$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa File: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM= Subject key identifier: 3F:19:39:0D:C0:F9:56:A3:F7:1E:DD:EA:16:F7:B1:15:DB:62:E0:80 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 6DEE35504FACBFD7FE4941DE25F82F6DA7FE88A6 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa Signing time: Thu 21 Nov 2024 13:23:04 +0000 ROA not before: Thu 21 Nov 2024 13:18:04 +0000 ROA not after: Thu 20 Nov 2025 13:23:04 +0000 asID: 8888 IP address blocks: 157.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 11:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ee:35:50:4f:ac:bf:d7:fe:49:41:de:25:f8:2f:6d:a7:fe:88:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Nov 21 13:18:04 2024 GMT Not After : Nov 20 13:23:04 2025 GMT Subject: CN=3F19390DC0F956A3F71EDDEA16F7B115DB62E080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:8b:de:e6:58:83:e3:47:71:68:d2:bf:cd: a4:9b:2d:6f:c5:ba:2f:18:5d:e4:1a:f9:d4:7b:5f: d2:82:30:fc:6f:4d:24:90:63:bf:89:af:31:a9:6f: 65:23:c5:1f:3a:ff:ed:7a:a2:c1:e5:d8:4c:ca:98: f3:5c:fa:18:4d:c6:42:dd:78:ab:18:d1:a3:13:07: 6e:eb:c2:ac:35:f6:05:a4:7e:df:e8:3e:02:92:98: 7c:53:fa:fa:82:c7:2f:57:77:18:c2:0d:4a:37:1e: 83:a5:a1:9e:eb:a1:ab:4c:cd:0e:e6:72:86:1c:55: aa:21:cc:26:4e:d0:9d:19:a2:0d:1f:e7:f2:fc:a5: b0:b1:bd:4f:db:32:0d:a0:eb:9d:89:be:a5:7d:bb: 06:a2:c4:d4:f3:ab:ca:36:70:a3:b5:39:2f:3e:c3: 19:79:e9:f1:70:4a:b9:e4:11:5a:3e:f0:2c:ce:1c: 05:f5:c2:37:37:7e:f7:da:9a:c7:e0:76:10:48:b7: fe:4e:72:ae:20:96:1f:55:38:82:dc:42:6d:5b:87: 70:ac:dd:41:94:2f:2e:50:03:5e:81:91:62:c4:a1: c4:b7:c6:e6:8c:77:4c:4a:fc:45:22:9f:55:f9:30: 8e:27:a5:4d:f4:42:c1:3c:df:c1:bc:63:28:ad:34: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:19:39:0D:C0:F9:56:A3:F7:1E:DD:EA:16:F7:B1:15:DB:62:E0:80 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.100.0/22 Signature Algorithm: sha256WithRSAEncryption 78:a4:be:60:17:e8:58:73:62:ec:3b:ba:d0:90:a7:69:83:b0: 5b:07:5a:d4:4e:9a:9a:93:57:22:1f:8f:63:1e:c3:a2:75:45: 71:3d:8b:0c:26:14:95:7f:4c:2e:c7:3d:83:5f:2c:fc:26:03: 97:9e:07:48:2f:c5:d3:dd:cd:d9:a2:2c:b3:36:c1:8e:a1:96: 12:73:c0:67:50:17:65:1f:3f:87:00:27:95:5c:be:ae:7f:eb: 1b:19:c1:4b:6d:d8:87:06:0f:cd:87:ab:bc:a2:a5:18:18:0a: 11:98:cb:6c:7a:a7:05:fb:ca:89:8e:d4:55:c5:e3:01:c0:6d: 2d:df:12:81:4b:32:dd:91:93:6d:79:e1:fa:9a:09:bd:32:63: bb:63:17:1a:a9:06:c2:5f:58:79:83:aa:77:af:cf:3c:a9:5f: 97:74:54:c0:86:5e:6b:07:ec:1c:0e:f6:f7:67:fe:9e:84:de: 36:d1:cc:47:ae:f8:90:51:20:4e:16:d1:75:97:94:77:ff:24: b2:ac:31:03:b4:dc:7d:dd:a4:b3:2e:d7:8a:ed:4e:cf:c9:6e: 53:1e:2f:25:a3:c0:98:30:7f:e4:57:a4:9f:f3:2a:65:bb:22: 37:60:ed:9d:bb:ba:c9:42:29:bf:fc:70:50:76:27:13:7b:ed: ef:bb:ad:5e -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUbe41UE+sv9f+SUHeJfgvbaf+iKYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI0MTEyMTEzMTgwNFoX DTI1MTEyMDEzMjMwNFowMzExMC8GA1UEAxMoM0YxOTM5MERDMEY5NTZBM0Y3MUVE REVBMTZGN0IxMTVEQjYyRTA4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMv7i97mWIPjR3Fo0r/NpJstb8W6Lxhd5Br51Htf0oIw/G9NJJBjv4mvMalv ZSPFHzr/7XqiweXYTMqY81z6GE3GQt14qxjRoxMHbuvCrDX2BaR+3+g+ApKYfFP6 +oLHL1d3GMINSjceg6Whnuuhq0zNDuZyhhxVqiHMJk7QnRmiDR/n8vylsLG9T9sy DaDrnYm+pX27BqLE1POryjZwo7U5Lz7DGXnp8XBKueQRWj7wLM4cBfXCNzd+99qa x+B2EEi3/k5yriCWH1U4gtxCbVuHcKzdQZQvLlADXoGRYsShxLfG5ox3TEr8RSKf VfkwjielTfRCwTzfwbxjKK00c1kCAwEAAaOCAeowggHmMB0GA1UdDgQWBBQ/GTkN wPlWo/ce3eoW97EV22LggDAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzNTM3MmUzMTMxMzkyZTMxMzAzMDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnXdkMA0GCSqGSIb3 DQEBCwUAA4IBAQB4pL5gF+hYc2LsO7rQkKdpg7BbB1rUTpqak1ciH49jHsOidUVx PYsMJhSVf0wuxz2DXyz8JgOXngdIL8XT3c3ZoiyzNsGOoZYSc8BnUBdlHz+HACeV XL6uf+sbGcFLbdiHBg/Nh6u8oqUYGAoRmMtseqcF+8qJjtRVxeMBwG0t3xKBSzLd kZNteeH6mgm9MmO7YxcaqQbCX1h5g6p3r888qV+XdFTAhl5rB+wcDvb3Z/6ehN42 0cxHrviQUSBOFtF1l5R3/ySyrDEDtNx93aSzLteK7U7PyW5THi8lo8CYMH/kV6Sf 8ypluyI3YO2du7rJQim//HBQdicTe+3vu61e -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:48 2024 by rpki-client on console-fra.rpki-client.org