$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230362e302f32342d3234203d3e203338343936.roa File: 3131362e36362e3230362e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: h1tcAgK6oOJY3qDwa7gnL4q4rLf1HdwD1DHiokn0Gr8= Subject key identifier: 5E:68:A1:E3:FD:96:56:4D:CE:22:0B:FD:4A:A0:28:94:90:44:7A:F6 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 1CE537DB9F5A72A187F7B2338E81ADE771AC11D3 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230362e302f32342d3234203d3e203338343936.roa Signing time: Fri 24 May 2024 05:02:18 +0000 ROA not before: Fri 24 May 2024 04:57:18 +0000 ROA not after: Fri 23 May 2025 05:02:18 +0000 asID: 38496 IP address blocks: 116.66.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 08:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e5:37:db:9f:5a:72:a1:87:f7:b2:33:8e:81:ad:e7:71:ac:11:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: May 24 04:57:18 2024 GMT Not After : May 23 05:02:18 2025 GMT Subject: CN=5E68A1E3FD96564DCE220BFD4AA0289490447AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:11:4e:dc:eb:49:8d:ea:16:54:82:47:b4: ba:d5:fa:aa:b0:32:2b:91:e7:78:1f:e9:cd:ac:5c: 96:6b:00:4f:bd:14:48:f6:be:cf:ff:b7:de:5c:c7: 97:78:a3:f0:b3:7a:05:c3:98:78:7f:71:c9:13:c9: 01:59:e7:66:aa:9c:07:5b:72:36:36:18:e7:9e:69: 5d:fa:a2:b1:66:db:6b:3b:8e:8c:d3:27:c2:4f:af: 07:09:65:55:3f:fe:8f:df:5f:0a:6c:97:53:99:ec: 85:64:b4:65:1f:29:5d:a3:73:97:d7:95:b0:29:a0: 21:f0:c2:d1:6c:64:03:73:5f:46:8b:f5:d7:cf:bc: 7a:66:54:fb:61:a7:90:bc:88:51:99:37:46:6e:72: f4:d6:d6:15:46:73:fb:e7:ae:a2:9b:be:72:74:cc: 8a:bb:ad:7a:5d:54:65:11:85:7a:e4:16:d7:a8:47: 64:60:6e:32:52:a8:41:8e:0b:59:82:32:6c:dc:29: 8f:a7:03:b1:9d:fa:f6:3b:2a:65:98:17:79:2b:0a: 10:6b:34:56:f4:f4:cb:48:51:d4:10:90:91:3c:fa: e1:04:10:5b:c8:74:4c:97:b9:a2:05:81:68:df:7f: 93:66:89:eb:26:fd:c3:03:21:19:96:99:9b:93:50: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:68:A1:E3:FD:96:56:4D:CE:22:0B:FD:4A:A0:28:94:90:44:7A:F6 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230362e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.66.206.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:ec:42:a7:94:85:c7:de:57:e3:df:f1:f7:e2:4d:57:3b:a4: ec:c2:5f:a0:d4:07:7c:b1:68:ad:b7:c2:1b:8b:37:55:9a:01: a4:10:c9:87:66:71:ae:60:38:78:be:86:8c:35:a3:91:82:44: 35:2d:d4:eb:2c:25:5c:59:0e:b7:85:71:17:ce:01:3a:00:9b: a4:50:01:d3:71:39:44:a4:96:1b:43:20:d4:67:2f:4d:9e:61: 32:e2:46:b8:8a:87:cd:e2:79:4e:0a:bd:11:44:b6:01:c1:f8: fe:d4:38:90:fd:07:43:c6:18:60:bb:83:c8:ac:58:3a:47:c4: 16:59:3f:56:a3:11:e1:a9:16:09:a9:4f:0b:ed:2b:c4:14:7d: 58:8a:72:74:4d:47:7f:3c:f4:d9:e8:55:5b:1c:8a:d7:f0:57: ce:18:c7:57:4b:01:a0:e2:32:c5:7a:11:f5:3d:b8:3a:85:99: 8c:25:f5:50:04:1e:bc:bc:34:ae:c2:60:61:59:7d:1a:8e:cd: a1:38:f3:43:84:25:95:71:31:10:f0:9b:27:7f:7e:5b:7e:d4: 1f:ab:6f:60:4f:0f:62:ab:3a:3e:74:78:ea:05:aa:6d:c5:34: b0:53:bb:c4:4e:b9:e8:85:73:ca:ac:fa:a4:ef:03:05:2a:1b: 16:6c:46:7c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHOU3259acqGH97IzjoGt53GsEdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDA1MjQwNDU3MThaFw0yNTA1MjMwNTAyMThaMDMxMTAvBgNV BAMTKDVFNjhBMUUzRkQ5NjU2NERDRTIyMEJGRDRBQTAyODk0OTA0NDdBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fhFO3OtJjeoWVIJHtLrV+qqw MiuR53gf6c2sXJZrAE+9FEj2vs//t95cx5d4o/CzegXDmHh/cckTyQFZ52aqnAdb cjY2GOeeaV36orFm22s7jozTJ8JPrwcJZVU//o/fXwpsl1OZ7IVktGUfKV2jc5fX lbApoCHwwtFsZANzX0aL9dfPvHpmVPthp5C8iFGZN0ZucvTW1hVGc/vnrqKbvnJ0 zIq7rXpdVGURhXrkFteoR2RgbjJSqEGOC1mCMmzcKY+nA7Gd+vY7KmWYF3krChBr NFb09MtIUdQQkJE8+uEEEFvIdEyXuaIFgWjff5Nmiesm/cMDIRmWmZuTUHjPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXmih4/2WVk3OIgv9SqAolJBEevYwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNjJlMzYzNjJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRCzjANBgkqhkiG 9w0BAQsFAAOCAQEAXuxCp5SFx95X49/x9+JNVzuk7MJfoNQHfLForbfCG4s3VZoB pBDJh2ZxrmA4eL6GjDWjkYJENS3U6ywlXFkOt4VxF84BOgCbpFAB03E5RKSWG0Mg 1GcvTZ5hMuJGuIqHzeJ5Tgq9EUS2AcH4/tQ4kP0HQ8YYYLuDyKxYOkfEFlk/VqMR 4akWCalPC+0rxBR9WIpydE1Hfzz02ehVWxyK1/BXzhjHV0sBoOIyxXoR9T24OoWZ jCX1UAQevLw0rsJgYVl9Go7NoTjzQ4QllXExEPCbJ39+W37UH6tvYE8PYqs6PnR4 6gWqbcU0sFO7xE656IVzyqz6pO8DBSobFmxGfA== -----END CERTIFICATE-----Generated at Sun Apr 6 10:55:13 2025 by rpki-client