$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136302e302f32302d3230203d3e203137373237.roa File: 3230322e35392e3136302e302f32302d3230203d3e203137373237.roa (raw, json) Hash identifier: gwzT3PtJIRJxP4IoH64x4taz9oYwQ0wY/yhsowX1PMw= Subject key identifier: 29:44:BB:78:DF:33:BD:3C:11:5C:CA:16:95:5A:F1:CB:91:2C:1B:B8 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 5D7BA37733F615EA5670562EDC8D26FFF1FF261D Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136302e302f32302d3230203d3e203137373237.roa Signing time: Sun 29 Oct 2023 08:00:02 +0000 ROA not before: Sun 29 Oct 2023 07:55:02 +0000 ROA not after: Sun 27 Oct 2024 08:00:02 +0000 asID: 17727 IP address blocks: 202.59.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7b:a3:77:33:f6:15:ea:56:70:56:2e:dc:8d:26:ff:f1:ff:26:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 07:55:02 2023 GMT Not After : Oct 27 08:00:02 2024 GMT Subject: CN=2944BB78DF33BD3C115CCA16955AF1CB912C1BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:0c:60:3c:78:3e:d5:97:09:82:7e:b0:82: b4:6a:39:4d:30:a3:75:ce:48:61:de:17:1c:32:55: 08:0d:a6:5b:e7:7b:6d:8a:ae:52:5d:07:06:0c:d4: 71:49:44:06:57:6a:85:1b:74:34:ed:e9:b7:33:67: 7e:aa:70:54:d3:39:a6:f4:3a:a2:87:e4:30:d3:b3: 94:76:ab:d4:9f:39:52:fb:52:0c:09:06:ec:8b:8d: 0d:4c:dd:77:a6:61:da:2f:18:4e:e3:d2:05:ab:da: 72:71:1a:14:11:bd:91:cd:b9:bb:f8:09:d1:26:ca: a1:b0:25:99:6b:83:2d:00:3a:33:b9:58:00:9d:63: 23:ab:e4:72:79:b2:87:f1:6f:ba:e8:97:7f:24:8b: a2:67:64:7c:cb:f4:be:6f:6a:e6:1d:c0:bf:b9:07: 0a:f5:8a:07:fa:a4:a5:b6:e2:c6:57:8d:59:ca:ab: 8b:5d:67:3c:03:90:c9:e9:85:87:de:31:76:cb:00: ee:93:7c:a6:d5:fa:50:75:16:94:14:26:9b:e8:9c: ad:01:f4:38:b7:67:4a:cc:3c:26:1e:68:ec:61:41: e2:2f:83:81:80:cd:48:72:e3:bb:90:43:49:7e:73: de:1e:a0:e5:34:31:25:a8:d5:1f:c0:e3:92:4e:f4: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:44:BB:78:DF:33:BD:3C:11:5C:CA:16:95:5A:F1:CB:91:2C:1B:B8 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136302e302f32302d3230203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.160.0/20 Signature Algorithm: sha256WithRSAEncryption 59:cd:d5:85:de:23:87:ce:23:64:73:88:89:8b:c7:0c:f0:e5: 8e:06:b7:ad:d6:ac:e3:83:80:99:aa:3d:31:c6:54:e6:43:dc: ff:4b:68:24:71:4c:4b:ee:91:ee:c0:b9:5d:94:61:e4:a1:4c: e3:71:28:70:0f:a4:ff:8c:81:36:c5:45:33:37:4e:2f:35:ab: 35:80:d0:ab:0c:32:54:ca:1d:67:ba:0b:c5:83:5b:23:eb:49: b7:01:3e:39:fe:f7:c0:bf:15:f7:5c:97:87:95:b5:0c:e2:15: 68:30:c0:47:64:43:47:69:d2:4b:8e:ae:7a:e6:8e:c3:b8:b8: 82:01:d3:19:a4:bf:86:b6:1a:64:a3:17:5a:1c:e7:51:60:22: 41:68:06:2f:c8:d8:38:ec:9f:a5:66:42:9a:9f:61:31:be:61: 98:b3:d0:8b:40:ae:9a:b8:da:de:0c:f2:2b:5b:49:bc:6f:45: bb:50:f9:ee:37:02:ee:bb:e1:c8:df:dc:b8:df:77:c8:b7:a0: 5f:59:04:51:ca:ea:cb:cd:e3:67:2c:ad:e0:78:26:48:e0:2a: 8b:da:cd:8a:7e:c2:d8:41:46:87:2a:6d:8e:85:c9:fe:f1:d7: 45:02:9e:7d:d9:b3:b8:d7:a0:c2:3d:73:40:0f:57:44:f5:64: ea:44:6d:51 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXXujdzP2FepWcFYu3I0m//H/Jh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNzU1MDJaFw0yNDEwMjcwODAwMDJaMDMxMTAvBgNV BAMTKDI5NDRCQjc4REYzM0JEM0MxMTVDQ0ExNjk1NUFGMUNCOTEyQzFCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/QxgPHg+1ZcJgn6wgrRqOU0w o3XOSGHeFxwyVQgNplvne22KrlJdBwYM1HFJRAZXaoUbdDTt6bczZ36qcFTTOab0 OqKH5DDTs5R2q9SfOVL7UgwJBuyLjQ1M3XemYdovGE7j0gWr2nJxGhQRvZHNubv4 CdEmyqGwJZlrgy0AOjO5WACdYyOr5HJ5sofxb7rol38ki6JnZHzL9L5vauYdwL+5 Bwr1igf6pKW24sZXjVnKq4tdZzwDkMnphYfeMXbLAO6TfKbV+lB1FpQUJpvonK0B 9Di3Z0rMPCYeaOxhQeIvg4GAzUhy47uQQ0l+c94eoOU0MSWo1R/A45JO9NIxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUKUS7eN8zvTwRXMoWlVrxy5EsG7gwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNjMwMmUzMDJmMzIz MDJkMzIzMDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMo7oDANBgkqhkiG 9w0BAQsFAAOCAQEAWc3Vhd4jh84jZHOIiYvHDPDljga3rdas44OAmao9McZU5kPc /0toJHFMS+6R7sC5XZRh5KFM43EocA+k/4yBNsVFMzdOLzWrNYDQqwwyVModZ7oL xYNbI+tJtwE+Of73wL8V91yXh5W1DOIVaDDAR2RDR2nSS46ueuaOw7i4ggHTGaS/ hrYaZKMXWhznUWAiQWgGL8jYOOyfpWZCmp9hMb5hmLPQi0Cumrja3gzyK1tJvG9F u1D57jcC7rvhyN/cuN93yLegX1kEUcrqy83jZyyt4HgmSOAqi9rNin7C2EFGhypt joXJ/vHXRQKefdmzuNegwj1zQA9XRPVk6kRtUQ== -----END CERTIFICATE-----Generated at Wed May 1 18:10:56 2024 by rpki-client on console-ams.rpki-client.org