$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133342e302f32342d3234203d3e2034333832.roa File: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (raw, json) Hash identifier: IU23OHkVQQRXY3R3UUfiOkuzqeruGvNM38zJeyGVWkM= Subject key identifier: 9D:75:A1:23:02:2A:84:8D:DF:57:D7:0C:25:8A:C5:6C:FB:72:F7:F5 Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 4775AF693A72BF73EEBC9619593A0761E9C527E4 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133342e302f32342d3234203d3e2034333832.roa Signing time: Wed 20 Sep 2023 13:00:16 +0000 ROA not before: Wed 20 Sep 2023 12:55:16 +0000 ROA not after: Wed 18 Sep 2024 13:00:16 +0000 asID: 4382 IP address blocks: 202.93.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:75:af:69:3a:72:bf:73:ee:bc:96:19:59:3a:07:61:e9:c5:27:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Sep 20 12:55:16 2023 GMT Not After : Sep 18 13:00:16 2024 GMT Subject: CN=9D75A123022A848DDF57D70C258AC56CFB72F7F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:96:32:77:31:37:28:5b:63:e2:f2:c3:e3: 49:1f:d1:78:d7:26:80:94:9e:40:a9:98:17:bb:e0: 8f:ed:f0:d4:a1:4e:83:e8:cc:98:62:ea:ae:54:3f: c3:45:fc:04:ef:c2:08:e6:29:6e:90:fd:21:5c:cc: 13:04:33:01:04:4a:03:37:50:4c:cd:d8:ce:31:18: a1:ef:ad:ab:5e:62:8d:1d:f5:d0:f1:63:30:28:1d: f5:b3:3f:2f:ac:a9:96:c5:70:46:51:a7:d4:38:24: 01:47:cb:4a:62:32:d2:fa:1f:44:87:9f:63:da:2c: f8:47:54:b0:bb:19:e0:6c:f6:29:b1:0c:c0:f8:cd: 22:51:f5:e9:50:c5:79:47:fd:11:c4:56:a7:85:ce: 9a:c3:ac:b5:09:c3:89:be:a4:a0:f3:8e:21:cf:be: 43:91:93:4e:a6:f2:77:60:c3:1a:fc:fc:bf:74:ac: 2b:ed:15:3d:b3:8a:c4:54:da:8e:08:46:e0:c7:b1: 16:46:11:6e:c1:43:3c:66:c8:76:07:b6:1e:92:45: 98:61:bd:9e:31:75:73:c9:18:91:01:75:71:c5:0e: 74:6e:f5:29:51:81:e3:e9:6a:6f:85:c0:b5:2c:be: 57:b2:ee:f8:8e:9a:39:5e:8c:96:91:56:fe:1f:95: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:75:A1:23:02:2A:84:8D:DF:57:D7:0C:25:8A:C5:6C:FB:72:F7:F5 X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133342e302f32342d3234203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.134.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d3:e0:00:a7:06:0b:45:87:c1:a3:81:43:cd:9b:6f:2b:0b: 61:4c:ab:17:b6:8c:aa:69:a3:38:3d:d6:8c:20:bf:ab:32:04: db:17:18:c8:de:e6:bb:9e:e8:c3:8c:5e:48:5b:30:be:94:f1: 0e:a3:61:87:4f:18:dc:c9:6f:78:81:3c:8f:79:da:1a:30:8f: 69:34:7f:70:ed:c7:0c:d6:a5:54:50:24:60:1b:b6:d8:64:31: d0:9c:4e:c9:bb:12:8e:50:b4:e6:ba:6d:2c:e3:df:2e:8d:de: ff:39:52:dc:a2:af:11:29:36:59:d9:ed:2c:6c:a4:98:9e:a7: d1:e0:68:65:49:54:38:4c:13:5c:f9:e2:0e:a7:f4:f5:22:4a: 93:4c:c3:51:df:dc:ce:3d:c2:bb:49:00:37:52:c1:f0:40:c2: c2:e1:05:c6:ef:de:66:31:32:46:a7:ea:e1:b2:2b:a9:22:08: 82:fd:79:67:ac:d9:ac:1a:04:97:a5:33:75:cf:06:6c:c3:bc: a6:46:2f:30:6d:e8:08:92:c6:88:b1:47:76:3c:78:a4:c6:0c: c5:13:5e:bc:1f:ad:16:4c:f6:bc:62:c4:e0:8f:e0:86:d7:84: 8f:ba:94:7f:ba:6b:72:61:26:e1:7f:cc:14:5e:79:8f:ba:ae: 7f:06:4b:ab -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUR3WvaTpyv3PuvJYZWToHYenFJ+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yMzA5MjAxMjU1MTZaFw0yNDA5MTgxMzAwMTZaMDMxMTAvBgNV BAMTKDlENzVBMTIzMDIyQTg0OERERjU3RDcwQzI1OEFDNTZDRkI3MkY3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCexpYydzE3KFtj4vLD40kf0XjX JoCUnkCpmBe74I/t8NShToPozJhi6q5UP8NF/ATvwgjmKW6Q/SFczBMEMwEESgM3 UEzN2M4xGKHvrateYo0d9dDxYzAoHfWzPy+sqZbFcEZRp9Q4JAFHy0piMtL6H0SH n2PaLPhHVLC7GeBs9imxDMD4zSJR9elQxXlH/RHEVqeFzprDrLUJw4m+pKDzjiHP vkORk06m8ndgwxr8/L90rCvtFT2zisRU2o4IRuDHsRZGEW7BQzxmyHYHth6SRZhh vZ4xdXPJGJEBdXHFDnRu9SlRgePpam+FwLUsvley7viOmjlejJaRVv4flS7fAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUnXWhIwIqhI3fV9cMJYrFbPty9/UwHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYYwDQYJKoZIhvcN AQELBQADggEBAFnT4ACnBgtFh8GjgUPNm28rC2FMqxe2jKppozg91owgv6syBNsX GMje5rue6MOMXkhbML6U8Q6jYYdPGNzJb3iBPI952howj2k0f3DtxwzWpVRQJGAb tthkMdCcTsm7Eo5QtOa6bSzj3y6N3v85UtyirxEpNlnZ7SxspJiep9HgaGVJVDhM E1z54g6n9PUiSpNMw1Hf3M49wrtJADdSwfBAwsLhBcbv3mYxMkan6uGyK6kiCIL9 eWes2awaBJelM3XPBmzDvKZGLzBt6AiSxoixR3Y8eKTGDMUTXrwfrRZM9rxixOCP 4IbXhI+6lH+6a3JhJuF/zBReeY+6rn8GS6s= -----END CERTIFICATE-----Generated at Thu Apr 25 16:38:54 2024 by rpki-client on console-ams.rpki-client.org