$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa File: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (raw, json) Hash identifier: 511GF/EOq12upFA9JrTG67JKSmr+oofYy17gd3QyIfw= Subject key identifier: AB:4B:3A:78:BC:86:3B:AB:A1:1E:D1:8B:F4:46:67:1B:AF:80:EB:95 Certificate issuer: /CN=46F8E3AC44B2F2208037674979268378CA60B901 Certificate serial: 2A99B7BBE05ECF38DDF104ED654D234343CCA603 Authority key identifier: 46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa Signing time: Wed 27 Mar 2024 12:31:21 +0000 ROA not before: Wed 27 Mar 2024 12:26:21 +0000 ROA not after: Wed 26 Mar 2025 12:31:21 +0000 asID: 152423 IP address blocks: 157.20.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:99:b7:bb:e0:5e:cf:38:dd:f1:04:ed:65:4d:23:43:43:cc:a6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46F8E3AC44B2F2208037674979268378CA60B901 Validity Not Before: Mar 27 12:26:21 2024 GMT Not After : Mar 26 12:31:21 2025 GMT Subject: CN=AB4B3A78BC863BABA11ED18BF446671BAF80EB95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:61:a6:4e:95:72:3f:e0:bb:a7:d1:f5:59: 36:9e:76:0b:2f:0f:69:7f:0a:25:90:cb:1c:02:e4: 9d:9a:92:c8:6f:7e:f6:a5:1a:cf:c4:17:eb:85:59: 01:0e:fe:47:f3:2b:d6:04:05:f8:76:4c:1f:43:fd: b0:15:35:d7:b9:4b:60:bc:fb:7f:77:a0:64:17:72: 2b:4d:3b:a2:3d:0d:13:ec:83:37:03:c4:4e:ee:05: f0:0c:3d:8a:2a:55:97:4f:72:95:76:64:eb:e5:7f: af:06:85:4c:e3:94:14:b0:08:16:4e:53:9d:80:a9: 73:b9:0d:00:01:1b:1a:a5:37:e1:a9:17:83:b6:81: 68:e7:95:81:be:0f:7d:23:57:0a:a9:22:f4:30:e4: 39:b4:13:10:ba:5d:38:5f:4e:d0:a5:7f:d7:6b:f4: 0f:10:64:4f:c2:e0:a1:08:e7:f6:5a:9b:20:96:5b: 5e:b6:b4:a7:f7:ce:92:a2:95:f7:26:21:4d:63:d0: 02:b2:78:88:f0:63:17:22:7d:92:27:3a:df:4f:e8: 07:41:80:3b:a4:e1:70:e9:aa:e6:66:9c:f1:25:77: d7:dc:de:1c:60:e3:f5:d9:e0:7f:8f:a7:15:fe:eb: 65:bf:3e:cb:a8:57:8d:2e:09:a0:88:1c:bc:39:d1: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:3A:78:BC:86:3B:AB:A1:1E:D1:8B:F4:46:67:1B:AF:80:EB:95 X509v3 Authority Key Identifier: keyid:46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.218.0/24 Signature Algorithm: sha256WithRSAEncryption c9:6a:85:58:da:c7:8a:c6:b6:3a:b6:39:f8:1a:2f:42:74:ce: 61:04:03:51:a0:f0:1f:57:61:0f:02:18:55:fe:be:c7:10:da: f8:d7:29:8f:0c:4f:be:22:d1:5f:bf:92:90:b6:cf:a2:e5:a6: ef:30:df:21:b1:72:60:fe:83:2b:73:28:4a:3d:c2:ee:4f:c6: 39:41:dc:27:99:c4:f7:f9:cb:05:d4:24:8d:d0:f6:fe:76:94: 15:9e:ac:d2:e8:0b:25:41:6e:83:13:e4:b0:0f:b9:f2:14:7e: 9d:9b:a4:e2:da:0a:bc:f0:29:bb:ed:9a:82:2b:32:33:e7:b0: 6a:47:da:bb:1f:0f:3b:a2:79:18:0b:87:bc:7c:6c:78:57:5a: 65:3f:11:33:de:05:20:d9:f8:8a:04:fc:23:ae:fc:8b:33:2a: 5f:bb:19:33:d2:39:37:68:cf:52:37:6b:b5:47:d2:86:a4:85: f4:4f:c8:f3:09:82:54:3e:e0:c1:56:ed:c2:f3:40:91:08:e4: 0f:87:ac:1a:c9:02:59:14:81:20:82:bd:d9:d4:09:1e:37:c4: c7:5b:2b:22:b1:0d:66:ac:53:23:75:51:f2:3d:35:b4:39:c4: 16:b0:8b:4d:01:c8:79:f3:93:73:3f:b3:96:dd:ab:fb:3f:5b: f3:63:d6:9d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKpm3u+Bezzjd8QTtZU0jQ0PMpgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhD QTYwQjkwMTAeFw0yNDAzMjcxMjI2MjFaFw0yNTAzMjYxMjMxMjFaMDMxMTAvBgNV BAMTKEFCNEIzQTc4QkM4NjNCQUJBMTFFRDE4QkY0NDY2NzFCQUY4MEVCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUmGmTpVyP+C7p9H1WTaedgsv D2l/CiWQyxwC5J2akshvfvalGs/EF+uFWQEO/kfzK9YEBfh2TB9D/bAVNde5S2C8 +393oGQXcitNO6I9DRPsgzcDxE7uBfAMPYoqVZdPcpV2ZOvlf68GhUzjlBSwCBZO U52AqXO5DQABGxqlN+GpF4O2gWjnlYG+D30jVwqpIvQw5Dm0ExC6XThfTtClf9dr 9A8QZE/C4KEI5/ZamyCWW162tKf3zpKilfcmIU1j0AKyeIjwYxcifZInOt9P6AdB gDuk4XDpquZmnPEld9fc3hxg4/XZ4H+PpxX+62W/PsuoV40uCaCIHLw50ZP1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUq0s6eLyGO6uhHtGL9EZnG6+A65UwHwYDVR0j BBgwFoAURvjjrESy8iCAN2dJeSaDeMpguQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU4M2FmZS0zYmRjLTQ0YjItYTcwMi1iNDU1NWRhYTY1ZWEvMC80NkY4RTNBQzQ0 QjJGMjIwODAzNzY3NDk3OTI2ODM3OENBNjBCOTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhDQTYw QjkwMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyZTgzYWZlLTNiZGMtNDRiMi1h NzAyLWI0NTU1ZGFhNjVlYS8wLzMxMzUzNzJlMzIzMDJlMzIzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTaMA0GCSqG SIb3DQEBCwUAA4IBAQDJaoVY2seKxrY6tjn4Gi9CdM5hBANRoPAfV2EPAhhV/r7H ENr41ymPDE++ItFfv5KQts+i5abvMN8hsXJg/oMrcyhKPcLuT8Y5QdwnmcT3+csF 1CSN0Pb+dpQVnqzS6AslQW6DE+SwD7nyFH6dm6Ti2gq88Cm77ZqCKzIz57BqR9q7 Hw87onkYC4e8fGx4V1plPxEz3gUg2fiKBPwjrvyLMypfuxkz0jk3aM9SN2u1R9KG pIX0T8jzCYJUPuDBVu3C80CRCOQPh6wayQJZFIEggr3Z1AkeN8THWysisQ1mrFMj dVHyPTW0OcQWsItNAch585NzP7OW3av7P1vzY9ad -----END CERTIFICATE-----Generated at Sat Jun 22 21:55:35 2024 by rpki-client on console-ams.rpki-client.org