPo1AvyCsQMNYwXE+/OHwNRBwddMjYtOC fdJ1A+qkSVtqjtGU4/YO8eqEuamVNZBHKv97estExO/T5QWlvap2FiV7I2+GpcVG /8cT6UqzoAWhmGls++ncIgDRodpAYotQvk9K9lQiuGd88G7YTW6hww7ugGEIRd3j QnAI9jHYSwHQ/7Nn+legTb7eJ3jr6oIRvR7X+LJNTCJR+X6rvxQokuJXsmpHiSWP 3VGlIeFnipqo4T+nw2UWPiGPqNklBxW6Sg1DMSfuLTIF0Bb4EG83ibfAQN/FuDvB cPTFPSZuzGDlCWrDfxMbqdj3/HpaS9A6l/xUPyi4 -----END CERTIFICATE-----Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org