$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa File: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (raw, json) Hash identifier: XuQGeDeRqoJdzzoUAZWITzT6vJEnrodh3pANTr3EBnY= Subject key identifier: B6:48:38:45:D5:5A:0B:1C:A0:27:8A:A2:E0:84:E4:A4:8C:0A:B0:50 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 614161548F2A99085E9F5A0B9D19BB60AF6BB1DF Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa Signing time: Sun 03 Sep 2023 18:00:00 +0000 ROA not before: Sun 03 Sep 2023 17:55:00 +0000 ROA not after: Sun 01 Sep 2024 18:00:00 +0000 asID: 17670 IP address blocks: 202.147.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 07:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:41:61:54:8f:2a:99:08:5e:9f:5a:0b:9d:19:bb:60:af:6b:b1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Sep 3 17:55:00 2023 GMT Not After : Sep 1 18:00:00 2024 GMT Subject: CN=B6483845D55A0B1CA0278AA2E084E4A48C0AB050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:0e:d7:e9:4c:a9:12:2b:2f:c5:99:ca:65: 32:e0:68:e8:d1:bd:91:5c:b6:b7:a0:55:f5:ca:a6: 38:57:70:cd:f0:ed:35:5c:87:80:d5:f4:9e:4a:df: 47:9f:63:13:6a:8c:cf:9b:c8:91:6a:cb:2c:b7:52: 6d:63:13:26:7e:81:10:4c:20:3e:94:e0:ea:be:13: b2:86:6c:a0:58:19:3b:c4:6e:cf:70:e6:7c:61:96: 59:db:75:ea:a5:d0:d6:25:0d:60:d1:ae:d8:32:b6: 47:ba:a2:03:f9:cf:fe:23:c5:a1:5a:07:0d:45:5e: a0:f6:85:23:d5:8e:e6:56:d7:0e:29:10:64:f6:37: 72:7f:bd:8d:2f:c7:a8:f0:70:f8:8f:fc:0a:49:22: db:f7:88:bb:60:58:0f:de:4e:33:36:44:84:b8:b4: 9a:e2:e4:8a:af:1f:4a:92:a1:c2:64:2b:65:39:45: 1b:6b:6d:de:6c:29:0e:2c:23:ef:93:0b:63:24:9d: 8b:9a:91:6c:42:08:0b:fa:13:17:e2:91:8b:1b:81: 2b:f3:22:ab:45:19:8b:64:98:ee:e2:93:7f:1d:8f: a8:08:fe:64:5c:98:31:79:c5:90:8d:45:a8:33:20: f9:1f:6b:e4:d6:e7:e0:be:e9:ca:89:37:1e:ed:a2: 43:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:48:38:45:D5:5A:0B:1C:A0:27:8A:A2:E0:84:E4:A4:8C:0A:B0:50 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.147.192.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:51:4e:05:11:b1:83:56:a7:b1:73:dd:b2:62:19:d7:ea:0a: b4:f2:2c:81:7a:54:2c:28:15:0d:cb:e8:ed:ab:c1:10:de:70: 2a:a3:36:c1:36:d0:52:b6:b7:85:ff:ca:ff:d3:ca:33:25:f6: 95:cf:41:ae:83:48:83:1c:ac:84:d9:71:e9:ba:09:f8:13:7b: 97:6e:fd:3e:a4:8f:d7:40:0b:98:07:db:07:1f:56:8d:78:ca: a3:82:f8:e9:53:7b:45:b5:af:84:36:d0:c6:e1:b2:c5:2a:06: 36:9c:cf:1f:37:59:fb:5c:af:c5:de:82:98:2a:ae:67:ba:65: 39:2f:5f:b6:42:81:2d:d2:54:c2:10:9e:ac:f0:ee:7d:00:ce: f6:75:d4:bf:1d:0a:f5:83:2f:7d:7b:79:7c:7b:f9:55:89:75: c8:46:ec:a2:ea:81:31:77:61:b2:56:ae:2e:23:93:91:c4:6f: cd:3e:2d:f1:b4:05:e9:35:2a:9a:68:7e:1b:eb:6b:93:e7:80: d4:1c:09:af:25:47:23:85:7f:b1:c3:c2:38:c3:c9:20:96:14: 9a:3d:fd:26:af:44:06:61:0b:d1:65:64:aa:c1:1c:db:7d:d8: 72:13:b6:66:27:07:20:36:64:95:e8:94:26:ed:10:1a:20:66: e8:ce:09:bd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYUFhVI8qmQhen1oLnRm7YK9rsd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yMzA5MDMxNzU1MDBaFw0yNDA5MDExODAwMDBaMDMxMTAvBgNV BAMTKEI2NDgzODQ1RDU1QTBCMUNBMDI3OEFBMkUwODRFNEE0OEMwQUIwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62w7X6UypEisvxZnKZTLgaOjR vZFctregVfXKpjhXcM3w7TVch4DV9J5K30efYxNqjM+byJFqyyy3Um1jEyZ+gRBM ID6U4Oq+E7KGbKBYGTvEbs9w5nxhllnbdeql0NYlDWDRrtgytke6ogP5z/4jxaFa Bw1FXqD2hSPVjuZW1w4pEGT2N3J/vY0vx6jwcPiP/ApJItv3iLtgWA/eTjM2RIS4 tJri5IqvH0qSocJkK2U5RRtrbd5sKQ4sI++TC2MknYuakWxCCAv6ExfikYsbgSvz IqtFGYtkmO7ik38dj6gI/mRcmDF5xZCNRagzIPkfa+TW5+C+6cqJNx7tokOnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtkg4RdVaCxygJ4qi4ITkpIwKsFAwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMyMzAzMjJlMzEzNDM3MmUzMTM5MzIyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzMTM3MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEypPAMA0GCSqG SIb3DQEBCwUAA4IBAQBuUU4FEbGDVqexc92yYhnX6gq08iyBelQsKBUNy+jtq8EQ 3nAqozbBNtBStreF/8r/08ozJfaVz0Gug0iDHKyE2XHpugn4E3uXbv0+pI/XQAuY B9sHH1aNeMqjgvjpU3tFta+ENtDG4bLFKgY2nM8fN1n7XK/F3oKYKq5numU5L1+2 QoEt0lTCEJ6s8O59AM72ddS/HQr1gy99e3l8e/lViXXIRuyi6oExd2GyVq4uI5OR xG/NPi3xtAXpNSqaaH4b62uT54DUHAmvJUcjhX+xw8I4w8kglhSaPf0mr0QGYQvR ZWSqwRzbfdhyE7ZmJwcgNmSV6JQm7RAaIGbozgm9 -----END CERTIFICATE-----Generated at Wed Apr 24 04:46:11 2024 by rpki-client on console-fra.rpki-client.org