$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35312e302f32342d3234203d3e203338313435.roa File: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (raw, json) Hash identifier: J3nFv31EEvzovWF/0mYJh6XxT4c5xE2phWW1B57W42Y= Subject key identifier: 38:32:87:7C:C5:EA:56:94:7F:F1:59:B4:26:EF:1E:27:2B:B7:99:32 Certificate issuer: /CN=365454AF0090F9E623861AF2120855412F7447D1 Certificate serial: 5E3129BE5EFF4F7456FE6FF317BFC391975B109E Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35312e302f32342d3234203d3e203338313435.roa Signing time: Thu 12 Oct 2023 05:00:01 +0000 ROA not before: Thu 12 Oct 2023 04:55:01 +0000 ROA not after: Thu 10 Oct 2024 05:00:01 +0000 asID: 38145 IP address blocks: 202.180.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 12:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:31:29:be:5e:ff:4f:74:56:fe:6f:f3:17:bf:c3:91:97:5b:10:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1 Validity Not Before: Oct 12 04:55:01 2023 GMT Not After : Oct 10 05:00:01 2024 GMT Subject: CN=3832877CC5EA56947FF159B426EF1E272BB79932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:7c:43:e3:78:fa:a6:8f:0d:19:e1:3f:de: 22:3b:53:b0:43:a6:f1:6f:c2:c2:f0:e0:a3:fd:36: e9:31:2e:86:ad:07:71:f2:54:b7:cb:1c:03:d8:75: 48:77:00:9f:03:2b:15:1a:7f:73:14:b2:49:e5:25: 39:81:93:20:e4:00:47:80:bf:50:5d:41:1e:58:ee: 10:1d:36:34:56:4c:5a:d8:d6:9a:a0:dc:f1:e4:ee: 43:7d:b5:1c:8a:74:0f:be:f3:f9:57:da:ca:37:85: 3e:16:55:34:64:08:fc:2b:5e:97:05:f3:87:d8:f7: b3:b9:5f:bf:bd:7f:b0:14:84:a7:2f:37:0f:28:50: 5d:f2:01:3a:c4:e8:12:80:d6:c5:ac:da:bc:8b:c7: 0e:61:88:a4:f2:3c:9c:66:ef:7f:6b:7d:6e:cd:56: 3b:16:b3:36:a8:90:c9:6c:e5:e8:fe:23:6a:18:6d: 58:de:2d:f1:f7:7e:3b:b3:40:92:60:26:55:08:25: 5f:9b:9a:b6:c0:af:6b:39:9e:d6:ab:0d:92:e9:b3: 07:cf:1c:58:fa:f4:45:10:a7:51:76:45:c5:ec:bc: 89:71:40:0b:3c:36:14:c7:e3:41:f2:37:57:5f:f7: 3e:66:da:b3:f8:5e:b0:94:8a:f4:be:ea:24:9c:96: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:32:87:7C:C5:EA:56:94:7F:F1:59:B4:26:EF:1E:27:2B:B7:99:32 X509v3 Authority Key Identifier: keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35312e302f32342d3234203d3e203338313435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.180.51.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:98:d4:ca:d2:d4:55:4d:d5:0c:da:8c:e1:ff:19:5f:8f:dc: 90:2a:88:66:af:da:12:3c:a3:3d:e2:31:42:76:fc:e2:3a:43: 6f:f4:48:d6:66:2e:a9:0c:8a:a9:a4:7a:80:d3:95:35:21:d4: 39:6c:83:11:3e:c2:39:e8:47:07:4a:f1:05:66:eb:c8:b9:98: a5:4b:3e:f0:54:c7:e9:b0:db:7c:a8:44:9a:c0:92:f3:2b:db: 61:c0:07:2e:31:53:39:1f:59:14:df:00:5d:ac:3a:ac:32:23: f0:76:e3:5b:bf:f9:b3:a8:36:7f:3b:55:c9:7a:7b:ed:ce:45: 3f:2d:70:0a:49:7d:27:4f:95:f7:49:2f:09:9f:09:4b:16:6d: 1a:3c:de:02:ef:5d:5f:eb:1c:69:45:6a:7d:33:ba:84:4e:83: 63:92:b1:22:99:e9:9f:3a:a1:9e:e0:47:e4:6c:da:be:1c:cc: 1f:58:49:b6:bc:cd:2b:7a:da:62:a2:25:08:26:9e:d8:9b:78: d7:f3:b1:20:32:cd:df:9b:dd:7f:5d:a9:08:68:49:e9:ad:4c: ac:55:f1:55:7e:a8:2c:53:38:48:6b:d5:0a:30:e2:d3:72:6c: 1a:f3:d9:5d:57:4f:ab:b3:96:0a:3a:8b:46:d9:5d:5a:37:14: 56:e9:b8:f1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXjEpvl7/T3RW/m/zF7/DkZdbEJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1NDEy Rjc0NDdEMTAeFw0yMzEwMTIwNDU1MDFaFw0yNDEwMTAwNTAwMDFaMDMxMTAvBgNV BAMTKDM4MzI4NzdDQzVFQTU2OTQ3RkYxNTlCNDI2RUYxRTI3MkJCNzk5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjXxD43j6po8NGeE/3iI7U7BD pvFvwsLw4KP9NukxLoatB3HyVLfLHAPYdUh3AJ8DKxUaf3MUsknlJTmBkyDkAEeA v1BdQR5Y7hAdNjRWTFrY1pqg3PHk7kN9tRyKdA++8/lX2so3hT4WVTRkCPwrXpcF 84fY97O5X7+9f7AUhKcvNw8oUF3yATrE6BKA1sWs2ryLxw5hiKTyPJxm739rfW7N VjsWszaokMls5ej+I2oYbVjeLfH3fjuzQJJgJlUIJV+bmrbAr2s5ntarDZLpswfP HFj69EUQp1F2RcXsvIlxQAs8NhTH40HyN1df9z5m2rP4XrCUivS+6iScltxbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUODKHfMXqVpR/8Vm0Ju8eJyu3mTIwHwYDVR0j BBgwFoAUNlRUrwCQ+eYjhhryEghVQS90R9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Nzk4NGUzYS00OGY5LTRjZGEtYmU2Yy00MDA2YzA4ZjhmZDIvMC8zNjU0NTRBRjAw OTBGOUU2MjM4NjFBRjIxMjA4NTU0MTJGNzQ0N0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1NDEyRjc0 NDdEMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3OTg0ZTNhLTQ4ZjktNGNkYS1i ZTZjLTQwMDZjMDhmOGZkMi8wLzMyMzAzMjJlMzEzODMwMmUzNTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMq0MzANBgkqhkiG 9w0BAQsFAAOCAQEAfpjUytLUVU3VDNqM4f8ZX4/ckCqIZq/aEjyjPeIxQnb84jpD b/RI1mYuqQyKqaR6gNOVNSHUOWyDET7COehHB0rxBWbryLmYpUs+8FTH6bDbfKhE msCS8yvbYcAHLjFTOR9ZFN8AXaw6rDIj8HbjW7/5s6g2fztVyXp77c5FPy1wCkl9 J0+V90kvCZ8JSxZtGjzeAu9dX+scaUVqfTO6hE6DY5KxIpnpnzqhnuBH5GzavhzM H1hJtrzNK3raYqIlCCae2Jt41/OxIDLN35vdf12pCGhJ6a1MrFXxVX6oLFM4SGvV CjDi03JsGvPZXVdPq7OWCjqLRtldWjcUVum48Q== -----END CERTIFICATE-----Generated at Wed May 1 07:23:20 2024 by rpki-client on console-ams.rpki-client.org