$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa File: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (raw, json) Hash identifier: wBck/8zR+tCiplmZgzgPDZAHwgGRWMbNue3rlZdihbM= Subject key identifier: 59:55:35:B6:8C:6E:D7:69:11:CF:C3:1F:63:AA:6F:E8:F7:11:EA:9F Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 716ABD967239AF2FE736DF625FB83411E2D785D8 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa Signing time: Mon 31 Jul 2023 00:08:39 +0000 ROA not before: Mon 31 Jul 2023 00:03:39 +0000 ROA not after: Mon 29 Jul 2024 00:08:39 +0000 asID: 9422 IP address blocks: 202.154.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6a:bd:96:72:39:af:2f:e7:36:df:62:5f:b8:34:11:e2:d7:85:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Jul 31 00:03:39 2023 GMT Not After : Jul 29 00:08:39 2024 GMT Subject: CN=595535B68C6ED76911CFC31F63AA6FE8F711EA9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d7:5c:de:30:51:a7:17:30:c5:96:e4:ba:aa: 9e:65:bb:66:b5:ad:8f:fb:22:3b:d9:65:38:ac:09: be:6a:c1:f4:28:85:39:67:d2:f4:c4:9e:07:01:45: 9b:45:bf:d7:91:3b:39:d0:46:cb:73:ef:c5:e4:d6: ac:ad:13:97:ca:1e:8a:bd:c1:a2:6e:31:76:88:84: 38:eb:c3:03:98:68:7f:4d:ab:33:b2:5b:0e:49:a0: 45:b0:8d:96:b6:0b:99:3d:ef:e3:18:95:32:52:c6: 67:62:5a:07:12:14:fe:e8:db:b6:2e:6c:8c:ed:13: 45:7f:38:ac:24:09:b7:27:b1:42:0e:12:da:56:81: b5:90:60:75:b4:d9:40:f3:3c:be:63:d7:97:c0:35: df:63:41:0b:c4:23:b2:62:e9:bf:ca:4b:be:2a:84: 4c:28:53:aa:e4:29:0d:01:76:d4:0c:02:d7:b1:e6: e9:ec:b4:74:d4:04:f4:8e:24:75:e7:d8:02:c1:55: 38:62:82:f4:33:c3:f4:75:25:a7:e7:f1:36:fc:d6: b2:f3:fd:b8:bc:11:d6:c6:2a:a6:d6:26:48:d6:84: e2:ca:01:66:df:a7:07:61:55:aa:51:f6:80:6c:a2: 18:63:fa:8c:4f:f2:e9:37:4f:f6:6e:6e:a8:9a:ef: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:55:35:B6:8C:6E:D7:69:11:CF:C3:1F:63:AA:6F:E8:F7:11:EA:9F X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.184.0/21 Signature Algorithm: sha256WithRSAEncryption 74:af:da:18:ae:09:64:ca:b4:92:78:66:ba:c5:2c:82:a6:19: 90:ef:ba:86:ea:8e:74:ed:0d:6d:34:fe:8a:b1:0d:55:ee:1b: d9:9b:f5:c5:41:0e:48:38:a6:e9:ac:54:52:27:c1:75:81:03: 3a:7b:d3:b7:0f:de:77:a7:88:ce:4b:cc:98:9d:34:85:05:49: 8c:21:35:b6:1d:2c:47:cf:eb:70:ef:95:b0:ca:ad:55:89:3a: 41:43:90:ac:72:5e:63:82:eb:10:aa:1a:a9:ac:24:9c:92:b2: 99:4d:18:1d:f7:f9:14:96:d4:e8:83:d2:1e:13:24:91:a3:c9: 50:c5:42:83:f2:4a:df:6f:86:60:b6:de:b0:a3:56:12:b9:1d: 9d:36:d6:2a:d0:c8:72:fe:c7:28:2f:b4:d8:82:d4:cc:e4:d8: e2:32:20:7c:a2:ad:2a:25:0b:f3:9d:8f:a6:b8:ad:c5:61:ee: c9:bf:d6:e9:78:3a:f6:f4:79:92:4b:05:87:f9:7c:cc:1f:d7: a0:5d:af:69:e7:04:3f:0e:24:f4:3d:e0:ac:e6:de:26:d7:0d: 78:1e:75:fc:a2:3b:8a:64:26:ac:d2:c1:10:58:05:8d:b9:fb: 78:e8:fb:50:29:eb:03:b8:38:dd:c1:cf:63:3f:f6:cc:86:ad: db:f3:bc:ce -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcWq9lnI5ry/nNt9iX7g0EeLXhdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yMzA3MzEwMDAzMzlaFw0yNDA3MjkwMDA4MzlaMDMxMTAvBgNV BAMTKDU5NTUzNUI2OEM2RUQ3NjkxMUNGQzMxRjYzQUE2RkU4RjcxMUVBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh11zeMFGnFzDFluS6qp5lu2a1 rY/7IjvZZTisCb5qwfQohTln0vTEngcBRZtFv9eROznQRstz78Xk1qytE5fKHoq9 waJuMXaIhDjrwwOYaH9NqzOyWw5JoEWwjZa2C5k97+MYlTJSxmdiWgcSFP7o27Yu bIztE0V/OKwkCbcnsUIOEtpWgbWQYHW02UDzPL5j15fANd9jQQvEI7Ji6b/KS74q hEwoU6rkKQ0BdtQMAtex5unstHTUBPSOJHXn2ALBVThigvQzw/R1Jafn8Tb81rLz /bi8EdbGKqbWJkjWhOLKAWbfpwdhVapR9oBsohhj+oxP8uk3T/Zubqia74QTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWVU1toxu12kRz8MfY6pv6PcR6p8wHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4N2Q3OWJhLWZiNTUtNDlhNS05 NjdiLTFlZGM3NDlkMDEyOC8wLzMyMzAzMjJlMzEzNTM0MmUzMTM4MzQyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzOTM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8qauDANBgkqhkiG 9w0BAQsFAAOCAQEAdK/aGK4JZMq0knhmusUsgqYZkO+6huqOdO0NbTT+irENVe4b 2Zv1xUEOSDim6axUUifBdYEDOnvTtw/ed6eIzkvMmJ00hQVJjCE1th0sR8/rcO+V sMqtVYk6QUOQrHJeY4LrEKoaqawknJKymU0YHff5FJbU6IPSHhMkkaPJUMVCg/JK 32+GYLbesKNWErkdnTbWKtDIcv7HKC+02ILUzOTY4jIgfKKtKiUL852PpritxWHu yb/W6Xg69vR5kksFh/l8zB/XoF2vaecEPw4k9D3grObeJtcNeB51/KI7imQmrNLB EFgFjbn7eOj7UCnrA7g43cHPYz/2zIat2/O8zg== -----END CERTIFICATE-----Generated at Tue Apr 23 18:35:50 2024 by rpki-client on console-ams.rpki-client.org