$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231322e302f32342d3234203d3e203538343734.roa File: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (raw, json) Hash identifier: dQ+AvgkXICKyZ+zEYdcb9hvvfKkBQmiJMwds7nIVEkY= Subject key identifier: 11:A5:70:13:85:3A:2E:81:09:E9:D1:75:62:C6:FA:D6:1F:BC:A1:DE Certificate issuer: /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Certificate serial: 3F81CC112E9CFBC45B6BE9EAAB0A37B47857A9CC Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231322e302f32342d3234203d3e203538343734.roa Signing time: Sun 24 Sep 2023 05:00:01 +0000 ROA not before: Sun 24 Sep 2023 04:55:01 +0000 ROA not after: Sun 22 Sep 2024 05:00:01 +0000 asID: 58474 IP address blocks: 43.248.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 23:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:81:cc:11:2e:9c:fb:c4:5b:6b:e9:ea:ab:0a:37:b4:78:57:a9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Validity Not Before: Sep 24 04:55:01 2023 GMT Not After : Sep 22 05:00:01 2024 GMT Subject: CN=11A57013853A2E8109E9D17562C6FAD61FBCA1DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:d1:01:8d:b9:71:1b:ff:dc:e0:f1:6a:a6: 1e:9e:bb:6c:3f:07:09:63:45:60:5c:92:5f:5f:7e: 39:52:da:15:fa:e1:e6:e4:81:a6:1c:c9:79:ed:af: 2e:84:8b:f5:fb:3e:ae:4d:cb:7b:1e:c7:e1:f1:be: 3c:09:7a:c3:8e:53:78:5a:fc:67:21:54:b3:19:ec: 6b:dd:41:64:8a:3b:a7:55:b2:08:f5:4a:d5:b6:fe: 51:3a:fa:4f:e6:16:4a:44:60:e3:23:6e:8c:8d:ac: 6f:06:58:d3:5a:28:ad:5d:50:db:57:95:82:c1:b5: 21:2b:e1:bf:81:f0:23:b2:57:52:00:78:5c:64:0a: 92:e1:87:a1:fa:59:79:4b:86:62:9f:e9:03:23:ec: 4c:9b:74:15:24:7f:fc:ca:4e:8e:09:43:0e:ab:c7: c5:5f:47:3c:fa:56:74:27:68:e3:3f:e9:7c:71:f4: e8:a6:e6:a7:e3:5f:36:02:40:e1:d0:08:49:c1:eb: 64:5c:f5:5f:20:5d:73:50:5d:d3:51:03:e9:3f:82: 7e:20:7d:b7:11:8b:67:03:5b:2b:cc:d3:21:aa:73: 06:f0:26:6f:32:f7:4c:cd:b8:a5:1f:ad:ee:1d:2a: ea:be:d6:8f:99:75:a6:70:af:9b:0a:4d:8f:51:b4: a7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A5:70:13:85:3A:2E:81:09:E9:D1:75:62:C6:FA:D6:1F:BC:A1:DE X509v3 Authority Key Identifier: keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231322e302f32342d3234203d3e203538343734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.212.0/24 Signature Algorithm: sha256WithRSAEncryption 35:a3:ea:ee:95:6a:95:0f:bd:b5:99:3e:fb:b0:4f:84:33:38: d2:2c:7e:65:bb:39:42:5a:8c:96:76:df:68:d1:0c:b5:15:2d: 73:9d:b9:ef:ec:f0:0e:d9:c5:6e:a6:63:f5:c0:bf:d3:62:3f: 00:01:c3:46:50:2b:eb:0a:9b:ce:f4:8b:5f:37:41:3b:9e:71: c6:cd:26:f4:14:6f:3a:52:f0:e0:b2:47:b0:6e:1f:fa:77:5a: 75:e9:0b:30:d8:fb:5d:a1:79:2e:e1:71:97:63:36:4b:e0:8d: c9:38:85:fd:8d:bc:dc:f0:fb:75:16:fa:17:5e:13:75:19:0a: 57:8e:12:8d:59:31:40:c6:a7:98:ba:f4:90:ed:79:86:e4:ba: 72:53:8c:8a:89:3f:05:cf:9f:49:a9:57:82:ad:aa:f9:e2:74: b3:b6:3b:48:50:30:06:a9:d5:ad:94:b4:d6:da:f1:09:0c:fd: c6:6f:53:4b:dc:c7:a0:64:61:2f:c1:20:fa:c7:fd:7b:d9:49: 26:47:4b:1f:2f:f8:a1:ef:9a:1c:98:5f:f2:f0:f2:fd:45:87: e7:c5:55:96:fc:3a:1d:cf:05:73:1d:cd:c5:42:28:e2:1d:9d: 0b:ec:e0:0d:0c:b0:0e:0a:85:96:ea:00:3f:26:6d:eb:9f:eb: af:44:e9:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUP4HMES6c+8Rba+nqqwo3tHhXqcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQz REEyRjA5ODAeFw0yMzA5MjQwNDU1MDFaFw0yNDA5MjIwNTAwMDFaMDMxMTAvBgNV BAMTKDExQTU3MDEzODUzQTJFODEwOUU5RDE3NTYyQzZGQUQ2MUZCQ0ExREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1tEBjblxG//c4PFqph6eu2w/ BwljRWBckl9ffjlS2hX64ebkgaYcyXntry6Ei/X7Pq5Ny3sex+HxvjwJesOOU3ha /GchVLMZ7GvdQWSKO6dVsgj1StW2/lE6+k/mFkpEYOMjboyNrG8GWNNaKK1dUNtX lYLBtSEr4b+B8COyV1IAeFxkCpLhh6H6WXlLhmKf6QMj7EybdBUkf/zKTo4JQw6r x8VfRzz6VnQnaOM/6Xxx9Oim5qfjXzYCQOHQCEnB62Rc9V8gXXNQXdNRA+k/gn4g fbcRi2cDWyvM0yGqcwbwJm8y90zNuKUfre4dKuq+1o+ZdaZwr5sKTY9RtKe9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUEaVwE4U6LoEJ6dF1Ysb61h+8od4wHwYDVR0j BBgwFoAUlfxgcqSmkKYaC18Us2iCtD2i8JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzA1MTc3YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC85NUZDNjA3MkE0 QTY5MEE2MUEwQjVGMTRCMzY4ODJCNDNEQTJGMDk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQzREEy RjA5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i M2ZmLTcwYzE0NGVkZmVjZS8wLzM0MzMyZTMyMzQzODJlMzIzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv41DANBgkqhkiG 9w0BAQsFAAOCAQEANaPq7pVqlQ+9tZk++7BPhDM40ix+Zbs5QlqMlnbfaNEMtRUt c5257+zwDtnFbqZj9cC/02I/AAHDRlAr6wqbzvSLXzdBO55xxs0m9BRvOlLw4LJH sG4f+ndadekLMNj7XaF5LuFxl2M2S+CNyTiF/Y283PD7dRb6F14TdRkKV44SjVkx QManmLr0kO15huS6clOMiok/Bc+fSalXgq2q+eJ0s7Y7SFAwBqnVrZS01trxCQz9 xm9TS9zHoGRhL8Eg+sf9e9lJJkdLHy/4oe+aHJhf8vDy/UWH58VVlvw6Hc8Fcx3N xUIo4h2dC+zgDQywDgqFluoAPyZt65/rr0TpNw== -----END CERTIFICATE-----Generated at Fri Apr 19 20:20:00 2024 by rpki-client on console-fra.rpki-client.org