$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa File: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (raw, json) Hash identifier: FeggXCLXcgHSF8N14AAD1IKcFyaO/k5xFgL/JhRM1c4= Subject key identifier: 0A:19:D2:59:78:B9:B0:A6:A6:0A:92:6F:A0:AF:8C:B0:0B:FE:DD:71 Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 509DF45B57E0515FE736DF95249E9D2F82705F9C Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa Signing time: Thu 12 Dec 2024 05:00:03 +0000 ROA not before: Thu 12 Dec 2024 04:55:03 +0000 ROA not after: Thu 11 Dec 2025 05:00:03 +0000 asID: 152082 IP address blocks: 157.10.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 12:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9d:f4:5b:57:e0:51:5f:e7:36:df:95:24:9e:9d:2f:82:70:5f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Dec 12 04:55:03 2024 GMT Not After : Dec 11 05:00:03 2025 GMT Subject: CN=0A19D25978B9B0A6A60A926FA0AF8CB00BFEDD71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:2f:10:c8:a5:3e:f5:25:bd:bb:2f:e9:8a: 00:bb:71:76:87:79:ad:4d:d6:d8:2d:c0:c8:32:f3: 48:7d:11:12:40:92:c4:70:2f:77:fa:f5:64:78:f0: 4e:7a:85:ad:27:dd:1e:c0:c4:da:85:53:e7:df:9d: 13:33:56:9f:d4:47:6a:39:f6:fe:65:bf:1c:87:47: 54:14:7b:91:e3:a8:90:f2:18:b8:6b:80:09:bd:85: 61:61:8a:af:06:ff:5d:e6:a3:ad:d2:e7:4c:98:b0: 77:04:82:74:e8:c0:2e:1f:4c:55:04:cd:49:09:f2: d9:1a:19:ad:6d:12:14:58:6a:4f:4a:45:7d:c6:d3: f7:88:a1:3f:0c:cf:35:e0:48:7f:be:f5:d2:10:cd: b2:20:a9:f1:d0:b2:b2:d0:f6:03:88:ff:e2:53:b1: 52:b5:16:5f:d0:69:02:af:3f:38:b4:94:da:59:b1: 32:ea:98:a8:f5:f5:36:76:21:a9:1a:6d:81:1b:41: ec:23:09:e1:54:79:3b:4b:28:4b:38:27:28:c0:4d: 0d:fa:c4:1f:53:34:c4:ef:47:05:f5:52:e7:23:66: 40:fd:78:f8:64:52:c8:04:4c:c3:0b:4f:61:8f:c2: 54:40:8d:c8:d9:45:c0:be:64:3c:00:b3:79:d9:81: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:19:D2:59:78:B9:B0:A6:A6:0A:92:6F:A0:AF:8C:B0:0B:FE:DD:71 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.89.0/24 Signature Algorithm: sha256WithRSAEncryption 89:03:e2:18:9f:fa:6f:c2:8d:34:a1:a3:ef:03:1a:c9:ef:f8: 33:92:0b:89:5f:7b:8b:a0:4c:d3:8c:37:62:f5:56:49:ae:10: dd:c9:23:dc:fa:66:21:07:e9:1f:43:9a:b6:96:01:aa:19:4d: fd:57:37:de:2c:d3:01:29:a3:a1:36:72:7d:fb:4a:18:ab:62: ba:cf:47:cc:8f:c8:22:8c:64:12:8a:be:8f:87:89:62:b5:63: c6:23:57:a3:53:5e:bc:18:50:dc:21:1e:18:50:a5:72:03:49: 6b:7f:ad:a2:ee:98:4e:e5:d0:78:48:e8:29:6d:a4:cc:76:87: c8:5f:b4:60:ad:40:74:31:9d:2c:e0:36:e3:b6:47:e1:6a:fe: 54:1c:9c:d3:bb:0b:99:7c:ba:5f:58:66:a5:b3:05:3f:48:df: 7c:20:8e:d1:fa:48:b7:bf:94:4b:cb:ff:3c:a2:da:4b:06:63: d9:58:69:d6:8b:b3:e2:aa:10:61:72:89:0c:3f:a5:8d:88:aa: a4:44:81:b7:58:1a:6c:fe:aa:75:e9:5b:ff:7d:fb:42:19:b6: 50:65:ca:84:17:6e:70:06:11:41:a0:ce:24:f7:36:46:24:c0: 15:b6:6c:0f:07:51:dd:d7:be:75:ea:e0:87:82:ce:d9:ab:8c: d0:22:79:38 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUJ30W1fgUV/nNt+VJJ6dL4JwX5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNDEyMTIwNDU1MDNaFw0yNTEyMTEwNTAwMDNaMDMxMTAvBgNV BAMTKDBBMTlEMjU5NzhCOUIwQTZBNjBBOTI2RkEwQUY4Q0IwMEJGRURENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVri8QyKU+9SW9uy/pigC7cXaH ea1N1tgtwMgy80h9ERJAksRwL3f69WR48E56ha0n3R7AxNqFU+ffnRMzVp/UR2o5 9v5lvxyHR1QUe5HjqJDyGLhrgAm9hWFhiq8G/13mo63S50yYsHcEgnTowC4fTFUE zUkJ8tkaGa1tEhRYak9KRX3G0/eIoT8MzzXgSH++9dIQzbIgqfHQsrLQ9gOI/+JT sVK1Fl/QaQKvPzi0lNpZsTLqmKj19TZ2IakabYEbQewjCeFUeTtLKEs4JyjATQ36 xB9TNMTvRwX1UucjZkD9ePhkUsgETMMLT2GPwlRAjcjZRcC+ZDwAs3nZgcQhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUChnSWXi5sKamCpJvoK+MsAv+3XEwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0N2NkNWEyLWE3NDItNDUwYy1i MTkwLTUwMGU3NTQ1MjBkZS8wLzMxMzUzNzJlMzEzMDJlMzgzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0KWTANBgkqhkiG 9w0BAQsFAAOCAQEAiQPiGJ/6b8KNNKGj7wMaye/4M5ILiV97i6BM04w3YvVWSa4Q 3ckj3PpmIQfpH0OatpYBqhlN/Vc33izTASmjoTZyfftKGKtius9HzI/IIoxkEoq+ j4eJYrVjxiNXo1NevBhQ3CEeGFClcgNJa3+tou6YTuXQeEjoKW2kzHaHyF+0YK1A dDGdLOA247ZH4Wr+VByc07sLmXy6X1hmpbMFP0jffCCO0fpIt7+US8v/PKLaSwZj 2Vhp1ouz4qoQYXKJDD+ljYiqpESBt1gabP6qdelb/337Qhm2UGXKhBducAYRQaDO JPc2RiTAFbZsDwdR3de+dergh4LO2auM0CJ5OA== -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:05 2025 by rpki-client