$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130362e302e34382e302f32322d3234203d3e2039343232.roa File: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (raw, json) Hash identifier: yaEqLrJTqxoFeILIu+UZekmvxpzcTRhQL0lCZNGA0ns= Subject key identifier: AB:EB:0C:F0:16:F8:01:80:97:FC:3B:D5:F3:D2:EC:26:AD:20:0E:80 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 209D0FEEBDB68D24E84B8B36B534C3E59E76DC96 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130362e302e34382e302f32322d3234203d3e2039343232.roa Signing time: Mon 31 Jul 2023 00:08:39 +0000 ROA not before: Mon 31 Jul 2023 00:03:39 +0000 ROA not after: Mon 29 Jul 2024 00:08:39 +0000 asID: 9422 IP address blocks: 106.0.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9d:0f:ee:bd:b6:8d:24:e8:4b:8b:36:b5:34:c3:e5:9e:76:dc:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Jul 31 00:03:39 2023 GMT Not After : Jul 29 00:08:39 2024 GMT Subject: CN=ABEB0CF016F8018097FC3BD5F3D2EC26AD200E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:4e:42:5c:4f:bc:d6:14:2e:fa:83:f4:aa: 9f:bc:70:72:1d:b2:9e:0f:61:78:6f:b9:db:b8:ba: 1c:b3:f5:05:7b:83:23:a6:e0:11:0f:0a:63:86:b0: 96:3d:e6:b7:f1:45:d5:5e:4e:d8:0f:92:04:9d:04: 63:12:72:70:20:bb:e3:d0:0f:47:4f:35:d7:b2:07: dc:e9:d5:4f:0e:a8:55:f0:a6:05:84:9a:14:49:7d: 71:c0:39:42:80:8f:99:e1:a3:d2:1d:67:ce:8f:95: b6:18:0a:2e:d1:98:cd:e5:8c:10:66:26:44:66:16: 07:fd:2d:f5:cb:ec:aa:ed:60:f5:f4:b4:f1:c6:04: ad:3f:7b:f2:a6:24:d7:68:7e:b0:6a:90:b5:c2:01: 1a:09:5a:8d:82:b3:fb:a5:15:67:94:d1:b8:a4:91: 17:2c:89:27:d4:bb:5f:d0:43:2e:bd:20:87:49:69: 2f:b4:f7:22:96:4f:ca:3d:4d:43:d3:cc:55:c4:1e: 2e:89:d9:1c:9d:f2:2f:67:eb:43:ed:38:9c:ba:0a: 4d:90:e8:97:71:63:53:7e:83:02:6c:fc:da:17:2c: 26:14:83:37:18:8c:12:b1:fa:1c:3e:7d:f9:4d:35: bc:d6:4d:bf:cd:c1:60:28:ac:26:a2:0c:27:84:40: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EB:0C:F0:16:F8:01:80:97:FC:3B:D5:F3:D2:EC:26:AD:20:0E:80 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130362e302e34382e302f32322d3234203d3e2039343232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.0.48.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:54:7a:fd:c7:f1:1c:83:a6:02:3a:93:02:d2:f4:bb:00:49: cc:dc:ed:cd:e9:5b:18:e6:bf:81:8a:29:25:dd:4f:2a:9e:30: b9:88:a7:06:bf:41:a7:01:80:4c:a6:c4:95:cd:41:52:e4:8a: ee:b7:de:b6:f2:9a:b6:1d:ef:43:3b:e7:90:b3:0a:a2:a7:8a: 64:e2:da:03:a4:99:76:75:5d:a2:3d:94:a2:22:1a:2e:89:17: 4c:d5:89:dc:77:53:93:17:97:b3:66:41:52:3a:70:22:4d:06: 95:2d:88:6b:3d:ef:3f:53:bf:9a:6b:77:44:0e:11:bb:e4:a2: 36:59:ff:2c:18:aa:bb:85:ee:04:37:db:e0:55:c0:8b:96:88: 25:5e:20:3b:39:53:0f:52:55:af:88:cb:f9:c4:e8:1a:d9:08: ac:82:b0:74:24:19:21:c7:3f:60:b0:03:e0:3e:df:f7:66:37: 6a:3d:8e:6d:db:42:32:da:97:92:bb:9c:5d:7e:81:a3:0b:41: 38:15:bd:7c:31:ad:3c:92:3f:7d:97:d3:71:34:2b:0f:f4:1f: 69:1e:58:ac:35:68:c5:3c:ba:c5:61:d8:6b:35:e3:5d:c7:d3: 32:68:53:f8:18:18:e1:3f:c8:11:23:9b:19:70:8c:ce:da:c8: 77:27:19:37 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUIJ0P7r22jSToS4s2tTTD5Z523JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yMzA3MzEwMDAzMzlaFw0yNDA3MjkwMDA4MzlaMDMxMTAvBgNV BAMTKEFCRUIwQ0YwMTZGODAxODA5N0ZDM0JENUYzRDJFQzI2QUQyMDBFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkk05CXE+81hQu+oP0qp+8cHId sp4PYXhvudu4uhyz9QV7gyOm4BEPCmOGsJY95rfxRdVeTtgPkgSdBGMScnAgu+PQ D0dPNdeyB9zp1U8OqFXwpgWEmhRJfXHAOUKAj5nho9IdZ86PlbYYCi7RmM3ljBBm JkRmFgf9LfXL7KrtYPX0tPHGBK0/e/KmJNdofrBqkLXCARoJWo2Cs/ulFWeU0bik kRcsiSfUu1/QQy69IIdJaS+09yKWT8o9TUPTzFXEHi6J2Ryd8i9n60PtOJy6Ck2Q 6JdxY1N+gwJs/NoXLCYUgzcYjBKx+hw+fflNNbzWTb/NwWAorCaiDCeEQNoJAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUq+sM8Bb4AYCX/DvV89LsJq0gDoAwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMzEzMDM2MmUzMDJlMzQzODJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDM5MzQzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCagAwMA0GCSqGSIb3DQEBCwUA A4IBAQBqVHr9x/Ecg6YCOpMC0vS7AEnM3O3N6VsY5r+Biikl3U8qnjC5iKcGv0Gn AYBMpsSVzUFS5Irut9628pq2He9DO+eQswqip4pk4toDpJl2dV2iPZSiIhouiRdM 1Yncd1OTF5ezZkFSOnAiTQaVLYhrPe8/U7+aa3dEDhG75KI2Wf8sGKq7he4EN9vg VcCLloglXiA7OVMPUlWviMv5xOga2QisgrB0JBkhxz9gsAPgPt/3ZjdqPY5t20Iy 2peSu5xdfoGjC0E4Fb18Ma08kj99l9NxNCsP9B9pHlisNWjFPLrFYdhrNeNdx9My aFP4GBjhP8gRI5sZcIzO2sh3Jxk3 -----END CERTIFICATE-----Generated at Thu Apr 25 02:04:43 2024 by rpki-client on console-fra.rpki-client.org