$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/34332e3235322e37322e302f32322d3234203d3e203338373538.roa File: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (raw, json) Hash identifier: OW6kjCQs/A80nC23iofLKsCJItTXKWrV2oQEAB0pMk0= Subject key identifier: 95:C0:F2:53:B1:FC:84:61:88:AD:17:A4:3A:6D:8B:DD:04:FF:91:9A Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Certificate serial: 3E07BDEB2596C1251D57D671E67A51D52363DED5 Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/34332e3235322e37322e302f32322d3234203d3e203338373538.roa Signing time: Mon 31 Jul 2023 00:00:06 +0000 ROA not before: Sun 30 Jul 2023 23:55:06 +0000 ROA not after: Mon 29 Jul 2024 00:00:06 +0000 asID: 38758 IP address blocks: 43.252.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 01:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:07:bd:eb:25:96:c1:25:1d:57:d6:71:e6:7a:51:d5:23:63:de:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Validity Not Before: Jul 30 23:55:06 2023 GMT Not After : Jul 29 00:00:06 2024 GMT Subject: CN=95C0F253B1FC846188AD17A43A6D8BDD04FF919A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:6f:77:2b:e0:43:71:1a:c6:5b:f8:0a:2b: 9f:de:a6:b2:89:d2:cf:a1:be:07:fc:cf:e9:45:a6: 9c:00:1f:90:89:f5:34:d4:20:03:e6:1d:b5:f0:57: 6b:13:ec:68:8d:1f:0a:ed:af:b5:21:fc:ef:4e:95: 5e:87:58:8e:0f:ff:90:1a:1a:15:cc:a6:bb:48:c4: 8e:8a:11:43:6a:53:59:a1:a6:fd:a8:4d:00:25:fd: eb:9b:40:0b:9b:3e:4b:1d:2d:b1:95:6a:a8:11:f7: 8a:d2:85:d2:14:50:6a:1b:97:c0:0a:02:87:18:a6: 71:01:f6:4f:90:a9:55:e9:41:83:f1:bf:15:db:f4: e9:be:9f:55:10:9c:36:60:36:4f:33:09:40:22:5a: 55:b5:64:4e:61:d6:d1:6e:25:d9:45:c1:32:c6:6c: 22:25:26:68:13:a4:04:d2:f0:69:f9:28:ab:d8:cc: 8d:e0:9c:f5:a0:27:0c:1c:1e:b7:4a:48:83:4a:bc: 1d:0d:ac:e2:e6:9b:5b:5a:e1:be:84:e0:cf:9b:20: 1c:59:b9:42:a3:26:80:88:1d:c0:0c:00:fe:b5:58: 7a:cc:34:1c:6b:7a:13:78:36:a5:69:ed:08:17:73: 39:0f:61:52:5b:b7:85:3b:40:67:df:99:4a:5d:90: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C0:F2:53:B1:FC:84:61:88:AD:17:A4:3A:6D:8B:DD:04:FF:91:9A X509v3 Authority Key Identifier: keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/34332e3235322e37322e302f32322d3234203d3e203338373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.72.0/22 Signature Algorithm: sha256WithRSAEncryption c5:31:e0:b5:21:08:5a:d1:de:92:4c:10:fd:17:85:66:f0:5c: 6f:05:64:c1:82:cb:4b:55:05:47:ab:1a:80:0c:cd:cd:ac:17: f1:ba:cf:db:e7:35:c1:4e:94:7a:25:7e:9c:ba:9d:bb:dc:df: 78:05:71:86:d8:b3:05:d6:71:db:56:ea:67:bd:e5:45:81:e8: ef:12:a5:f1:0e:23:5e:fc:92:03:d8:0d:42:2a:93:5d:fd:38: e8:fd:82:c2:9c:cd:33:61:04:ea:e7:7d:78:ff:3e:dc:8d:95: 98:bd:e2:5e:a3:c1:f8:37:fe:a3:9d:6e:50:f3:c4:8d:08:db: 43:fd:50:88:1f:ab:09:e7:62:b8:2c:af:cc:a8:3f:95:1e:ee: 4f:00:4d:bf:9d:88:36:36:b0:92:fd:bc:35:c9:52:6d:eb:40: 1d:97:c5:86:3e:be:53:ca:95:80:e2:08:60:2e:4d:6f:a1:e9: d7:2d:6a:90:80:ad:b4:d1:be:ec:3d:89:b9:3a:fa:0f:88:5d: b3:e7:66:28:61:7a:c7:0c:9f:23:7c:9b:73:dc:4a:70:e7:ee: 06:a2:b7:35:34:b9:17:ad:6b:04:53:63:01:1c:8d:68:2a:70: 79:89:4d:49:77:83:a5:58:9f:04:94:81:1c:2f:bb:30:72:d8: 9e:bd:9d:7c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUPge96yWWwSUdV9Zx5npR1SNj3tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1 NTQ5ODZGNDAeFw0yMzA3MzAyMzU1MDZaFw0yNDA3MjkwMDAwMDZaMDMxMTAvBgNV BAMTKDk1QzBGMjUzQjFGQzg0NjE4OEFEMTdBNDNBNkQ4QkREMDRGRjkxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Qm93K+BDcRrGW/gKK5/eprKJ 0s+hvgf8z+lFppwAH5CJ9TTUIAPmHbXwV2sT7GiNHwrtr7Uh/O9OlV6HWI4P/5Aa GhXMprtIxI6KEUNqU1mhpv2oTQAl/eubQAubPksdLbGVaqgR94rShdIUUGobl8AK AocYpnEB9k+QqVXpQYPxvxXb9Om+n1UQnDZgNk8zCUAiWlW1ZE5h1tFuJdlFwTLG bCIlJmgTpATS8Gn5KKvYzI3gnPWgJwwcHrdKSINKvB0NrOLmm1ta4b6E4M+bIBxZ uUKjJoCIHcAMAP61WHrMNBxrehN4NqVp7QgXczkPYVJbt4U7QGffmUpdkGDXAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUlcDyU7H8hGGIrRekOm2L3QT/kZowHwYDVR0j BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5 ODZGNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05 M2U1LTUyMmVlNTQwMThkNi8wLzM0MzMyZTMyMzUzMjJlMzczMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMzMzgzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr/EgwDQYJKoZIhvcN AQELBQADggEBAMUx4LUhCFrR3pJMEP0XhWbwXG8FZMGCy0tVBUerGoAMzc2sF/G6 z9vnNcFOlHolfpy6nbvc33gFcYbYswXWcdtW6me95UWB6O8SpfEOI178kgPYDUIq k139OOj9gsKczTNhBOrnfXj/PtyNlZi94l6jwfg3/qOdblDzxI0I20P9UIgfqwnn Yrgsr8yoP5Ue7k8ATb+diDY2sJL9vDXJUm3rQB2XxYY+vlPKlYDiCGAuTW+h6dct apCArbTRvuw9ibk6+g+IXbPnZihhescMnyN8m3PcSnDn7gaitzU0uRetawRTYwEc jWgqcHmJTUl3g6VYnwSUgRwvuzBy2J69nXw= -----END CERTIFICATE-----Generated at Wed Apr 24 01:48:20 2024 by rpki-client on console-fra.rpki-client.org