$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa File: 3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa (raw, json) Hash identifier: gLIhgrssUpxfw9C+Gx0iqcEqorDnQJ0DHqIARcTCnZQ= Subject key identifier: E1:48:81:5C:D7:FC:76:C8:DF:09:FE:96:C2:DE:FA:1D:4D:83:D8:0F Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 3635A937EE2D8E971B04EE589B4705F4CF207AA6 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa Signing time: Wed 11 Oct 2023 10:00:01 +0000 ROA not before: Wed 11 Oct 2023 09:55:01 +0000 ROA not after: Wed 09 Oct 2024 10:00:01 +0000 asID: 136121 IP address blocks: 202.154.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:35:a9:37:ee:2d:8e:97:1b:04:ee:58:9b:47:05:f4:cf:20:7a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Oct 11 09:55:01 2023 GMT Not After : Oct 9 10:00:01 2024 GMT Subject: CN=E148815CD7FC76C8DF09FE96C2DEFA1D4D83D80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:d5:9f:64:c1:be:1e:ea:47:ef:60:0b:89: 83:46:4e:3e:62:65:87:d9:bc:2e:c2:43:10:67:c1: 65:9e:12:1b:55:dd:b1:51:c4:96:ec:23:2f:0e:38: ca:57:a1:6b:ba:02:30:a4:ab:18:79:20:ee:96:09: 7d:93:0f:eb:64:49:55:5a:c5:88:d5:fe:76:96:f8: 6d:0e:3e:25:0b:a1:89:aa:35:a5:89:20:fd:28:1a: 2c:dc:e9:e2:96:f6:ed:b7:cb:5a:d0:bd:32:5b:e8: 2e:47:2e:7b:e7:fc:13:f4:2a:de:a6:e8:6f:04:b0: 9c:02:b7:eb:b6:2c:74:ed:75:c3:5f:35:3e:6f:a3: 12:bf:1f:0f:9b:e6:42:f6:12:6a:36:ee:4d:9a:6e: 37:b8:3c:23:bc:b7:8e:5c:f5:c6:0c:84:f9:63:e4: 68:f1:e2:eb:91:8e:3f:f3:cb:f3:5b:e0:07:fb:e0: 96:36:c7:3e:21:3d:ca:ed:bf:66:2a:2f:62:81:cb: 7f:6e:ed:20:d9:24:f4:16:f5:2a:81:a8:ca:02:b2: 69:40:34:be:27:f9:ff:2b:7f:97:23:ca:35:9d:bb: 72:a1:7f:3c:ea:1f:ff:44:9e:7a:37:6f:c8:83:92: d0:fc:48:ee:70:6f:48:a7:e8:47:e7:69:e7:df:cb: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:48:81:5C:D7:FC:76:C8:DF:09:FE:96:C2:DE:FA:1D:4D:83:D8:0F X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.18.0/23 Signature Algorithm: sha256WithRSAEncryption aa:ec:fc:79:10:23:f8:b3:64:5e:40:cf:7f:d5:de:4c:78:23: 34:d9:5d:0c:e2:e4:db:3f:3c:fb:f3:cf:78:e7:22:f8:59:84: 7f:a8:08:31:fb:4f:c6:1e:1b:6a:b0:96:00:c7:6b:38:7d:a0: 2e:a8:c7:7d:6d:97:bf:02:4b:71:c1:fa:85:05:0f:e6:6d:51: 51:b2:54:6b:0c:fd:12:38:d2:26:1c:bf:5c:b3:03:ed:a4:ec: c4:e0:ba:e8:ea:a8:c0:b5:9b:c0:06:56:90:13:16:de:72:00: 4f:64:56:6e:94:69:43:27:c6:f9:f4:6f:af:6d:41:8e:0b:29: 5e:42:93:41:57:85:f1:28:30:58:15:d7:9e:54:5e:4b:c1:4f: d8:e0:49:75:fe:6e:d3:eb:69:df:af:84:a3:de:3d:5c:97:6b: 96:79:d4:eb:33:0a:35:f1:25:4c:1f:4d:61:4b:5e:f0:93:07: ea:4d:3f:6a:56:11:d0:0c:a5:df:f3:41:32:73:ff:96:f1:51: 8b:09:00:71:12:ca:52:3e:1c:f8:ed:42:32:7a:d6:db:37:65: 72:62:84:9e:ba:0d:9e:da:27:48:83:02:f8:b7:49:52:16:8e: 53:2c:4b:d6:a2:b2:e3:5c:f6:b8:6c:56:b3:86:ab:59:ee:c6: ef:a8:a9:20 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNjWpN+4tjpcbBO5Ym0cF9M8geqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yMzEwMTEwOTU1MDFaFw0yNDEwMDkxMDAwMDFaMDMxMTAvBgNV BAMTKEUxNDg4MTVDRDdGQzc2QzhERjA5RkU5NkMyREVGQTFENEQ4M0Q4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMctWfZMG+HupH72ALiYNGTj5i ZYfZvC7CQxBnwWWeEhtV3bFRxJbsIy8OOMpXoWu6AjCkqxh5IO6WCX2TD+tkSVVa xYjV/naW+G0OPiULoYmqNaWJIP0oGizc6eKW9u23y1rQvTJb6C5HLnvn/BP0Kt6m 6G8EsJwCt+u2LHTtdcNfNT5voxK/Hw+b5kL2Emo27k2abje4PCO8t45c9cYMhPlj 5Gjx4uuRjj/zy/Nb4Af74JY2xz4hPcrtv2YqL2KBy39u7SDZJPQW9SqBqMoCsmlA NL4n+f8rf5cjyjWdu3KhfzzqH/9Enno3b8iDktD8SO5wb0in6Efnaeffy80hAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4UiBXNf8dsjfCf6Wwt76HU2D2A8wHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypoSMA0GCSqG SIb3DQEBCwUAA4IBAQCq7Px5ECP4s2ReQM9/1d5MeCM02V0M4uTbPzz788945yL4 WYR/qAgx+0/GHhtqsJYAx2s4faAuqMd9bZe/AktxwfqFBQ/mbVFRslRrDP0SONIm HL9cswPtpOzE4Lro6qjAtZvABlaQExbecgBPZFZulGlDJ8b59G+vbUGOCyleQpNB V4XxKDBYFdeeVF5LwU/Y4El1/m7T62nfr4Sj3j1cl2uWedTrMwo18SVMH01hS17w kwfqTT9qVhHQDKXf80Eyc/+W8VGLCQBxEspSPhz47UIyetbbN2VyYoSeug2e2idI gwL4t0lSFo5TLEvWorLjXPa4bFazhqtZ7sbvqKkg -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:38 2024 by rpki-client on console-ams.rpki-client.org