$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135352e302f32342d3234203d3e20313337333436.roa File: 3232332e32372e3135352e302f32342d3234203d3e20313337333436.roa (raw, json) Hash identifier: v+qziIhZ22LPdalYJAUekebGiqM+IwJ0Etann4hcGIk= Subject key identifier: 76:BB:09:4A:DE:D5:94:C4:0E:4D:12:79:11:9E:23:CE:4C:A8:12:EF Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 0FF37F359B29977F2AEDF6408C0FA6F3A49E2614 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135352e302f32342d3234203d3e20313337333436.roa Signing time: Fri 24 May 2024 05:02:17 +0000 ROA not before: Fri 24 May 2024 04:57:17 +0000 ROA not after: Fri 23 May 2025 05:02:17 +0000 asID: 137346 IP address blocks: 223.27.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f3:7f:35:9b:29:97:7f:2a:ed:f6:40:8c:0f:a6:f3:a4:9e:26:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: May 24 04:57:17 2024 GMT Not After : May 23 05:02:17 2025 GMT Subject: CN=76BB094ADED594C40E4D1279119E23CE4CA812EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:0f:18:4d:60:70:f8:9b:21:31:5e:2b:43: 51:eb:12:92:ec:55:5d:1f:31:c6:3f:8d:e2:57:47: 86:2b:f5:48:dc:e1:2a:17:d9:5a:69:b5:4a:de:12: 92:ae:7c:0f:52:a2:4e:61:9e:b2:9e:13:cc:ff:f7: c7:7e:fe:5e:a2:34:68:19:e4:ef:d0:05:b8:04:e4: ad:6f:15:85:8c:31:42:78:94:40:15:71:f2:33:e8: 38:87:33:f0:e5:1e:b1:50:ca:b1:5f:47:fd:af:27: 25:96:a9:b3:2a:41:b0:a2:47:ff:9b:ff:32:12:d2: 73:14:c2:49:92:bb:83:74:9e:c2:df:e4:cf:60:1f: 3b:d7:eb:53:2a:1e:d3:e8:ea:aa:a7:09:a7:f2:9a: 11:b2:93:bc:02:b3:6b:ca:94:ad:49:59:64:d5:17: ae:52:7f:fd:62:4e:a8:49:84:a0:b9:12:f7:42:a7: 28:ba:e9:be:8b:80:9c:f1:cf:8a:e9:e9:2c:b3:09: 36:81:00:73:6e:c4:dc:75:7f:36:5b:13:99:68:0f: 90:c0:0c:38:35:5a:45:b4:91:df:b6:71:fb:a7:0a: 0b:78:ac:53:e4:c6:73:31:20:c9:50:f3:5d:8d:e5: 65:ed:79:73:76:92:bf:a1:a6:b2:fd:bf:44:b9:1b: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:09:4A:DE:D5:94:C4:0E:4D:12:79:11:9E:23:CE:4C:A8:12:EF X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135352e302f32342d3234203d3e20313337333436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.27.155.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:39:93:bc:4a:44:36:17:bc:4d:2f:63:96:54:bc:be:c9:bb: 3a:bc:4f:5d:09:93:96:86:22:1f:fd:3e:38:50:41:87:cf:02: 61:e5:e3:5c:70:8c:5c:28:85:36:05:f6:00:14:a3:7e:7d:bf: 16:bc:ca:cd:49:c6:2b:4d:62:11:7e:41:3d:05:94:29:d8:bb: b8:b6:e3:37:68:23:05:4e:3c:e5:5b:9c:81:f4:1a:04:7e:f5: 2c:7f:c5:16:02:92:08:b9:e4:f5:85:54:df:60:ef:60:e1:59: e8:22:a5:c7:45:3d:90:4c:3a:c2:c9:97:bd:cf:f9:e0:90:7b: 44:63:a2:c8:3e:df:09:05:dd:f5:d7:c7:4d:9b:c0:3e:72:7a: a1:6a:f2:0d:28:c9:d3:49:eb:bb:d4:29:90:ff:78:22:b6:31: 79:37:cf:b8:97:38:35:c2:2e:59:43:99:9b:de:8d:8d:da:a6: fa:14:ee:d5:d1:c7:c4:62:e4:a5:ad:f0:16:5a:7e:5d:f4:8d: 0f:35:d4:6b:65:40:0d:dc:25:be:c1:ef:61:67:2a:07:b9:2a: c1:fc:96:98:7e:af:e0:f7:f1:a2:0b:c9:ee:dc:f8:fe:a6:80: 98:72:c5:fb:17:41:3b:a7:99:85:9a:ab:73:90:79:97:ab:ad: 39:88:42:93 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUD/N/NZspl38q7fZAjA+m86SeJhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDA1MjQwNDU3MTdaFw0yNTA1MjMwNTAyMTdaMDMxMTAvBgNV BAMTKDc2QkIwOTRBREVENTk0QzQwRTREMTI3OTExOUUyM0NFNENBODEyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLQ8YTWBw+JshMV4rQ1HrEpLs VV0fMcY/jeJXR4Yr9Ujc4SoX2VpptUreEpKufA9Sok5hnrKeE8z/98d+/l6iNGgZ 5O/QBbgE5K1vFYWMMUJ4lEAVcfIz6DiHM/DlHrFQyrFfR/2vJyWWqbMqQbCiR/+b /zIS0nMUwkmSu4N0nsLf5M9gHzvX61MqHtPo6qqnCafymhGyk7wCs2vKlK1JWWTV F65Sf/1iTqhJhKC5EvdCpyi66b6LgJzxz4rp6SyzCTaBAHNuxNx1fzZbE5loD5DA DDg1WkW0kd+2cfunCgt4rFPkxnMxIMlQ812N5WXteXN2kr+hprL9v0S5G/EzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdrsJSt7VlMQOTRJ5EZ4jzkyoEu8wHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzIzMzJlMzIzNzJlMzEzNTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xubMA0GCSqG SIb3DQEBCwUAA4IBAQAOOZO8SkQ2F7xNL2OWVLy+ybs6vE9dCZOWhiIf/T44UEGH zwJh5eNccIxcKIU2BfYAFKN+fb8WvMrNScYrTWIRfkE9BZQp2Lu4tuM3aCMFTjzl W5yB9BoEfvUsf8UWApIIueT1hVTfYO9g4VnoIqXHRT2QTDrCyZe9z/ngkHtEY6LI Pt8JBd3118dNm8A+cnqhavINKMnTSeu71CmQ/3gitjF5N8+4lzg1wi5ZQ5mb3o2N 2qb6FO7V0cfEYuSlrfAWWn5d9I0PNdRrZUAN3CW+we9hZyoHuSrB/JaYfq/g9/Gi C8nu3Pj+poCYcsX7F0E7p5mFmqtzkHmXq605iEKT -----END CERTIFICATE-----Generated at Sun Nov 24 00:14:31 2024 by rpki-client on console-ams.rpki-client.org