$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133382e302f32342d3234203d3e2034333832.roa File: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (raw, json) Hash identifier: cqP1TFSHRpR5BTS5mVXsfv6HF1Co2u8uNEIvFV1XeTk= Subject key identifier: 91:05:C1:00:08:29:B9:27:35:57:6F:7D:C3:41:78:07:AA:BE:C7:5B Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 47C3229BD97A4F09F03A7F274F80DFF7A21D8A74 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133382e302f32342d3234203d3e2034333832.roa Signing time: Wed 20 Sep 2023 13:00:16 +0000 ROA not before: Wed 20 Sep 2023 12:55:16 +0000 ROA not after: Wed 18 Sep 2024 13:00:16 +0000 asID: 4382 IP address blocks: 202.93.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c3:22:9b:d9:7a:4f:09:f0:3a:7f:27:4f:80:df:f7:a2:1d:8a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Sep 20 12:55:16 2023 GMT Not After : Sep 18 13:00:16 2024 GMT Subject: CN=9105C1000829B92735576F7DC3417807AABEC75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:31:52:fb:33:ce:6c:44:4c:08:14:17:bb: 6a:0a:4a:01:e9:41:ac:ea:f3:13:a8:1a:3e:c0:8e: f6:55:01:ec:72:88:03:36:18:50:cf:07:9d:9b:cc: 51:b3:ff:97:3b:ed:d4:e3:97:14:20:ee:fc:91:d3: 1c:a5:fc:f2:17:f7:e1:38:4d:ad:d7:1d:23:1e:70: 17:df:45:26:24:57:13:07:e0:4e:58:57:15:e0:1a: c6:ff:b7:41:c6:0a:86:db:f3:00:51:18:cc:bc:63: 6f:62:07:7b:ca:ad:31:3c:8b:e9:19:bf:3d:7f:40: 9e:93:87:de:c2:8c:44:a2:93:d7:b7:32:7e:27:60: 7b:97:1c:f6:59:3f:d4:2c:34:af:91:d8:1d:d5:9f: 11:ab:52:82:f5:8e:9a:9c:b6:3b:5c:ab:c9:0d:1b: 6e:95:e6:37:de:6a:d6:63:bf:e8:06:67:a2:a0:ed: c8:21:58:a0:dd:cd:ea:32:44:21:8b:a5:96:4e:cb: 80:e0:38:d9:47:19:4e:a0:34:5e:51:80:c8:68:22: 57:0e:e5:db:13:3c:0b:88:ca:bd:2f:68:b6:f3:63: 71:53:29:1f:bb:ce:9b:61:71:ce:8a:d3:91:4a:75: 30:7d:d5:ca:57:ef:81:b1:b8:a6:ad:60:51:8e:a0: c4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:05:C1:00:08:29:B9:27:35:57:6F:7D:C3:41:78:07:AA:BE:C7:5B X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133382e302f32342d3234203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.138.0/24 Signature Algorithm: sha256WithRSAEncryption 98:71:ba:f0:ff:c5:57:b1:29:07:11:e8:84:0f:da:64:26:2f: ab:b0:27:de:45:84:06:79:a9:08:b1:7f:bc:c3:ee:46:2c:93: 32:e3:96:8b:e9:d8:1b:d4:3c:e1:2e:b5:31:54:ad:13:0d:b0: e5:47:70:9a:a8:d1:5b:b7:cc:6f:a4:a0:a3:5b:da:5e:21:ea: f1:78:5a:7a:73:db:74:97:29:47:fe:e1:a9:4a:d4:06:1f:a2: 1c:6e:0f:ec:82:51:b9:ca:7e:fc:32:2d:37:30:ef:8d:55:97: 89:ad:c5:32:82:f7:22:55:af:6a:58:a5:74:77:22:ca:6f:5c: 0e:e5:60:75:f7:e6:a7:d8:2a:06:7e:27:f0:ad:28:ad:db:60: 94:07:96:6b:69:d8:f5:29:39:7c:72:7f:9c:b9:27:9c:01:e4: 9d:87:f3:01:46:27:ec:e5:71:8c:e0:62:ce:c1:2c:bb:98:6c: d8:0b:8e:54:84:94:cb:72:24:d0:cf:a2:6d:2f:1c:e5:7f:70: 45:80:97:15:b9:5e:c9:73:a4:7f:2c:ff:d1:e1:1f:e0:d7:87: 85:9f:35:0c:94:d3:c0:98:35:9e:8a:e7:e3:c3:ac:27:60:ae: 67:76:8c:ac:af:31:de:2d:a6:8c:e0:93:de:e3:a1:1a:d3:a3: 42:31:67:76 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUR8Mim9l6TwnwOn8nT4Df96IdinQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yMzA5MjAxMjU1MTZaFw0yNDA5MTgxMzAwMTZaMDMxMTAvBgNV BAMTKDkxMDVDMTAwMDgyOUI5MjczNTU3NkY3REMzNDE3ODA3QUFCRUM3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9jFS+zPObERMCBQXu2oKSgHp Qazq8xOoGj7AjvZVAexyiAM2GFDPB52bzFGz/5c77dTjlxQg7vyR0xyl/PIX9+E4 Ta3XHSMecBffRSYkVxMH4E5YVxXgGsb/t0HGCobb8wBRGMy8Y29iB3vKrTE8i+kZ vz1/QJ6Th97CjESik9e3Mn4nYHuXHPZZP9QsNK+R2B3VnxGrUoL1jpqctjtcq8kN G26V5jfeatZjv+gGZ6Kg7cghWKDdzeoyRCGLpZZOy4DgONlHGU6gNF5RgMhoIlcO 5dsTPAuIyr0vaLbzY3FTKR+7zpthcc6K05FKdTB91cpX74GxuKatYFGOoMQrAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUkQXBAAgpuSc1V299w0F4B6q+x1swHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYowDQYJKoZIhvcN AQELBQADggEBAJhxuvD/xVexKQcR6IQP2mQmL6uwJ95FhAZ5qQixf7zD7kYskzLj lovp2BvUPOEutTFUrRMNsOVHcJqo0Vu3zG+koKNb2l4h6vF4Wnpz23SXKUf+4alK 1AYfohxuD+yCUbnKfvwyLTcw741Vl4mtxTKC9yJVr2pYpXR3IspvXA7lYHX35qfY KgZ+J/CtKK3bYJQHlmtp2PUpOXxyf5y5J5wB5J2H8wFGJ+zlcYzgYs7BLLuYbNgL jlSElMtyJNDPom0vHOV/cEWAlxW5XslzpH8s/9HhH+DXh4WfNQyU08CYNZ6K5+PD rCdgrmd2jKyvMd4tpozgk97joRrTo0IxZ3Y= -----END CERTIFICATE-----Generated at Thu Apr 25 22:30:50 2024 by rpki-client on console-fra.rpki-client.org