$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234352e302f32342d3234203d3e203338343936.roa File: 3131342e33312e3234352e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: Z+dCTW5RAD04EpWtTCNeALXuADqeAjsNHRoDXEnwm3k= Subject key identifier: 5D:A6:2F:9F:E5:45:1F:3F:2C:57:48:E7:B9:C3:6D:F7:80:DF:E6:32 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 47CFFB45FAACC7ADC002A1C4225011A0FC023A5F Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234352e302f32342d3234203d3e203338343936.roa Signing time: Tue 20 Feb 2024 11:00:01 +0000 ROA not before: Tue 20 Feb 2024 10:55:01 +0000 ROA not after: Tue 18 Feb 2025 11:00:01 +0000 asID: 38496 IP address blocks: 114.31.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cf:fb:45:fa:ac:c7:ad:c0:02:a1:c4:22:50:11:a0:fc:02:3a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Feb 20 10:55:01 2024 GMT Not After : Feb 18 11:00:01 2025 GMT Subject: CN=5DA62F9FE5451F3F2C5748E7B9C36DF780DFE632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:d1:bb:70:27:43:4c:62:9f:56:24:49:b0:4f: 9f:08:5e:1a:0a:7d:37:c4:9b:0c:90:0e:2b:8d:9e: 1a:2f:a9:f8:89:ef:41:8b:a1:8e:16:29:6f:1f:14: d0:73:70:fd:59:10:85:36:7b:7f:be:6b:cc:4f:25: b8:fc:1c:2d:ce:b5:0c:3e:eb:f8:f4:ea:fd:48:7e: 38:9d:bf:5a:85:b7:fa:63:0a:63:2a:bc:d4:66:b5: 7c:57:85:c7:00:d4:26:23:fa:0a:a7:7f:89:6d:67: 08:01:47:bd:71:53:87:cf:d1:1d:fc:21:6c:62:a6: 3a:a2:d5:a9:51:19:6f:df:fc:4e:9a:5f:6e:3b:fc: b9:37:80:bb:e5:29:40:1b:6b:7b:65:0a:e8:2c:79: 93:a6:f2:a8:86:c7:7c:d2:fc:f7:72:a4:c6:81:ba: 75:19:35:75:dd:d2:64:82:37:c6:96:e4:07:1e:82: bb:35:71:6b:74:d8:17:d1:1b:f2:94:6f:6f:eb:44: ac:8d:dc:64:51:6d:57:6a:15:49:46:91:f1:e0:06: 93:c7:c0:1e:65:c7:d4:c9:0c:b8:31:0b:8d:be:8d: ef:25:27:2b:56:42:e8:30:4e:d2:70:00:a6:30:ea: 9b:30:2c:3e:9c:ca:6f:45:2b:4e:fa:7c:86:89:5f: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A6:2F:9F:E5:45:1F:3F:2C:57:48:E7:B9:C3:6D:F7:80:DF:E6:32 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234352e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.31.245.0/24 Signature Algorithm: sha256WithRSAEncryption 19:d8:df:c4:db:cf:14:83:ca:d8:fb:89:d0:58:80:02:65:ce: 36:dd:09:fa:73:7b:5e:5a:c6:3f:c7:d7:d4:51:21:a8:2e:ba: 22:0e:f8:bf:0a:09:ee:d6:17:a2:09:11:e4:3a:97:29:47:2f: 00:98:84:d3:ca:7d:be:8c:92:79:48:d8:ec:b0:06:e7:01:20: 35:2c:ed:ec:eb:f4:99:98:ef:7d:dc:c5:1b:e9:59:e2:56:63: 73:8c:18:0d:ba:07:42:fd:2c:b9:82:1f:49:9d:30:ee:bf:25: 7f:ad:2c:a4:0d:04:b2:8f:62:9f:c2:4a:6e:ec:26:4f:ef:cf: f4:c7:be:87:2f:4b:f4:d7:2d:ba:21:50:2b:65:73:3a:8f:53: d3:bb:2f:c9:3d:0a:74:7c:43:76:b8:0c:c8:b3:71:c4:f6:4b: c0:b0:5b:0f:7b:65:bd:b2:71:47:02:52:9e:e6:79:61:1b:3c: e4:78:b9:d1:4b:d7:2d:44:e5:cd:c7:5e:7d:d4:bf:3d:b1:e4: ba:e6:a1:73:02:7d:ab:e6:ce:50:b4:7f:05:f4:be:73:7f:16: 64:26:f9:f5:ef:1f:ec:9f:30:85:c5:ef:ad:5d:37:90:3f:9d: 4d:98:f0:7d:3d:60:9f:01:6b:05:1b:22:ac:5b:d3:e0:fe:f7: 63:9b:2e:64 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUR8/7Rfqsx63AAqHEIlARoPwCOl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDAyMjAxMDU1MDFaFw0yNTAyMTgxMTAwMDFaMDMxMTAvBgNV BAMTKDVEQTYyRjlGRTU0NTFGM0YyQzU3NDhFN0I5QzM2REY3ODBERkU2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD80btwJ0NMYp9WJEmwT58IXhoK fTfEmwyQDiuNnhovqfiJ70GLoY4WKW8fFNBzcP1ZEIU2e3++a8xPJbj8HC3OtQw+ 6/j06v1Ifjidv1qFt/pjCmMqvNRmtXxXhccA1CYj+gqnf4ltZwgBR71xU4fP0R38 IWxipjqi1alRGW/f/E6aX247/Lk3gLvlKUAba3tlCugseZOm8qiGx3zS/PdypMaB unUZNXXd0mSCN8aW5Acegrs1cWt02BfRG/KUb2/rRKyN3GRRbVdqFUlGkfHgBpPH wB5lx9TJDLgxC42+je8lJytWQugwTtJwAKYw6pswLD6cym9FK076fIaJX/35AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXaYvn+VFHz8sV0jnucNt94Df5jIwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNDJlMzMzMTJlMzIzNDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHIf9TANBgkqhkiG 9w0BAQsFAAOCAQEAGdjfxNvPFIPK2PuJ0FiAAmXONt0J+nN7XlrGP8fX1FEhqC66 Ig74vwoJ7tYXogkR5DqXKUcvAJiE08p9voySeUjY7LAG5wEgNSzt7Ov0mZjvfdzF G+lZ4lZjc4wYDboHQv0suYIfSZ0w7r8lf60spA0Eso9in8JKbuwmT+/P9Me+hy9L 9NctuiFQK2VzOo9T07svyT0KdHxDdrgMyLNxxPZLwLBbD3tlvbJxRwJSnuZ5YRs8 5Hi50UvXLUTlzcdefdS/PbHkuuahcwJ9q+bOULR/BfS+c38WZCb59e8f7J8whcXv rV03kD+dTZjwfT1gnwFrBRsirFvT4P73Y5suZA== -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org