$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa File: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (raw, json) Hash identifier: XBUkclmpieogKWTTtjWvNZY4iVFNat1xp1TM6np0RlY= Subject key identifier: 75:5F:56:B1:F5:7C:A2:30:06:40:7B:0B:A7:E2:81:7E:7B:D9:76:80 Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 6BFB4D13DD7AFF12E06353334B1F2F99F16E8D10 Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa Signing time: Mon 31 Jul 2023 00:04:38 +0000 ROA not before: Sun 30 Jul 2023 23:59:38 +0000 ROA not after: Mon 29 Jul 2024 00:04:38 +0000 asID: 24211 IP address blocks: 203.190.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 14:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fb:4d:13:dd:7a:ff:12:e0:63:53:33:4b:1f:2f:99:f1:6e:8d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Jul 30 23:59:38 2023 GMT Not After : Jul 29 00:04:38 2024 GMT Subject: CN=755F56B1F57CA23006407B0BA7E2817E7BD97680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:55:ca:1d:4d:4b:21:56:0d:cc:85:87:3a: b5:ae:08:dc:3a:e3:60:1c:1a:e4:1a:90:b7:6e:44: 67:50:da:f8:7a:c5:49:97:a2:6c:8b:e5:13:71:8f: 8e:3f:e6:fc:8c:fe:2f:0d:8d:22:69:3a:7b:12:e1: 12:2f:7e:64:86:15:d8:8c:03:6b:a8:a0:ed:49:14: 0a:f3:f0:27:a4:39:f7:a1:8b:c1:df:08:bb:4d:62: 34:04:b6:6a:77:9c:f1:6b:33:56:21:48:26:73:40: 03:8b:fb:26:8d:3c:59:40:f0:e5:7e:05:d7:b4:10: 43:e7:38:cf:8b:6e:ae:8d:9d:3a:3a:7d:3b:4e:13: 84:cf:91:91:72:66:46:95:46:01:5e:4e:15:ea:fb: af:c5:9b:0f:ca:b6:01:f3:8b:4b:5a:af:95:db:cd: 25:34:1a:b6:82:ca:d0:f5:9f:9a:d3:2b:77:c0:2f: 06:5d:21:bd:a7:4c:c6:57:ba:b9:57:41:4d:cf:b5: 08:0a:74:29:ba:5e:0a:cd:8d:bc:08:4f:c9:19:20: 49:2b:02:72:da:37:8f:8d:cf:82:8f:f9:c9:36:ea: 4e:64:cb:81:fb:d3:1d:5d:09:4c:0a:94:5f:4c:a6: 7b:d9:75:45:fe:a3:f1:bd:e1:05:23:6b:70:d4:55: cd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5F:56:B1:F5:7C:A2:30:06:40:7B:0B:A7:E2:81:7E:7B:D9:76:80 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.240.0/23 Signature Algorithm: sha256WithRSAEncryption 74:ab:7d:22:d3:01:b8:5b:bd:90:17:f4:72:dd:b1:17:90:dd: 81:eb:1d:8e:83:db:9a:59:13:ea:d1:0a:36:52:10:e7:79:42: 16:dd:ef:6c:e9:44:35:1b:8b:2f:69:9d:17:b7:20:dd:c1:23: 93:91:a4:ef:d4:77:30:cc:d6:dc:87:aa:4a:1b:ac:55:28:52: 83:01:89:5f:95:d7:07:80:eb:d6:22:ea:1f:cf:55:74:ce:7c: c6:41:22:94:2f:05:a5:9f:8a:eb:7a:2a:c0:fc:4c:61:b1:37: f6:0a:9a:40:07:93:18:67:c2:50:63:6c:9b:8d:58:df:9c:75: f0:8b:50:fd:02:24:e0:e1:4e:22:57:5c:62:37:dc:f2:71:f4: e8:99:db:a5:bd:d0:20:f7:92:55:4d:f5:93:62:f0:1b:f4:82: d8:ef:42:95:25:d8:32:61:c9:7b:30:f3:38:6b:6c:15:e7:fa: 61:bc:7f:8d:29:d7:05:bd:1a:00:08:b0:8a:4c:db:8f:1d:75: 4c:eb:79:c8:65:17:a8:aa:04:4e:3d:98:52:7f:6d:57:d8:c1: 5d:2b:d2:d5:36:72:3e:d4:00:61:01:50:eb:55:89:4e:e5:77: dd:29:88:ef:a4:c9:68:68:d0:89:59:4a:d6:69:a8:c3:f3:ce: 07:9a:b4:9e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUa/tNE916/xLgY1MzSx8vmfFujRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yMzA3MzAyMzU5MzhaFw0yNDA3MjkwMDA0MzhaMDMxMTAvBgNV BAMTKDc1NUY1NkIxRjU3Q0EyMzAwNjQwN0IwQkE3RTI4MTdFN0JEOTc2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr71XKHU1LIVYNzIWHOrWuCNw6 42AcGuQakLduRGdQ2vh6xUmXomyL5RNxj44/5vyM/i8NjSJpOnsS4RIvfmSGFdiM A2uooO1JFArz8CekOfehi8HfCLtNYjQEtmp3nPFrM1YhSCZzQAOL+yaNPFlA8OV+ Bde0EEPnOM+Lbq6NnTo6fTtOE4TPkZFyZkaVRgFeThXq+6/Fmw/KtgHzi0tar5Xb zSU0GraCytD1n5rTK3fALwZdIb2nTMZXurlXQU3PtQgKdCm6XgrNjbwIT8kZIEkr AnLaN4+Nz4KP+ck26k5ky4H70x1dCUwKlF9MpnvZdUX+o/G94QUja3DUVc0VAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdV9WsfV8ojAGQHsLp+KBfnvZdoAwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzAzMzJlMzEzOTMwMmUzMjM0MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy77wMA0GCSqG SIb3DQEBCwUAA4IBAQB0q30i0wG4W72QF/Ry3bEXkN2B6x2Og9uaWRPq0Qo2UhDn eUIW3e9s6UQ1G4svaZ0XtyDdwSOTkaTv1HcwzNbch6pKG6xVKFKDAYlfldcHgOvW Iuofz1V0znzGQSKULwWln4rreirA/ExhsTf2CppAB5MYZ8JQY2ybjVjfnHXwi1D9 AiTg4U4iV1xiN9zycfTomdulvdAg95JVTfWTYvAb9ILY70KVJdgyYcl7MPM4a2wV 5/phvH+NKdcFvRoACLCKTNuPHXVM63nIZReoqgROPZhSf21X2MFdK9LVNnI+1ABh AVDrVYlO5XfdKYjvpMloaNCJWUrWaajD884HmrSe -----END CERTIFICATE-----Generated at Thu Apr 18 14:06:40 2024 by rpki-client on console-fra.rpki-client.org