$ rpki-client -vvf repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa File: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (raw, json) Hash identifier: EsGxngG7uzgcCB0XFixegsKZPgmEzud7tw6PfDHyHXM= Subject key identifier: 1C:D0:ED:C4:C2:8A:2D:9C:58:56:C1:BB:E2:CF:14:4D:F8:35:25:81 Certificate issuer: /CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Certificate serial: 6E6078E1FE787403C2F163F19D2CB9EC466C1ED2 Authority key identifier: 08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa Signing time: Wed 08 May 2024 09:30:35 +0000 ROA not before: Wed 08 May 2024 09:25:35 +0000 ROA not after: Wed 07 May 2025 09:30:35 +0000 asID: 152439 IP address blocks: 157.20.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Sep 2024 12:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:60:78:e1:fe:78:74:03:c2:f1:63:f1:9d:2c:b9:ec:46:6c:1e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Validity Not Before: May 8 09:25:35 2024 GMT Not After : May 7 09:30:35 2025 GMT Subject: CN=1CD0EDC4C28A2D9C5856C1BBE2CF144DF8352581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:26:f3:c6:8e:af:61:80:15:da:83:0c:7d: 0f:f3:58:23:7c:9b:55:92:1b:db:bc:41:04:12:11: 46:c9:ba:1d:37:8e:0f:1b:8d:c5:d2:40:36:1f:bd: 10:cb:ed:ed:26:39:7f:cd:5b:f4:0c:41:31:b2:90: f8:8a:55:6d:db:90:74:4d:55:0e:f0:ab:84:c6:68: d8:4e:e3:cc:c2:a4:01:47:c3:98:9a:7f:a6:0d:41: 27:b1:82:09:5e:13:ea:22:15:b3:eb:46:95:07:f0: 21:34:33:a0:be:ef:93:51:7a:cd:e3:07:6a:98:86: d6:bc:bb:0e:8e:2d:64:82:7a:e1:47:a2:5b:bb:d5: 94:b6:54:db:82:39:16:08:f5:16:96:86:af:55:45: 37:f9:14:64:77:f4:f8:d3:67:ff:69:89:df:53:3e: 7d:42:8c:5e:91:b4:80:7c:ec:8d:cf:42:4c:cd:bb: 92:3c:8f:40:7c:b0:a4:c8:d4:36:84:a7:bc:97:f0: 0c:b3:86:d2:5e:5c:32:51:c1:b8:81:9c:fa:71:78: 4e:f7:04:32:47:fc:a5:1b:9c:13:85:13:32:3a:a4: f2:c8:e1:6f:c5:4c:1d:3a:e8:80:02:29:bc:5c:d2: 43:8b:87:32:2a:dc:e2:ca:5c:af:0c:b0:e1:39:09: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D0:ED:C4:C2:8A:2D:9C:58:56:C1:BB:E2:CF:14:4D:F8:35:25:81 X509v3 Authority Key Identifier: keyid:08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.233.0/24 Signature Algorithm: sha256WithRSAEncryption 61:f3:eb:6c:0d:e4:59:b9:c6:9f:41:60:e1:04:60:40:f6:8d: f3:00:1f:73:3b:4e:d2:37:27:f5:2a:96:f6:e8:38:e2:0e:6f: 94:55:0f:fa:c9:94:d9:6b:1e:e6:d5:ee:ed:f5:ea:80:2f:b4: 1e:f3:15:b6:39:4e:0b:f2:42:c9:84:4e:4c:b2:6a:dd:5a:31: e7:47:f3:3e:10:97:f0:43:08:de:01:e6:ce:67:8c:11:25:4f: 26:ec:a8:0f:25:49:ef:6a:a2:00:47:d3:b7:e9:69:9c:7e:a1: a6:e1:57:9a:8a:49:06:56:f7:a9:88:50:4a:36:40:15:40:9b: d1:9a:01:a3:6e:bd:cf:d8:cb:9e:27:7d:f8:04:75:d6:f7:f7: f7:a4:7e:bd:60:24:8b:a7:6a:a2:4e:1e:58:6c:85:d4:92:ee: 13:23:c9:07:88:cc:fb:3e:3f:4f:20:b4:df:a8:2d:75:4c:04: 8f:ea:83:33:25:57:f0:75:6e:fa:06:51:a2:7c:51:77:b1:5f: 57:ab:a4:94:6c:ee:fa:3d:a3:6f:78:e3:05:98:60:71:99:5d: 73:f0:e9:91:dd:f5:49:c0:6d:55:a1:90:a2:14:0f:f1:aa:8a: 38:1f:d2:de:28:24:0b:a2:d5:22:e2:8c:40:8e:9b:78:32:c1: 2c:fd:6e:4d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbmB44f54dAPC8WPxnSy57EZsHtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlB MzFDNzVERjAeFw0yNDA1MDgwOTI1MzVaFw0yNTA1MDcwOTMwMzVaMDMxMTAvBgNV BAMTKDFDRDBFREM0QzI4QTJEOUM1ODU2QzFCQkUyQ0YxNDRERjgzNTI1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTSbzxo6vYYAV2oMMfQ/zWCN8 m1WSG9u8QQQSEUbJuh03jg8bjcXSQDYfvRDL7e0mOX/NW/QMQTGykPiKVW3bkHRN VQ7wq4TGaNhO48zCpAFHw5iaf6YNQSexggleE+oiFbPrRpUH8CE0M6C+75NRes3j B2qYhta8uw6OLWSCeuFHolu71ZS2VNuCORYI9RaWhq9VRTf5FGR39PjTZ/9pid9T Pn1CjF6RtIB87I3PQkzNu5I8j0B8sKTI1DaEp7yX8AyzhtJeXDJRwbiBnPpxeE73 BDJH/KUbnBOFEzI6pPLI4W/FTB066IACKbxc0kOLhzIq3OLKXK8MsOE5CbctAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHNDtxMKKLZxYVsG74s8UTfg1JYEwHwYDVR0j BBgwFoAUCGg+1cdIt5o0bvcFotz4CaMcdd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGNlZDE4ZC1hN2NjLTRiNDQtYWY0YS04NWYzMDRmOWViNmMvMC8wODY4M0VENUM3 NDhCNzlBMzQ2RUY3MDVBMkRDRjgwOUEzMUM3NURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlBMzFD NzVERi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4Y2VkMThkLWE3Y2MtNGI0NC1h ZjRhLTg1ZjMwNGY5ZWI2Yy8wLzMxMzUzNzJlMzIzMDJlMzIzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTpMA0GCSqG SIb3DQEBCwUAA4IBAQBh8+tsDeRZucafQWDhBGBA9o3zAB9zO07SNyf1Kpb26Dji Dm+UVQ/6yZTZax7m1e7t9eqAL7Qe8xW2OU4L8kLJhE5MsmrdWjHnR/M+EJfwQwje AebOZ4wRJU8m7KgPJUnvaqIAR9O36WmcfqGm4VeaikkGVvepiFBKNkAVQJvRmgGj br3P2MueJ334BHXW9/f3pH69YCSLp2qiTh5YbIXUku4TI8kHiMz7Pj9PILTfqC11 TASP6oMzJVfwdW76BlGifFF3sV9Xq6SUbO76PaNveOMFmGBxmV1z8OmR3fVJwG1V oZCiFA/xqoo4H9LeKCQLotUi4oxAjpt4MsEs/W5N -----END CERTIFICATE-----Generated at Thu Sep 26 10:05:09 2024 by rpki-client on console-fra.rpki-client.org