$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3131392e38322e3232342e302f32302d3234203d3e203234323133.roa File: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (raw, json) Hash identifier: 3KwPZXV5ZGwA8NpIeaUHAFELMZPZbPJ5BZjq+sQjtXU= Subject key identifier: 53:FA:AA:42:15:B9:01:6A:DD:30:0A:3C:85:2E:4D:C8:74:D5:6F:59 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 3A06A8085F2606B6FCC4A814E977C6B66A0961C2 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3131392e38322e3232342e302f32302d3234203d3e203234323133.roa Signing time: Fri 04 Aug 2023 02:00:01 +0000 ROA not before: Fri 04 Aug 2023 01:55:01 +0000 ROA not after: Fri 02 Aug 2024 02:00:01 +0000 asID: 24213 IP address blocks: 119.82.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:06:a8:08:5f:26:06:b6:fc:c4:a8:14:e9:77:c6:b6:6a:09:61:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Aug 4 01:55:01 2023 GMT Not After : Aug 2 02:00:01 2024 GMT Subject: CN=53FAAA4215B9016ADD300A3C852E4DC874D56F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:21:35:61:39:49:bc:d5:1d:a6:04:b2:e0: 26:8b:47:7b:a0:6e:f1:0d:5e:51:d3:7b:16:f5:b4: bd:b2:9e:d9:02:bc:b5:ec:db:91:6a:89:9e:ca:2d: f3:ae:e8:ec:d8:cf:36:b4:c7:78:21:61:28:26:d5: 0f:92:71:e4:90:b3:22:a7:30:f1:e9:7a:a7:4d:72: 00:ed:a0:4c:e9:21:fa:99:67:da:01:28:95:11:02: f9:11:d4:ef:86:c6:2c:5b:61:cd:f7:f0:69:e9:b2: 00:67:ea:a7:f3:9a:10:79:5b:90:3b:fd:bb:1b:c1: d7:fc:f1:18:22:a3:1d:67:98:ed:da:bd:1a:20:84: 31:4c:0e:28:61:a1:58:f1:04:d3:64:ef:08:8c:54: 3c:9a:aa:02:95:f6:82:73:9f:f3:0a:88:ce:39:ff: 27:0b:31:d6:88:da:d0:34:29:7a:0b:f4:e2:d7:5e: da:2a:f0:b9:08:7c:31:34:63:97:82:a8:39:7c:6f: 73:e8:ee:37:1a:2d:2e:a9:ab:4d:5f:f8:0c:79:a6: 1a:ab:0c:b7:5a:ac:19:60:5e:de:99:cd:97:2f:c6: 17:6a:51:33:66:f5:09:b4:91:d1:1f:3c:d8:c2:8f: 23:34:a8:8d:6f:35:5a:cd:70:e1:f0:3f:19:dc:bd: 10:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FA:AA:42:15:B9:01:6A:DD:30:0A:3C:85:2E:4D:C8:74:D5:6F:59 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3131392e38322e3232342e302f32302d3234203d3e203234323133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.82.224.0/20 Signature Algorithm: sha256WithRSAEncryption 87:b4:f7:c2:ae:dc:90:56:90:2d:ef:7b:22:d7:bf:8c:df:65: 83:8a:63:4a:8d:3b:5c:a0:8b:20:c2:65:ab:91:1b:9c:a5:1b: f6:7e:14:93:0c:aa:f2:00:85:40:da:88:e5:6c:a6:fe:af:c0: 9b:61:dd:64:1a:81:ad:b2:2f:5b:1c:cf:d7:10:9e:6b:1d:d1: 8e:e0:19:58:62:29:5e:f4:68:40:37:b6:11:99:42:7b:15:db: b4:6f:b4:83:52:6f:80:a6:d2:62:2f:9d:8b:4a:18:8b:ad:44: 06:69:cf:3e:a1:ad:1d:ef:99:fc:32:cd:b2:64:f5:ee:70:f1: ed:19:82:06:42:e5:6d:b6:16:dc:3c:b6:c4:ba:d1:08:ce:0a: 5a:d0:f7:29:90:5e:22:fa:de:8e:ce:a9:35:74:59:ef:2f:9f: fa:ed:48:51:03:89:51:4f:c7:57:a6:a5:ef:cd:3c:b5:f5:8f: 07:95:10:9d:af:61:ed:97:3e:97:3a:a3:88:fe:6a:9e:ce:c2: 88:6b:5a:45:46:0b:76:07:2b:0f:d5:0c:e1:e9:9d:30:72:a0: 9a:09:1b:bc:d8:27:1b:ca:bd:11:10:ab:80:03:91:c8:7a:96: 36:41:ed:71:88:c9:e7:16:5c:79:25:58:e9:7f:82:b2:97:8c: 49:92:de:33 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOgaoCF8mBrb8xKgU6XfGtmoJYcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yMzA4MDQwMTU1MDFaFw0yNDA4MDIwMjAwMDFaMDMxMTAvBgNV BAMTKDUzRkFBQTQyMTVCOTAxNkFERDMwMEEzQzg1MkU0REM4NzRENTZGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBSE1YTlJvNUdpgSy4CaLR3ug bvENXlHTexb1tL2yntkCvLXs25FqiZ7KLfOu6OzYzza0x3ghYSgm1Q+SceSQsyKn MPHpeqdNcgDtoEzpIfqZZ9oBKJURAvkR1O+GxixbYc338GnpsgBn6qfzmhB5W5A7 /bsbwdf88Rgiox1nmO3avRoghDFMDihhoVjxBNNk7wiMVDyaqgKV9oJzn/MKiM45 /ycLMdaI2tA0KXoL9OLXXtoq8LkIfDE0Y5eCqDl8b3Po7jcaLS6pq01f+Ax5phqr DLdarBlgXt6ZzZcvxhdqUTNm9Qm0kdEfPNjCjyM0qI1vNVrNcOHwPxncvRCJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUU/qqQhW5AWrdMAo8hS5NyHTVb1kwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4YjhjMWI1LTNiZTgtNGFhNy1h NGM2LTIxYmNjOGYzZmE0MC8wLzMxMzEzOTJlMzgzMjJlMzIzMjM0MmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzIzNDMyMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHdS4DANBgkqhkiG 9w0BAQsFAAOCAQEAh7T3wq7ckFaQLe97Ite/jN9lg4pjSo07XKCLIMJlq5EbnKUb 9n4Ukwyq8gCFQNqI5Wym/q/Am2HdZBqBrbIvWxzP1xCeax3RjuAZWGIpXvRoQDe2 EZlCexXbtG+0g1JvgKbSYi+di0oYi61EBmnPPqGtHe+Z/DLNsmT17nDx7RmCBkLl bbYW3Dy2xLrRCM4KWtD3KZBeIvrejs6pNXRZ7y+f+u1IUQOJUU/HV6al7808tfWP B5UQna9h7Zc+lzqjiP5qns7CiGtaRUYLdgcrD9UM4emdMHKgmgkbvNgnG8q9ERCr gAORyHqWNkHtcYjJ5xZceSVY6X+CspeMSZLeMw== -----END CERTIFICATE-----Generated at Thu Apr 25 01:59:05 2024 by rpki-client on console-ams.rpki-client.org