$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa File: 3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa (raw, json) Hash identifier: 79odyFH1K8KCSeatmo+3DQ+du6l02EUwvvGSnCQawfk= Subject key identifier: C6:7B:BB:F0:D1:AE:BA:1D:9F:7E:9B:14:D0:33:AE:76:FC:1B:F4:00 Certificate issuer: /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B Certificate serial: 7D3B55C3C8826EAC8C301D8507653E8E0BB987F7 Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa Signing time: Mon 31 Jul 2023 00:04:28 +0000 ROA not before: Sun 30 Jul 2023 23:59:28 +0000 ROA not after: Mon 29 Jul 2024 00:04:28 +0000 asID: 38513 IP address blocks: 125.213.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 00:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:3b:55:c3:c8:82:6e:ac:8c:30:1d:85:07:65:3e:8e:0b:b9:87:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B Validity Not Before: Jul 30 23:59:28 2023 GMT Not After : Jul 29 00:04:28 2024 GMT Subject: CN=C67BBBF0D1AEBA1D9F7E9B14D033AE76FC1BF400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:a6:6a:07:80:ab:43:41:f3:5a:57:cf:f3: cb:a7:1c:f2:06:be:1f:05:67:7a:32:f0:af:ac:fa: 24:22:9f:67:29:2d:53:d7:89:eb:81:51:5d:85:f2: 5e:ad:e7:f8:db:32:09:30:46:41:ec:7f:27:7b:6c: 28:b9:c6:fc:06:96:a3:5b:cd:00:69:59:b2:50:0b: d9:0d:3b:7c:1d:23:03:8f:70:58:5d:9a:f3:12:48: 33:f3:8f:de:76:55:dd:37:d7:ac:f1:bd:95:54:93: ac:5e:12:05:59:e6:a7:a6:9b:63:40:f8:75:4c:fe: fe:3a:f9:88:44:f3:31:bf:27:d1:a3:9a:6b:e1:1f: 57:75:f7:7a:3a:8b:13:cc:34:aa:8d:ed:eb:7a:93: 09:a7:93:21:14:a9:29:c1:d2:81:ea:9f:73:d0:0f: 3c:1f:a7:dd:21:fc:a3:b4:37:77:d2:a5:24:5f:63: 19:60:89:b1:2b:9e:a7:91:e0:9f:75:59:47:33:d7: a8:90:74:a4:bf:c3:48:7e:69:7e:4e:05:b2:aa:15: 4c:78:35:ee:39:8f:57:32:43:6a:34:78:2d:5e:a8: 52:cc:97:9f:7b:46:41:78:21:1d:6a:37:94:40:43: 63:da:0a:2c:77:ea:4d:a0:1c:a2:be:67:ef:9b:ed: f7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7B:BB:F0:D1:AE:BA:1D:9F:7E:9B:14:D0:33:AE:76:FC:1B:F4:00 X509v3 Authority Key Identifier: keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.213.129.0/24 Signature Algorithm: sha256WithRSAEncryption 65:86:bb:9e:4e:7b:15:0b:01:ed:c5:89:7e:49:6a:25:3f:e7: e4:4e:99:c7:6e:b6:cb:69:88:fa:54:df:cd:8e:5c:68:83:7c: 89:07:75:3a:15:b4:7f:bf:77:dc:b6:97:c7:08:e8:0a:51:0f: 0b:61:99:59:dd:58:9e:37:08:66:f5:4f:78:49:94:68:ae:46: e8:be:ea:9f:bb:6f:2f:79:41:bc:42:61:4f:15:dd:41:aa:9b: d3:b7:4e:4f:5d:a2:50:ac:c9:a8:90:fc:52:0c:9c:01:7d:5e: 5e:c0:73:0c:73:0d:8c:37:21:a1:b6:0d:f6:0f:5f:58:45:52: 3b:d1:7c:01:db:50:ba:0e:52:a6:22:b6:b0:c6:2e:96:35:7e: 25:54:63:25:ec:f2:25:ad:54:a3:c7:58:fd:9d:07:bd:16:1c: 01:4a:c3:72:d2:94:8a:b7:2b:4a:8b:7d:16:b3:ff:f4:a8:2d: df:df:c1:86:84:f5:f9:45:05:23:09:a8:6d:3a:95:15:93:9b: 1f:53:ed:33:40:84:56:fe:34:b6:87:fe:bb:cd:ad:a1:5e:a2: 81:1a:86:3c:65:59:65:80:17:84:a5:83:20:be:36:af:31:e2: 01:a9:12:12:2e:1b:f4:72:ed:57:ea:09:c5:95:35:6a:11:2e: c2:89:75:2c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfTtVw8iCbqyMMB2FB2U+jgu5h/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD RjY2NzUyQjAeFw0yMzA3MzAyMzU5MjhaFw0yNDA3MjkwMDA0MjhaMDMxMTAvBgNV BAMTKEM2N0JCQkYwRDFBRUJBMUQ5RjdFOUIxNEQwMzNBRTc2RkMxQkY0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Z6ZqB4CrQ0HzWlfP88unHPIG vh8FZ3oy8K+s+iQin2cpLVPXieuBUV2F8l6t5/jbMgkwRkHsfyd7bCi5xvwGlqNb zQBpWbJQC9kNO3wdIwOPcFhdmvMSSDPzj952Vd0316zxvZVUk6xeEgVZ5qemm2NA +HVM/v46+YhE8zG/J9GjmmvhH1d193o6ixPMNKqN7et6kwmnkyEUqSnB0oHqn3PQ Dzwfp90h/KO0N3fSpSRfYxlgibErnqeR4J91WUcz16iQdKS/w0h+aX5OBbKqFUx4 Ne45j1cyQ2o0eC1eqFLMl597RkF4IR1qN5RAQ2PaCix36k2gHKK+Z++b7ffhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxnu78NGuuh2ffpsU0DOudvwb9AAwHwYDVR0j BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2 QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2 NzUyQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04 NDk3LTI5ODdkOTA5NTQzZS8wLzMxMzIzNTJlMzIzMTMzMmUzMTMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfdWBMA0GCSqG SIb3DQEBCwUAA4IBAQBlhrueTnsVCwHtxYl+SWolP+fkTpnHbrbLaYj6VN/Njlxo g3yJB3U6FbR/v3fctpfHCOgKUQ8LYZlZ3VieNwhm9U94SZRorkbovuqfu28veUG8 QmFPFd1BqpvTt05PXaJQrMmokPxSDJwBfV5ewHMMcw2MNyGhtg32D19YRVI70XwB 21C6DlKmIrawxi6WNX4lVGMl7PIlrVSjx1j9nQe9FhwBSsNy0pSKtytKi30Ws//0 qC3f38GGhPX5RQUjCahtOpUVk5sfU+0zQIRW/jS2h/67za2hXqKBGoY8ZVllgBeE pYMgvjavMeIBqRISLhv0cu1X6gnFlTVqES7CiXUs -----END CERTIFICATE-----Generated at Tue Apr 23 23:20:38 2024 by rpki-client on console-fra.rpki-client.org