$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa File: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (raw, json) Hash identifier: kxCIjSZQJ8ixA11Ui5mFQYRCoC/B4KkTV4RsTn1wCFI= Subject key identifier: 5A:AA:80:94:43:BB:2E:22:9A:EA:EE:27:61:43:C7:89:46:3A:B4:47 Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 77F6E942AA349A7322A6DA0C14D50EF20B2D4ABE Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa Signing time: Thu 11 Jan 2024 04:39:00 +0000 ROA not before: Thu 11 Jan 2024 04:34:00 +0000 ROA not after: Thu 09 Jan 2025 04:39:00 +0000 asID: 152082 IP address blocks: 157.10.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 13:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f6:e9:42:aa:34:9a:73:22:a6:da:0c:14:d5:0e:f2:0b:2d:4a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Jan 11 04:34:00 2024 GMT Not After : Jan 9 04:39:00 2025 GMT Subject: CN=5AAA809443BB2E229AEAEE276143C789463AB447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b2:02:13:4a:8a:d9:5c:2a:b1:e2:ba:7f:69: 97:99:13:f5:d9:b0:31:31:0c:a2:c7:bf:13:f5:08: 58:78:67:5c:38:c5:4a:9e:66:1c:20:b7:41:17:05: 87:f0:a0:b1:ff:ec:fc:03:91:8c:99:7f:d2:3c:62: 39:5c:22:41:a0:a3:b1:ec:db:7f:ca:02:ef:24:92: cc:c3:80:78:02:79:6b:6e:b7:31:1f:0b:ac:20:58: 98:87:3a:e0:b5:e1:45:51:ff:ee:f6:c5:b7:5f:2f: ba:28:14:6b:2c:ad:0a:fc:ff:94:a8:34:a6:d1:eb: 5c:28:6f:2c:75:fc:c7:25:f2:77:c9:fa:5d:b1:c4: 99:77:87:c4:3b:a0:b3:6a:b5:d6:a6:3b:b0:78:c4: fc:07:51:61:58:a0:28:19:bf:9f:15:9e:cd:74:04: 0e:e1:b1:f5:09:44:d0:f0:20:51:60:47:46:12:8d: d4:a1:85:30:04:5c:47:ae:83:50:bb:7f:81:39:96: 5c:2d:24:a4:a4:76:7a:8c:b6:82:db:b1:da:b8:21: ab:3f:ef:a5:e6:94:a3:0c:7e:3f:f3:2b:7f:cc:b0: d1:fb:c6:0a:2a:b7:31:76:0f:24:5d:51:d2:c8:f9: 8a:6c:92:b4:c7:18:c4:fe:44:da:e4:ce:42:9c:7c: 10:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AA:80:94:43:BB:2E:22:9A:EA:EE:27:61:43:C7:89:46:3A:B4:47 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.89.0/24 Signature Algorithm: sha256WithRSAEncryption 07:f5:2b:5d:9b:cb:67:88:18:ee:0b:29:7d:03:0a:32:78:51: 3f:52:e6:f5:7c:97:98:2a:fd:02:92:80:96:9b:20:fd:96:83: bd:64:17:82:49:91:c2:4b:74:df:49:47:e0:1c:9b:d7:bd:eb: 47:6a:df:82:de:92:0c:17:c9:49:5d:65:f8:2c:03:06:b6:cb: ec:a8:1f:a1:8c:10:d6:88:10:a7:0a:6e:a6:10:86:ee:c8:76: 0c:bd:89:11:34:1c:2b:1b:1e:1a:3b:3b:d4:9c:8b:aa:79:31: 08:91:31:a6:74:f8:b3:58:94:6b:b8:24:6c:b9:e0:75:b0:ca: af:c3:7e:b5:86:f6:51:b9:7c:4e:92:c7:bc:e7:98:a2:84:41: 68:54:fb:dd:21:b6:3c:cd:38:aa:1d:21:ac:ab:56:a0:8d:ca: 70:f1:f8:2e:cb:0b:a8:aa:98:ee:ed:32:0a:5d:5d:ea:fa:72: c8:7f:9a:f1:1a:40:9c:24:65:97:2d:ec:86:2a:0d:3a:ba:56: 1a:1a:5b:35:8b:a0:41:6e:55:78:b1:e7:9e:33:88:08:48:4b: 6f:43:e2:1b:28:1f:c5:48:6c:80:4f:88:89:de:ae:f7:2c:2d: 1e:14:3c:1c:53:38:73:1b:3e:88:1d:09:e1:c2:e3:d4:f4:7c: 82:f0:29:e9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUd/bpQqo0mnMiptoMFNUO8gstSr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNDAxMTEwNDM0MDBaFw0yNTAxMDkwNDM5MDBaMDMxMTAvBgNV BAMTKDVBQUE4MDk0NDNCQjJFMjI5QUVBRUUyNzYxNDNDNzg5NDYzQUI0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDesgITSorZXCqx4rp/aZeZE/XZ sDExDKLHvxP1CFh4Z1w4xUqeZhwgt0EXBYfwoLH/7PwDkYyZf9I8YjlcIkGgo7Hs 23/KAu8kkszDgHgCeWtutzEfC6wgWJiHOuC14UVR/+72xbdfL7ooFGssrQr8/5So NKbR61wobyx1/Mcl8nfJ+l2xxJl3h8Q7oLNqtdamO7B4xPwHUWFYoCgZv58Vns10 BA7hsfUJRNDwIFFgR0YSjdShhTAEXEeug1C7f4E5llwtJKSkdnqMtoLbsdq4Ias/ 76XmlKMMfj/zK3/MsNH7xgoqtzF2DyRdUdLI+YpskrTHGMT+RNrkzkKcfBBzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWqqAlEO7LiKa6u4nYUPHiUY6tEcwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0N2NkNWEyLWE3NDItNDUwYy1i MTkwLTUwMGU3NTQ1MjBkZS8wLzMxMzUzNzJlMzEzMDJlMzgzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0KWTANBgkqhkiG 9w0BAQsFAAOCAQEAB/UrXZvLZ4gY7gspfQMKMnhRP1Lm9XyXmCr9ApKAlpsg/ZaD vWQXgkmRwkt030lH4Byb173rR2rfgt6SDBfJSV1l+CwDBrbL7KgfoYwQ1ogQpwpu phCG7sh2DL2JETQcKxseGjs71JyLqnkxCJExpnT4s1iUa7gkbLngdbDKr8N+tYb2 Ubl8TpLHvOeYooRBaFT73SG2PM04qh0hrKtWoI3KcPH4LssLqKqY7u0yCl1d6vpy yH+a8RpAnCRlly3shioNOrpWGhpbNYugQW5VeLHnnjOICEhLb0PiGygfxUhsgE+I id6u9ywtHhQ8HFM4cxs+iB0J4cLj1PR8gvAp6Q== -----END CERTIFICATE-----Generated at Tue Jun 18 23:54:08 2024 by rpki-client on console-ams.rpki-client.org