$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232382e302f32342d3234203d3e203538353532.roa File: 34332e3234302e3232382e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: b7IqZDz18OXJT18hkXEp8L0L4GpbmzrfQA66dC2R0zo= Subject key identifier: C1:14:D0:98:7F:6C:96:C7:80:D4:43:10:01:9E:C2:D2:78:25:EF:BF Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 743FE915BB8BF0D2A209D404C8AC2B05B406B06D Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232382e302f32342d3234203d3e203538353532.roa Signing time: Mon 31 Jul 2023 00:03:58 +0000 ROA not before: Sun 30 Jul 2023 23:58:58 +0000 ROA not after: Mon 29 Jul 2024 00:03:58 +0000 asID: 58552 IP address blocks: 43.240.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 18:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3f:e9:15:bb:8b:f0:d2:a2:09:d4:04:c8:ac:2b:05:b4:06:b0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 30 23:58:58 2023 GMT Not After : Jul 29 00:03:58 2024 GMT Subject: CN=C114D0987F6C96C780D44310019EC2D27825EFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:c4:f7:bd:73:ae:f2:3b:d0:57:13:b8:e0: 68:26:bd:8c:be:49:19:67:b8:85:99:1f:62:6f:27: ea:b0:da:91:b4:15:e1:fb:7a:69:5a:e1:9e:a9:d1: 57:42:ed:90:25:78:55:28:34:31:36:16:ef:56:89: 9b:d4:9d:ca:35:d6:0d:79:dc:31:e6:e3:5c:b8:55: fa:f8:b7:b8:04:91:d5:a0:2d:9d:11:82:04:ae:86: c4:2e:2f:b8:69:fe:02:17:9b:6c:82:ff:a2:20:9e: 77:41:0f:f8:99:73:05:17:fa:bb:d1:e8:3e:9b:88: 9d:fc:9e:ff:87:f3:cb:38:c8:10:a6:2b:fe:d2:20: 65:12:ab:59:85:49:f8:76:64:f3:14:2f:96:ab:c6: a4:2b:0d:5a:d2:0d:f2:92:01:40:3f:0f:1d:8e:3f: a2:1f:53:1d:e8:49:ef:fc:e8:29:1a:74:28:c8:32: 97:29:86:45:2a:0f:8d:6b:85:0e:57:70:25:12:ba: 49:d5:63:c9:a3:46:13:60:c9:42:1e:e9:9d:25:7b: 06:dd:10:d6:42:fc:ac:05:26:d4:33:dc:6a:a7:57: 92:c1:8a:6f:12:bd:a2:1d:a2:60:19:2d:46:bf:8e: 07:fc:2a:5a:34:0c:b5:3e:cd:94:76:14:99:e7:fd: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:14:D0:98:7F:6C:96:C7:80:D4:43:10:01:9E:C2:D2:78:25:EF:BF X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232382e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.228.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:01:88:bf:07:fe:2c:77:ff:fb:6b:5d:84:62:d8:89:98:9a: 85:a6:4d:3f:44:50:d6:32:09:b4:63:6e:26:20:50:b6:ac:32: 2c:a0:6f:c2:ef:cc:e7:d9:51:56:0a:08:15:48:f5:e6:35:00: 77:04:8c:66:78:19:f1:11:8b:f6:33:69:77:6e:95:27:f3:16: b0:f1:12:40:28:6c:0c:c6:07:45:70:92:12:ad:79:e4:38:d9: 39:3c:12:60:b0:6f:bf:3c:0e:dc:9e:07:6c:c8:72:8a:69:64: 36:75:67:19:49:aa:ae:be:9e:0c:ca:52:44:53:ea:4f:fc:62: 0c:cd:fc:2d:35:1a:ee:73:ca:3a:6a:33:4a:31:4d:bd:dd:a1: 13:a7:30:1c:f6:aa:61:c3:cf:01:30:dc:2e:61:26:eb:2b:66: f0:78:47:b7:35:fb:81:14:b6:93:f5:f1:ce:39:70:1f:f6:44: 20:98:c0:9b:de:d2:d0:32:c3:44:2b:36:16:2f:83:fc:07:54: 3f:ba:e0:12:aa:f7:85:d7:bb:f4:d0:be:ac:21:51:4d:7a:06: e7:24:fa:fd:91:a8:85:39:72:43:23:44:fd:b4:51:ea:06:95: dd:74:a5:99:03:eb:df:93:28:16:c2:1d:96:4a:73:80:61:75: 42:e5:ad:3d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdD/pFbuL8NKiCdQEyKwrBbQGsG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NThaFw0yNDA3MjkwMDAzNThaMDMxMTAvBgNV BAMTKEMxMTREMDk4N0Y2Qzk2Qzc4MEQ0NDMxMDAxOUVDMkQyNzgyNUVGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJMT3vXOu8jvQVxO44GgmvYy+ SRlnuIWZH2JvJ+qw2pG0FeH7emla4Z6p0VdC7ZAleFUoNDE2Fu9WiZvUnco11g15 3DHm41y4Vfr4t7gEkdWgLZ0RggSuhsQuL7hp/gIXm2yC/6IgnndBD/iZcwUX+rvR 6D6biJ38nv+H88s4yBCmK/7SIGUSq1mFSfh2ZPMUL5arxqQrDVrSDfKSAUA/Dx2O P6IfUx3oSe/86CkadCjIMpcphkUqD41rhQ5XcCUSuknVY8mjRhNgyUIe6Z0lewbd ENZC/KwFJtQz3GqnV5LBim8SvaIdomAZLUa/jgf8Klo0DLU+zZR2FJnn/esfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwRTQmH9slseA1EMQAZ7C0ngl778wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzM0MzMyZTMyMzQzMDJlMzIzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw5DANBgkqhkiG 9w0BAQsFAAOCAQEADgGIvwf+LHf/+2tdhGLYiZiahaZNP0RQ1jIJtGNuJiBQtqwy LKBvwu/M59lRVgoIFUj15jUAdwSMZngZ8RGL9jNpd26VJ/MWsPESQChsDMYHRXCS Eq155DjZOTwSYLBvvzwO3J4HbMhyimlkNnVnGUmqrr6eDMpSRFPqT/xiDM38LTUa 7nPKOmozSjFNvd2hE6cwHPaqYcPPATDcLmEm6ytm8HhHtzX7gRS2k/XxzjlwH/ZE IJjAm97S0DLDRCs2Fi+D/AdUP7rgEqr3hde79NC+rCFRTXoG5yT6/ZGohTlyQyNE /bRR6gaV3XSlmQPr35MoFsIdlkpzgGF1QuWtPQ== -----END CERTIFICATE-----Generated at Fri Apr 19 10:26:11 2024 by rpki-client on console-ams.rpki-client.org