$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36382e302f32342d3234203d3e203436303633.roa File: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (raw, json) Hash identifier: IYrgvyCjCXmDttoq8fGjccS1fVVmTtZWCeE52GEwc2U= Subject key identifier: DD:60:B3:76:7F:B4:D4:14:98:2D:CC:F8:C0:8C:78:72:82:2B:57:58 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 7349B5E26AD5B847B4CFC017F38377C538EDAC38 Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36382e302f32342d3234203d3e203436303633.roa Signing time: Fri 04 Oct 2024 12:02:25 +0000 ROA not before: Fri 04 Oct 2024 11:57:25 +0000 ROA not after: Fri 03 Oct 2025 12:02:25 +0000 asID: 46063 IP address blocks: 27.112.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:49:b5:e2:6a:d5:b8:47:b4:cf:c0:17:f3:83:77:c5:38:ed:ac:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: Oct 4 11:57:25 2024 GMT Not After : Oct 3 12:02:25 2025 GMT Subject: CN=DD60B3767FB4D414982DCCF8C08C7872822B5758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:48:94:af:97:9f:56:c1:d5:bd:76:74:5e: 0a:af:f6:c7:55:7d:f7:d1:f3:4e:13:aa:b1:e9:ce: b6:fc:13:00:a8:09:73:ce:f6:16:ad:a2:90:2a:e4: d4:4f:0c:83:f1:3e:45:e3:b1:08:ff:d9:64:98:99: 34:30:b5:d3:c3:9d:96:da:e6:4c:97:a4:16:30:61: c4:fc:ae:09:6e:17:31:ca:2a:44:62:29:9d:08:23: 84:c0:54:ec:41:d9:6c:cb:b5:d9:d1:9b:92:a3:88: bb:72:dc:1e:a3:9f:c0:06:86:b4:32:71:5d:92:7f: c8:d8:35:cb:ef:85:47:c1:1f:e4:35:5d:c6:00:1c: d8:59:40:25:c7:c4:5f:31:47:3e:ec:d1:fb:40:ca: 55:43:ec:e1:61:bf:af:78:55:23:25:57:95:85:cf: 41:75:96:db:37:c1:ee:52:96:34:3e:22:07:a5:95: ef:d5:fb:43:27:65:dc:16:95:0f:30:44:48:7c:1b: 22:64:13:91:d7:80:7b:70:01:57:e3:b9:9a:ee:00: d3:d4:24:81:b2:fb:d9:e9:6e:62:43:ba:0c:0b:13: 44:e7:14:a9:81:57:2d:af:bd:84:34:a8:56:cc:a6: b3:9b:1a:44:1b:bb:78:86:c8:b3:2c:dc:52:8e:b1: 74:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:B3:76:7F:B4:D4:14:98:2D:CC:F8:C0:8C:78:72:82:2B:57:58 X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36382e302f32342d3234203d3e203436303633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.112.68.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:5c:b6:de:33:84:b5:39:e5:4f:a3:fc:a6:2a:f2:00:8d:5e: 62:27:91:2e:c2:91:57:1f:e6:a7:58:48:b2:a0:6a:56:05:02: ca:5a:73:36:29:10:6f:d1:05:79:1b:95:6b:34:b7:c4:b1:96: 70:61:1e:ba:ba:79:1c:c6:6e:3d:58:1a:89:9c:a2:17:b7:a8: 0c:90:8f:55:f2:2c:28:7a:5b:ab:86:9d:ce:56:6b:dd:89:c1: 2c:fd:b2:fb:1a:20:72:2e:3b:08:67:33:32:9e:a0:2d:55:de: 18:1c:c9:e7:b9:8d:1f:b6:ce:60:dc:1f:96:96:34:e8:63:72: 88:54:cf:7b:3c:a1:9d:cc:f7:81:07:74:90:8b:69:65:d1:be: 4e:87:e9:a0:16:9b:b6:85:98:e1:d3:ee:e3:fd:1a:b7:a9:2c: 29:2e:5e:44:3a:2e:15:1b:23:14:76:3c:42:37:20:9a:50:ff: 4a:54:40:85:df:2c:78:90:43:19:49:e5:ce:08:c8:09:0f:8d: eb:bc:a6:bd:5a:20:89:76:41:ea:9c:95:ae:f7:cc:7a:03:1e: 4b:74:98:fa:93:45:54:ed:a4:8e:28:65:33:07:49:40:d0:3d: 82:44:bf:fe:77:a3:72:4e:7d:20:58:20:cf:83:f8:c6:3f:3d: b0:fc:c3:37 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUc0m14mrVuEe0z8AX84N3xTjtrDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNDEwMDQxMTU3MjVaFw0yNTEwMDMxMjAyMjVaMDMxMTAvBgNV BAMTKERENjBCMzc2N0ZCNEQ0MTQ5ODJEQ0NGOEMwOEM3ODcyODIyQjU3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOcEiUr5efVsHVvXZ0Xgqv9sdV fffR804TqrHpzrb8EwCoCXPO9hatopAq5NRPDIPxPkXjsQj/2WSYmTQwtdPDnZba 5kyXpBYwYcT8rgluFzHKKkRiKZ0II4TAVOxB2WzLtdnRm5KjiLty3B6jn8AGhrQy cV2Sf8jYNcvvhUfBH+Q1XcYAHNhZQCXHxF8xRz7s0ftAylVD7OFhv694VSMlV5WF z0F1lts3we5SljQ+Igelle/V+0MnZdwWlQ8wREh8GyJkE5HXgHtwAVfjuZruANPU JIGy+9npbmJDugwLE0TnFKmBVy2vvYQ0qFbMprObGkQbu3iGyLMs3FKOsXRFAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU3WCzdn+01BSYLcz4wIx4coIrV1gwHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhZDFlMTZhLTBhNGQtNDRiMS05 ODQ1LTljMGNkN2E2ZjM4Zi8wLzMyMzcyZTMxMzEzMjJlMzYzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzYzMDM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbcEQwDQYJKoZIhvcN AQELBQADggEBAGtctt4zhLU55U+j/KYq8gCNXmInkS7CkVcf5qdYSLKgalYFAspa czYpEG/RBXkblWs0t8SxlnBhHrq6eRzGbj1YGomcohe3qAyQj1XyLCh6W6uGnc5W a92JwSz9svsaIHIuOwhnMzKeoC1V3hgcyee5jR+2zmDcH5aWNOhjcohUz3s8oZ3M 94EHdJCLaWXRvk6H6aAWm7aFmOHT7uP9GrepLCkuXkQ6LhUbIxR2PEI3IJpQ/0pU QIXfLHiQQxlJ5c4IyAkPjeu8pr1aIIl2Qeqcla73zHoDHkt0mPqTRVTtpI4oZTMH SUDQPYJEv/53o3JOfSBYIM+D+MY/PbD8wzc= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org