$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338343936.roa File: 3131342e33312e3234372e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: q41iRpHny6vVqv0umNXx1w8jZh5EBoILebydPrzCyAE= Subject key identifier: 86:6B:41:22:99:25:02:CF:0F:CD:F5:41:A7:8A:FD:99:82:DC:22:E7 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 1890B8A42EA474DF96C09291740B3CEDE00673BB Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338343936.roa Signing time: Sun 10 Mar 2024 04:00:02 +0000 ROA not before: Sun 10 Mar 2024 03:55:02 +0000 ROA not after: Sun 09 Mar 2025 04:00:02 +0000 asID: 38496 IP address blocks: 114.31.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:90:b8:a4:2e:a4:74:df:96:c0:92:91:74:0b:3c:ed:e0:06:73:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Mar 10 03:55:02 2024 GMT Not After : Mar 9 04:00:02 2025 GMT Subject: CN=866B4122992502CF0FCDF541A78AFD9982DC22E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:c1:f0:e6:cf:45:8b:c8:97:88:fe:4b:5c: e4:6e:b7:28:36:8a:f5:eb:d2:c5:df:b1:09:68:9e: 75:85:99:83:e0:6a:81:11:ed:72:28:65:00:01:54: 7c:a2:b9:08:a9:83:64:5b:77:23:da:34:a4:5f:a8: 7b:68:ad:a8:3b:9c:30:b7:3b:55:6e:45:a5:c6:91: c1:28:92:50:a0:13:ee:96:a2:00:bc:50:2f:9c:31: fc:d1:64:d0:e7:a9:98:08:13:fe:f0:88:01:61:0f: 91:57:07:22:9f:55:84:fb:5b:2e:96:79:ee:59:eb: c5:23:0d:be:81:b7:de:24:c1:ed:ba:26:d5:04:a8: c9:7c:45:05:80:74:62:f2:a6:25:c2:28:d4:4c:00: 02:8e:54:24:e4:41:ce:74:b1:bc:11:95:89:2f:b5: 2f:7b:15:d6:8d:f8:b7:29:1f:4d:85:67:b1:61:61: 4a:db:d7:be:5e:1e:5d:02:1d:88:44:1f:9a:d9:47: 44:0f:b4:6f:50:16:3b:68:50:75:5b:22:0b:71:92: 78:22:f8:f8:04:ce:fe:6d:73:4d:ec:e6:a3:44:ce: ca:d6:fb:01:9f:fc:10:57:1b:d5:ff:18:41:04:df: 50:dd:03:5f:f2:87:4c:59:32:fa:14:e1:96:89:31: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6B:41:22:99:25:02:CF:0F:CD:F5:41:A7:8A:FD:99:82:DC:22:E7 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.31.247.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:90:aa:dc:83:ee:d0:41:41:1b:ed:9f:72:fa:5c:44:15:5c: 6c:68:80:7c:0c:f2:ba:56:23:32:81:0f:0b:61:11:d3:ac:40: cd:0e:c9:50:75:11:c3:1f:dd:a5:9f:87:64:cf:de:60:e8:d2: d9:f3:b6:58:51:bd:01:6b:1b:6f:71:23:8b:a9:06:59:ba:07: 80:f8:12:57:0f:f2:a2:8b:7a:08:48:86:43:44:1c:14:82:3a: 14:47:95:26:da:08:39:80:e3:5b:52:4d:fd:ac:ae:62:bb:d5: b0:b3:9e:59:67:a4:fc:d2:88:cd:6b:82:97:7d:82:d6:73:bf: 0a:be:b6:da:58:5a:27:b7:b4:0b:0a:4c:7e:2d:af:a4:c2:e1: 14:b2:68:75:d0:3e:a2:81:83:b3:95:13:6c:28:a2:c3:7e:df: e4:58:fc:d9:16:53:53:8d:de:b2:db:29:91:73:53:e7:4e:5f: f1:fc:1f:80:d3:fb:d2:de:69:c8:42:fd:dd:f1:52:52:b4:25: c2:2a:1e:3f:29:75:c8:38:55:68:a3:68:b9:36:6d:5c:f5:25: 3a:15:e8:cf:78:b1:3f:94:0a:09:a3:9c:de:5e:07:e8:6e:aa: 1d:92:1c:5e:81:49:4e:94:27:fc:a8:58:f7:fe:df:4f:49:ef: cd:9c:5b:c3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGJC4pC6kdN+WwJKRdAs87eAGc7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDAzMTAwMzU1MDJaFw0yNTAzMDkwNDAwMDJaMDMxMTAvBgNV BAMTKDg2NkI0MTIyOTkyNTAyQ0YwRkNERjU0MUE3OEFGRDk5ODJEQzIyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybcHw5s9Fi8iXiP5LXORutyg2 ivXr0sXfsQlonnWFmYPgaoER7XIoZQABVHyiuQipg2RbdyPaNKRfqHtorag7nDC3 O1VuRaXGkcEoklCgE+6WogC8UC+cMfzRZNDnqZgIE/7wiAFhD5FXByKfVYT7Wy6W ee5Z68UjDb6Bt94kwe26JtUEqMl8RQWAdGLypiXCKNRMAAKOVCTkQc50sbwRlYkv tS97FdaN+LcpH02FZ7FhYUrb175eHl0CHYhEH5rZR0QPtG9QFjtoUHVbIgtxkngi +PgEzv5tc03s5qNEzsrW+wGf/BBXG9X/GEEE31DdA1/yh0xZMvoU4ZaJMbtZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhmtBIpklAs8PzfVBp4r9mYLcIucwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNDJlMzMzMTJlMzIzNDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHIf9zANBgkqhkiG 9w0BAQsFAAOCAQEAnZCq3IPu0EFBG+2fcvpcRBVcbGiAfAzyulYjMoEPC2ER06xA zQ7JUHURwx/dpZ+HZM/eYOjS2fO2WFG9AWsbb3Eji6kGWboHgPgSVw/yoot6CEiG Q0QcFII6FEeVJtoIOYDjW1JN/ayuYrvVsLOeWWek/NKIzWuCl32C1nO/Cr622lha J7e0CwpMfi2vpMLhFLJoddA+ooGDs5UTbCiiw37f5Fj82RZTU43estspkXNT505f 8fwfgNP70t5pyEL93fFSUrQlwioePyl1yDhVaKNouTZtXPUlOhXoz3ixP5QKCaOc 3l4H6G6qHZIcXoFJTpQn/KhY9/7fT0nvzZxbww== -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org