$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa File: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (raw, json) Hash identifier: ypNOz4KxUwLRSaEa6yvOfXqkwqFHrV4pP9ewa7sfxKw= Subject key identifier: D3:1D:77:D5:12:47:B0:5E:34:2E:A1:DE:63:7F:AD:30:C9:9D:7F:89 Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 72EC3472745435DBB168885FA9041229D43F41EC Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa Signing time: Mon 31 Jul 2023 00:03:59 +0000 ROA not before: Sun 30 Jul 2023 23:58:59 +0000 ROA not after: Mon 29 Jul 2024 00:03:59 +0000 asID: 131745 IP address blocks: 202.83.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 04:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ec:34:72:74:54:35:db:b1:68:88:5f:a9:04:12:29:d4:3f:41:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Jul 30 23:58:59 2023 GMT Not After : Jul 29 00:03:59 2024 GMT Subject: CN=D31D77D51247B05E342EA1DE637FAD30C99D7F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:73:d0:8e:1d:42:fd:6a:41:ab:21:0c:9e: c3:0e:58:ce:c2:96:80:d4:95:d0:d7:63:e8:10:2d: f8:2d:0a:4c:4b:58:43:d4:f9:5d:87:98:f8:28:2c: d9:07:3f:72:74:dc:bc:05:fb:28:9d:cc:82:52:14: f3:cf:26:37:3e:07:e4:29:8c:89:12:65:f6:6f:6d: 74:24:4c:0c:ba:e3:26:4f:f0:f5:6a:3c:d6:d8:29: 15:17:0b:0c:21:a3:e9:a4:17:b4:68:73:a0:bd:eb: 7c:05:8c:4a:ea:ee:6c:0a:ac:6e:a5:3c:e3:1b:cc: 32:b2:8b:72:2a:43:d5:ae:c3:f8:18:dd:c0:b0:d4: 1f:70:86:94:99:68:99:fa:69:40:c6:88:0a:b2:94: fa:92:0f:e1:e2:c1:3c:bd:ad:d9:66:f8:c4:ac:28: a1:16:6a:42:c8:8c:bf:a8:b9:b5:0b:b9:5f:f3:ac: b7:f2:11:84:d0:5c:7c:f1:29:70:19:87:29:68:a3: 9a:e2:92:bb:b0:99:36:24:43:23:ee:8d:3a:44:3f: 0f:d4:9d:17:9d:21:e4:0f:23:db:be:c5:99:71:38: fa:0f:c5:e4:1f:88:9b:f3:5f:b6:9f:b4:16:96:f6: 71:28:45:1a:14:2f:2c:ae:62:9a:1b:f5:9d:a8:47: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1D:77:D5:12:47:B0:5E:34:2E:A1:DE:63:7F:AD:30:C9:9D:7F:89 X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.83.120.0/22 Signature Algorithm: sha256WithRSAEncryption 32:1d:b5:5e:04:e6:23:e1:a7:b6:0a:23:b8:c2:e7:05:92:d9: f5:3e:12:00:88:3a:26:b5:f8:e1:d4:86:55:fb:db:4e:52:fa: 18:a4:b6:54:d7:6b:a6:c5:5a:9a:f4:75:3c:0e:ed:87:cc:24: 9c:82:ab:c3:39:f4:76:e4:6a:c0:df:93:ff:1d:dc:6d:60:01: e5:00:16:d4:42:ec:1b:02:50:f7:79:86:11:17:f1:3a:f1:53: 02:a5:ed:95:01:0c:74:ea:d5:47:af:b6:ee:f1:aa:f5:f8:97: 5c:d5:b6:22:49:d1:66:09:3b:30:94:4e:af:a2:34:5b:06:1e: cd:af:5e:a0:cb:05:fe:db:aa:ea:f5:8e:ba:0f:ae:1a:7f:23: 1d:9c:50:dd:11:72:b3:62:72:e4:5a:00:19:d3:81:30:02:ac: 7c:53:3c:a4:fa:90:f7:d2:64:2d:c3:f2:cc:da:e9:9f:31:3f: 32:c3:79:1f:45:35:f3:07:8c:09:f8:96:1a:2d:0f:47:e2:d1: ff:de:e2:2b:08:ca:4f:ce:a9:07:e2:c5:d8:81:77:6f:f2:ff: 75:d2:44:bf:25:a3:25:29:6a:c7:9c:e7:25:e1:8b:1c:bb:8f: c7:72:5a:76:bc:8b:97:23:07:9a:12:fa:d4:a4:1c:29:e9:71: c2:81:52:38 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcuw0cnRUNduxaIhfqQQSKdQ/QewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yMzA3MzAyMzU4NTlaFw0yNDA3MjkwMDAzNTlaMDMxMTAvBgNV BAMTKEQzMUQ3N0Q1MTI0N0IwNUUzNDJFQTFERTYzN0ZBRDMwQzk5RDdGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qHPQjh1C/WpBqyEMnsMOWM7C loDUldDXY+gQLfgtCkxLWEPU+V2HmPgoLNkHP3J03LwF+yidzIJSFPPPJjc+B+Qp jIkSZfZvbXQkTAy64yZP8PVqPNbYKRUXCwwho+mkF7Roc6C963wFjErq7mwKrG6l POMbzDKyi3IqQ9Wuw/gY3cCw1B9whpSZaJn6aUDGiAqylPqSD+HiwTy9rdlm+MSs KKEWakLIjL+oubULuV/zrLfyEYTQXHzxKXAZhyloo5rikruwmTYkQyPujTpEPw/U nRedIeQPI9u+xZlxOPoPxeQfiJvzX7aftBaW9nEoRRoULyyuYpob9Z2oRxjJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0x131RJHsF40LqHeY3+tMMmdf4kwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzOGM2MjFkLTA1YmMtNGJjZC05 NjU3LWNkZjMzODYwZjIxYS8wLzMyMzAzMjJlMzgzMzJlMzEzMjMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCylN4MA0GCSqG SIb3DQEBCwUAA4IBAQAyHbVeBOYj4ae2CiO4wucFktn1PhIAiDomtfjh1IZV+9tO UvoYpLZU12umxVqa9HU8Du2HzCScgqvDOfR25GrA35P/HdxtYAHlABbUQuwbAlD3 eYYRF/E68VMCpe2VAQx06tVHr7bu8ar1+Jdc1bYiSdFmCTswlE6vojRbBh7Nr16g ywX+26rq9Y66D64afyMdnFDdEXKzYnLkWgAZ04EwAqx8Uzyk+pD30mQtw/LM2umf MT8yw3kfRTXzB4wJ+JYaLQ9H4tH/3uIrCMpPzqkH4sXYgXdv8v910kS/JaMlKWrH nOcl4Yscu4/Hclp2vIuXIweaEvrUpBwp6XHCgVI4 -----END CERTIFICATE-----Generated at Wed Apr 24 05:34:30 2024 by rpki-client on console-ams.rpki-client.org