$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32322e302f32332d3234203d3e2039343232.roa File: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (raw, json) Hash identifier: TqPxUMrBaso9XPGJHYZF8GTNI3LYPmDJ2M2PapwBIIA= Subject key identifier: 9C:CC:67:58:F9:18:6E:C8:B7:D5:B6:3D:6E:A4:C2:D4:7B:45:88:40 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 19C721B1AE12EBD371E86479432671C693CA69AA Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32322e302f32332d3234203d3e2039343232.roa Signing time: Mon 31 Jul 2023 00:08:38 +0000 ROA not before: Mon 31 Jul 2023 00:03:38 +0000 ROA not after: Mon 29 Jul 2024 00:08:38 +0000 asID: 9422 IP address blocks: 223.130.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c7:21:b1:ae:12:eb:d3:71:e8:64:79:43:26:71:c6:93:ca:69:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Jul 31 00:03:38 2023 GMT Not After : Jul 29 00:08:38 2024 GMT Subject: CN=9CCC6758F9186EC8B7D5B63D6EA4C2D47B458840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:54:60:fc:d3:75:7a:1b:b1:54:ad:de:ac:c9: bc:35:67:1c:c6:e2:72:f1:48:30:f5:8f:77:58:45: 9f:30:34:e6:63:5c:a4:bb:03:9a:81:b1:41:3c:55: 23:99:19:89:2e:7c:7a:63:63:13:62:cb:25:09:fc: 93:ed:9a:8a:02:4d:81:41:c3:61:c1:66:fb:f7:15: e6:fe:51:64:0e:0f:5a:26:26:bf:61:97:d4:f8:4c: 0f:70:d0:6e:09:8a:b1:d1:ec:f5:f7:d1:63:a7:c6: e1:a0:f4:fc:8e:26:04:07:68:50:31:b8:a3:cd:6a: b4:d8:5e:7d:47:20:80:52:0e:e5:81:6a:16:3f:16: e9:65:b6:d8:3d:b9:f5:a4:ee:34:42:a9:bf:e7:dd: 7a:11:23:07:3c:05:cd:de:7b:9a:9c:0f:0f:4d:9c: 2f:42:d2:84:05:93:56:a6:ee:1e:57:7e:b6:4e:f3: ce:af:67:5a:a8:44:ee:06:35:38:51:b0:b1:c2:ad: dc:19:97:58:e6:db:f0:84:be:4b:d7:c6:de:44:87: b6:a5:0d:6f:fe:d4:43:76:04:0b:1b:cb:45:8b:c7: 7f:b3:c8:32:e1:a7:ef:c1:45:6f:14:b0:22:6c:90: 4d:35:9e:01:e7:8f:4f:ab:55:54:d9:92:73:a3:24: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CC:67:58:F9:18:6E:C8:B7:D5:B6:3D:6E:A4:C2:D4:7B:45:88:40 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32322e302f32332d3234203d3e2039343232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.130.22.0/23 Signature Algorithm: sha256WithRSAEncryption 85:f7:64:0e:9a:db:44:a4:7e:d9:cb:31:ae:43:f5:eb:d0:b4: 61:d5:66:c7:b3:ea:7a:63:25:4e:45:3a:ed:90:cd:45:da:79: ca:df:b3:d2:88:98:99:34:1a:bf:ca:04:29:a3:fd:90:86:33: 6b:cc:43:18:2b:60:51:f9:f2:be:f8:a9:76:58:e1:02:2e:0e: ec:40:a0:91:db:7b:d0:91:66:ba:f7:b6:e1:5f:67:09:2e:1d: a6:59:39:50:7f:bc:79:11:d1:05:24:4c:c0:f2:02:5b:7b:68: 76:7c:77:6c:31:88:7f:11:1c:91:b8:0c:08:47:6d:c6:1f:19: 9f:82:a3:44:12:45:a7:af:a9:e1:8b:50:1a:3f:2a:78:de:4b: 92:69:d5:cc:5d:f2:68:39:4e:ac:11:0f:b4:26:64:a6:a6:1a: 78:f0:e3:4a:30:a3:57:fe:e9:74:95:73:8a:dc:c1:28:36:ab: 96:63:72:70:62:2e:c0:3b:bc:68:18:1d:dd:31:18:d9:11:a3: 86:6c:fe:a7:62:2e:47:d4:20:34:ed:7f:66:d0:f7:88:05:10: 7e:9d:59:de:be:71:aa:04:cc:3a:66:a7:d4:19:69:40:14:19: 6d:fb:83:59:b9:19:95:d4:b4:21:cd:c5:d4:a1:86:3b:41:fe: 4c:94:c5:ad -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUGcchsa4S69Nx6GR5QyZxxpPKaaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yMzA3MzEwMDAzMzhaFw0yNDA3MjkwMDA4MzhaMDMxMTAvBgNV BAMTKDlDQ0M2NzU4RjkxODZFQzhCN0Q1QjYzRDZFQTRDMkQ0N0I0NTg4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVGD803V6G7FUrd6sybw1ZxzG 4nLxSDD1j3dYRZ8wNOZjXKS7A5qBsUE8VSOZGYkufHpjYxNiyyUJ/JPtmooCTYFB w2HBZvv3Feb+UWQOD1omJr9hl9T4TA9w0G4JirHR7PX30WOnxuGg9PyOJgQHaFAx uKPNarTYXn1HIIBSDuWBahY/Fullttg9ufWk7jRCqb/n3XoRIwc8Bc3ee5qcDw9N nC9C0oQFk1am7h5XfrZO886vZ1qoRO4GNThRsLHCrdwZl1jm2/CEvkvXxt5Eh7al DW/+1EN2BAsby0WLx3+zyDLhp+/BRW8UsCJskE01ngHnj0+rVVTZknOjJEdNAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUnMxnWPkYbsi31bY9bqTC1HtFiEAwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4N2Q3OWJhLWZiNTUtNDlhNS05 NjdiLTFlZGM3NDlkMDEyOC8wLzMyMzIzMzJlMzEzMzMwMmUzMjMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzkzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHfghYwDQYJKoZIhvcN AQELBQADggEBAIX3ZA6a20SkftnLMa5D9evQtGHVZsez6npjJU5FOu2QzUXaecrf s9KImJk0Gr/KBCmj/ZCGM2vMQxgrYFH58r74qXZY4QIuDuxAoJHbe9CRZrr3tuFf ZwkuHaZZOVB/vHkR0QUkTMDyAlt7aHZ8d2wxiH8RHJG4DAhHbcYfGZ+Co0QSRaev qeGLUBo/KnjeS5Jp1cxd8mg5TqwRD7QmZKamGnjw40owo1f+6XSVc4rcwSg2q5Zj cnBiLsA7vGgYHd0xGNkRo4Zs/qdiLkfUIDTtf2bQ94gFEH6dWd6+caoEzDpmp9QZ aUAUGW37g1m5GZXUtCHNxdShhjtB/kyUxa0= -----END CERTIFICATE-----Generated at Thu Apr 25 02:04:43 2024 by rpki-client on console-fra.rpki-client.org