$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa File: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (raw, json) Hash identifier: fW0OzyvvA/qkuIlT1CSGoksdR7jtA7ctb7JXVUDbs5E= Subject key identifier: 96:0A:9C:02:90:44:A6:0D:55:64:B2:1F:35:9E:1D:F9:E3:54:65:BE Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 3B0244735488BC97231FA3A688AE76C6E0E84E0F Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa Signing time: Mon 04 Dec 2023 07:01:20 +0000 ROA not before: Mon 04 Dec 2023 06:56:20 +0000 ROA not after: Mon 02 Dec 2024 07:01:20 +0000 asID: 142327 IP address blocks: 124.40.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:02:44:73:54:88:bc:97:23:1f:a3:a6:88:ae:76:c6:e0:e8:4e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: Dec 4 06:56:20 2023 GMT Not After : Dec 2 07:01:20 2024 GMT Subject: CN=960A9C029044A60D5564B21F359E1DF9E35465BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:42:5a:53:e8:8a:fd:fb:93:a6:7d:a6:af: ba:b3:1a:fd:aa:33:77:8b:78:37:82:13:40:15:04: 9e:70:eb:23:94:29:a1:72:c9:a7:92:74:e6:e8:7e: 16:41:94:3c:53:0d:88:57:58:b9:bb:b4:56:a4:56: 51:58:30:22:75:43:67:39:ae:23:d6:be:41:e5:16: f5:8d:2d:c8:40:e9:1c:37:91:fc:c0:08:34:79:ad: b4:ed:a2:36:50:f0:99:57:95:f7:50:62:56:0e:71: f7:dd:30:da:01:7d:94:cf:65:bf:f4:98:3b:b6:92: 7b:cd:5d:50:44:fd:9d:27:18:ce:a3:79:41:a0:27: 83:db:4a:e3:6a:12:98:95:f6:47:0e:de:2e:39:c5: 71:1e:9a:3e:e0:d7:b9:7c:6b:7a:d2:c3:4e:6b:59: df:b1:66:43:c7:f9:82:77:de:45:b3:58:b4:76:07: 2e:b8:fe:c0:dc:14:c7:e2:eb:ff:1b:ef:f8:db:48: 78:ae:e0:ae:54:06:91:2b:2c:e3:8f:8e:ba:bc:34: bb:35:b3:00:0e:8c:08:07:35:20:aa:de:a2:e9:15: 10:0d:31:74:d4:09:a8:1d:3e:ec:a0:78:12:f3:f0: f9:75:c6:ca:ae:b4:f4:12:48:13:c3:f9:2c:b8:a6: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:9C:02:90:44:A6:0D:55:64:B2:1F:35:9E:1D:F9:E3:54:65:BE X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.40.253.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:59:b6:e0:1a:07:ee:aa:ab:81:38:6b:e5:66:e8:bc:3a:a4: b1:68:19:51:d2:8e:53:9e:0f:3e:0f:3e:42:71:9b:06:d7:c4: 9b:43:f5:e8:b1:b6:15:d8:82:70:01:a5:5e:b9:0d:e7:38:3e: b3:a8:19:9b:8d:96:f8:9d:f4:6f:7a:0b:71:86:a8:38:2e:b4: d0:09:3e:f4:41:9d:09:1a:8e:87:4d:95:34:e4:e7:35:dd:f1: d5:76:a3:c8:dc:15:5c:7c:e7:c7:ea:19:3a:d4:64:95:9e:8a: 3d:5d:af:6f:18:f3:5f:3d:82:06:ab:15:32:d1:6d:17:81:3c: 30:2a:c0:40:0a:dc:7f:c1:d3:5d:d7:8c:a2:4f:9a:13:86:cd: e6:ad:33:2e:e2:0d:a1:17:1b:fd:f3:cc:cc:82:c8:e5:42:25: 94:2c:5d:33:da:70:11:1f:8e:27:e5:69:6e:8d:64:39:cd:70: e1:76:ad:13:2b:91:79:d5:24:e7:5d:9d:03:6f:db:10:f9:48: 5e:d7:f1:41:33:76:94:2e:8c:d5:b9:8b:e1:c6:46:8c:5e:3c: a0:6d:70:23:d6:bb:1c:31:3c:a4:1a:f0:9a:15:78:a7:73:b9: 02:68:99:a7:8c:85:d4:7f:cc:05:f7:2d:d3:75:63:71:75:38: 3a:d6:97:cb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOwJEc1SIvJcjH6OmiK52xuDoTg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yMzEyMDQwNjU2MjBaFw0yNDEyMDIwNzAxMjBaMDMxMTAvBgNV BAMTKDk2MEE5QzAyOTA0NEE2MEQ1NTY0QjIxRjM1OUUxREY5RTM1NDY1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4akJaU+iK/fuTpn2mr7qzGv2q M3eLeDeCE0AVBJ5w6yOUKaFyyaeSdObofhZBlDxTDYhXWLm7tFakVlFYMCJ1Q2c5 riPWvkHlFvWNLchA6Rw3kfzACDR5rbTtojZQ8JlXlfdQYlYOcffdMNoBfZTPZb/0 mDu2knvNXVBE/Z0nGM6jeUGgJ4PbSuNqEpiV9kcO3i45xXEemj7g17l8a3rSw05r Wd+xZkPH+YJ33kWzWLR2By64/sDcFMfi6/8b7/jbSHiu4K5UBpErLOOPjrq8NLs1 swAOjAgHNSCq3qLpFRANMXTUCagdPuygeBLz8Pl1xsqutPQSSBPD+Sy4pub5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlgqcApBEpg1VZLIfNZ4d+eNUZb4wHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOTVjMTljLTMyNjItNDhjNy1h ZjAyLTM3YTgzNWQwYTc3OS8wLzMxMzIzNDJlMzQzMDJlMzIzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfCj9MA0GCSqG SIb3DQEBCwUAA4IBAQB/WbbgGgfuqquBOGvlZui8OqSxaBlR0o5Tng8+Dz5CcZsG 18SbQ/XosbYV2IJwAaVeuQ3nOD6zqBmbjZb4nfRvegtxhqg4LrTQCT70QZ0JGo6H TZU05Oc13fHVdqPI3BVcfOfH6hk61GSVnoo9Xa9vGPNfPYIGqxUy0W0XgTwwKsBA Ctx/wdNd14yiT5oThs3mrTMu4g2hFxv988zMgsjlQiWULF0z2nARH44n5WlujWQ5 zXDhdq0TK5F51STnXZ0Db9sQ+Uhe1/FBM3aULozVuYvhxkaMXjygbXAj1rscMTyk GvCaFXinc7kCaJmnjIXUf8wF9y3TdWNxdTg61pfL -----END CERTIFICATE-----Generated at Fri May 3 20:32:18 2024 by rpki-client on console-fra.rpki-client.org