$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133332e302f32342d3234203d3e2034333832.roa File: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (raw, json) Hash identifier: GZgo3+mB0Noe26TkzGMBq55l3sT2IAat/L2tCnlag2g= Subject key identifier: 3B:A8:14:A3:D6:1A:F5:DF:B8:26:B2:2E:2F:E2:18:74:EE:92:20:16 Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 11E229527CB7F33297F8C80688D497F0D045DCEC Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133332e302f32342d3234203d3e2034333832.roa Signing time: Wed 20 Sep 2023 13:00:14 +0000 ROA not before: Wed 20 Sep 2023 12:55:14 +0000 ROA not after: Wed 18 Sep 2024 13:00:14 +0000 asID: 4382 IP address blocks: 202.93.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 19:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e2:29:52:7c:b7:f3:32:97:f8:c8:06:88:d4:97:f0:d0:45:dc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Sep 20 12:55:14 2023 GMT Not After : Sep 18 13:00:14 2024 GMT Subject: CN=3BA814A3D61AF5DFB826B22E2FE21874EE922016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7a:26:71:da:dd:83:12:9a:66:8e:eb:be:ad: 27:dc:0a:38:be:59:c9:fe:b6:4e:6e:29:6d:cb:a8: c8:ea:3b:0c:81:76:92:07:9d:43:50:3a:2c:e4:86: 9c:f7:18:b6:5c:1c:3a:5b:98:a8:a9:3c:05:77:f4: 08:07:3c:41:2d:30:2a:97:20:96:ce:8f:2d:ba:4b: 1d:53:21:0f:47:66:dc:3c:0b:25:ed:c0:fd:d5:26: d2:d0:ce:1c:22:75:93:59:44:f3:b5:8b:85:a9:24: 82:8d:3b:54:bd:58:1e:69:d9:1f:d4:0d:a7:e9:aa: aa:a9:62:63:3d:07:9a:ca:31:54:2a:1f:da:36:41: d0:f9:44:8c:49:20:66:66:1f:c1:e5:5c:ae:b7:af: dd:6b:0c:93:73:f0:ce:54:f7:02:7b:a9:fc:81:40: c0:38:19:03:fb:ab:22:26:ca:82:19:cb:8b:cd:eb: 01:4d:67:ec:df:b2:5b:7c:18:ef:42:2b:40:c8:21: 3d:a2:c2:fb:b9:f8:88:a2:1b:42:99:f1:13:15:d2: d5:f8:e5:90:fc:fd:0e:25:9b:ef:84:bd:cb:18:a4: 7e:94:87:94:27:4f:47:ab:02:49:e1:b5:c9:1f:04: a0:ef:71:e3:12:da:f4:76:6f:75:b3:55:c0:d7:2f: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A8:14:A3:D6:1A:F5:DF:B8:26:B2:2E:2F:E2:18:74:EE:92:20:16 X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133332e302f32342d3234203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.133.0/24 Signature Algorithm: sha256WithRSAEncryption 49:d2:69:eb:f4:24:0b:66:09:97:fa:de:0a:01:e5:66:c3:2f: 8a:32:02:9b:16:a9:95:0f:9e:99:73:99:d4:6f:ab:c8:cc:b3: 14:ea:73:b0:6d:3d:4d:6a:3a:b2:cc:67:a0:53:2e:da:3d:4c: 25:32:b2:d2:7f:69:ec:8b:f2:b1:e0:e1:f5:cf:c4:b4:2a:fe: a2:65:7d:5c:fa:c3:c8:cf:2c:09:94:27:a4:69:18:70:68:77: 1d:ba:1a:37:8c:cf:ab:f6:39:7e:ef:a6:fc:83:5a:41:db:8b: d4:53:d9:22:e8:21:f1:34:8a:21:c5:93:b7:bd:2a:51:57:c1: e6:53:c6:9f:6e:01:f2:ea:84:ed:7b:24:74:77:27:56:43:14: 37:f0:0f:37:bb:ab:ee:a3:1c:8c:55:76:15:ea:2d:c0:b6:a7: 6d:39:ba:08:88:75:d5:eb:2e:2e:40:07:0c:d3:10:80:fb:ac: f6:eb:41:6b:9f:f8:8a:cc:84:71:b0:bd:c3:e2:2b:c5:41:44: fd:c9:13:5e:96:62:df:7e:65:1a:bf:b7:b5:02:80:cc:41:8d: 83:46:b8:f3:97:98:80:08:32:10:ad:b1:ca:74:7c:5a:ec:06: 4a:15:47:e6:5c:9b:76:71:fd:e3:df:50:de:68:fd:74:95:25: 23:c3:cf:0b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUEeIpUny38zKX+MgGiNSX8NBF3OwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yMzA5MjAxMjU1MTRaFw0yNDA5MTgxMzAwMTRaMDMxMTAvBgNV BAMTKDNCQTgxNEEzRDYxQUY1REZCODI2QjIyRTJGRTIxODc0RUU5MjIwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4eiZx2t2DEppmjuu+rSfcCji+ Wcn+tk5uKW3LqMjqOwyBdpIHnUNQOizkhpz3GLZcHDpbmKipPAV39AgHPEEtMCqX IJbOjy26Sx1TIQ9HZtw8CyXtwP3VJtLQzhwidZNZRPO1i4WpJIKNO1S9WB5p2R/U DafpqqqpYmM9B5rKMVQqH9o2QdD5RIxJIGZmH8HlXK63r91rDJNz8M5U9wJ7qfyB QMA4GQP7qyImyoIZy4vN6wFNZ+zfslt8GO9CK0DIIT2iwvu5+IiiG0KZ8RMV0tX4 5ZD8/Q4lm++EvcsYpH6Uh5QnT0erAknhtckfBKDvceMS2vR2b3WzVcDXL7SlAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUO6gUo9Ya9d+4JrIuL+IYdO6SIBYwHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYUwDQYJKoZIhvcN AQELBQADggEBAEnSaev0JAtmCZf63goB5WbDL4oyApsWqZUPnplzmdRvq8jMsxTq c7BtPU1qOrLMZ6BTLto9TCUystJ/aeyL8rHg4fXPxLQq/qJlfVz6w8jPLAmUJ6Rp GHBodx26GjeMz6v2OX7vpvyDWkHbi9RT2SLoIfE0iiHFk7e9KlFXweZTxp9uAfLq hO17JHR3J1ZDFDfwDze7q+6jHIxVdhXqLcC2p205ugiIddXrLi5ABwzTEID7rPbr QWuf+IrMhHGwvcPiK8VBRP3JE16WYt9+ZRq/t7UCgMxBjYNGuPOXmIAIMhCtscp0 fFrsBkoVR+Zcm3Zx/ePfUN5o/XSVJSPDzws= -----END CERTIFICATE-----Generated at Thu Apr 18 17:41:01 2024 by rpki-client on console-ams.rpki-client.org