$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32342d3234203d3e20313431383932.roa File: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (raw, json) Hash identifier: s1OmxYSF70umYzo+PzpvKZUI3/QCdF0LRMd2Mr5i2zE= Subject key identifier: E2:98:89:5B:98:C0:B5:9F:8C:C7:90:AA:FB:9D:F7:CF:A1:CC:23:B9 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 6A77820A306E24F87ECCA895DFD38E21BC602CCD Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32342d3234203d3e20313431383932.roa Signing time: Fri 05 Apr 2024 08:28:12 +0000 ROA not before: Fri 05 Apr 2024 08:23:12 +0000 ROA not after: Fri 04 Apr 2025 08:28:12 +0000 asID: 141892 IP address blocks: 157.66.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 15:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:77:82:0a:30:6e:24:f8:7e:cc:a8:95:df:d3:8e:21:bc:60:2c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Apr 5 08:23:12 2024 GMT Not After : Apr 4 08:28:12 2025 GMT Subject: CN=E298895B98C0B59F8CC790AAFB9DF7CFA1CC23B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:3a:7c:cb:00:2b:2c:31:ef:19:7e:66:62: 3c:0b:1a:29:7a:21:e5:90:b0:a7:fc:c6:79:df:41: 82:27:54:22:fb:b3:0e:88:0c:b6:29:b9:f8:e7:d9: 0c:95:75:20:95:19:44:80:67:2e:e7:c4:87:c7:cc: ef:38:25:b6:b8:9b:d5:f7:a2:9a:cb:cb:e7:05:e4: 28:88:31:8e:35:85:c9:8c:38:2b:d9:1b:18:46:1f: 4e:82:d9:f7:9d:0d:3b:1b:92:c2:89:f3:b1:26:b8: 01:34:09:3a:7e:ae:cc:e0:6f:4c:8a:89:82:f3:fd: 74:a8:a1:35:00:19:3f:2c:ca:58:3a:57:3f:b3:a1: b7:e4:ec:88:c1:cc:02:12:8a:2b:f6:e3:18:12:e1: dd:e4:6a:ab:cf:95:7a:fe:57:53:00:cf:58:7f:37: a8:e6:cb:04:e0:23:95:30:c0:be:a1:05:82:b3:34: 5e:f6:85:14:7e:95:c5:fb:21:c3:22:e0:5b:c3:21: 06:28:28:80:81:7d:59:f0:3a:83:38:71:31:e2:50: 9b:f1:7c:b7:2a:41:22:da:91:ef:38:d6:df:aa:fe: 71:c1:d6:01:a9:40:9e:b9:97:a5:12:4a:48:cd:d1: 23:93:e8:25:8b:27:f2:2b:d9:af:f6:d7:67:34:b2: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:98:89:5B:98:C0:B5:9F:8C:C7:90:AA:FB:9D:F7:CF:A1:CC:23:B9 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32342d3234203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.54.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:b2:6f:4a:6b:6d:b2:e0:55:f6:08:47:c5:eb:eb:fb:8b:a3: 31:9a:1e:da:9b:a5:06:c4:b2:08:ed:18:12:65:a4:ce:cd:98: 77:ce:e8:30:c6:c0:7d:92:41:1c:2f:fc:e2:83:80:54:6c:b5: e0:10:e4:a6:d7:36:b6:e1:8c:16:3d:d8:76:01:d9:a6:ee:c4: 4a:21:2f:25:55:23:2a:cc:92:dc:78:0a:1e:01:55:89:bc:97: 4f:7c:65:32:54:6f:1b:d1:43:66:04:92:86:c5:a9:47:f9:06: 57:bd:dd:7d:fc:2b:54:1a:75:3c:57:7f:2d:36:1f:35:32:22: 4d:bd:60:2d:d1:81:87:57:85:8d:3a:35:69:49:2f:c5:17:f7: b6:33:27:61:88:1c:bb:ff:02:19:57:fc:58:b7:53:af:26:32: dd:cb:3f:54:bf:54:47:6b:e9:db:1d:30:ef:bf:b3:34:0c:fd: 6a:6f:85:79:9e:e1:da:18:ff:6c:e0:86:c1:89:44:e5:79:f2: 74:08:d6:34:f0:d1:23:d1:94:14:44:b8:be:90:8e:53:2a:a0: ce:91:56:63:17:5f:35:cb:a5:15:b4:16:f4:3f:f6:1d:12:e8: 8c:d4:cb:1d:73:2b:d8:ca:93:40:65:2f:49:95:63:cf:ba:1c: 1d:29:9b:91 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaneCCjBuJPh+zKiV39OOIbxgLM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNDA0MDUwODIzMTJaFw0yNTA0MDQwODI4MTJaMDMxMTAvBgNV BAMTKEUyOTg4OTVCOThDMEI1OUY4Q0M3OTBBQUZCOURGN0NGQTFDQzIzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntzp8ywArLDHvGX5mYjwLGil6 IeWQsKf8xnnfQYInVCL7sw6IDLYpufjn2QyVdSCVGUSAZy7nxIfHzO84Jba4m9X3 oprLy+cF5CiIMY41hcmMOCvZGxhGH06C2fedDTsbksKJ87EmuAE0CTp+rszgb0yK iYLz/XSooTUAGT8sylg6Vz+zobfk7IjBzAISiiv24xgS4d3kaqvPlXr+V1MAz1h/ N6jmywTgI5UwwL6hBYKzNF72hRR+lcX7IcMi4FvDIQYoKICBfVnwOoM4cTHiUJvx fLcqQSLake841t+q/nHB1gGpQJ65l6USSkjN0SOT6CWLJ/Ir2a/212c0sgqJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU4piJW5jAtZ+Mx5Cq+533z6HMI7kwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y4ZGMwODQ5LTgzZmItNGNjOC04 YzIxLWJlNmNhN2EyZWQ4My8wLzMxMzUzNzJlMzYzNjJlMzUzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CNjANBgkqhkiG 9w0BAQsFAAOCAQEAPLJvSmttsuBV9ghHxevr+4ujMZoe2pulBsSyCO0YEmWkzs2Y d87oMMbAfZJBHC/84oOAVGy14BDkptc2tuGMFj3YdgHZpu7ESiEvJVUjKsyS3HgK HgFVibyXT3xlMlRvG9FDZgSShsWpR/kGV73dffwrVBp1PFd/LTYfNTIiTb1gLdGB h1eFjTo1aUkvxRf3tjMnYYgcu/8CGVf8WLdTryYy3cs/VL9UR2vp2x0w77+zNAz9 am+FeZ7h2hj/bOCGwYlE5XnydAjWNPDRI9GUFES4vpCOUyqgzpFWYxdfNculFbQW 9D/2HRLojNTLHXMr2MqTQGUvSZVjz7ocHSmbkQ== -----END CERTIFICATE-----Generated at Wed May 1 03:18:53 2024 by rpki-client on console-fra.rpki-client.org