$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa File: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (raw, json) Hash identifier: udHMTRX+D4t15Ml1SQ4rATtWqCz/Nc1ZtyueVWz5alI= Subject key identifier: 59:00:BB:20:46:A1:3A:69:64:D3:3D:0C:69:82:61:7A:09:23:E0:72 Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 167E2D64810CA76EB515DA56DCC010C9FAD99F0A Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa Signing time: Mon 31 Jul 2023 00:04:38 +0000 ROA not before: Sun 30 Jul 2023 23:59:38 +0000 ROA not after: Mon 29 Jul 2024 00:04:38 +0000 asID: 24211 IP address blocks: 203.190.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 11:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7e:2d:64:81:0c:a7:6e:b5:15:da:56:dc:c0:10:c9:fa:d9:9f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Jul 30 23:59:38 2023 GMT Not After : Jul 29 00:04:38 2024 GMT Subject: CN=5900BB2046A13A6964D33D0C6982617A0923E072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bb:95:79:99:a4:30:9f:83:f5:17:61:84:f6: c1:96:93:bd:47:70:df:be:9d:9b:9f:42:50:8c:c6: 34:5d:24:5c:a6:f8:24:95:73:f6:37:e7:c3:23:ce: da:ab:84:c2:2a:dc:80:89:0a:71:1e:07:1b:85:3d: 3f:b6:5e:4d:eb:d0:12:64:f3:64:86:ab:d3:ea:9e: 89:60:8c:b3:bd:b8:55:31:0d:f8:5a:ac:b1:ca:10: 3e:65:ae:a0:28:0a:c7:f1:85:25:d4:a5:94:03:d7: e8:28:cf:c5:4b:51:c9:bf:c1:b8:7c:c4:d6:08:d2: fe:5e:3f:0b:b1:09:ef:2b:68:08:80:a7:95:f9:48: f9:9c:14:cd:06:b1:c0:dc:bd:a3:02:65:d9:d5:17: 82:2e:04:64:a6:75:f4:62:ac:24:fd:d9:f2:28:0a: 87:83:14:4b:5a:4c:92:14:ee:3b:c5:69:c1:58:2b: 1e:c2:93:cd:fa:b9:e2:a5:2e:2b:ef:8b:7f:41:d0: e2:07:06:50:02:5f:52:c9:66:af:a5:d6:ec:ee:d9: bc:46:4b:e6:37:34:72:71:0c:1f:81:54:00:41:ae: e2:25:03:26:fb:63:16:6c:28:37:1e:37:39:11:d8: 07:9a:dd:e2:35:fb:ff:1e:4b:e5:7a:ca:39:85:58: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:00:BB:20:46:A1:3A:69:64:D3:3D:0C:69:82:61:7A:09:23:E0:72 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.242.0/23 Signature Algorithm: sha256WithRSAEncryption b7:fc:c1:b8:99:34:34:d8:df:51:a1:f4:a0:3c:b8:46:40:97: 57:78:80:ed:35:d8:12:1b:21:c4:61:7b:0a:1b:4e:fd:85:29: 27:93:59:a7:db:7d:13:31:e7:95:99:67:7c:fb:0d:97:53:9e: 88:91:e6:ce:8a:54:8f:7d:a8:26:bb:37:05:e4:fa:e7:bc:45: 01:bc:1a:64:54:2d:d8:71:a0:b9:e1:e3:1b:5b:5f:04:d2:4a: 5e:67:a3:14:d5:71:ab:cc:23:95:c8:46:c8:12:e0:8c:db:47: 9d:8a:5c:41:39:74:8c:dd:7f:1d:12:e0:31:d6:47:a5:9d:c6: b2:8d:7c:f4:b7:61:0f:65:9a:2d:54:94:36:3a:fe:bc:37:11: 28:c4:73:97:3d:a8:cd:d7:95:3e:ff:9d:04:fd:56:a0:2c:fe: b7:86:17:75:5c:cd:f5:39:21:95:24:f0:e7:36:60:f0:e8:80: 48:31:3a:65:64:d0:00:d8:b3:2c:f5:94:54:dd:11:f3:dc:de: fa:26:f2:b4:22:10:1c:9e:7f:2f:f4:24:42:f0:ad:1c:e6:a9: b4:2f:72:9b:c5:44:cd:73:99:37:d3:ec:fd:80:3f:02:e6:19: 31:9d:b7:23:30:f0:5f:4d:a5:04:cb:ae:37:81:a4:c6:ba:b3: 3e:f4:ba:a8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFn4tZIEMp261FdpW3MAQyfrZnwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yMzA3MzAyMzU5MzhaFw0yNDA3MjkwMDA0MzhaMDMxMTAvBgNV BAMTKDU5MDBCQjIwNDZBMTNBNjk2NEQzM0QwQzY5ODI2MTdBMDkyM0UwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmu5V5maQwn4P1F2GE9sGWk71H cN++nZufQlCMxjRdJFym+CSVc/Y358MjztqrhMIq3ICJCnEeBxuFPT+2Xk3r0BJk 82SGq9PqnolgjLO9uFUxDfharLHKED5lrqAoCsfxhSXUpZQD1+goz8VLUcm/wbh8 xNYI0v5ePwuxCe8raAiAp5X5SPmcFM0GscDcvaMCZdnVF4IuBGSmdfRirCT92fIo CoeDFEtaTJIU7jvFacFYKx7Ck836ueKlLivvi39B0OIHBlACX1LJZq+l1uzu2bxG S+Y3NHJxDB+BVABBruIlAyb7YxZsKDceNzkR2Aea3eI1+/8eS+V6yjmFWCnNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWQC7IEahOmlk0z0MaYJhegkj4HIwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzAzMzJlMzEzOTMwMmUzMjM0MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy77yMA0GCSqG SIb3DQEBCwUAA4IBAQC3/MG4mTQ02N9RofSgPLhGQJdXeIDtNdgSGyHEYXsKG079 hSknk1mn230TMeeVmWd8+w2XU56IkebOilSPfagmuzcF5PrnvEUBvBpkVC3YcaC5 4eMbW18E0kpeZ6MU1XGrzCOVyEbIEuCM20edilxBOXSM3X8dEuAx1kelncayjXz0 t2EPZZotVJQ2Ov68NxEoxHOXPajN15U+/50E/VagLP63hhd1XM31OSGVJPDnNmDw 6IBIMTplZNAA2LMs9ZRU3RHz3N76JvK0IhAcnn8v9CRC8K0c5qm0L3KbxUTNc5k3 0+z9gD8C5hkxnbcjMPBfTaUEy643gaTGurM+9Lqo -----END CERTIFICATE-----Generated at Tue Apr 23 18:27:39 2024 by rpki-client on console-fra.rpki-client.org