$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa File: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (raw, json) Hash identifier: ysxkC4kIqxwvEwQE+sSWB1b9gvUJ9jkbqF7aGHyWUYQ= Subject key identifier: 26:49:BE:69:74:43:6F:72:73:79:79:97:E8:23:8A:D6:DC:79:07:3C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 38C7C2939DB10A076481612086D793F1630E7714 Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa Signing time: Tue 21 May 2024 00:23:20 +0000 ROA not before: Tue 21 May 2024 00:18:20 +0000 ROA not after: Tue 20 May 2025 00:23:20 +0000 asID: 139981 IP address blocks: 157.66.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 06:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c7:c2:93:9d:b1:0a:07:64:81:61:20:86:d7:93:f1:63:0e:77:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: May 21 00:18:20 2024 GMT Not After : May 20 00:23:20 2025 GMT Subject: CN=2649BE6974436F7273797997E8238AD6DC79073C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:a6:ab:63:e3:8e:8f:7f:01:28:e7:70:89: 62:f0:63:2b:6a:94:96:f8:92:e1:fc:b8:f0:fa:61: 16:dc:89:b7:88:e3:a6:14:bf:f7:2d:ef:4e:fe:4c: a8:c2:46:52:a5:39:3c:c7:21:2e:e8:c0:ec:d5:a9: 27:62:4d:01:20:f8:12:6f:8e:30:86:2d:6a:75:4c: 61:c7:31:44:81:17:bb:78:8b:73:53:7a:32:e5:65: cc:60:29:53:91:17:44:3f:da:bf:de:03:5e:be:33: a1:fb:cb:bd:3e:1b:9a:02:6c:68:b0:fa:3d:08:b3: ba:92:89:d4:b9:9d:71:c3:be:4c:21:73:f9:e8:de: b4:d1:b1:bf:f3:74:2d:c8:8e:83:c5:41:16:23:a3: 92:2e:9c:90:a1:fd:05:1e:f6:ad:5e:b1:e1:b6:f5: 18:10:e4:56:9f:08:5a:4d:79:dc:dd:80:5d:39:01: 86:91:bc:5e:31:47:ee:fa:dd:d2:8c:42:6c:f4:ac: a7:67:0a:84:a0:2c:68:bf:67:d8:90:f1:e6:92:bd: 58:82:78:be:14:92:87:04:89:79:5d:97:5e:1f:49: f4:aa:1e:59:5d:6d:b8:44:56:73:28:f8:a1:2f:01: 33:e0:5e:b1:2e:1e:21:2c:bc:2c:c0:e4:e9:42:41: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:49:BE:69:74:43:6F:72:73:79:79:97:E8:23:8A:D6:DC:79:07:3C X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.84.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:aa:c9:f9:7b:e6:39:80:ba:a3:1f:31:ab:4e:52:e2:b7:b8: f2:1d:0b:2e:16:6b:8d:37:53:68:ee:7b:9c:8d:3e:49:8b:5c: 97:5a:46:f8:55:b5:63:36:1d:1e:56:59:0c:ec:a7:53:92:89: a0:3e:c8:16:57:2d:8e:ab:a1:dc:7a:b6:64:3d:1a:4f:0e:15: 63:a6:25:2c:1c:77:d5:5a:44:00:07:c5:b1:30:d4:68:32:98: 72:dd:a2:bd:13:91:33:f2:5d:8c:33:5e:88:d4:26:85:a2:d6: 8d:c4:4b:44:ca:5e:06:63:53:18:78:0d:87:19:0a:57:e0:43: 73:f5:b6:d0:c4:8a:d2:9f:5a:02:0a:dc:3d:59:ea:7c:b4:7a: fa:d1:8a:73:48:27:a9:d4:0d:db:34:86:94:bb:18:40:5a:ad: da:50:85:11:a1:4a:e4:1d:b7:28:5c:93:11:6a:d5:17:b6:dc: af:cc:cb:35:39:b4:0c:67:f7:cc:c5:c4:0a:77:5b:8d:a2:a6: e3:a1:be:6c:5c:60:e7:50:c3:b0:31:68:13:6d:5f:79:7f:a5: f9:44:c9:d4:e2:e6:e3:3f:a2:6c:8a:c7:09:c4:2a:f1:af:62: 03:0e:e1:3b:69:53:bf:48:98:47:31:15:1a:7c:45:46:16:9d: d6:4e:07:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOMfCk52xCgdkgWEghteT8WMOdxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNDA1MjEwMDE4MjBaFw0yNTA1MjAwMDIzMjBaMDMxMTAvBgNV BAMTKDI2NDlCRTY5NzQ0MzZGNzI3Mzc5Nzk5N0U4MjM4QUQ2REM3OTA3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKWaarY+OOj38BKOdwiWLwYytq lJb4kuH8uPD6YRbcibeI46YUv/ct707+TKjCRlKlOTzHIS7owOzVqSdiTQEg+BJv jjCGLWp1TGHHMUSBF7t4i3NTejLlZcxgKVORF0Q/2r/eA16+M6H7y70+G5oCbGiw +j0Is7qSidS5nXHDvkwhc/no3rTRsb/zdC3IjoPFQRYjo5IunJCh/QUe9q1eseG2 9RgQ5FafCFpNedzdgF05AYaRvF4xR+763dKMQmz0rKdnCoSgLGi/Z9iQ8eaSvViC eL4UkocEiXldl14fSfSqHlldbbhEVnMo+KEvATPgXrEuHiEsvCzA5OlCQea5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJkm+aXRDb3JzeXmX6COK1tx5BzwwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5N2M2ODJhLTQ0OGItNDBlMi1h ODhmLTE2ZGY4M2RkMzMzNy8wLzMxMzUzNzJlMzYzNjJlMzgzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CVDANBgkqhkiG 9w0BAQsFAAOCAQEAnarJ+XvmOYC6ox8xq05S4re48h0LLhZrjTdTaO57nI0+SYtc l1pG+FW1YzYdHlZZDOynU5KJoD7IFlctjquh3Hq2ZD0aTw4VY6YlLBx31VpEAAfF sTDUaDKYct2ivRORM/JdjDNeiNQmhaLWjcRLRMpeBmNTGHgNhxkKV+BDc/W20MSK 0p9aAgrcPVnqfLR6+tGKc0gnqdQN2zSGlLsYQFqt2lCFEaFK5B23KFyTEWrVF7bc r8zLNTm0DGf3zMXECndbjaKm46G+bFxg51DDsDFoE21feX+l+UTJ1OLm4z+ibIrH CcQq8a9iAw7hO2lTv0iYRzEVGnxFRhad1k4HoA== -----END CERTIFICATE-----Generated at Fri Jun 28 12:21:39 2024 by rpki-client on console-fra.rpki-client.org