$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39352e302f32342d3234203d3e203435373232.roa File: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (raw, json) Hash identifier: U7QS9bMS2+t1XHExH+JHZSXP/9sTh8XHPZioautpjoI= Subject key identifier: 8B:52:E4:24:D5:43:C6:98:E6:1C:DB:9E:6A:40:DC:B6:DD:62:DA:75 Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Certificate serial: 0C70B6E10FA9AC97631B15587EE4A8069B308E54 Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39352e302f32342d3234203d3e203435373232.roa Signing time: Mon 01 Jul 2024 01:03:48 +0000 ROA not before: Mon 01 Jul 2024 00:58:48 +0000 ROA not after: Mon 30 Jun 2025 01:03:48 +0000 asID: 45722 IP address blocks: 180.178.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 21:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:70:b6:e1:0f:a9:ac:97:63:1b:15:58:7e:e4:a8:06:9b:30:8e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Validity Not Before: Jul 1 00:58:48 2024 GMT Not After : Jun 30 01:03:48 2025 GMT Subject: CN=8B52E424D543C698E61CDB9E6A40DCB6DD62DA75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:ef:c2:1b:9f:7a:96:5c:67:cf:5d:ce:51: 50:2d:6d:23:93:aa:7f:89:ff:75:52:98:d5:92:37: ec:77:ed:1f:70:ba:c8:7c:d8:70:50:a2:be:5c:1b: 6a:25:f5:d3:f8:76:53:1a:db:1c:a8:ae:83:45:04: 49:e0:5a:d8:58:cc:29:9e:de:a9:c6:6e:1e:b3:da: 53:7f:1a:0f:b2:51:89:d8:19:cd:10:73:92:66:cf: 74:5e:ff:d3:e6:14:e7:9f:6f:08:bb:ed:92:b6:fb: cb:57:0e:9c:51:44:94:97:d2:e1:01:af:e2:9c:8f: 86:61:50:ce:ec:33:9a:f3:48:d1:af:5b:09:21:82: 8b:e3:b0:3c:19:7f:c1:cf:b2:e0:76:23:1b:c7:40: c5:6f:75:ed:b0:a2:00:72:25:c2:e9:6c:94:cb:47: 8f:b3:ca:76:ad:cd:47:81:e4:ee:29:af:ff:d9:c9: 77:b0:39:85:dc:b7:1e:34:db:30:25:de:37:b5:1a: df:5e:d1:d1:0a:99:0c:03:4a:09:29:76:f4:f8:ae: a8:56:9b:9a:93:06:47:79:91:4d:13:99:f2:4a:5d: cd:62:08:4a:c0:6d:0c:03:a9:f2:57:3e:e9:db:08: a7:70:1e:f7:5a:ce:12:2e:2c:6a:49:d0:7b:e4:5b: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:E4:24:D5:43:C6:98:E6:1C:DB:9E:6A:40:DC:B6:DD:62:DA:75 X509v3 Authority Key Identifier: keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39352e302f32342d3234203d3e203435373232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.178.95.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:de:bf:d7:cc:b8:1a:8c:ee:cd:e0:5d:5e:d1:82:5e:e7:5c: d5:f9:5d:2f:ab:7b:b0:be:bc:25:c4:b3:c4:c6:ec:26:84:a1: 88:dd:c3:67:2f:ff:1b:eb:f9:8e:13:c0:9d:8d:15:a4:06:f0: 44:66:28:2d:fa:4d:19:cd:ae:8c:29:12:8c:8f:09:da:64:92: 3d:7c:35:06:74:34:0c:17:a7:83:13:5a:07:ac:58:d2:5b:2f: 83:75:9a:48:33:9c:59:c7:2b:2e:11:ca:13:49:52:18:89:41: 32:0f:86:61:55:5b:7b:37:a6:4f:30:e9:90:1e:17:ed:eb:32: c1:7e:bf:03:cb:e4:3f:6e:4a:0b:46:99:c6:c4:60:9b:cf:97: 03:51:a8:8a:1a:10:fa:7c:c2:e0:c3:c6:56:b0:8b:53:45:20: 35:a7:ee:a0:96:81:fe:3a:df:de:97:f5:f9:a2:f1:30:df:33: 54:bc:b6:ea:0e:6c:73:91:4c:95:de:1a:0b:5b:d4:b8:c2:e5: 6a:18:e6:cc:b9:76:e2:35:b2:65:13:08:d5:96:20:7c:f0:82: 14:40:0a:5c:cc:94:f7:20:28:f1:4a:8a:31:1a:fb:27:11:d4: 98:a1:1c:77:4c:d7:75:b9:67:19:e7:3c:6a:86:8d:d1:98:94: 5e:d0:5b:73 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDHC24Q+prJdjGxVYfuSoBpswjlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1 REUwRUEwQzAeFw0yNDA3MDEwMDU4NDhaFw0yNTA2MzAwMTAzNDhaMDMxMTAvBgNV BAMTKDhCNTJFNDI0RDU0M0M2OThFNjFDREI5RTZBNDBEQ0I2REQ2MkRBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGu/CG596llxnz13OUVAtbSOT qn+J/3VSmNWSN+x37R9wush82HBQor5cG2ol9dP4dlMa2xyoroNFBEngWthYzCme 3qnGbh6z2lN/Gg+yUYnYGc0Qc5Jmz3Re/9PmFOefbwi77ZK2+8tXDpxRRJSX0uEB r+Kcj4ZhUM7sM5rzSNGvWwkhgovjsDwZf8HPsuB2IxvHQMVvde2wogByJcLpbJTL R4+zynatzUeB5O4pr//ZyXewOYXctx402zAl3je1Gt9e0dEKmQwDSgkpdvT4rqhW m5qTBkd5kU0TmfJKXc1iCErAbQwDqfJXPunbCKdwHvdazhIuLGpJ0HvkW43DAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUi1LkJNVDxpjmHNueakDctt1i2nUwHwYDVR0j BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw RUEwQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2MDdkOTI5LTRjYTgtNGY1My1h Mjk4LTVlMzNiZTFmODYwNC8wLzMxMzgzMDJlMzEzNzM4MmUzOTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTM3MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALSyXzANBgkqhkiG 9w0BAQsFAAOCAQEAa96/18y4GozuzeBdXtGCXudc1fldL6t7sL68JcSzxMbsJoSh iN3DZy//G+v5jhPAnY0VpAbwRGYoLfpNGc2ujCkSjI8J2mSSPXw1BnQ0DBengxNa B6xY0lsvg3WaSDOcWccrLhHKE0lSGIlBMg+GYVVbezemTzDpkB4X7esywX6/A8vk P25KC0aZxsRgm8+XA1GoihoQ+nzC4MPGVrCLU0UgNafuoJaB/jrf3pf1+aLxMN8z VLy26g5sc5FMld4aC1vUuMLlahjmzLl24jWyZRMI1ZYgfPCCFEAKXMyU9yAo8UqK MRr7JxHUmKEcd0zXdblnGec8aoaN0ZiUXtBbcw== -----END CERTIFICATE-----Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org