$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa File: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (raw, json) Hash identifier: EIT34InsDQvMAPecWHmVfk6/bVvpUTORhpjoqMv/6U0= Subject key identifier: 02:82:93:41:E8:74:1E:91:E1:6F:17:3C:AB:AE:03:AB:51:46:DF:36 Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Certificate serial: 7CF4CBF69FA7D1FC6BFCAC048DD171B493618C02 Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa Signing time: Mon 27 May 2024 09:16:18 +0000 ROA not before: Mon 27 May 2024 09:11:18 +0000 ROA not after: Mon 26 May 2025 09:16:18 +0000 asID: 23671 IP address blocks: 111.92.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f4:cb:f6:9f:a7:d1:fc:6b:fc:ac:04:8d:d1:71:b4:93:61:8c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Validity Not Before: May 27 09:11:18 2024 GMT Not After : May 26 09:16:18 2025 GMT Subject: CN=02829341E8741E91E16F173CABAE03AB5146DF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:1d:61:0c:62:68:42:60:64:84:ea:c5:68: 06:20:99:9a:9d:6d:07:aa:64:43:56:6f:96:36:7a: bd:5c:31:11:b8:36:f2:aa:70:1f:d4:e8:cc:48:e1: 6a:be:03:68:df:34:c1:14:95:d1:d6:83:bf:22:cb: cf:f0:44:9e:91:fb:4f:e4:05:8d:48:f6:4d:65:69: 01:53:59:7b:ff:74:26:16:10:46:47:ef:a8:e8:24: ec:a6:78:45:ab:85:51:fe:ff:b6:20:32:43:93:66: bb:00:b7:5a:53:dc:e3:79:34:94:66:ba:1a:b7:ae: 20:10:35:35:1a:3e:fd:6b:be:fa:ca:38:44:9c:04: 09:ba:4c:c6:57:b7:9c:e9:d8:09:a3:11:7a:a4:12: ea:0f:04:c2:1a:31:d9:6c:a5:9c:66:ca:73:d4:65: 09:e5:3a:58:f1:b9:bf:14:86:7c:7f:ca:91:0c:16: 43:03:c9:c1:0c:fa:d6:ab:eb:d0:39:dd:4d:b7:b1: 41:6a:8e:0f:ae:76:29:b6:c1:c9:23:9c:b6:ea:a5: 95:85:46:c2:38:f3:b4:87:0f:ca:86:09:89:47:5f: 5f:20:52:e0:57:9c:18:89:3a:17:49:9e:ff:9d:ed: 91:24:28:08:f9:d8:05:0a:40:fe:1e:c5:84:97:2a: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:82:93:41:E8:74:1E:91:E1:6F:17:3C:AB:AE:03:AB:51:46:DF:36 X509v3 Authority Key Identifier: keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.92.171.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:b7:60:31:cc:12:9a:24:1d:1e:5c:5b:7f:f6:18:a7:7f:b4: 31:ab:40:4d:b5:4c:3a:a5:ce:c2:31:fb:e3:2e:63:3f:03:cf: a4:3f:3e:4b:3d:ea:60:a3:50:7b:82:2f:40:08:a3:43:87:4c: 83:86:77:81:1b:d0:ed:f6:72:76:55:03:c3:88:ad:96:ed:ca: 57:98:df:30:95:de:45:11:aa:a8:fb:7f:88:3d:e6:d3:2c:58: 16:09:37:55:a9:a9:71:c4:6f:d9:7f:72:d3:2c:67:d1:14:97: 81:b0:83:79:19:24:dd:9b:56:4f:2a:4f:29:43:80:9d:1a:be: 4c:37:8c:eb:ef:f0:f7:50:63:02:34:a7:b9:76:76:97:09:4c: f9:f3:d3:55:2b:62:70:e4:3f:f4:30:b4:c7:4e:e5:0d:c6:08: 72:2c:e7:e9:10:e9:f4:23:03:2f:ba:e0:67:43:e9:ea:3f:b3: 8f:7e:6d:bf:85:3d:78:d7:b7:57:f2:fd:66:87:29:3e:32:d0: 8a:4e:81:9f:64:2c:a2:a6:ae:28:28:53:a1:25:1e:5b:95:ef: 40:53:91:c6:f7:bf:d3:37:c1:31:f8:03:9f:dc:bf:66:40:23: b0:95:e5:e7:ff:85:b2:f9:c7:be:37:34:b0:c5:61:4a:d8:2a: e9:89:57:b3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfPTL9p+n0fxr/KwEjdFxtJNhjAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy MTg4ODY2RjAeFw0yNDA1MjcwOTExMThaFw0yNTA1MjYwOTE2MThaMDMxMTAvBgNV BAMTKDAyODI5MzQxRTg3NDFFOTFFMTZGMTczQ0FCQUUwM0FCNTE0NkRGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXyR1hDGJoQmBkhOrFaAYgmZqd bQeqZENWb5Y2er1cMRG4NvKqcB/U6MxI4Wq+A2jfNMEUldHWg78iy8/wRJ6R+0/k BY1I9k1laQFTWXv/dCYWEEZH76joJOymeEWrhVH+/7YgMkOTZrsAt1pT3ON5NJRm uhq3riAQNTUaPv1rvvrKOEScBAm6TMZXt5zp2AmjEXqkEuoPBMIaMdlspZxmynPU ZQnlOljxub8Uhnx/ypEMFkMDycEM+tar69A53U23sUFqjg+udim2wckjnLbqpZWF RsI487SHD8qGCYlHX18gUuBXnBiJOhdJnv+d7ZEkKAj52AUKQP4exYSXKtq9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAoKTQeh0HpHhbxc8q64Dq1FG3zYwHwYDVR0j BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4 ODY2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i YmRmLTc2NDU3MWZiYWNlNy8wLzMxMzEzMTJlMzkzMjJlMzEzNzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG9cqzANBgkqhkiG 9w0BAQsFAAOCAQEAn7dgMcwSmiQdHlxbf/YYp3+0MatATbVMOqXOwjH74y5jPwPP pD8+Sz3qYKNQe4IvQAijQ4dMg4Z3gRvQ7fZydlUDw4itlu3KV5jfMJXeRRGqqPt/ iD3m0yxYFgk3VampccRv2X9y0yxn0RSXgbCDeRkk3ZtWTypPKUOAnRq+TDeM6+/w 91BjAjSnuXZ2lwlM+fPTVSticOQ/9DC0x07lDcYIcizn6RDp9CMDL7rgZ0Pp6j+z j35tv4U9eNe3V/L9ZocpPjLQik6Bn2QsoqauKChToSUeW5XvQFORxve/0zfBMfgD n9y/ZkAjsJXl5/+FsvnHvjc0sMVhStgq6YlXsw== -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org