$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa File: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (raw, json) Hash identifier: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc= Subject key identifier: D3:1A:4C:FE:B4:2B:FE:63:3C:C6:95:DA:95:7E:99:F2:A2:37:A1:35 Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 23047027F837108D46AF8CFDC25C0AE1BEFFD6E1 Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa Signing time: Fri 06 Dec 2024 04:28:21 +0000 ROA not before: Fri 06 Dec 2024 04:23:21 +0000 ROA not after: Fri 05 Dec 2025 04:28:21 +0000 asID: 152403 IP address blocks: 157.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Feb 2025 00:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:04:70:27:f8:37:10:8d:46:af:8c:fd:c2:5c:0a:e1:be:ff:d6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Dec 6 04:23:21 2024 GMT Not After : Dec 5 04:28:21 2025 GMT Subject: CN=D31A4CFEB42BFE633CC695DA957E99F2A237A135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:25:9e:68:b5:8a:de:a5:db:fd:5e:b0:1e:dc: d4:24:93:f2:79:74:d6:31:59:e8:62:95:4b:b9:3a: d9:c5:e7:96:b8:3e:c9:63:c3:b5:cd:92:f9:8b:cc: 31:22:07:54:67:0f:78:e5:ce:a6:d2:a0:95:68:c7: ca:b0:2d:9e:2d:69:cd:74:e7:cd:18:c7:86:82:9d: 35:43:df:43:09:83:55:1a:a2:33:a1:c2:83:cd:52: a7:d4:c6:0e:0b:ff:80:68:23:d3:43:2b:b9:11:c3: 52:fd:2e:5f:ef:bf:f2:7e:8a:95:e5:d1:72:b2:fe: 21:2d:6b:f8:ed:c0:5c:ef:f8:6c:02:18:98:7c:e0: 87:2b:e9:bd:fb:45:63:a2:e0:a0:07:b5:d8:4f:f4: fc:67:a1:aa:af:92:eb:d1:53:b4:48:66:3f:db:93: cb:fd:df:51:23:95:b5:ec:11:e5:72:e3:ed:1d:e2: 02:a2:22:09:58:51:1b:2e:3c:c5:56:70:ac:3d:5b: e9:e9:d8:69:92:41:de:ff:08:ed:5f:9a:99:14:f8: 93:9b:3c:03:14:d6:a1:22:41:10:35:01:50:5b:61: eb:77:a5:f1:34:91:e0:9c:9c:ea:41:ee:13:d5:46: 67:a3:a7:19:4b:2b:f6:04:2b:ee:9d:b7:d0:4a:30: e1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1A:4C:FE:B4:2B:FE:63:3C:C6:95:DA:95:7E:99:F2:A2:37:A1:35 X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.132.0/24 Signature Algorithm: sha256WithRSAEncryption 38:b5:c6:28:13:bc:be:53:e8:90:d6:ad:9c:6d:af:3e:99:40: bf:9c:1a:98:2d:17:e6:f6:36:9f:88:de:57:6b:87:87:26:ba: 2b:fd:3c:a7:b7:ac:de:ba:4f:ec:37:3c:45:6f:a8:0e:df:14: 41:f3:b8:7e:3f:83:db:e2:ba:d0:fc:f3:3c:01:11:ae:ad:61: dd:4d:65:cd:7d:6b:2e:cb:22:d3:cc:d5:12:31:b8:a7:25:91: d3:67:59:08:00:b2:5a:87:c1:77:f1:d8:f4:29:3c:a1:6a:1d: 07:01:1f:86:53:af:6d:ac:a1:fb:1c:97:fb:ff:b0:f0:25:68: 60:78:e5:4c:d5:71:fa:cd:e3:c8:29:dc:e9:1f:c5:35:87:ed: 3c:3b:dc:ad:4f:6c:85:39:4c:d6:08:82:76:ca:bc:64:c4:5f: a4:21:48:00:c0:89:7a:96:58:bb:32:ba:1e:db:c3:58:4d:69: 1a:32:47:df:19:63:d8:5d:96:36:f1:ae:4a:59:f1:20:84:fc: 22:69:4d:d6:dd:d3:85:e5:ce:c4:47:9d:16:d8:ee:92:7c:39: 81:0f:e0:8e:ed:e9:5c:35:20:90:89:70:f8:12:39:3a:b8:8f: 56:2b:16:a5:25:04:08:90:6b:64:8a:8b:ca:2d:59:80:5f:bf: 1e:7c:70:58 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIwRwJ/g3EI1Gr4z9wlwK4b7/1uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNDEyMDYwNDIzMjFaFw0yNTEyMDUwNDI4MjFaMDMxMTAvBgNV BAMTKEQzMUE0Q0ZFQjQyQkZFNjMzQ0M2OTVEQTk1N0U5OUYyQTIzN0ExMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqJZ5otYrepdv9XrAe3NQkk/J5 dNYxWehilUu5OtnF55a4Psljw7XNkvmLzDEiB1RnD3jlzqbSoJVox8qwLZ4tac10 580Yx4aCnTVD30MJg1UaojOhwoPNUqfUxg4L/4BoI9NDK7kRw1L9Ll/vv/J+ipXl 0XKy/iEta/jtwFzv+GwCGJh84Icr6b37RWOi4KAHtdhP9PxnoaqvkuvRU7RIZj/b k8v931EjlbXsEeVy4+0d4gKiIglYURsuPMVWcKw9W+np2GmSQd7/CO1fmpkU+JOb PAMU1qEiQRA1AVBbYet3pfE0keCcnOpB7hPVRmejpxlLK/YEK+6dt9BKMOF7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0xpM/rQr/mM8xpXalX6Z8qI3oTUwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5YzE1Yjc4LTIwNzEtNDRkMS05 YTFkLWFkNmViMDlmYWUwOC8wLzMxMzUzNzJlMzIzMDJlMzEzMzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSEMA0GCSqG SIb3DQEBCwUAA4IBAQA4tcYoE7y+U+iQ1q2cba8+mUC/nBqYLRfm9jafiN5Xa4eH Jror/Tynt6zeuk/sNzxFb6gO3xRB87h+P4Pb4rrQ/PM8ARGurWHdTWXNfWsuyyLT zNUSMbinJZHTZ1kIALJah8F38dj0KTyhah0HAR+GU69trKH7HJf7/7DwJWhgeOVM 1XH6zePIKdzpH8U1h+08O9ytT2yFOUzWCIJ2yrxkxF+kIUgAwIl6lli7Mroe28NY TWkaMkffGWPYXZY28a5KWfEghPwiaU3W3dOF5c7ER50W2O6SfDmBD+CO7elcNSCQ iXD4Ejk6uI9WKxalJQQIkGtkiovKLVmAX78efHBY -----END CERTIFICATE-----Generated at Sat Feb 22 04:37:57 2025 by rpki-client