$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230302e302f32332d3234203d3e20313338383431.roa File: 3230322e3136322e3230302e302f32332d3234203d3e20313338383431.roa (raw, json) Hash identifier: s0R2+LecHk/7gI5PxwjnnMUzrOGVZVy/NOwWK1psJFw= Subject key identifier: 96:DB:3B:5C:9B:A3:5C:26:3E:FF:78:14:4D:CB:45:CE:ED:1A:E0:31 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 75AEF71A29C352B3B75CF06FC964183B50C5EF2D Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230302e302f32332d3234203d3e20313338383431.roa Signing time: Sat 09 Sep 2023 11:00:01 +0000 ROA not before: Sat 09 Sep 2023 10:55:01 +0000 ROA not after: Sat 07 Sep 2024 11:00:01 +0000 asID: 138841 IP address blocks: 202.162.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ae:f7:1a:29:c3:52:b3:b7:5c:f0:6f:c9:64:18:3b:50:c5:ef:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Sep 9 10:55:01 2023 GMT Not After : Sep 7 11:00:01 2024 GMT Subject: CN=96DB3B5C9BA35C263EFF78144DCB45CEED1AE031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2a:36:6e:4a:80:3f:e8:1d:05:ae:73:85:87: 03:b1:e1:01:2c:39:04:80:53:29:8f:27:52:5c:da: 9c:4e:b1:e1:a4:f4:69:c3:bd:c4:78:e0:24:2b:61: 99:22:3d:14:e5:96:c9:e6:9a:58:9e:e4:fe:04:e0: 63:a2:d8:c7:fb:1d:83:06:24:c9:43:5c:fe:9a:f2: 65:66:02:e2:0a:2f:40:f7:3d:f3:0d:d5:13:20:3d: 33:a9:47:35:e9:cd:33:70:68:e9:5a:f4:ee:97:73: ca:f7:27:ef:59:83:cc:09:45:be:b0:67:61:13:b6: 82:96:6a:b7:38:e7:55:45:52:a1:a6:21:48:67:6a: af:79:8f:1a:da:72:09:54:34:08:1b:17:59:c3:18: 8b:c3:ea:50:5a:50:6f:9f:14:14:34:51:99:82:91: 6b:14:a8:19:b0:3a:4f:ab:ab:20:99:41:28:c2:d0: 26:ae:32:e2:de:5d:fc:60:5f:46:a7:c2:d8:e2:2c: d5:7f:0b:ad:d7:0e:08:2b:84:cc:0c:bf:1e:5a:ec: e0:33:92:b8:49:bb:05:c6:83:6c:ac:53:96:16:06: 7a:e4:85:31:97:9d:0d:c0:2b:f0:bc:60:d8:fa:e9: fd:cb:9a:5b:1d:b7:0c:54:58:5a:84:f0:8e:91:7b: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DB:3B:5C:9B:A3:5C:26:3E:FF:78:14:4D:CB:45:CE:ED:1A:E0:31 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230302e302f32332d3234203d3e20313338383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.162.200.0/23 Signature Algorithm: sha256WithRSAEncryption ab:9e:e5:ca:b0:47:8b:1d:89:6e:84:1a:02:6c:3e:1b:58:65: 6c:e6:81:f1:ea:31:48:40:b4:e5:e9:74:bb:4b:f9:aa:5e:f7: ff:c4:81:5b:dd:4d:bc:a5:92:3f:fb:d0:46:da:22:78:ba:d0: 77:9f:df:43:cd:29:bc:e0:2a:cc:df:1e:8a:9b:0c:19:1b:3a: 9b:57:40:c9:3c:73:15:69:89:94:f8:04:91:b0:12:27:ee:e4: 50:80:65:43:12:34:81:c3:da:b7:90:04:19:52:79:7c:2a:22: 7b:4b:d7:b7:58:71:e0:f8:73:4f:8b:0e:e5:a3:2e:db:d7:1c: 8e:31:5e:67:31:a9:c1:52:14:b6:06:ce:73:8c:a2:83:d1:ed: ac:d8:36:71:97:b8:22:37:8d:17:ae:a9:f1:28:e4:2d:91:71: ad:a7:4e:4d:00:02:c2:a3:c0:62:84:ba:c5:42:3e:22:9e:13: c1:d2:bc:dc:86:a0:9e:f4:f7:3f:0d:bd:93:af:f9:d6:8e:40: 5c:69:84:49:02:2f:97:a3:15:75:dd:1a:e2:12:6e:98:7c:bb: 7b:d8:0e:d4:55:0d:4e:48:61:4d:3e:c0:49:d6:c9:5b:5f:7c: 7b:bd:b8:aa:e6:62:59:5b:3e:76:28:82:21:3a:40:d4:8c:be: 6b:05:7e:67 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUda73GinDUrO3XPBvyWQYO1DF7y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yMzA5MDkxMDU1MDFaFw0yNDA5MDcxMTAwMDFaMDMxMTAvBgNV BAMTKDk2REIzQjVDOUJBMzVDMjYzRUZGNzgxNDREQ0I0NUNFRUQxQUUwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKjZuSoA/6B0FrnOFhwOx4QEs OQSAUymPJ1Jc2pxOseGk9GnDvcR44CQrYZkiPRTllsnmmlie5P4E4GOi2Mf7HYMG JMlDXP6a8mVmAuIKL0D3PfMN1RMgPTOpRzXpzTNwaOla9O6Xc8r3J+9Zg8wJRb6w Z2ETtoKWarc451VFUqGmIUhnaq95jxracglUNAgbF1nDGIvD6lBaUG+fFBQ0UZmC kWsUqBmwOk+rqyCZQSjC0CauMuLeXfxgX0anwtjiLNV/C63XDggrhMwMvx5a7OAz krhJuwXGg2ysU5YWBnrkhTGXnQ3AK/C8YNj66f3LmlsdtwxUWFqE8I6Re/TFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlts7XJujXCY+/3gUTctFzu0a4DEwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzAzMjJlMzEzNjMyMmUzMjMwMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKosgwDQYJ KoZIhvcNAQELBQADggEBAKue5cqwR4sdiW6EGgJsPhtYZWzmgfHqMUhAtOXpdLtL +ape9//EgVvdTbylkj/70EbaIni60Hef30PNKbzgKszfHoqbDBkbOptXQMk8cxVp iZT4BJGwEifu5FCAZUMSNIHD2reQBBlSeXwqIntL17dYceD4c0+LDuWjLtvXHI4x XmcxqcFSFLYGznOMooPR7azYNnGXuCI3jReuqfEo5C2Rca2nTk0AAsKjwGKEusVC PiKeE8HSvNyGoJ709z8NvZOv+daOQFxphEkCL5ejFXXdGuISbph8u3vYDtRVDU5I YU0+wEnWyVtffHu9uKrmYllbPnYogiE6QNSMvmsFfmc= -----END CERTIFICATE-----Generated at Fri May 3 11:55:16 2024 by rpki-client on console-fra.rpki-client.org