$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139382e302f32342d3234203d3e20313333383431.roa File: 3132332e3233312e3139382e302f32342d3234203d3e20313333383431.roa (raw, json) Hash identifier: XxMqRb1ykw2w8XRb+qRdnvGBoDEQIUTTTgUOgtwa4VM= Subject key identifier: 05:72:95:3E:1E:FF:20:6C:51:02:7F:31:7A:02:5D:B5:94:5A:19:99 Certificate issuer: /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B Certificate serial: 1FBDDD8C3F188C56298F4D60A861EA2B5988FEBF Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139382e302f32342d3234203d3e20313333383431.roa Signing time: Mon 31 Jul 2023 00:04:34 +0000 ROA not before: Sun 30 Jul 2023 23:59:34 +0000 ROA not after: Mon 29 Jul 2024 00:04:34 +0000 asID: 133841 IP address blocks: 123.231.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 00:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bd:dd:8c:3f:18:8c:56:29:8f:4d:60:a8:61:ea:2b:59:88:fe:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B Validity Not Before: Jul 30 23:59:34 2023 GMT Not After : Jul 29 00:04:34 2024 GMT Subject: CN=0572953E1EFF206C51027F317A025DB5945A1999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:08:15:ee:8d:7d:22:72:62:50:f6:2d:70: f1:06:2a:99:3e:5a:b2:4a:c0:9a:58:02:73:41:d0: 6c:3b:68:c5:45:88:fa:35:b0:a5:2a:f7:3d:a9:a0: c8:f8:37:5b:fb:40:24:a3:94:8f:e9:57:d2:f3:d8: 03:08:ec:3c:fc:c1:56:d6:b0:e2:80:36:78:e9:7c: ce:56:a7:bb:5d:32:e5:d4:96:07:88:2d:a1:08:ee: 5e:d2:49:08:95:8e:b5:5a:b4:f8:3c:77:bd:6a:8e: 29:3c:a1:f0:8b:67:cb:54:c1:25:24:c7:42:8c:c1: 75:94:57:0d:34:74:54:45:ec:dd:c7:c5:30:fd:7b: ef:d9:bd:87:ec:75:ec:5f:e7:1e:3a:a8:61:3c:6b: 88:32:1b:ed:48:3b:92:ff:df:38:ab:ab:e6:fd:95: c5:97:66:91:2c:e8:16:54:c7:57:27:e7:45:4c:38: 86:58:23:59:30:eb:6e:dd:44:ed:9e:34:49:79:88: 83:88:0d:d1:6b:81:cd:70:fb:df:91:92:43:47:87: 39:30:c4:17:aa:5f:d6:c2:80:70:14:01:16:f3:fb: 98:0b:d6:df:b8:9e:79:4d:f4:c6:ab:1c:ec:67:95: db:0d:22:83:f5:20:73:ef:8d:06:6e:74:9f:a6:57: c6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:72:95:3E:1E:FF:20:6C:51:02:7F:31:7A:02:5D:B5:94:5A:19:99 X509v3 Authority Key Identifier: keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139382e302f32342d3234203d3e20313333383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.231.198.0/24 Signature Algorithm: sha256WithRSAEncryption 90:ee:11:14:12:dd:d8:9a:c1:58:7c:9e:81:26:12:63:67:fa: b3:56:4a:69:14:39:ef:64:03:22:01:35:55:2f:bf:35:17:55: 36:cd:f2:cb:ba:5e:8e:70:c3:cc:8a:09:68:b4:e7:b0:cd:dd: a6:f4:ce:f6:cb:f4:6b:b5:83:8a:81:7f:05:00:73:44:c8:1c: 87:1c:c8:64:65:d8:c2:7f:35:a1:6b:32:04:e8:22:b8:e5:cd: 70:dc:04:5f:34:72:42:b8:ff:9e:61:bb:35:a1:ce:e5:01:20: ad:75:98:6f:75:05:37:6c:ac:f1:96:f3:86:45:6e:e4:a9:41: a9:6b:f2:28:86:b5:4e:c9:19:55:1f:7a:49:07:73:c9:8a:35: c1:38:62:c4:79:72:32:bb:c4:0c:6b:50:de:ee:c3:27:d9:18: 97:59:cf:3e:47:84:41:2a:37:12:39:1d:07:07:17:c2:52:c8: ed:1f:c0:c4:4f:53:f1:f2:53:a1:9e:33:95:f6:4e:45:80:a5: 0d:23:d7:b9:c3:a9:a1:92:5b:b7:28:50:c1:03:2f:97:d6:6a: dd:38:3e:89:34:e1:f3:66:05:0a:bc:5d:6e:18:7b:72:db:31: 1b:77:57:4d:06:ce:74:b4:f3:3f:6b:a1:0f:7d:cd:27:35:6b: 6c:1c:8a:2e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUH73djD8YjFYpj01gqGHqK1mI/r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD RjY2NzUyQjAeFw0yMzA3MzAyMzU5MzRaFw0yNDA3MjkwMDA0MzRaMDMxMTAvBgNV BAMTKDA1NzI5NTNFMUVGRjIwNkM1MTAyN0YzMTdBMDI1REI1OTQ1QTE5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/QgV7o19InJiUPYtcPEGKpk+ WrJKwJpYAnNB0Gw7aMVFiPo1sKUq9z2poMj4N1v7QCSjlI/pV9Lz2AMI7Dz8wVbW sOKANnjpfM5Wp7tdMuXUlgeILaEI7l7SSQiVjrVatPg8d71qjik8ofCLZ8tUwSUk x0KMwXWUVw00dFRF7N3HxTD9e+/ZvYfsdexf5x46qGE8a4gyG+1IO5L/3zirq+b9 lcWXZpEs6BZUx1cn50VMOIZYI1kw627dRO2eNEl5iIOIDdFrgc1w+9+RkkNHhzkw xBeqX9bCgHAUARbz+5gL1t+4nnlN9MarHOxnldsNIoP1IHPvjQZudJ+mV8YrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUBXKVPh7/IGxRAn8xegJdtZRaGZkwHwYDVR0j BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2 QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2 NzUyQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04 NDk3LTI5ODdkOTA5NTQzZS8wLzMxMzIzMzJlMzIzMzMxMmUzMTM5MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB758YwDQYJ KoZIhvcNAQELBQADggEBAJDuERQS3diawVh8noEmEmNn+rNWSmkUOe9kAyIBNVUv vzUXVTbN8su6Xo5ww8yKCWi057DN3ab0zvbL9Gu1g4qBfwUAc0TIHIccyGRl2MJ/ NaFrMgToIrjlzXDcBF80ckK4/55huzWhzuUBIK11mG91BTdsrPGW84ZFbuSpQalr 8iiGtU7JGVUfekkHc8mKNcE4YsR5cjK7xAxrUN7uwyfZGJdZzz5HhEEqNxI5HQcH F8JSyO0fwMRPU/HyU6GeM5X2TkWApQ0j17nDqaGSW7coUMEDL5fWat04Pok04fNm BQq8XW4Ye3LbMRt3V00GznS08z9roQ99zSc1a2wcii4= -----END CERTIFICATE-----Generated at Tue Apr 23 23:20:38 2024 by rpki-client on console-fra.rpki-client.org