$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132322e302f32332d3233203d3e203233393531.roa File: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (raw, json) Hash identifier: FIHStW2k4g+tFxtYz3/ZIzbpyI2+5vWe/AH25VVCFNc= Subject key identifier: AB:16:83:41:5F:B7:1D:DD:89:F5:18:10:D1:EA:2A:BB:B3:4E:AE:69 Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 6EFFF4F682E429B5FC3966D87CB8F6727EDCEA34 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132322e302f32332d3233203d3e203233393531.roa Signing time: Fri 22 Sep 2023 03:00:00 +0000 ROA not before: Fri 22 Sep 2023 02:55:00 +0000 ROA not after: Fri 20 Sep 2024 03:00:00 +0000 asID: 23951 IP address blocks: 202.65.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ff:f4:f6:82:e4:29:b5:fc:39:66:d8:7c:b8:f6:72:7e:dc:ea:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Sep 22 02:55:00 2023 GMT Not After : Sep 20 03:00:00 2024 GMT Subject: CN=AB1683415FB71DDD89F51810D1EA2ABBB34EAE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:0e:42:2a:ca:3a:41:d6:5a:c2:f4:5e:bb: f5:a2:60:0d:5b:d4:3b:fd:1c:ac:67:fa:60:35:bb: 63:96:de:a2:fd:da:94:00:f2:16:f6:06:33:4c:1b: 77:20:69:51:e5:7c:48:fc:39:89:dd:89:ba:22:3f: a4:88:78:33:e5:2b:a8:10:de:81:3c:fb:85:16:56: c6:39:8a:1f:5c:a4:95:6f:5d:b3:bd:b0:c7:e3:6a: 45:91:79:ce:0d:03:91:ca:39:2a:f0:04:78:65:a5: b9:a6:21:88:dd:0b:e3:c6:6d:19:bd:68:66:c7:19: 27:7b:61:f0:7b:6c:a1:e0:08:11:9b:d2:2d:1a:28: 3b:18:70:21:63:5e:4c:c8:04:de:e1:0a:81:3f:d2: fe:ee:5f:bd:39:d3:6d:87:17:2c:1c:91:06:be:36: 47:39:e6:83:55:d3:7b:2c:58:5f:98:49:2f:05:70: 62:0a:ff:37:00:22:a9:46:23:8d:c7:52:70:ea:fc: e9:31:50:05:55:07:f4:a0:00:d0:e8:04:c0:f2:0b: 4f:3d:f9:48:9d:06:e9:95:2a:c3:5c:66:c0:5e:79: 5f:20:b4:cb:17:fe:c4:90:e9:d4:85:47:87:91:0d: b9:62:51:61:c7:b4:ea:9c:77:f4:dd:00:2e:9a:b2: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:16:83:41:5F:B7:1D:DD:89:F5:18:10:D1:EA:2A:BB:B3:4E:AE:69 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132322e302f32332d3233203d3e203233393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.65.122.0/23 Signature Algorithm: sha256WithRSAEncryption 95:48:d6:f9:c9:ee:e6:f5:b1:7b:34:b9:d0:75:22:ed:13:cf: 8b:e8:ff:b8:6a:38:32:ab:c2:49:6e:04:0b:95:f1:3a:35:92: 82:5e:d2:7c:d1:c3:09:22:f7:1c:4f:6d:29:b2:7f:88:a4:1e: e9:45:29:aa:07:fc:2d:85:c6:90:7e:ac:6c:d6:c8:fb:4e:84: 07:6d:5b:3d:1d:49:58:93:37:3f:50:db:94:a0:e8:b0:3c:be: b2:2e:c5:c6:d7:18:b2:ea:54:fd:24:80:27:b6:6c:53:c5:28: b7:77:84:e5:26:24:6a:27:57:d8:29:e8:de:54:86:b8:6e:d8: ba:ca:dd:14:f4:d2:37:c7:59:e5:60:0c:b5:0e:de:96:6e:3c: 42:fd:7c:58:7f:fc:8a:30:aa:31:a9:29:b4:a9:b7:33:25:e9: 7d:8c:9e:36:37:94:23:f7:c3:15:c8:11:09:34:a0:f2:02:7b: c6:4b:49:db:9d:1f:b0:d8:a3:38:89:3b:ba:08:1b:01:00:16: 7e:dd:fd:1b:8f:b5:0d:a3:f5:ba:f6:dc:12:9c:8c:25:5f:e1: 1d:e0:9e:3d:08:49:68:ec:00:21:cd:c1:0b:6a:ab:e3:55:f6: c9:2b:7e:8d:89:d3:a9:57:e3:4a:71:0a:bf:29:18:f2:f1:4b: d3:c6:17:c2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbv/09oLkKbX8OWbYfLj2cn7c6jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yMzA5MjIwMjU1MDBaFw0yNDA5MjAwMzAwMDBaMDMxMTAvBgNV BAMTKEFCMTY4MzQxNUZCNzFEREQ4OUY1MTgxMEQxRUEyQUJCQjM0RUFFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsQ5CKso6QdZawvReu/WiYA1b 1Dv9HKxn+mA1u2OW3qL92pQA8hb2BjNMG3cgaVHlfEj8OYndiboiP6SIeDPlK6gQ 3oE8+4UWVsY5ih9cpJVvXbO9sMfjakWRec4NA5HKOSrwBHhlpbmmIYjdC+PGbRm9 aGbHGSd7YfB7bKHgCBGb0i0aKDsYcCFjXkzIBN7hCoE/0v7uX705022HFywckQa+ Nkc55oNV03ssWF+YSS8FcGIK/zcAIqlGI43HUnDq/OkxUAVVB/SgANDoBMDyC089 +UidBumVKsNcZsBeeV8gtMsX/sSQ6dSFR4eRDbliUWHHtOqcd/TdAC6assMHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqxaDQV+3Hd2J9RgQ0eoqu7NOrmkwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlNmE3ZTQ2LWI2YWQtNGE3ZC1i OTMwLTFhYjBiZjAyZGQ1ZC8wLzMyMzAzMjJlMzYzNTJlMzEzMjMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzIzMzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcpBejANBgkqhkiG 9w0BAQsFAAOCAQEAlUjW+cnu5vWxezS50HUi7RPPi+j/uGo4MqvCSW4EC5XxOjWS gl7SfNHDCSL3HE9tKbJ/iKQe6UUpqgf8LYXGkH6sbNbI+06EB21bPR1JWJM3P1Db lKDosDy+si7FxtcYsupU/SSAJ7ZsU8Uot3eE5SYkaidX2Cno3lSGuG7YusrdFPTS N8dZ5WAMtQ7elm48Qv18WH/8ijCqMakptKm3MyXpfYyeNjeUI/fDFcgRCTSg8gJ7 xktJ250fsNijOIk7uggbAQAWft39G4+1DaP1uvbcEpyMJV/hHeCePQhJaOwAIc3B C2qr41X2ySt+jYnTqVfjSnEKvykY8vFL08YXwg== -----END CERTIFICATE-----Generated at Thu Apr 25 22:30:50 2024 by rpki-client on console-fra.rpki-client.org