$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa File: 3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa (raw, json) Hash identifier: mRd4/G4FTZTwE9Vm5zme5kUFIXf5pCM1yj+b57u9+Q4= Subject key identifier: AB:6E:B6:50:5B:F8:7B:A5:4A:00:46:E1:A5:9B:2C:80:88:B7:CE:E8 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 541B4F72B04EDEA157F3F9931B96D449B29FD110 Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa Signing time: Thu 11 Jan 2024 08:00:01 +0000 ROA not before: Thu 11 Jan 2024 07:55:01 +0000 ROA not after: Thu 09 Jan 2025 08:00:01 +0000 asID: 9794 IP address blocks: 115.178.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1b:4f:72:b0:4e:de:a1:57:f3:f9:93:1b:96:d4:49:b2:9f:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jan 11 07:55:01 2024 GMT Not After : Jan 9 08:00:01 2025 GMT Subject: CN=AB6EB6505BF87BA54A0046E1A59B2C8088B7CEE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:18:27:06:b8:bb:d7:f7:60:f8:77:1e:c2: 09:c6:ec:07:2a:75:c9:ad:4a:3f:6a:d5:87:bf:64: 18:39:94:1b:99:f8:e7:58:da:3f:6f:9c:f9:8c:e1: 15:ce:86:0f:0c:8d:12:8c:97:ec:54:5c:b2:e9:c9: e3:7d:7d:40:a8:3a:e7:34:71:a9:ae:50:d4:83:65: e3:21:5c:a0:fd:11:5e:4a:a1:04:26:5e:10:21:5d: c0:a4:de:9c:de:5b:94:94:4a:02:fb:af:bd:77:d4: a1:1c:53:f4:e4:81:a6:58:63:c7:95:66:0d:f3:c9: 3b:16:b7:ef:30:de:9a:c1:1e:cd:dd:5e:cd:8d:04: d6:5d:db:44:59:a1:20:db:8e:2e:30:16:87:4e:6b: c2:47:15:fc:21:85:49:c1:24:88:df:19:8f:7f:90: b3:82:cd:0d:2a:1f:a5:d5:a9:c6:c9:24:c5:b7:9a: 3d:36:17:b4:12:0e:d2:75:e4:52:a4:d1:07:90:35: 44:5c:f1:cb:37:34:73:7c:dd:86:14:15:e1:6b:07: 7d:87:61:a0:98:6b:96:12:47:b1:65:0b:ac:f5:fc: 2a:b6:28:58:1c:b5:b5:f5:b2:de:47:bf:ce:b8:8e: 89:b3:19:28:2b:67:99:a9:2a:7c:b7:f0:5e:2d:78: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6E:B6:50:5B:F8:7B:A5:4A:00:46:E1:A5:9B:2C:80:88:B7:CE:E8 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.136.0/23 Signature Algorithm: sha256WithRSAEncryption 31:dd:65:13:d5:b3:73:f6:6e:1c:92:90:c1:2e:cd:52:d6:c9: d0:c8:50:98:2b:d5:7f:ca:ca:5b:5b:d9:15:40:28:79:47:3c: cc:7a:b6:91:9b:ee:52:55:67:52:9b:fa:5a:24:83:9f:96:c7: 2b:13:df:70:cd:16:b0:85:fe:d3:20:ae:2c:d6:78:01:65:29: 95:f7:53:df:ca:43:3a:5a:2a:40:47:14:53:26:bb:f8:fb:7e: 3e:41:dc:d5:3d:b4:6a:c6:5e:4e:94:6d:40:e1:f7:0b:55:a6: e4:41:64:94:b7:61:8e:24:bb:bc:30:a5:27:9c:fd:83:3c:c5: 66:bc:94:cd:fe:88:9b:5f:21:29:b2:92:0d:06:4f:ed:13:cf: a7:d5:c8:10:48:7b:d8:e0:e9:05:43:9c:55:80:82:b8:ec:73: 89:18:1e:79:ef:77:02:b9:ca:0d:a7:e6:8a:a9:98:3e:e7:7f: 02:1c:2d:0c:2a:f6:71:f3:36:a7:6e:c3:4c:bd:c7:1c:05:4c: 31:58:1b:fa:8a:bd:3f:01:de:21:46:81:b9:d0:75:50:4c:52: 40:a9:18:84:1d:53:87:1d:51:23:ae:08:60:79:06:38:85:1e: 0d:0e:bb:a9:ba:3a:c3:25:b3:77:cc:e6:b8:e0:4a:aa:95:b6: eb:80:29:ea -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVBtPcrBO3qFX8/mTG5bUSbKf0RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNDAxMTEwNzU1MDFaFw0yNTAxMDkwODAwMDFaMDMxMTAvBgNV BAMTKEFCNkVCNjUwNUJGODdCQTU0QTAwNDZFMUE1OUIyQzgwODhCN0NFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifRgnBri71/dg+HcewgnG7Acq dcmtSj9q1Ye/ZBg5lBuZ+OdY2j9vnPmM4RXOhg8MjRKMl+xUXLLpyeN9fUCoOuc0 camuUNSDZeMhXKD9EV5KoQQmXhAhXcCk3pzeW5SUSgL7r7131KEcU/TkgaZYY8eV Zg3zyTsWt+8w3prBHs3dXs2NBNZd20RZoSDbji4wFodOa8JHFfwhhUnBJIjfGY9/ kLOCzQ0qH6XVqcbJJMW3mj02F7QSDtJ15FKk0QeQNURc8cs3NHN83YYUFeFrB32H YaCYa5YSR7FlC6z1/Cq2KFgctbX1st5Hv864jomzGSgrZ5mpKny38F4teINhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUq262UFv4e6VKAEbhpZssgIi3zugwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTMzMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXOyiDANBgkqhkiG 9w0BAQsFAAOCAQEAMd1lE9Wzc/ZuHJKQwS7NUtbJ0MhQmCvVf8rKW1vZFUAoeUc8 zHq2kZvuUlVnUpv6WiSDn5bHKxPfcM0WsIX+0yCuLNZ4AWUplfdT38pDOloqQEcU Uya7+Pt+PkHc1T20asZeTpRtQOH3C1Wm5EFklLdhjiS7vDClJ5z9gzzFZryUzf6I m18hKbKSDQZP7RPPp9XIEEh72ODpBUOcVYCCuOxziRgeee93ArnKDafmiqmYPud/ AhwtDCr2cfM2p27DTL3HHAVMMVgb+oq9PwHeIUaBudB1UExSQKkYhB1Thx1RI64I YHkGOIUeDQ67qbo6wyWzd8zmuOBKqpW264Ap6g== -----END CERTIFICATE-----Generated at Tue Apr 30 18:54:28 2024 by rpki-client on console-fra.rpki-client.org