$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa File: 34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa (raw, json) Hash identifier: FdRQJx61o8zwGIJ9zIY3DVlQhVXsMm2+z140aBaLXEI= Subject key identifier: 9B:B3:B7:9F:F4:41:E7:29:DA:E3:11:A3:6C:2A:3A:32:10:68:49:D7 Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 2A487BF4CE9F0B285122CF8FDC8643946DFDCAC3 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa Signing time: Thu 26 Oct 2023 06:01:13 +0000 ROA not before: Thu 26 Oct 2023 05:56:13 +0000 ROA not after: Thu 24 Oct 2024 06:01:13 +0000 asID: 131755 IP address blocks: 43.245.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:48:7b:f4:ce:9f:0b:28:51:22:cf:8f:dc:86:43:94:6d:fd:ca:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Oct 26 05:56:13 2023 GMT Not After : Oct 24 06:01:13 2024 GMT Subject: CN=9BB3B79FF441E729DAE311A36C2A3A32106849D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:14:d9:e9:8b:47:2a:e5:66:38:83:88:de:6f: 00:fb:c4:68:2e:35:cc:33:d0:c4:77:e7:b4:a5:45: 04:67:cd:22:e0:e9:d4:c2:91:89:7e:ba:14:1e:3e: 22:7a:9d:35:c8:d3:5f:a3:77:6c:5f:66:6f:85:f7: c7:87:6d:83:3c:3b:b2:df:cb:58:33:51:83:7d:18: 6a:67:b0:80:9e:d4:ed:ec:f7:41:53:a2:4c:5d:eb: 10:7b:c7:20:08:eb:4c:3a:ef:ca:9a:25:13:00:49: 31:d1:9d:c7:b6:76:b8:52:aa:e5:d6:f9:91:2e:cf: b1:07:60:da:1b:3c:52:ce:8d:e4:ac:c2:78:f6:10: 9b:87:6e:6f:37:f2:c0:9f:74:f8:bd:3c:8d:08:a8: 0b:11:27:ce:f2:d4:27:15:91:94:7f:ee:2a:3c:94: 18:b4:14:9d:87:87:5b:fd:57:25:a6:80:92:1a:41: 33:6e:87:4b:f6:17:2b:0a:86:6f:fc:4b:72:86:1e: 1b:f8:8a:53:19:8b:cd:5b:60:35:fc:d2:4f:68:09: 29:a3:e0:aa:2f:e7:b4:cd:db:d4:14:40:35:8f:1e: 94:e0:5a:d9:af:40:54:00:b2:61:97:49:3c:dc:63: be:19:40:04:61:8c:45:b7:eb:fc:29:94:b7:04:c5: 45:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B3:B7:9F:F4:41:E7:29:DA:E3:11:A3:6C:2A:3A:32:10:68:49:D7 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.184.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:07:2b:ea:97:c2:08:46:6e:b5:f3:e7:46:9d:71:80:2a:8a: e9:7d:82:69:6e:e0:07:c7:c2:f8:72:ad:3e:bf:70:67:f1:a4: d3:c5:d8:93:0c:c0:46:02:30:3f:ff:18:62:75:c7:9b:9b:a2: d4:66:63:f2:53:52:19:af:c5:c1:d2:cf:d2:d1:69:11:40:f5: 9f:e2:7a:1f:86:c2:86:36:69:05:d1:d0:7a:43:a2:72:94:ab: c4:89:88:95:ef:2c:2b:72:0c:dc:78:50:0b:15:cb:7a:ae:1f: 08:f8:36:2e:56:22:b8:8a:b7:b6:da:95:03:cb:ac:04:ee:57: 2d:fd:79:cc:2c:4a:a8:ab:b9:31:57:11:55:fb:74:df:0c:42: a0:60:45:76:52:2c:6c:da:2d:76:d4:fe:74:a5:fd:1b:44:5a: f0:16:a9:76:4a:34:ce:34:47:08:d1:ad:80:cf:f6:a1:f0:9e: 33:71:44:25:05:d0:a9:a7:6d:37:1b:19:7e:41:7e:ae:66:43: 58:8c:ca:64:0c:22:a4:62:a5:c0:f0:04:f0:c2:87:c7:c1:6c: f2:ac:b1:a2:db:23:2e:ea:d4:b4:39:1e:bc:57:a1:9f:f3:ac: 53:7d:d0:cb:3e:de:11:d0:36:8e:0c:cc:a4:f6:4a:5f:c6:2d: ca:f5:08:fc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKkh79M6fCyhRIs+P3IZDlG39ysMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yMzEwMjYwNTU2MTNaFw0yNDEwMjQwNjAxMTNaMDMxMTAvBgNV BAMTKDlCQjNCNzlGRjQ0MUU3MjlEQUUzMTFBMzZDMkEzQTMyMTA2ODQ5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFNnpi0cq5WY4g4jebwD7xGgu Ncwz0MR357SlRQRnzSLg6dTCkYl+uhQePiJ6nTXI01+jd2xfZm+F98eHbYM8O7Lf y1gzUYN9GGpnsICe1O3s90FTokxd6xB7xyAI60w678qaJRMASTHRnce2drhSquXW +ZEuz7EHYNobPFLOjeSswnj2EJuHbm838sCfdPi9PI0IqAsRJ87y1CcVkZR/7io8 lBi0FJ2Hh1v9VyWmgJIaQTNuh0v2FysKhm/8S3KGHhv4ilMZi81bYDX80k9oCSmj 4Kov57TN29QUQDWPHpTgWtmvQFQAsmGXSTzcY74ZQARhjEW36/wplLcExUVTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUm7O3n/RB5yna4xGjbCo6MhBoSdcwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhOGYwNDM1LTRkMzgtNDdlZi04 NTBmLTUxYmE0NjE3ZmIzZC8wLzM0MzMyZTMyMzQzNTJlMzEzODM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCK/W4MA0GCSqG SIb3DQEBCwUAA4IBAQCLByvql8IIRm618+dGnXGAKorpfYJpbuAHx8L4cq0+v3Bn 8aTTxdiTDMBGAjA//xhidcebm6LUZmPyU1IZr8XB0s/S0WkRQPWf4nofhsKGNmkF 0dB6Q6JylKvEiYiV7ywrcgzceFALFct6rh8I+DYuViK4ire22pUDy6wE7lct/XnM LEqoq7kxVxFV+3TfDEKgYEV2Uixs2i121P50pf0bRFrwFql2SjTONEcI0a2Az/ah 8J4zcUQlBdCpp203Gxl+QX6uZkNYjMpkDCKkYqXA8ATwwofHwWzyrLGi2yMu6tS0 OR68V6Gf86xTfdDLPt4R0DaODMyk9kpfxi3K9Qj8 -----END CERTIFICATE-----Generated at Thu May 2 17:39:53 2024 by rpki-client on console-fra.rpki-client.org