$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132322e302f32342d3234203d3e203338343936.roa File: 3131352e3137382e3132322e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: ZKEVOtJ70art6Z/QmnOKq6rL8wR30wj32R9KHwyodMU= Subject key identifier: 73:3D:47:97:FB:A9:4F:52:BA:1B:FB:9B:CE:16:48:05:7E:C6:32:C0 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 796EFD04153B7BDB2ADD20CD9B6EA787D210DA9E Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132322e302f32342d3234203d3e203338343936.roa Signing time: Fri 18 Oct 2024 08:39:52 +0000 ROA not before: Fri 18 Oct 2024 08:34:52 +0000 ROA not after: Fri 17 Oct 2025 08:39:52 +0000 asID: 38496 IP address blocks: 115.178.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 08:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:6e:fd:04:15:3b:7b:db:2a:dd:20:cd:9b:6e:a7:87:d2:10:da:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Oct 18 08:34:52 2024 GMT Not After : Oct 17 08:39:52 2025 GMT Subject: CN=733D4797FBA94F52BA1BFB9BCE1648057EC632C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fa:cf:20:28:35:29:de:c6:c5:83:21:53:38: 0c:6f:aa:b8:a9:ca:d6:90:b2:ce:84:c1:81:14:a6: 7d:36:cc:b6:d0:27:1d:db:0f:1d:cf:04:e1:2b:ed: eb:51:5c:b4:28:df:cc:9d:6e:d3:09:98:74:9e:16: 46:78:db:18:83:2b:56:0a:8e:b9:05:04:39:10:49: 14:61:61:f2:f3:63:7d:47:68:8e:f5:85:f6:2a:b2: 97:c4:06:c8:2a:1e:e6:5c:67:a3:05:53:85:d2:f3: 2b:f6:11:49:20:4c:e6:92:a0:d7:0c:c1:8d:c7:1b: 87:d9:72:cb:b7:41:ce:e9:3a:75:7b:4e:1f:d7:0e: 44:e8:c7:72:eb:8d:48:be:b8:21:74:da:ca:f3:3f: 1c:9a:f5:07:7c:1c:2c:a8:a2:a5:94:d4:3f:6a:35: 75:81:74:45:cd:29:7f:ac:4d:22:bc:20:e0:e1:d5: a4:b3:85:04:00:32:74:69:78:fb:3a:de:12:50:23: bc:bc:1b:39:21:a7:62:ff:ac:72:9f:f2:a4:4c:0f: d5:ae:83:fb:77:3c:4b:eb:c4:18:c2:7d:6a:ed:d7: 14:ab:e7:e4:43:2b:93:ef:6c:49:b4:b5:6c:b5:2f: a4:a3:09:00:f7:ff:3e:72:b7:79:82:53:82:d8:35: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3D:47:97:FB:A9:4F:52:BA:1B:FB:9B:CE:16:48:05:7E:C6:32:C0 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132322e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.122.0/24 Signature Algorithm: sha256WithRSAEncryption 48:68:25:00:30:85:6b:09:7d:4a:5f:26:a8:7c:13:ea:5a:c0: 41:1a:8c:66:50:6b:f2:99:01:f1:1f:cc:cc:8a:b3:03:25:19: 56:ac:ea:ff:27:96:f9:d7:04:0c:5e:da:a1:7f:15:8a:f9:24: 87:ae:fe:4e:da:27:a0:4a:63:44:9f:a2:20:24:f0:99:ef:85: 0b:c5:6e:06:95:36:31:44:7d:a3:01:c3:64:8b:c5:d5:4a:7a: 1a:fc:a7:69:53:7d:66:42:55:f7:59:cd:e6:79:79:5a:fd:b1: 54:55:31:97:35:76:cf:b7:aa:69:2d:7b:ae:7f:58:c4:c6:fd: 87:4b:df:c5:e8:42:91:f7:b0:a5:71:a5:2e:0d:86:b6:f0:c2: aa:68:6f:ee:8b:f0:73:2e:1d:18:be:eb:c3:34:b6:b9:db:33: 26:cc:0e:9c:e3:7b:05:c0:20:33:bc:1f:40:c4:c0:70:6b:3e: f9:c5:26:3f:e9:bf:00:14:0f:fd:00:8b:fa:a7:34:4c:a7:ef: da:ec:33:5b:0e:bd:96:98:28:33:81:43:76:d5:d5:af:9c:41: c3:3c:34:67:cf:2a:d0:c4:e2:07:25:29:65:3f:2c:ad:65:97: a4:f4:d4:2e:61:dd:90:52:cc:44:f2:15:4a:72:da:8e:0d:4a: 66:66:ac:11 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeW79BBU7e9sq3SDNm26nh9IQ2p4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDEwMTgwODM0NTJaFw0yNTEwMTcwODM5NTJaMDMxMTAvBgNV BAMTKDczM0Q0Nzk3RkJBOTRGNTJCQTFCRkI5QkNFMTY0ODA1N0VDNjMyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw+s8gKDUp3sbFgyFTOAxvqrip ytaQss6EwYEUpn02zLbQJx3bDx3PBOEr7etRXLQo38ydbtMJmHSeFkZ42xiDK1YK jrkFBDkQSRRhYfLzY31HaI71hfYqspfEBsgqHuZcZ6MFU4XS8yv2EUkgTOaSoNcM wY3HG4fZcsu3Qc7pOnV7Th/XDkTox3LrjUi+uCF02srzPxya9Qd8HCyooqWU1D9q NXWBdEXNKX+sTSK8IODh1aSzhQQAMnRpePs63hJQI7y8Gzkhp2L/rHKf8qRMD9Wu g/t3PEvrxBjCfWrt1xSr5+RDK5PvbEm0tWy1L6SjCQD3/z5yt3mCU4LYNeORAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcz1Hl/upT1K6G/ubzhZIBX7GMsAwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNTJlMzEzNzM4MmUzMTMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAc7J6MA0GCSqG SIb3DQEBCwUAA4IBAQBIaCUAMIVrCX1KXyaofBPqWsBBGoxmUGvymQHxH8zMirMD JRlWrOr/J5b51wQMXtqhfxWK+SSHrv5O2iegSmNEn6IgJPCZ74ULxW4GlTYxRH2j AcNki8XVSnoa/KdpU31mQlX3Wc3meXla/bFUVTGXNXbPt6ppLXuuf1jExv2HS9/F 6EKR97ClcaUuDYa28MKqaG/ui/BzLh0YvuvDNLa52zMmzA6c43sFwCAzvB9AxMBw az75xSY/6b8AFA/9AIv6pzRMp+/a7DNbDr2WmCgzgUN21dWvnEHDPDRnzyrQxOIH JSllPyytZZek9NQuYd2QUsxE8hVKctqODUpmZqwR -----END CERTIFICATE-----Generated at Sun Apr 6 10:53:04 2025 by rpki-client