$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa File: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (raw, json) Hash identifier: mpjegSKtEmRhj4ammyJHEgX4YPsDmDbnAwrsvANHuHc= Subject key identifier: AA:81:CD:9C:7C:FB:0A:F1:72:EE:CB:49:07:02:B9:43:29:D8:B8:62 Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 53BAB86801A31BAB683358480743755A559E71D8 Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa Signing time: Fri 09 Feb 2024 09:39:16 +0000 ROA not before: Fri 09 Feb 2024 09:34:16 +0000 ROA not after: Fri 07 Feb 2025 09:39:16 +0000 asID: 152365 IP address blocks: 157.15.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jul 2024 19:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ba:b8:68:01:a3:1b:ab:68:33:58:48:07:43:75:5a:55:9e:71:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Feb 9 09:34:16 2024 GMT Not After : Feb 7 09:39:16 2025 GMT Subject: CN=AA81CD9C7CFB0AF172EECB490702B94329D8B862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:a8:27:db:46:75:1e:04:78:7c:e1:77:cd: 24:80:01:b3:1d:12:05:f3:7e:ca:6f:16:e9:d8:fc: 2a:96:4d:cb:9b:e6:57:ac:ac:0e:28:9a:b1:e6:a1: 2c:00:2c:2d:42:e2:a4:2a:62:74:e2:71:a5:dd:eb: 5a:1e:94:8e:c2:8a:f9:fc:50:f6:4e:bf:3f:87:76: d0:35:d6:3e:21:c3:9f:15:ec:80:a5:7b:15:04:e4: ec:bd:01:77:88:09:b9:ba:23:ee:ef:40:c3:7c:43: 75:4e:4d:54:3b:59:3d:0c:3b:8c:3e:da:b1:b6:23: e8:90:2e:3c:20:91:b4:08:c2:c4:5f:8e:1a:be:94: cb:6e:05:8c:98:30:7d:25:1b:9d:44:0b:77:92:bf: a8:ab:66:05:31:97:b1:67:b9:43:73:4c:12:92:51: c6:59:bb:cd:86:35:ac:72:07:df:71:6a:b6:0f:54: a2:e5:5f:ea:17:22:8b:44:2f:fb:8f:2b:48:c1:44: 44:0c:54:8e:75:e4:44:1a:49:a4:63:20:01:a5:b9: 0e:16:d2:d0:ab:65:0f:17:73:14:3b:d8:b3:11:a6: 0d:54:dd:f8:d5:ba:b1:de:12:66:db:b0:10:64:77: 1d:94:f5:30:c7:f8:19:b3:ef:43:a4:99:ee:0a:1b: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:81:CD:9C:7C:FB:0A:F1:72:EE:CB:49:07:02:B9:43:29:D8:B8:62 X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.42.0/24 Signature Algorithm: sha256WithRSAEncryption ad:86:e5:76:a7:d5:0d:de:fa:f2:c6:39:b9:a6:17:80:fe:3a: f0:a0:2c:b6:b9:25:bc:d9:bc:95:5e:2f:ea:91:a1:10:4d:b1: af:00:a8:e6:9c:fb:88:0d:68:da:df:4b:30:f0:c3:76:b0:2d: 95:69:18:2a:8b:cf:fc:3f:27:18:e6:13:66:ad:51:d1:77:ad: f6:40:68:fd:27:1b:0f:1a:f7:5f:bc:64:8d:be:af:35:26:2e: 23:0d:56:83:53:19:0b:9c:77:6e:a4:bd:19:f3:e5:4f:a6:c0: dd:75:54:59:8a:12:d3:15:49:62:a1:fd:24:7a:0c:31:41:ab: 91:db:10:0c:5f:77:c4:24:b0:5e:06:94:12:ef:55:49:5f:9b: 4e:c4:64:a2:dc:bb:93:90:27:16:12:03:67:b7:8e:b4:73:83: ab:e0:0f:cf:66:86:0c:0b:96:9b:d5:9d:e9:72:bc:38:d9:13: 36:d1:f3:84:dc:e1:74:1d:1f:26:43:b5:75:79:29:19:72:a2: 8a:72:cc:d0:53:7a:4b:aa:23:e3:57:f3:b9:6b:46:1e:0f:9d: dc:fa:09:c1:76:f9:dc:c7:2a:c3:6d:28:6a:08:65:7b:be:69: 24:3d:1d:25:5e:23:f0:40:83:5c:5b:d9:ee:ce:f0:94:d4:1d: c3:bf:45:17 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUU7q4aAGjG6toM1hIB0N1WlWecdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNDAyMDkwOTM0MTZaFw0yNTAyMDcwOTM5MTZaMDMxMTAvBgNV BAMTKEFBODFDRDlDN0NGQjBBRjE3MkVFQ0I0OTA3MDJCOTQzMjlEOEI4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRqgn20Z1HgR4fOF3zSSAAbMd EgXzfspvFunY/CqWTcub5lesrA4omrHmoSwALC1C4qQqYnTicaXd61oelI7Civn8 UPZOvz+HdtA11j4hw58V7IClexUE5Oy9AXeICbm6I+7vQMN8Q3VOTVQ7WT0MO4w+ 2rG2I+iQLjwgkbQIwsRfjhq+lMtuBYyYMH0lG51EC3eSv6irZgUxl7FnuUNzTBKS UcZZu82GNaxyB99xarYPVKLlX+oXIotEL/uPK0jBREQMVI515EQaSaRjIAGluQ4W 0tCrZQ8XcxQ72LMRpg1U3fjVurHeEmbbsBBkdx2U9TDH+Bmz70Okme4KG1TjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqoHNnHz7CvFy7stJBwK5QynYuGIwHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1ZGU3MWFjLTdmOWYtNDdkNC05 NTMzLTlkZjgyYWZjNTk3My8wLzMxMzUzNzJlMzEzNTJlMzQzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PKjANBgkqhkiG 9w0BAQsFAAOCAQEArYbldqfVDd768sY5uaYXgP468KAstrklvNm8lV4v6pGhEE2x rwCo5pz7iA1o2t9LMPDDdrAtlWkYKovP/D8nGOYTZq1R0Xet9kBo/ScbDxr3X7xk jb6vNSYuIw1Wg1MZC5x3bqS9GfPlT6bA3XVUWYoS0xVJYqH9JHoMMUGrkdsQDF93 xCSwXgaUEu9VSV+bTsRkoty7k5AnFhIDZ7eOtHODq+APz2aGDAuWm9Wd6XK8ONkT NtHzhNzhdB0fJkO1dXkpGXKiinLM0FN6S6oj41fzuWtGHg+d3PoJwXb53Mcqw20o aghle75pJD0dJV4j8ECDXFvZ7s7wlNQdw79FFw== -----END CERTIFICATE-----Generated at Sat Jun 29 20:37:22 2024 by rpki-client on console-ams.rpki-client.org