$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa File: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (raw, json) Hash identifier: 6xeJVxGl9cVKsMk2E2MJqOXhWZaMs+uAA/sqXpWfXQM= Subject key identifier: 2F:54:A8:93:10:55:AA:D7:3F:B7:FE:D0:20:76:89:DE:F0:85:8C:44 Certificate issuer: /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Certificate serial: 40F54DAA73384AC36071EB16552A0C69CF80F1A6 Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa Signing time: Sun 24 Sep 2023 05:00:02 +0000 ROA not before: Sun 24 Sep 2023 04:55:02 +0000 ROA not after: Sun 22 Sep 2024 05:00:02 +0000 asID: 58474 IP address blocks: 43.248.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Apr 2024 08:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f5:4d:aa:73:38:4a:c3:60:71:eb:16:55:2a:0c:69:cf:80:f1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Validity Not Before: Sep 24 04:55:02 2023 GMT Not After : Sep 22 05:00:02 2024 GMT Subject: CN=2F54A8931055AAD73FB7FED0207689DEF0858C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:f2:8b:27:32:d1:a6:ff:3a:41:cf:34:f8: 61:c3:97:5d:82:67:f3:e3:55:0c:0b:d1:b1:f0:70: 6f:6e:c1:66:01:44:25:2e:e4:ec:11:77:a5:c2:9b: d4:6e:c6:9d:6f:42:75:d4:dd:d6:27:1b:91:b0:92: 6d:ec:d3:16:21:94:4a:d0:21:6c:d8:08:64:29:d0: 1e:54:cb:52:74:65:10:b4:4e:a0:7e:5e:0c:4c:47: bf:73:83:e1:36:e1:42:1c:70:cb:58:9b:64:a4:c0: 7a:59:20:f4:a6:23:35:07:4c:13:44:8a:92:69:7d: 3d:05:51:78:66:f0:5f:aa:fa:f4:21:53:50:56:3d: 46:89:16:3a:eb:95:04:ee:7e:fd:a4:2b:60:d5:3a: 7d:0d:c7:ca:2e:7b:df:1f:8a:ec:70:e5:6f:7e:82: 57:73:00:8d:d7:ff:6c:8a:01:cd:19:01:e4:c6:6d: 74:e8:5a:fd:14:81:16:fe:c2:9d:75:7b:9e:76:e6: a7:36:0e:48:3d:cf:f9:5f:fd:45:6c:d3:b9:55:a5: b0:19:65:64:35:6c:22:fe:6c:f9:ed:56:fd:67:43: 5c:65:65:b5:0d:3e:ad:d6:b8:c6:eb:e4:07:44:44: ad:4d:44:56:e6:bb:e5:b7:fe:0e:27:72:fe:37:de: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:54:A8:93:10:55:AA:D7:3F:B7:FE:D0:20:76:89:DE:F0:85:8C:44 X509v3 Authority Key Identifier: keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.214.0/24 Signature Algorithm: sha256WithRSAEncryption 07:5c:01:1f:b7:6c:81:14:46:f7:55:30:a8:8e:fd:c3:7b:00: 36:5e:eb:46:10:0d:88:a9:2d:17:f4:7b:f9:14:21:8b:02:ef: 4c:d2:52:f7:f4:b2:8c:3a:e3:a4:a6:c8:cf:e3:bf:2f:16:1e: 80:11:6b:69:d7:dc:f5:4b:57:e8:f4:18:10:12:ba:44:3e:1f: 68:30:43:ac:e5:93:3d:1b:7a:54:7b:19:55:76:1e:b6:c3:6d: bf:99:cc:e6:45:a4:6c:e3:6b:52:e2:66:44:57:23:d9:73:fc: 1e:b5:95:47:52:ff:92:33:2d:fa:25:10:25:35:7b:cf:92:34: 9e:78:7f:46:bb:95:ae:c1:f7:46:70:9e:3d:e5:d2:07:e9:38: ba:8e:b2:84:a7:e0:d7:18:3f:6b:13:d8:41:f0:df:67:e1:ec: 47:09:27:46:40:88:4b:4e:87:4a:df:39:92:46:48:5c:db:e9: 50:00:52:e8:ff:9f:e0:6a:d3:2e:4e:5b:b1:32:16:d0:41:de: 56:9f:25:ac:8a:dd:49:44:4f:31:c1:18:1d:92:a1:df:10:b8: 95:d0:29:a8:1c:a7:07:be:5e:63:d4:9b:e2:47:dc:d9:6e:5f: b8:24:69:90:44:ef:b6:63:8b:05:0d:da:35:07:83:82:3e:6b: e9:3e:cd:5c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQPVNqnM4SsNgcesWVSoMac+A8aYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQz REEyRjA5ODAeFw0yMzA5MjQwNDU1MDJaFw0yNDA5MjIwNTAwMDJaMDMxMTAvBgNV BAMTKDJGNTRBODkzMTA1NUFBRDczRkI3RkVEMDIwNzY4OURFRjA4NThDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5N/KLJzLRpv86Qc80+GHDl12C Z/PjVQwL0bHwcG9uwWYBRCUu5OwRd6XCm9Ruxp1vQnXU3dYnG5Gwkm3s0xYhlErQ IWzYCGQp0B5Uy1J0ZRC0TqB+XgxMR79zg+E24UIccMtYm2SkwHpZIPSmIzUHTBNE ipJpfT0FUXhm8F+q+vQhU1BWPUaJFjrrlQTufv2kK2DVOn0Nx8oue98fiuxw5W9+ gldzAI3X/2yKAc0ZAeTGbXToWv0UgRb+wp11e5525qc2Dkg9z/lf/UVs07lVpbAZ ZWQ1bCL+bPntVv1nQ1xlZbUNPq3WuMbr5AdERK1NRFbmu+W3/g4ncv433q7zAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUL1SokxBVqtc/t/7QIHaJ3vCFjEQwHwYDVR0j BBgwFoAUlfxgcqSmkKYaC18Us2iCtD2i8JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzA1MTc3YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC85NUZDNjA3MkE0 QTY5MEE2MUEwQjVGMTRCMzY4ODJCNDNEQTJGMDk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQzREEy RjA5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i M2ZmLTcwYzE0NGVkZmVjZS8wLzM0MzMyZTMyMzQzODJlMzIzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv41jANBgkqhkiG 9w0BAQsFAAOCAQEAB1wBH7dsgRRG91UwqI79w3sANl7rRhANiKktF/R7+RQhiwLv TNJS9/SyjDrjpKbIz+O/LxYegBFradfc9UtX6PQYEBK6RD4faDBDrOWTPRt6VHsZ VXYetsNtv5nM5kWkbONrUuJmRFcj2XP8HrWVR1L/kjMt+iUQJTV7z5I0nnh/RruV rsH3RnCePeXSB+k4uo6yhKfg1xg/axPYQfDfZ+HsRwknRkCIS06HSt85kkZIXNvp UABS6P+f4GrTLk5bsTIW0EHeVp8lrIrdSURPMcEYHZKh3xC4ldApqBynB75eY9Sb 4kfc2W5fuCRpkETvtmOLBQ3aNQeDgj5r6T7NXA== -----END CERTIFICATE-----Generated at Mon Apr 15 07:18:38 2024 by rpki-client on console-ams.rpki-client.org