$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132372e302f32342d3234203d3e203338343936.roa File: 3131352e3137382e3132372e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: DZ70gdvBW9gRCE649wkQPRo7I0LmIdjK417yFlYsuJ0= Subject key identifier: CB:5E:9C:00:8B:70:AA:26:0D:0B:48:09:CE:D0:EE:8B:DB:68:3A:80 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 4966EBF40758EE4AAA95E2459140F784A953E233 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132372e302f32342d3234203d3e203338343936.roa Signing time: Fri 18 Oct 2024 08:43:20 +0000 ROA not before: Fri 18 Oct 2024 08:38:20 +0000 ROA not after: Fri 17 Oct 2025 08:43:20 +0000 asID: 38496 IP address blocks: 115.178.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:66:eb:f4:07:58:ee:4a:aa:95:e2:45:91:40:f7:84:a9:53:e2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Oct 18 08:38:20 2024 GMT Not After : Oct 17 08:43:20 2025 GMT Subject: CN=CB5E9C008B70AA260D0B4809CED0EE8BDB683A80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:53:a7:75:18:99:cf:ed:ab:1e:d4:b3:15: 66:ca:8f:6c:9a:34:dc:84:2a:e6:ae:af:e0:db:26: 13:ce:56:33:37:39:b6:bd:0e:46:42:a3:f8:76:af: 69:41:6a:8e:28:03:fe:36:20:35:fd:15:c9:82:03: aa:ff:da:b2:fb:27:89:b5:62:3b:60:92:0f:fa:ea: 5a:ed:a5:ab:24:12:ab:cb:a4:2d:46:6b:08:ff:0d: 91:ca:82:2c:75:8b:66:c9:1e:90:00:6f:cb:2a:83: 57:9a:0c:85:fa:6e:14:b8:2f:9b:47:86:3f:50:9d: 52:23:57:70:5b:b6:be:1e:ed:5e:84:78:31:f1:0b: 24:4e:65:2d:49:43:db:b7:f7:ce:e7:c7:26:f1:6f: ac:dc:7e:9c:d2:6e:73:86:b7:00:84:55:1e:cb:dc: a1:1f:a1:b6:54:e4:62:b7:70:7a:25:57:33:3b:06: 55:6c:69:8d:30:e5:a6:7f:04:5d:b2:76:68:05:73: 2f:bb:4b:47:4f:c6:c0:48:19:60:ea:55:d6:64:64: 93:a3:05:77:97:18:ae:40:7d:7d:98:50:65:ef:e0: e0:86:c7:9b:d3:8e:87:16:63:7a:1e:76:a7:cb:aa: 7f:e2:c5:40:4d:f6:40:af:3c:74:48:12:28:23:aa: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5E:9C:00:8B:70:AA:26:0D:0B:48:09:CE:D0:EE:8B:DB:68:3A:80 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132372e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.127.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:60:7f:95:2c:2c:7a:20:b0:6c:b6:3b:35:df:0b:23:3b:a8: 57:f9:b8:e7:9c:34:03:7d:08:32:8d:c9:a7:7d:4e:ed:cd:74: 5d:ef:18:b2:94:44:43:56:a0:6d:10:6f:60:41:27:70:e1:23: 2a:ea:a6:ab:e0:5c:22:f2:03:e2:08:2e:49:d5:4d:92:fa:c0: e7:1c:a6:88:a5:47:a8:04:e0:88:88:ce:6a:f5:19:9f:78:0a: 48:6b:29:44:38:83:9f:be:e3:3f:54:56:f9:29:dd:01:db:9e: cf:c9:3a:d6:30:ee:de:cf:46:82:9f:01:c5:df:c7:1a:81:7f: 71:77:6d:01:25:00:2c:8f:3e:b6:74:e5:ae:6f:df:38:00:e7: b4:94:ca:f7:d1:97:c5:ca:ed:c9:e4:0e:ea:cb:1e:ee:e0:6d: 35:7d:47:a2:bc:a2:54:6e:29:3d:8e:dd:e5:d6:2c:5c:2b:2e: 93:b2:b5:e0:cd:7c:2d:2e:40:97:98:e0:8a:1a:12:54:40:ff: eb:24:d9:b4:91:ec:64:ac:df:b7:9e:0d:82:c0:c2:0d:58:06: ce:74:75:96:f4:e4:6e:d2:e0:37:a5:e2:d8:c1:69:54:13:f6: b0:54:54:90:a3:55:99:bf:15:98:cb:ca:63:4c:0f:ec:3d:a3: 9c:9b:2f:ae -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSWbr9AdY7kqqleJFkUD3hKlT4jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDEwMTgwODM4MjBaFw0yNTEwMTcwODQzMjBaMDMxMTAvBgNV BAMTKENCNUU5QzAwOEI3MEFBMjYwRDBCNDgwOUNFRDBFRThCREI2ODNBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0lOndRiZz+2rHtSzFWbKj2ya NNyEKuaur+DbJhPOVjM3Oba9DkZCo/h2r2lBao4oA/42IDX9FcmCA6r/2rL7J4m1 Yjtgkg/66lrtpaskEqvLpC1Gawj/DZHKgix1i2bJHpAAb8sqg1eaDIX6bhS4L5tH hj9QnVIjV3Bbtr4e7V6EeDHxCyROZS1JQ9u3987nxybxb6zcfpzSbnOGtwCEVR7L 3KEfobZU5GK3cHolVzM7BlVsaY0w5aZ/BF2ydmgFcy+7S0dPxsBIGWDqVdZkZJOj BXeXGK5AfX2YUGXv4OCGx5vTjocWY3oedqfLqn/ixUBN9kCvPHRIEigjqrG1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUy16cAItwqiYNC0gJztDui9toOoAwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNTJlMzEzNzM4MmUzMTMyMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAc7J/MA0GCSqG SIb3DQEBCwUAA4IBAQCLYH+VLCx6ILBstjs13wsjO6hX+bjnnDQDfQgyjcmnfU7t zXRd7xiylERDVqBtEG9gQSdw4SMq6qar4Fwi8gPiCC5J1U2S+sDnHKaIpUeoBOCI iM5q9RmfeApIaylEOIOfvuM/VFb5Kd0B257PyTrWMO7ez0aCnwHF38cagX9xd20B JQAsjz62dOWub984AOe0lMr30ZfFyu3J5A7qyx7u4G01fUeivKJUbik9jt3l1ixc Ky6TsrXgzXwtLkCXmOCKGhJUQP/rJNm0kexkrN+3ng2CwMINWAbOdHWW9ORu0uA3 peLYwWlUE/awVFSQo1WZvxWYy8pjTA/sPaOcmy+u -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org