$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233312e302f32342d3234203d3e203538353532.roa File: 34332e3234302e3233312e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: wNSAIOfnX6yj21nhhoM8mkezpSMiYpPC5UQtmy9aXsE= Subject key identifier: 54:3C:F4:45:F1:B4:33:DA:7A:70:2D:3B:69:9B:B3:D1:BE:97:2F:16 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 163C7F8C9C8ED2C5DB487CCF5BF536CCA0162A7F Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233312e302f32342d3234203d3e203538353532.roa Signing time: Mon 31 Jul 2023 00:03:56 +0000 ROA not before: Sun 30 Jul 2023 23:58:56 +0000 ROA not after: Mon 29 Jul 2024 00:03:56 +0000 asID: 58552 IP address blocks: 43.240.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 18:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:7f:8c:9c:8e:d2:c5:db:48:7c:cf:5b:f5:36:cc:a0:16:2a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 30 23:58:56 2023 GMT Not After : Jul 29 00:03:56 2024 GMT Subject: CN=543CF445F1B433DA7A702D3B699BB3D1BE972F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a3:18:84:f3:b9:70:68:18:6a:a2:72:c8:5b: f1:38:04:86:98:bc:73:b9:5b:2b:10:2f:e5:f7:cd: 99:22:4b:18:94:14:4e:60:57:b6:12:20:52:cc:44: 57:4a:05:6c:b8:99:d6:50:a0:ea:17:70:85:6b:2f: 33:a7:54:4c:e9:62:1d:b4:53:a9:f9:82:f6:2b:21: 3b:b5:65:bf:fd:8e:4d:3d:6a:32:62:30:0b:0a:00: 58:82:87:d4:08:aa:07:a6:2c:50:40:44:55:1f:30: 2e:63:b8:7a:94:bd:23:2b:82:f5:f8:f1:bd:01:77: e6:68:63:d5:06:00:77:1f:48:6c:4e:0c:9b:6a:29: 38:93:30:3a:01:f9:05:04:15:94:92:5c:af:3f:df: b1:bc:a8:9f:67:67:da:9c:5f:64:82:33:54:13:4c: 3c:58:c8:ab:7f:4e:2a:21:82:40:e4:48:97:00:d9: 09:ab:41:3c:9c:78:31:6c:c8:c2:80:49:2c:8d:8c: 0f:97:15:b1:aa:37:1d:71:09:28:66:ad:7b:8e:44: 07:3b:4e:13:66:a2:33:e9:c2:c6:8b:26:ce:85:39: 35:64:51:24:11:6b:f7:64:90:30:97:06:bc:fa:0c: e1:44:4e:d2:0d:a4:90:7f:7d:55:04:05:8a:94:1e: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3C:F4:45:F1:B4:33:DA:7A:70:2D:3B:69:9B:B3:D1:BE:97:2F:16 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233312e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.231.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:da:05:2e:ab:52:9a:3a:fc:2b:30:cc:71:7e:85:e8:3b:ad: fc:e9:67:3c:c9:12:be:a4:d0:91:ce:e2:70:6f:50:11:fd:cf: 96:d2:4d:70:66:dc:ae:3b:ab:ad:39:a2:c3:57:f3:58:7e:dd: 2e:98:6e:55:57:f3:72:58:8f:bd:10:41:1e:49:72:94:57:af: 3f:45:8c:8f:14:47:cf:52:0a:5f:0c:35:03:e0:16:58:17:69: 05:b0:b3:3a:3e:6b:48:ec:e8:a2:1a:57:c8:99:42:9e:db:69: df:bf:aa:db:0c:94:20:59:b8:b7:0d:9a:87:26:5b:b4:f3:cc: 77:bd:aa:70:d6:6a:12:b3:f6:20:38:e2:0b:2d:e7:6c:c8:b5: 36:57:81:dd:c6:d9:99:5b:f6:42:13:51:67:1f:48:61:68:30: f7:5d:2e:ec:50:47:4e:80:22:5d:74:bc:8b:5e:14:b2:5e:0f: ee:7d:24:8d:b6:ef:20:68:bc:e8:3d:b3:3d:67:b2:64:17:fe: 3a:45:b2:25:a8:10:b6:d5:a4:4d:a8:97:06:1d:73:b1:2e:8e: e9:f1:b1:93:5d:dd:47:24:66:c2:66:a1:61:28:ba:a6:a8:de: 7c:c6:4e:1b:5b:b9:55:1c:97:8f:cb:f2:fa:da:a4:69:17:25: a1:f2:e5:4f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFjx/jJyO0sXbSHzPW/U2zKAWKn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NTZaFw0yNDA3MjkwMDAzNTZaMDMxMTAvBgNV BAMTKDU0M0NGNDQ1RjFCNDMzREE3QTcwMkQzQjY5OUJCM0QxQkU5NzJGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoxiE87lwaBhqonLIW/E4BIaY vHO5WysQL+X3zZkiSxiUFE5gV7YSIFLMRFdKBWy4mdZQoOoXcIVrLzOnVEzpYh20 U6n5gvYrITu1Zb/9jk09ajJiMAsKAFiCh9QIqgemLFBARFUfMC5juHqUvSMrgvX4 8b0Bd+ZoY9UGAHcfSGxODJtqKTiTMDoB+QUEFZSSXK8/37G8qJ9nZ9qcX2SCM1QT TDxYyKt/TiohgkDkSJcA2QmrQTyceDFsyMKASSyNjA+XFbGqNx1xCShmrXuORAc7 ThNmojPpwsaLJs6FOTVkUSQRa/dkkDCXBrz6DOFETtINpJB/fVUEBYqUHhwrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVDz0RfG0M9p6cC07aZuz0b6XLxYwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzM0MzMyZTMyMzQzMDJlMzIzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw5zANBgkqhkiG 9w0BAQsFAAOCAQEATtoFLqtSmjr8KzDMcX6F6Dut/OlnPMkSvqTQkc7icG9QEf3P ltJNcGbcrjurrTmiw1fzWH7dLphuVVfzcliPvRBBHklylFevP0WMjxRHz1IKXww1 A+AWWBdpBbCzOj5rSOzoohpXyJlCnttp37+q2wyUIFm4tw2ahyZbtPPMd72qcNZq ErP2IDjiCy3nbMi1NleB3cbZmVv2QhNRZx9IYWgw910u7FBHToAiXXS8i14Usl4P 7n0kjbbvIGi86D2zPWeyZBf+OkWyJagQttWkTaiXBh1zsS6O6fGxk13dRyRmwmah YSi6pqjefMZOG1u5VRyXj8vy+tqkaRclofLlTw== -----END CERTIFICATE-----Generated at Fri Apr 19 10:26:11 2024 by rpki-client on console-ams.rpki-client.org