$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa File: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (raw, json) Hash identifier: Z7RwzshL8sQT+b3alhiP/nA3eE2rd3MEE/le8iiNS/I= Subject key identifier: F5:79:4E:32:13:5D:0D:D0:16:32:A7:36:67:FA:DE:A4:D5:24:8D:02 Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 7AC253DD834A6E98224C3B7A2BFA703E21ADB407 Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa Signing time: Mon 31 Jul 2023 00:05:44 +0000 ROA not before: Mon 31 Jul 2023 00:00:44 +0000 ROA not after: Mon 29 Jul 2024 00:05:44 +0000 asID: 24521 IP address blocks: 123.255.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c2:53:dd:83:4a:6e:98:22:4c:3b:7a:2b:fa:70:3e:21:ad:b4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Jul 31 00:00:44 2023 GMT Not After : Jul 29 00:05:44 2024 GMT Subject: CN=F5794E32135D0DD01632A73667FADEA4D5248D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:af:ff:83:7f:1d:a6:35:10:9e:95:a3:4d: 5d:0d:5e:ee:79:d3:26:d9:ce:bf:45:0a:2f:c6:47: e1:56:96:73:31:9c:ab:f8:cf:0e:17:ac:db:b5:95: 9d:9a:9e:22:05:5c:dd:9c:6b:84:6e:5e:dc:c4:74: f9:d2:c7:93:4a:a6:1d:62:4f:99:fb:5b:fd:1b:90: 13:ed:5b:a9:0c:2e:68:95:3f:20:12:3c:98:e8:17: b7:71:69:48:c8:e0:f0:88:f5:c3:36:bc:22:30:cc: 1f:e7:de:2f:61:91:e1:13:c1:52:4e:7c:ed:69:b7: ae:44:29:7e:1f:1e:7b:3a:01:4e:4d:d5:a5:72:e4: be:85:25:d1:42:d0:24:0d:19:db:6f:17:d4:78:e6: d5:44:9d:52:e1:3c:84:67:e6:31:d1:c7:29:0f:1e: 06:ec:14:61:b5:83:4a:ad:b9:3e:6a:34:55:05:71: 2a:98:21:90:d2:df:97:94:79:80:93:bd:09:d4:b6: d6:6a:7c:3d:4e:85:cd:5e:cf:bb:4b:36:a1:53:e4: 63:25:d6:e6:e4:dc:77:1f:c9:d2:a0:69:20:72:d2: 30:59:6b:a1:00:4b:3a:67:b8:9a:51:c0:0a:f2:d5: dd:d9:ed:9b:34:28:30:38:34:b6:26:32:63:73:36: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:4E:32:13:5D:0D:D0:16:32:A7:36:67:FA:DE:A4:D5:24:8D:02 X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.255.200.0/21 Signature Algorithm: sha256WithRSAEncryption 78:fa:96:bc:80:ca:07:28:3e:09:df:00:52:93:a6:e8:14:29: 6c:a1:7f:c9:d8:6c:38:4a:9d:46:d7:00:3f:f4:b7:44:51:2d: 7b:09:39:81:90:82:32:35:2d:df:28:c6:8f:ff:1a:77:b0:56: 3c:b6:d6:6b:dd:86:d1:9c:5b:43:88:d2:4a:b4:e8:00:97:2c: 2d:04:12:32:73:27:94:3d:76:8f:a0:a8:2a:c1:64:09:bb:71: cb:4d:96:52:19:a7:7b:aa:b6:5f:d6:32:55:6f:7c:6c:98:e0: 93:54:77:35:ba:ba:1a:2b:ea:74:bc:32:a1:0b:9f:6a:30:65: 3c:bd:ae:f5:ef:0b:3d:ef:70:4b:b8:17:21:60:fb:0d:f4:9d: 55:d9:c5:25:5f:c2:e9:91:7a:4a:2d:3d:a5:6c:36:38:4b:2e: 44:45:67:17:8a:a4:21:29:fa:b7:5f:7e:13:dc:40:89:9a:74: 73:9d:6e:17:b5:f0:8d:6f:fd:de:37:0f:36:c6:6b:79:2b:82: a2:2b:89:25:95:9b:17:20:49:db:fc:98:8b:2d:b6:c4:c4:c0: 7f:c1:97:d3:fd:c7:73:91:d6:e7:9a:5d:e8:1c:40:18:33:20: bc:0e:57:cc:73:5c:7f:8b:dc:22:ca:d1:62:de:1c:f4:1b:7d: ed:0b:b4:c2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUesJT3YNKbpgiTDt6K/pwPiGttAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yMzA3MzEwMDAwNDRaFw0yNDA3MjkwMDA1NDRaMDMxMTAvBgNV BAMTKEY1Nzk0RTMyMTM1RDBERDAxNjMyQTczNjY3RkFERUE0RDUyNDhEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC626//g38dpjUQnpWjTV0NXu55 0ybZzr9FCi/GR+FWlnMxnKv4zw4XrNu1lZ2aniIFXN2ca4RuXtzEdPnSx5NKph1i T5n7W/0bkBPtW6kMLmiVPyASPJjoF7dxaUjI4PCI9cM2vCIwzB/n3i9hkeETwVJO fO1pt65EKX4fHns6AU5N1aVy5L6FJdFC0CQNGdtvF9R45tVEnVLhPIRn5jHRxykP HgbsFGG1g0qtuT5qNFUFcSqYIZDS35eUeYCTvQnUttZqfD1Ohc1ez7tLNqFT5GMl 1ubk3HcfydKgaSBy0jBZa6EASzpnuJpRwAry1d3Z7Zs0KDA4NLYmMmNzNp5JAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9XlOMhNdDdAWMqc2Z/repNUkjQIwHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwOWMyMmIxLTFiN2ItNDY3MS1h Yjk0LTVjNWU3NDg4MjU0Ny8wLzMxMzIzMzJlMzIzNTM1MmUzMjMwMzAyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzMjM0MzUzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDe//IMA0GCSqG SIb3DQEBCwUAA4IBAQB4+pa8gMoHKD4J3wBSk6boFClsoX/J2Gw4Sp1G1wA/9LdE US17CTmBkIIyNS3fKMaP/xp3sFY8ttZr3YbRnFtDiNJKtOgAlywtBBIycyeUPXaP oKgqwWQJu3HLTZZSGad7qrZf1jJVb3xsmOCTVHc1uroaK+p0vDKhC59qMGU8va71 7ws973BLuBchYPsN9J1V2cUlX8LpkXpKLT2lbDY4Sy5ERWcXiqQhKfq3X34T3ECJ mnRznW4XtfCNb/3eNw82xmt5K4KiK4kllZsXIEnb/JiLLbbExMB/wZfT/cdzkdbn ml3oHEAYMyC8DlfMc1x/i9wiytFi3hz0G33tC7TC -----END CERTIFICATE-----Generated at Fri Apr 19 01:15:57 2024 by rpki-client on console-fra.rpki-client.org