$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa File: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (raw, json) Hash identifier: peIKUkdAF8QsdPPlcNy9miptDw8vMHR170Q4qaGoAGo= Subject key identifier: 76:25:5B:B9:06:51:BB:1B:96:0D:8A:79:6B:51:23:65:76:72:8F:AF Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 3A21A66E352038C75D7E685E440218FDC110AC1A Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa Signing time: Thu 11 Jan 2024 04:38:05 +0000 ROA not before: Thu 11 Jan 2024 04:33:05 +0000 ROA not after: Thu 09 Jan 2025 04:38:05 +0000 asID: 152082 IP address blocks: 157.10.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:21:a6:6e:35:20:38:c7:5d:7e:68:5e:44:02:18:fd:c1:10:ac:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Jan 11 04:33:05 2024 GMT Not After : Jan 9 04:38:05 2025 GMT Subject: CN=76255BB90651BB1B960D8A796B51236576728FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:11:3a:39:f2:07:d7:a7:dc:c0:55:ff:e2: d3:20:a9:31:7a:11:96:2c:9d:db:4b:08:68:fd:92: 45:84:4d:fd:58:4b:f1:3a:f4:f3:ae:42:f0:f2:86: fc:1f:1c:6d:b6:d1:91:77:34:03:d2:cc:b6:60:78: 78:49:0f:db:ac:9a:52:27:f8:08:37:d5:a1:b0:3d: c3:6c:7e:15:fd:d2:15:9c:51:57:d6:99:fa:97:da: 80:8f:82:ff:b5:87:04:a3:f3:c8:cb:29:8f:62:22: 97:af:9c:28:ed:ed:94:65:ec:ea:be:b9:f3:37:5c: fc:cd:9c:cb:e7:87:00:36:6a:29:c6:84:23:1e:3b: 46:1f:9f:68:43:a9:bd:8c:8f:e7:64:6b:e5:cb:b0: 56:81:77:3e:7f:da:96:8b:0c:10:ee:b5:34:3b:29: 87:b5:6d:91:68:e7:c6:51:82:89:ce:ff:27:6c:a6: 36:8a:50:c1:d2:8f:bb:7d:52:27:ba:a2:b8:8b:fe: 5c:78:6e:3c:a4:88:2c:37:ed:65:5e:b4:a9:f9:db: 10:91:98:f6:3c:8c:3b:20:80:64:7c:2b:92:3b:28: 63:ad:42:30:5d:30:51:9d:f1:c1:3c:02:3f:04:13: 50:c2:f4:13:ce:64:be:54:67:13:ac:4d:d4:8d:0a: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:25:5B:B9:06:51:BB:1B:96:0D:8A:79:6B:51:23:65:76:72:8F:AF X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.88.0/23 Signature Algorithm: sha256WithRSAEncryption 67:1b:ce:03:e0:2b:d1:9f:91:3c:5a:e2:af:28:4f:4b:91:b8: 06:8a:fb:26:28:4b:37:a0:a5:5b:09:d1:29:18:af:67:cb:62: d5:82:7b:c5:9f:da:80:9f:e8:06:eb:64:5a:9a:5e:38:15:15: b0:d1:28:d1:2b:c9:fe:f1:92:a3:51:34:37:13:db:ee:7e:43: 19:32:86:3b:eb:bd:a0:a9:d1:93:6c:64:de:b2:eb:e6:36:6d: 09:3d:f3:52:02:18:59:84:bc:9b:bb:7c:f0:06:07:1f:34:c3: 37:0f:e2:b2:77:22:ec:a8:ec:da:f7:05:25:17:b0:26:32:e5: 12:37:fa:20:1f:05:da:8d:e9:b4:a2:b6:35:d5:0d:15:aa:df: 33:42:19:98:3d:3e:de:44:25:9c:a4:88:9d:0a:7e:cc:7d:20: b8:8d:0f:ca:f3:71:8e:04:25:28:e5:31:d5:3d:a6:90:60:9b: 27:00:35:b4:3f:2e:86:bb:d1:f6:18:e2:da:78:3f:d9:db:64: 0a:d7:cd:b4:67:6b:77:a2:d7:84:22:c5:da:c8:4d:0e:19:6a: 2c:7a:67:3d:6f:c8:69:74:e1:b6:0d:7f:9a:4b:a2:96:fc:e6: ef:00:fd:ea:f4:07:33:04:0d:07:08:17:ad:54:a8:7e:75:69: 5c:40:a4:95 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOiGmbjUgOMddfmheRAIY/cEQrBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNDAxMTEwNDMzMDVaFw0yNTAxMDkwNDM4MDVaMDMxMTAvBgNV BAMTKDc2MjU1QkI5MDY1MUJCMUI5NjBEOEE3OTZCNTEyMzY1NzY3MjhGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJBE6OfIH16fcwFX/4tMgqTF6 EZYsndtLCGj9kkWETf1YS/E69POuQvDyhvwfHG220ZF3NAPSzLZgeHhJD9usmlIn +Ag31aGwPcNsfhX90hWcUVfWmfqX2oCPgv+1hwSj88jLKY9iIpevnCjt7ZRl7Oq+ ufM3XPzNnMvnhwA2ainGhCMeO0Yfn2hDqb2Mj+dka+XLsFaBdz5/2paLDBDutTQ7 KYe1bZFo58ZRgonO/ydspjaKUMHSj7t9Uie6oriL/lx4bjykiCw37WVetKn52xCR mPY8jDsggGR8K5I7KGOtQjBdMFGd8cE8Aj8EE1DC9BPOZL5UZxOsTdSNCp8jAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdiVbuQZRuxuWDYp5a1EjZXZyj68wHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0N2NkNWEyLWE3NDItNDUwYy1i MTkwLTUwMGU3NTQ1MjBkZS8wLzMxMzUzNzJlMzEzMDJlMzgzODJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjMwMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0KWDANBgkqhkiG 9w0BAQsFAAOCAQEAZxvOA+Ar0Z+RPFriryhPS5G4Bor7JihLN6ClWwnRKRivZ8ti 1YJ7xZ/agJ/oButkWppeOBUVsNEo0SvJ/vGSo1E0NxPb7n5DGTKGO+u9oKnRk2xk 3rLr5jZtCT3zUgIYWYS8m7t88AYHHzTDNw/isnci7Kjs2vcFJRewJjLlEjf6IB8F 2o3ptKK2NdUNFarfM0IZmD0+3kQlnKSInQp+zH0guI0PyvNxjgQlKOUx1T2mkGCb JwA1tD8uhrvR9hji2ng/2dtkCtfNtGdrd6LXhCLF2shNDhlqLHpnPW/IaXThtg1/ mkuilvzm7wD96vQHMwQNBwgXrVSofnVpXECklQ== -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org