$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3132382e302f32342d3234203d3e2034333832.roa File: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (raw, json) Hash identifier: yl5Bf/qpFxYg38LOjDaK+5dyWT97cCxdMxMaNbh25JE= Subject key identifier: 45:55:1E:99:B2:ED:CD:A3:79:3F:28:66:42:D2:4E:71:71:C6:50:4A Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 7D68FC39CF888B73C0BEEDB0DD588CD1C86CA01E Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3132382e302f32342d3234203d3e2034333832.roa Signing time: Wed 20 Sep 2023 13:00:15 +0000 ROA not before: Wed 20 Sep 2023 12:55:15 +0000 ROA not after: Wed 18 Sep 2024 13:00:15 +0000 asID: 4382 IP address blocks: 202.93.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:68:fc:39:cf:88:8b:73:c0:be:ed:b0:dd:58:8c:d1:c8:6c:a0:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Sep 20 12:55:15 2023 GMT Not After : Sep 18 13:00:15 2024 GMT Subject: CN=45551E99B2EDCDA3793F286642D24E7171C6504A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:7d:1d:fe:dc:6c:66:a0:db:89:4a:b1:00: 6f:c1:3d:5c:06:1d:3c:ad:0b:ff:9f:09:ec:ee:23: b6:f2:2f:a3:f8:00:a1:de:d4:fa:fa:58:5f:f4:43: 03:37:23:bf:8e:a3:0f:26:77:0a:a0:47:c6:35:8a: 1d:bf:2a:9a:51:4a:a8:67:a0:66:cc:83:4f:ea:d4: 9f:bc:ae:81:2a:cb:49:45:ce:ce:46:87:01:54:78: 03:07:d9:b1:13:00:36:3a:6d:66:c9:90:e5:94:34: 2a:c1:70:15:e3:4d:02:e1:04:6e:13:7b:15:1e:00: f1:ce:79:6a:a7:35:3b:96:4e:cf:36:86:40:ac:1d: 65:ab:c4:7c:5d:61:f4:b5:7d:51:e6:d8:72:bb:12: 51:bc:a1:83:b8:bf:06:26:9b:b8:14:13:f0:b4:a3: a9:bf:02:60:41:8e:b1:22:f4:5d:39:84:0b:98:b1: 76:6a:20:cf:f6:5a:15:a6:41:97:c5:92:a2:91:fd: 99:35:f7:9c:f8:b5:d6:6d:6a:80:1d:6b:38:1c:1b: 9c:6c:fb:fe:4c:af:00:d3:c7:30:d8:98:a0:24:9a: 44:4c:e2:d0:2a:5b:36:7e:3d:cd:1c:39:3a:ce:25: df:c1:2c:f6:25:58:af:09:e0:57:20:27:da:c4:4a: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:55:1E:99:B2:ED:CD:A3:79:3F:28:66:42:D2:4E:71:71:C6:50:4A X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3132382e302f32342d3234203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.128.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:d5:ec:88:b0:7f:f4:b0:7e:30:0f:50:bc:c9:12:8d:de:65: 9c:f2:9f:92:29:8d:cf:0c:b9:7c:04:24:ef:09:18:42:3c:fd: 1f:88:27:cc:5e:6d:65:43:84:66:bb:3d:20:33:9e:bf:e9:35: f3:3a:85:76:f7:c3:45:7a:0e:f8:94:88:a2:1f:92:cc:3c:d1: ff:10:07:19:f1:38:fb:e1:d5:d5:4b:52:a8:33:f7:5b:52:ad: 58:de:8d:7c:8b:1f:22:73:c0:03:11:cb:98:10:27:36:fb:ef: 5c:99:89:95:7d:06:69:da:26:12:20:9b:6d:52:7f:02:83:fb: b2:f0:5f:7c:a6:1e:47:e2:91:8b:1e:81:b3:c2:bf:82:11:f6: 5c:f6:8b:e6:37:01:c0:33:8b:b0:b9:8c:e1:c7:e4:7f:e5:d9: a9:09:71:61:d7:6d:82:1b:fe:ab:a7:1b:bd:c3:4b:49:04:52: f5:65:35:e5:6c:ba:56:e4:44:ad:e7:b0:17:41:f1:bb:2b:52: 16:0e:53:ee:6c:66:e5:71:5a:17:d3:42:35:c4:fb:05:02:1f: 32:1c:d9:36:dd:a2:b9:13:89:90:79:4d:68:d8:86:0e:8f:8e: b9:87:f9:83:90:a4:a3:fb:31:16:3b:1d:79:86:6a:0b:67:31: ec:6a:0b:92 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUfWj8Oc+Ii3PAvu2w3ViM0chsoB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yMzA5MjAxMjU1MTVaFw0yNDA5MTgxMzAwMTVaMDMxMTAvBgNV BAMTKDQ1NTUxRTk5QjJFRENEQTM3OTNGMjg2NjQyRDI0RTcxNzFDNjUwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FH0d/txsZqDbiUqxAG/BPVwG HTytC/+fCezuI7byL6P4AKHe1Pr6WF/0QwM3I7+Oow8mdwqgR8Y1ih2/KppRSqhn oGbMg0/q1J+8roEqy0lFzs5GhwFUeAMH2bETADY6bWbJkOWUNCrBcBXjTQLhBG4T exUeAPHOeWqnNTuWTs82hkCsHWWrxHxdYfS1fVHm2HK7ElG8oYO4vwYmm7gUE/C0 o6m/AmBBjrEi9F05hAuYsXZqIM/2WhWmQZfFkqKR/Zk195z4tdZtaoAdazgcG5xs +/5MrwDTxzDYmKAkmkRM4tAqWzZ+Pc0cOTrOJd/BLPYlWK8J4FcgJ9rESndpAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQURVUembLtzaN5PyhmQtJOcXHGUEowHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYAwDQYJKoZIhvcN AQELBQADggEBABrV7Iiwf/SwfjAPULzJEo3eZZzyn5Ipjc8MuXwEJO8JGEI8/R+I J8xebWVDhGa7PSAznr/pNfM6hXb3w0V6DviUiKIfksw80f8QBxnxOPvh1dVLUqgz 91tSrVjejXyLHyJzwAMRy5gQJzb771yZiZV9BmnaJhIgm21SfwKD+7LwX3ymHkfi kYsegbPCv4IR9lz2i+Y3AcAzi7C5jOHH5H/l2akJcWHXbYIb/qunG73DS0kEUvVl NeVsulbkRK3nsBdB8bsrUhYOU+5sZuVxWhfTQjXE+wUCHzIc2TbdorkTiZB5TWjY hg6PjrmH+YOQpKP7MRY7HXmGagtnMexqC5I= -----END CERTIFICATE-----Generated at Thu Apr 25 22:30:50 2024 by rpki-client on console-fra.rpki-client.org