$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa File: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (raw, json) Hash identifier: TBL+YzOnMtt+icdLvdAKPf5E0nlulonDhr9ktWp19LI= Subject key identifier: CB:43:C6:A2:1F:B8:3F:9B:0C:80:4E:05:9B:68:68:5A:93:D1:66:33 Certificate issuer: /CN=28351380A86044778274FC7CEC0F116CF3B3CA39 Certificate serial: 76E3F72DC400ABC8D750FD3F8CBE9E4D676769DF Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa Signing time: Mon 31 Jul 2023 00:07:22 +0000 ROA not before: Mon 31 Jul 2023 00:02:22 +0000 ROA not after: Mon 29 Jul 2024 00:07:22 +0000 asID: 24204 IP address blocks: 203.80.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e3:f7:2d:c4:00:ab:c8:d7:50:fd:3f:8c:be:9e:4d:67:67:69:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39 Validity Not Before: Jul 31 00:02:22 2023 GMT Not After : Jul 29 00:07:22 2024 GMT Subject: CN=CB43C6A21FB83F9B0C804E059B68685A93D16633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dd:a7:fa:49:91:81:a3:53:03:66:9d:0d:c8: 1d:b3:87:93:8b:7e:6d:d0:b8:b2:75:0a:51:ad:cb: 6a:c4:94:83:3e:37:71:23:37:03:59:26:b7:57:7b: 03:ec:18:f8:51:bd:e6:4c:fa:f0:26:5f:c0:0b:1b: d2:a5:a2:f8:f9:7a:28:aa:af:05:fe:3f:5d:b6:07: 7c:eb:49:fe:fa:31:43:a9:8d:85:19:80:89:ad:e8: 0b:80:12:d1:ad:d7:96:5b:9a:a2:68:4c:a1:db:83: 77:b8:ce:3d:f0:23:ae:ee:b4:ce:e5:30:31:76:8b: 13:ce:78:16:1e:3b:f8:a7:53:c7:83:aa:5f:6c:58: 99:25:79:00:be:32:1c:b9:da:c4:ca:e8:5b:0d:47: 5f:fe:af:06:90:7b:16:b2:92:c7:92:03:9e:0f:97: 19:6f:e2:9f:4f:de:e8:fe:b4:51:16:32:85:8f:48: c4:14:73:a6:9e:85:15:5f:5f:f1:a0:fc:98:7f:36: 59:e6:56:53:6b:97:ce:e8:36:b5:0b:f4:8c:d4:f0: f2:e0:37:22:71:8f:99:4b:74:56:ca:77:b2:ee:39: d1:22:14:2b:0e:7c:20:fb:e1:cd:de:ac:a1:fb:56: 23:bb:a8:32:4e:cd:e2:81:ff:71:65:7f:16:a4:66: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:43:C6:A2:1F:B8:3F:9B:0C:80:4E:05:9B:68:68:5A:93:D1:66:33 X509v3 Authority Key Identifier: keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.80.12.