$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132312e302f32342d3234203d3e203338343936.roa File: 3131352e3137382e3132312e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: QzBgUWLSutgcM2OCetIKwu698HDnGa6ULhcxtjCJ2DM= Subject key identifier: 72:F4:7D:A6:B0:0B:34:93:84:90:73:CA:44:5F:08:15:BE:FF:2B:EF Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 610DA4B87F538DD54A904E03EC5E27F0AB15A1BA Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132312e302f32342d3234203d3e203338343936.roa Signing time: Fri 18 Oct 2024 08:38:06 +0000 ROA not before: Fri 18 Oct 2024 08:33:06 +0000 ROA not after: Fri 17 Oct 2025 08:38:06 +0000 asID: 38496 IP address blocks: 115.178.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 08:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0d:a4:b8:7f:53:8d:d5:4a:90:4e:03:ec:5e:27:f0:ab:15:a1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Oct 18 08:33:06 2024 GMT Not After : Oct 17 08:38:06 2025 GMT Subject: CN=72F47DA6B00B3493849073CA445F0815BEFF2BEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:b3:fb:af:c9:5c:3c:52:96:d4:c4:60:c3: 81:dd:a0:ce:50:e8:fa:f5:45:c3:df:fd:0f:4b:85: d9:18:c6:c7:c2:f3:f6:8c:ab:76:80:6b:7d:02:95: e5:ab:4d:17:2b:cf:42:51:89:94:56:a4:a9:1e:11: 10:f6:e5:35:60:0c:ef:6a:e1:98:b1:95:e7:8c:56: c8:44:05:b6:bd:29:b3:45:48:ab:d8:44:80:02:ae: c0:32:f1:73:a1:6e:f9:5b:38:3d:d5:0a:fc:b8:92: a2:16:4a:c3:bf:f5:62:05:e6:20:c5:fc:b0:37:13: 63:d5:32:61:40:89:03:94:be:2d:40:3f:75:48:94: af:90:df:9e:1f:30:08:7c:98:e9:3e:b9:6b:55:1a: 05:4d:a7:f3:20:96:5f:fe:58:af:eb:62:18:7d:e3: 33:65:88:d5:38:99:40:53:84:ca:f8:99:a2:07:a0: 8f:08:df:56:66:ce:e7:ad:6b:4a:db:93:4f:01:e0: 67:4a:4d:fc:0c:1d:a5:31:ab:fe:d8:3a:3d:63:0b: 55:8d:bc:34:6d:d2:e3:64:7f:5e:4f:1b:ab:dd:07: 96:cd:1a:6a:33:35:79:9e:81:63:8e:80:5b:8a:b5: 2c:d6:9c:bb:9b:26:71:7c:a7:ce:19:b0:1a:5b:dc: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F4:7D:A6:B0:0B:34:93:84:90:73:CA:44:5F:08:15:BE:FF:2B:EF X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132312e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.121.0/24 Signature Algorithm: sha256WithRSAEncryption 87:77:10:08:11:2f:71:06:63:50:c1:38:22:97:de:27:e4:5e: e0:50:73:8a:3e:2d:20:d0:43:f7:d0:c7:29:da:9c:bf:dd:35: 42:76:e2:79:d3:a5:77:9e:5a:30:84:96:81:92:16:f3:bf:85: a1:26:7f:da:e2:10:97:84:a5:a8:66:d0:48:57:8b:5c:76:d4: 71:aa:09:4e:fb:de:32:86:de:7f:13:9c:a9:59:45:c6:45:04: 18:1c:ec:ca:2f:0f:56:60:89:65:c1:da:05:0f:c1:e2:79:81: 4a:ef:2d:39:2d:bf:f8:44:3c:17:9e:1b:34:52:67:d5:3e:a9: 4d:bb:e8:ae:83:8e:9e:67:db:b5:9a:ea:2e:b2:2e:0e:3d:c6: df:6e:83:e4:99:14:fa:ba:14:41:64:da:30:8e:5c:7e:67:1f: 26:f0:e2:8a:d5:0d:78:3e:58:93:8d:2b:c9:b8:64:7d:68:9f: 3a:a1:43:fd:e7:69:d4:8a:28:cd:e4:ba:dc:c9:74:19:db:cd: 75:e8:66:2f:32:b6:39:73:ef:c3:20:b1:c6:2e:8e:54:0d:97: 35:97:ee:f9:05:fb:9f:a3:c8:da:1e:bb:7c:a0:50:f8:6d:fe: e9:34:0e:f2:8c:34:37:5f:d9:9e:4d:76:6e:7f:17:f6:1a:0b: 76:11:e9:6c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYQ2kuH9TjdVKkE4D7F4n8KsVobowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDEwMTgwODMzMDZaFw0yNTEwMTcwODM4MDZaMDMxMTAvBgNV BAMTKDcyRjQ3REE2QjAwQjM0OTM4NDkwNzNDQTQ0NUYwODE1QkVGRjJCRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6LP7r8lcPFKW1MRgw4HdoM5Q 6Pr1RcPf/Q9LhdkYxsfC8/aMq3aAa30CleWrTRcrz0JRiZRWpKkeERD25TVgDO9q 4ZixleeMVshEBba9KbNFSKvYRIACrsAy8XOhbvlbOD3VCvy4kqIWSsO/9WIF5iDF /LA3E2PVMmFAiQOUvi1AP3VIlK+Q354fMAh8mOk+uWtVGgVNp/Mgll/+WK/rYhh9 4zNliNU4mUBThMr4maIHoI8I31Zmzueta0rbk08B4GdKTfwMHaUxq/7YOj1jC1WN vDRt0uNkf15PG6vdB5bNGmozNXmegWOOgFuKtSzWnLubJnF8p84ZsBpb3G7JAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcvR9prALNJOEkHPKRF8IFb7/K+8wHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNTJlMzEzNzM4MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAc7J5MA0GCSqG SIb3DQEBCwUAA4IBAQCHdxAIES9xBmNQwTgil94n5F7gUHOKPi0g0EP30Mcp2py/ 3TVCduJ506V3nlowhJaBkhbzv4WhJn/a4hCXhKWoZtBIV4tcdtRxqglO+94yht5/ E5ypWUXGRQQYHOzKLw9WYIllwdoFD8HieYFK7y05Lb/4RDwXnhs0UmfVPqlNu+iu g46eZ9u1muousi4OPcbfboPkmRT6uhRBZNowjlx+Zx8m8OKK1Q14PliTjSvJuGR9 aJ86oUP952nUiijN5LrcyXQZ28116GYvMrY5c+/DILHGLo5UDZc1l+75Bfufo8ja Hrt8oFD4bf7pNA7yjDQ3X9meTXZufxf2Ggt2Eels -----END CERTIFICATE-----Generated at Sun Apr 6 10:55:27 2025 by rpki-client