$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa File: 3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa (raw, json) Hash identifier: mpcvU+fECV7tB7+oqawsF4oiU5RVoQrQ9orZLUzDKaM= Subject key identifier: 53:0E:1C:70:91:65:D7:80:DC:3B:45:01:2A:81:71:32:8C:AC:C5:AB Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 015B4F53731EE8930A3773E412782D95BE03AB62 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa Signing time: Wed 11 Oct 2023 10:00:01 +0000 ROA not before: Wed 11 Oct 2023 09:55:01 +0000 ROA not after: Wed 09 Oct 2024 10:00:01 +0000 asID: 136121 IP address blocks: 202.154.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5b:4f:53:73:1e:e8:93:0a:37:73:e4:12:78:2d:95:be:03:ab:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Oct 11 09:55:01 2023 GMT Not After : Oct 9 10:00:01 2024 GMT Subject: CN=530E1C709165D780DC3B45012A8171328CACC5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:05:8f:e1:93:c5:34:f9:33:8e:1d:9e:12: 6e:89:eb:6e:28:27:4f:38:f8:45:22:80:dc:50:a2: c7:cb:5b:89:18:1a:d3:86:a0:ca:d2:b6:5b:4c:55: 8c:f5:20:73:c0:9d:37:9b:8d:c3:0b:f4:00:97:af: 6c:4c:32:51:c3:f5:56:c2:0f:6e:6b:ae:6c:53:0f: 27:52:ff:cf:1b:5c:0a:9e:77:62:af:55:ec:d5:56: 1b:b3:51:9e:c8:d3:ba:7f:f4:87:f6:0c:c5:2a:4d: 0d:62:2f:02:c0:99:c5:ae:17:21:e1:58:2e:14:b5: 06:19:b8:a6:ac:a5:51:b4:84:63:37:06:cf:b6:93: 44:cf:d9:96:4c:2d:19:aa:55:32:1e:2c:f9:b7:00: de:4e:a2:70:7e:e4:8e:dd:31:8f:56:07:17:b7:76: 0e:19:31:39:93:bd:5c:d5:7e:a3:7e:04:9e:99:97: d1:1f:19:f8:0c:41:5b:0b:72:57:ff:c3:66:2e:c5: 78:25:7f:3b:6c:7f:23:5f:1f:20:e7:22:c2:f8:2a: 87:cb:8e:99:01:c5:4e:69:d8:de:05:00:be:02:22: 1d:67:a1:9c:a7:d1:06:78:61:34:c4:df:68:4c:43: 8f:8f:73:67:b1:4b:9e:1a:03:f8:a6:44:d9:5f:7a: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0E:1C:70:91:65:D7:80:DC:3B:45:01:2A:81:71:32:8C:AC:C5:AB X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.18.0/24 Signature Algorithm: sha256WithRSAEncryption 37:fc:8c:61:bb:e2:6d:5a:30:b2:48:49:4f:1f:29:ee:fa:e1: 16:06:78:d9:6b:9c:e8:8b:0c:95:5d:66:44:5f:af:80:d0:48: 70:ef:58:16:15:27:c2:5c:23:d8:b1:96:73:d3:2a:c0:02:ba: e6:75:72:7b:bc:66:3b:7c:c2:10:6d:52:cb:6f:1b:b3:82:f1: 7c:8c:36:ab:c4:9e:a4:9b:c2:d7:b4:b8:39:3a:1c:ec:80:a5: bf:e4:02:0e:aa:9f:d6:7b:3c:8e:a9:3f:7b:a3:06:16:75:4b: 29:e9:d1:22:e5:0d:f6:27:ba:99:49:a7:1b:1b:e2:b8:bc:bf: 58:f5:a7:46:90:44:f7:e3:0e:62:21:b6:24:10:d9:ca:aa:02: 27:b3:0f:40:28:1b:72:27:e2:a6:ff:7a:c1:c9:e0:64:9c:c0: 84:7c:bd:28:ff:b4:ef:35:c0:dd:d7:b5:d6:e5:1f:9d:4f:86: 9e:56:db:62:e2:de:6d:1b:3a:e5:00:47:b6:d5:fb:29:bc:7e: 35:48:96:af:88:ef:84:02:70:a5:92:5c:a2:b3:10:a2:2a:4c: 4a:95:97:4f:62:38:44:2d:d5:8f:aa:79:f5:9a:79:3a:4a:0e: b8:d2:cd:58:b0:23:0e:9e:59:ae:a1:eb:ea:2c:28:36:d0:d4: 0f:31:04:36 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAVtPU3Me6JMKN3PkEngtlb4Dq2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yMzEwMTEwOTU1MDFaFw0yNDEwMDkxMDAwMDFaMDMxMTAvBgNV BAMTKDUzMEUxQzcwOTE2NUQ3ODBEQzNCNDUwMTJBODE3MTMyOENBQ0M1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ygWP4ZPFNPkzjh2eEm6J624o J084+EUigNxQosfLW4kYGtOGoMrStltMVYz1IHPAnTebjcML9ACXr2xMMlHD9VbC D25rrmxTDydS/88bXAqed2KvVezVVhuzUZ7I07p/9If2DMUqTQ1iLwLAmcWuFyHh WC4UtQYZuKaspVG0hGM3Bs+2k0TP2ZZMLRmqVTIeLPm3AN5OonB+5I7dMY9WBxe3 dg4ZMTmTvVzVfqN+BJ6Zl9EfGfgMQVsLclf/w2YuxXglfztsfyNfHyDnIsL4KofL jpkBxU5p2N4FAL4CIh1noZyn0QZ4YTTE32hMQ4+Pc2exS54aA/imRNlfeoy5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUw4ccJFl14DcO0UBKoFxMoysxaswHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoSMA0GCSqG SIb3DQEBCwUAA4IBAQA3/Ixhu+JtWjCySElPHynu+uEWBnjZa5zoiwyVXWZEX6+A 0Ehw71gWFSfCXCPYsZZz0yrAArrmdXJ7vGY7fMIQbVLLbxuzgvF8jDarxJ6km8LX tLg5OhzsgKW/5AIOqp/WezyOqT97owYWdUsp6dEi5Q32J7qZSacbG+K4vL9Y9adG kET34w5iIbYkENnKqgInsw9AKBtyJ+Km/3rByeBknMCEfL0o/7TvNcDd17XW5R+d T4aeVtti4t5tGzrlAEe21fspvH41SJaviO+EAnClklyisxCiKkxKlZdPYjhELdWP qnn1mnk6Sg640s1YsCMOnlmuoevqLCg20NQPMQQ2 -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:38 2024 by rpki-client on console-ams.rpki-client.org