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:26:7f:39:ea:7d:c2:7f:6d:c0:1b:01:23:22:fd:ef:9b:f1: 50:b1:40:9e:49:1c:2b:36:2c:41:f4:22:28:b9:82:85:74:7e: 64:cc:50:ec:a6:65:71:a7:55:17:87:3c:32:af:67:f2:83:42: 12:1d:08:4c:95:d9:86:e9:9e:87:86:d1:db:1b:45:96:fc:55: 5c:d8:a1:ad:0d:d1:bb:ea:bf:7c:13:cf:6e:a8:f2:b8:55:c7: cd:e4:14:e0:6a:ec:f6:b1:7f:7d:9a:2b:05:3c:bb:d2:55:4a: c9:a2:d6:78:cd:ed:6d:a7:fa:0f:e9:e7:c7:1f:89:31:8f:11: 84:f8:76:44:f7:30:94:0f:d1:03:d3:4a:9b:4a:19:e5:7b:1a: 4c:7d:d9:06:7b:71:b7:3c:1f:08:5e:9c:51:d5:19:c3:81:dd: 45:ab:8f:e5:d2:69:bf:74:b0:f9:46:db:6a:f2:7c:b6:b7:15: 45:8f:fa:ac:10:9d:0c:d6:80:96:7a:c0:38:8f:08:4a:1e:42: bd:b2:ab:36:1f:f5:d6:a0:1c:d9:c1:80:d1:3f:a8:d8:85:83: 30:a7:5e:dd:6b:5a:04:48:1c:0a:d8:ec:b0:ca:a8:f9:96:5e: 9f:fc:98:41:d4:30:fd:ad:bb:b2:83:1d:f7:12:d4:64:3e:08: 60:5d:36:ee -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUduP3LcQAq8jXUP0/jL6eTWdnad8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNTEzODBBODYwNDQ3NzgyNzRGQzdDRUMwRjExNkNG M0IzQ0EzOTAeFw0yMzA3MzEwMDAyMjJaFw0yNDA3MjkwMDA3MjJaMDMxMTAvBgNV BAMTKENCNDNDNkEyMUZCODNGOUIwQzgwNEUwNTlCNjg2ODVBOTNEMTY2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3af6SZGBo1MDZp0NyB2zh5OL fm3QuLJ1ClGty2rElIM+N3EjNwNZJrdXewPsGPhRveZM+vAmX8ALG9Klovj5eiiq rwX+P122B3zrSf76MUOpjYUZgImt6AuAEtGt15ZbmqJoTKHbg3e4zj3wI67utM7l MDF2ixPOeBYeO/inU8eDql9sWJkleQC+Mhy52sTK6FsNR1/+rwaQexaykseSA54P lxlv4p9P3uj+tFEWMoWPSMQUc6aehRVfX/Gg/Jh/NlnmVlNrl87oNrUL9IzU8PLg NyJxj5lLdFbKd7LuOdEiFCsOfCD74c3erKH7ViO7qDJOzeKB/3FlfxakZrhzAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUy0PGoh+4P5sMgE4Fm2hoWpPRZjMwHwYDVR0j BBgwFoAUKDUTgKhgRHeCdPx87A8RbPOzyjkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjRhOTEwNS04ZDJhLTRiMzgtYTZhZS0wNWVhZDY5NzE5YTMvMC8yODM1MTM4MEE4 NjA0NDc3ODI3NEZDN0NFQzBGMTE2Q0YzQjNDQTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNTEzODBBODYwNDQ3NzgyNzRGQzdDRUMwRjExNkNGM0Iz Q0EzOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyNGE5MTA1LThkMmEtNGIzOC1h NmFlLTA1ZWFkNjk3MTlhMy8wLzMyMzAzMzJlMzgzMDJlMzEzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzQzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLUAwwDQYJKoZIhvcN AQELBQADggEBAGwmfznqfcJ/bcAbASMi/e+b8VCxQJ5JHCs2LEH0Iii5goV0fmTM UOymZXGnVReHPDKvZ/KDQhIdCEyV2YbpnoeG0dsbRZb8VVzYoa0N0bvqv3wTz26o 8rhVx83kFOBq7Paxf32aKwU8u9JVSsmi1njN7W2n+g/p58cfiTGPEYT4dkT3MJQP 0QPTSptKGeV7Gkx92QZ7cbc8HwhenFHVGcOB3UWrj+XSab90sPlG22ryfLa3FUWP +qwQnQzWgJZ6wDiPCEoeQr2yqzYf9dagHNnBgNE/qNiFgzCnXt1rWgRIHArY7LDK qPmWXp/8mEHUMP2tu7KDHfcS1GQ+CGBdNu4= -----END CERTIFICATE-----Generated at Mon May 6 23:04:15 2024 by rpki-client on console-fra.rpki-client.org