$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/34332e3232352e3138342e302f32322d3234203d3e2039343232.roa File: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (raw, json) Hash identifier: xzGRBk99TL4T9lvDXaCnqMbedtAnRyUv7J+jeQdk9mM= Subject key identifier: C9:7C:F2:39:E9:97:F2:C9:3E:C8:E1:F1:A2:8B:A8:88:5B:75:DF:B2 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 69D1C3F3525796ED3BCA6B6C60EAFBB0A899E2CB Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/34332e3232352e3138342e302f32322d3234203d3e2039343232.roa Signing time: Mon 31 Jul 2023 00:08:39 +0000 ROA not before: Mon 31 Jul 2023 00:03:39 +0000 ROA not after: Mon 29 Jul 2024 00:08:39 +0000 asID: 9422 IP address blocks: 43.225.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d1:c3:f3:52:57:96:ed:3b:ca:6b:6c:60:ea:fb:b0:a8:99:e2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Jul 31 00:03:39 2023 GMT Not After : Jul 29 00:08:39 2024 GMT Subject: CN=C97CF239E997F2C93EC8E1F1A28BA8885B75DFB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:75:5b:57:26:ef:0b:02:20:b9:df:2a:2d: c7:01:4d:13:3d:88:95:9a:da:eb:e7:6f:6a:13:f7: dc:e8:e9:92:43:c9:d8:19:06:b5:61:24:c2:95:80: 2e:c5:2e:f3:e3:b1:5a:f9:65:a3:c7:cc:9a:20:ac: 12:f9:26:0b:9f:29:d1:f9:c2:83:90:82:63:fb:69: 21:a8:0e:e8:91:64:8c:ed:a9:9e:8f:83:97:bf:7b: b0:cd:1b:3e:01:d2:69:c6:33:b9:1e:7c:79:32:fd: 18:2e:2b:3e:5c:00:a1:3e:d3:63:f1:16:60:90:7e: 0c:36:75:67:6d:fa:d8:2e:7f:eb:9f:5d:f6:b4:22: 92:4c:98:f3:9f:b0:3c:5a:e6:8e:d8:0e:54:50:aa: 6f:e7:c4:0d:d6:b7:27:2e:77:09:a2:90:d5:65:ca: 6a:7a:4e:0b:2b:7b:e6:ee:1d:ac:6f:48:c4:d0:30: eb:2e:58:4b:42:35:a0:3c:91:ba:66:bf:a3:28:99: 30:fe:29:9c:54:8b:2f:90:46:81:81:25:9b:58:17: 5d:39:57:9f:94:b0:da:54:19:16:06:52:12:48:b5: 69:6d:66:c6:6e:c7:a2:cd:aa:ad:95:d2:fe:8e:c7: 69:5b:01:6c:a1:cf:26:fe:5d:a7:fb:7b:b8:06:5a: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:F2:39:E9:97:F2:C9:3E:C8:E1:F1:A2:8B:A8:88:5B:75:DF:B2 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/34332e3232352e3138342e302f32322d3234203d3e2039343232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.184.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:02:f8:b5:64:6f:14:b0:e6:9c:f3:58:90:1a:6f:94:4a:51: df:65:ce:36:c2:87:dc:4f:38:e6:99:e4:52:29:35:28:51:70: 0a:ca:84:4e:8a:c5:18:ce:f1:0b:2d:c6:55:e0:f9:c1:66:fa: 10:46:e0:09:d9:2b:5f:a9:e1:b9:f4:01:e1:a7:f5:11:88:a8: 87:21:d0:7a:f6:0c:0c:11:12:ee:30:7f:70:76:b0:52:29:fe: 59:b0:b4:76:1f:3f:5a:11:e1:00:f7:a0:82:52:e5:b5:41:ff: 04:22:e8:7e:fe:ac:28:1b:cf:c4:26:6b:ce:f1:2e:32:bd:ce: e2:6a:08:f4:b3:8b:e1:5a:1f:c7:82:c0:df:04:d8:3c:d0:2b: cf:57:cf:2f:49:17:6f:32:76:af:4c:f0:fa:99:cc:be:33:78: 4b:27:38:aa:63:82:9c:24:c1:74:80:63:c9:3b:5c:6e:1b:32: 1c:be:d5:a2:cf:8e:aa:1a:3b:21:7c:89:65:3a:b1:73:51:c8: f9:c0:86:6c:cd:56:b8:78:2f:1a:fb:06:25:a0:16:b3:ae:f3: 54:0f:10:8c:d7:bf:d5:b0:27:f3:2d:56:f2:ed:4c:bb:5a:3b: cd:35:69:28:d1:0f:72:90:9b:25:33:e3:45:36:c4:62:20:4f: 42:cf:f4:e8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUadHD81JXlu07ymtsYOr7sKiZ4sswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yMzA3MzEwMDAzMzlaFw0yNDA3MjkwMDA4MzlaMDMxMTAvBgNV BAMTKEM5N0NGMjM5RTk5N0YyQzkzRUM4RTFGMUEyOEJBODg4NUI3NURGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsnVbVybvCwIgud8qLccBTRM9 iJWa2uvnb2oT99zo6ZJDydgZBrVhJMKVgC7FLvPjsVr5ZaPHzJogrBL5JgufKdH5 woOQgmP7aSGoDuiRZIztqZ6Pg5e/e7DNGz4B0mnGM7kefHky/RguKz5cAKE+02Px FmCQfgw2dWdt+tguf+ufXfa0IpJMmPOfsDxa5o7YDlRQqm/nxA3WtycudwmikNVl ymp6Tgsre+buHaxvSMTQMOsuWEtCNaA8kbpmv6MomTD+KZxUiy+QRoGBJZtYF105 V5+UsNpUGRYGUhJItWltZsZux6LNqq2V0v6Ox2lbAWyhzyb+Xaf7e7gGWs/vAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUyXzyOemX8sk+yOHxoouoiFt137IwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4N2Q3OWJhLWZiNTUtNDlhNS05 NjdiLTFlZGM3NDlkMDEyOC8wLzM0MzMyZTMyMzIzNTJlMzEzODM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzkzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr4bgwDQYJKoZIhvcN AQELBQADggEBACwC+LVkbxSw5pzzWJAab5RKUd9lzjbCh9xPOOaZ5FIpNShRcArK hE6KxRjO8QstxlXg+cFm+hBG4AnZK1+p4bn0AeGn9RGIqIch0Hr2DAwREu4wf3B2 sFIp/lmwtHYfP1oR4QD3oIJS5bVB/wQi6H7+rCgbz8Qma87xLjK9zuJqCPSzi+Fa H8eCwN8E2DzQK89Xzy9JF28ydq9M8PqZzL4zeEsnOKpjgpwkwXSAY8k7XG4bMhy+ 1aLPjqoaOyF8iWU6sXNRyPnAhmzNVrh4Lxr7BiWgFrOu81QPEIzXv9WwJ/MtVvLt TLtaO801aSjRD3KQmyUz40U2xGIgT0LP9Og= -----END CERTIFICATE-----Generated at Thu Apr 25 02:04:43 2024 by rpki-client on console-fra.rpki-client.org