$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa File: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (raw, json) Hash identifier: O9WLpDuzxRZvUVc+MyrBt8LC5HzacV+oChvYVrFCIyQ= Subject key identifier: 6A:B6:E5:4A:6E:49:9E:A0:5F:E3:B8:A3:62:0F:EC:8B:E4:5A:7F:BF Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 3A05662BD4B110847F8561843C3018CF53586113 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa Signing time: Mon 31 Jul 2023 00:08:09 +0000 ROA not before: Mon 31 Jul 2023 00:03:09 +0000 ROA not after: Mon 29 Jul 2024 00:08:09 +0000 asID: 24202 IP address blocks: 202.87.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Mar 2024 16:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:05:66:2b:d4:b1:10:84:7f:85:61:84:3c:30:18:cf:53:58:61:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Jul 31 00:03:09 2023 GMT Not After : Jul 29 00:08:09 2024 GMT Subject: CN=6AB6E54A6E499EA05FE3B8A3620FEC8BE45A7FBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:65:1e:84:33:78:de:8c:76:fd:f2:98:86: 2c:15:cc:9e:1d:c2:57:87:8c:94:44:7e:d6:9c:74: 35:03:6c:26:62:e2:8f:09:90:f5:92:44:87:22:a1: 20:cb:77:c0:81:bc:e7:45:c2:94:e6:77:e3:1a:95: 88:a8:6e:69:97:f0:ae:89:5b:a0:03:ef:f1:92:61: c9:32:38:ff:fc:a4:b3:23:0b:a1:49:72:d1:c4:8e: 5a:e0:89:c7:9e:60:23:87:de:d2:8e:de:bf:66:fe: b2:71:db:35:1e:97:a6:2a:d4:91:46:a3:71:44:98: ca:e6:33:50:e4:6d:97:31:23:10:81:53:9e:9b:88: 24:d0:80:e5:d0:1f:f9:1c:64:49:19:ad:a8:49:56: 77:ff:99:f1:69:a2:a9:40:cb:1e:bf:51:d8:10:bb: c5:82:8d:e3:9f:ec:f9:49:fd:60:4b:24:5e:01:25: 3b:1c:1b:8a:26:ac:1e:07:0a:68:25:db:6e:fe:ab: 0f:62:9b:68:6c:43:f0:af:b7:d3:57:b2:65:e4:7c: 5a:2b:0d:99:49:20:8b:27:b6:10:07:2c:13:b6:08: 0c:f7:55:d1:df:9d:13:aa:81:0f:d6:f7:8a:a8:41: 59:44:4b:2a:d4:72:57:54:83:0e:3e:48:02:f7:1a: 9b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B6:E5:4A:6E:49:9E:A0:5F:E3:B8:A3:62:0F:EC:8B:E4:5A:7F:BF X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.240.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:7e:07:32:4f:f6:fe:98:c3:4d:e4:ae:b2:d1:0d:a6:d7:34: ae:84:d2:44:7e:61:40:97:c1:a6:8b:18:aa:47:12:9b:ea:85: 14:6b:28:d9:13:66:ab:d6:86:02:15:93:55:c9:6c:25:28:20: 6e:76:94:7c:b3:80:b0:68:57:44:87:c3:a1:fa:3e:54:ad:93: ee:72:45:c6:d3:32:95:1b:3e:b9:ec:5c:36:d2:fe:14:16:57: a9:9e:c4:a6:99:94:d2:c5:ae:cd:df:51:b8:cf:41:01:a0:f1: de:67:00:ca:ae:95:88:2b:b7:53:08:6b:4a:77:ba:2b:3e:e6: 73:1f:16:7d:6e:4e:74:40:75:20:f4:c2:4e:fd:29:f3:a1:da: 9f:01:25:92:7b:fb:8b:49:a2:11:27:99:8a:45:ff:d5:4c:d5: 3b:e9:7e:bd:19:7c:93:9f:9f:c1:3a:20:24:ee:ef:d5:47:d1: 14:6d:2e:67:5d:6a:e1:60:39:ae:79:0b:dc:0e:ab:37:ef:86: 34:43:71:a6:2a:43:a6:d6:cf:e4:39:b8:19:8a:ed:fd:3e:e8: a2:fc:ee:a4:2b:cc:84:34:b6:1d:6d:9c:f1:58:1f:8e:74:cc: fd:ad:81:7d:cb:ad:17:f7:89:b1:e5:ea:55:4a:80:96:42:5d: 25:90:e4:65 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOgVmK9SxEIR/hWGEPDAYz1NYYRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yMzA3MzEwMDAzMDlaFw0yNDA3MjkwMDA4MDlaMDMxMTAvBgNV BAMTKDZBQjZFNTRBNkU0OTlFQTA1RkUzQjhBMzYyMEZFQzhCRTQ1QTdGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXBGUehDN43ox2/fKYhiwVzJ4d wleHjJREftacdDUDbCZi4o8JkPWSRIcioSDLd8CBvOdFwpTmd+MalYiobmmX8K6J W6AD7/GSYckyOP/8pLMjC6FJctHEjlrgiceeYCOH3tKO3r9m/rJx2zUel6Yq1JFG o3FEmMrmM1DkbZcxIxCBU56biCTQgOXQH/kcZEkZrahJVnf/mfFpoqlAyx6/UdgQ u8WCjeOf7PlJ/WBLJF4BJTscG4omrB4HCmgl227+qw9im2hsQ/Cvt9NXsmXkfFor DZlJIIsnthAHLBO2CAz3VdHfnROqgQ/W94qoQVlESyrUcldUgw4+SAL3GpuZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUarblSm5JnqBf47ijYg/si+Raf78wHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZjAyYTg5LTdlZTgtNGE4My04 MDA0LTIzNGQ5MTRhMGZkNC8wLzMyMzAzMjJlMzgzNzJlMzIzNDMwMmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pX8DANBgkqhkiG 9w0BAQsFAAOCAQEAS34HMk/2/pjDTeSustENptc0roTSRH5hQJfBposYqkcSm+qF FGso2RNmq9aGAhWTVclsJSggbnaUfLOAsGhXRIfDofo+VK2T7nJFxtMylRs+uexc NtL+FBZXqZ7EppmU0sWuzd9RuM9BAaDx3mcAyq6ViCu3UwhrSne6Kz7mcx8WfW5O dEB1IPTCTv0p86HanwElknv7i0miESeZikX/1UzVO+l+vRl8k5+fwTogJO7v1UfR FG0uZ11q4WA5rnkL3A6rN++GNENxpipDptbP5Dm4GYrt/T7oovzupCvMhDS2HW2c 8VgfjnTM/a2BfcutF/eJseXqVUqAlkJdJZDkZQ== -----END CERTIFICATE-----Generated at Wed Mar 27 04:37:33 2024 by rpki-client on console-ams.rpki-client.org