$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136322e302f32342d3234203d3e203137373237.roa File: 3230322e35392e3136322e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: mrgaxfGF9LmOCfMqNkU2Q3hzeoVeTsYoo5C8ljyYwpc= Subject key identifier: 82:93:35:ED:7D:54:EC:EE:E3:F2:5F:83:46:14:2E:01:B2:8F:92:B2 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 765EB4B9855892D3FC23864D215A97BBB7D51EF6 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136322e302f32342d3234203d3e203137373237.roa Signing time: Sun 29 Oct 2023 08:00:04 +0000 ROA not before: Sun 29 Oct 2023 07:55:04 +0000 ROA not after: Sun 27 Oct 2024 08:00:04 +0000 asID: 17727 IP address blocks: 202.59.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5e:b4:b9:85:58:92:d3:fc:23:86:4d:21:5a:97:bb:b7:d5:1e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 07:55:04 2023 GMT Not After : Oct 27 08:00:04 2024 GMT Subject: CN=829335ED7D54ECEEE3F25F8346142E01B28F92B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:37:0e:d1:20:c4:99:c6:c9:4a:ba:49:e3:0a: 6a:6f:f8:de:8d:cc:80:e3:67:8b:9b:82:e9:cf:3a: ae:33:1c:31:8c:45:d2:de:95:21:be:d8:4b:0b:72: 10:a3:ee:e0:8a:60:df:72:50:ec:6e:34:bb:a1:44: ce:bb:19:fe:5f:ac:d4:83:01:f8:14:e5:2b:c4:4d: b0:4e:81:1f:24:ca:6c:30:f3:ca:8d:ec:b8:56:dc: ee:25:76:61:6c:05:fa:68:b3:be:76:81:f9:99:59: 87:c9:a6:c5:a0:5c:05:9a:a6:cc:b6:84:f6:e1:a0: 3f:b2:d2:9a:c5:9c:1a:14:5b:f6:a3:e8:20:02:38: f0:bf:79:ac:88:fe:4f:4b:09:83:d6:13:c3:40:06: f5:7b:66:3d:fd:fd:a8:76:c6:14:c9:95:4e:ef:75: 39:ee:1b:7a:b7:d1:f5:a6:b4:7c:da:9c:fb:b7:c8: 43:53:aa:ff:85:3f:75:03:18:24:6e:42:ca:0b:76: 7e:3e:9f:7e:d9:ce:e8:5e:1e:43:7e:b0:e8:36:e8: b8:9f:af:0a:41:71:03:a6:ef:15:7e:68:f7:51:4f: 30:af:71:bd:3a:e9:fe:f4:aa:91:c2:cf:a5:48:80: d3:b3:d9:ca:ad:75:00:ab:df:53:b0:a1:a4:05:3c: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:93:35:ED:7D:54:EC:EE:E3:F2:5F:83:46:14:2E:01:B2:8F:92:B2 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136322e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.162.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:ca:a5:6c:72:8b:91:13:25:aa:c9:49:2e:1b:e5:c3:c9:ef: 53:08:62:5e:b4:c3:55:fd:7d:33:94:81:b7:e1:e2:1d:ec:27: a5:a8:e5:fa:e4:89:13:38:6e:2c:2c:68:36:62:0f:98:e1:64: 2b:52:1f:12:ca:bf:8e:0c:0c:bd:33:e7:76:bd:ba:d9:17:ac: a9:f5:73:6e:83:62:c6:29:e5:ab:b7:d3:a3:e2:fc:1d:7c:fb: 6e:0f:47:7a:f2:48:b0:bb:46:b2:55:b1:ae:98:b2:0e:92:9e: c2:c3:4b:02:c2:b1:f0:43:79:7e:e9:d6:85:14:3c:a6:9e:12: 56:3b:ae:9c:04:a3:cc:7c:2c:b3:29:f8:a1:f2:c7:9a:2d:5a: 23:3b:80:95:cb:27:e5:f4:bb:89:e4:1e:45:c5:03:f3:8b:a3: c1:28:80:da:51:2c:00:f1:c4:36:c6:72:1c:55:48:05:7e:fb: c0:db:23:de:17:f7:24:60:49:03:62:1b:1e:7f:c8:e3:a7:13: 70:86:67:7d:25:3e:8d:80:8e:ad:aa:c9:1e:94:f2:9b:69:9b: 0a:b0:64:d1:d8:6a:29:ea:24:8b:f8:5b:1c:ef:e2:d5:05:9c: 7e:11:50:3b:3a:44:ff:a1:d5:80:a1:c6:ba:1c:67:78:bf:71: d0:08:98:58 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdl60uYVYktP8I4ZNIVqXu7fVHvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNzU1MDRaFw0yNDEwMjcwODAwMDRaMDMxMTAvBgNV BAMTKDgyOTMzNUVEN0Q1NEVDRUVFM0YyNUY4MzQ2MTQyRTAxQjI4RjkyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsNw7RIMSZxslKuknjCmpv+N6N zIDjZ4ubgunPOq4zHDGMRdLelSG+2EsLchCj7uCKYN9yUOxuNLuhRM67Gf5frNSD AfgU5SvETbBOgR8kymww88qN7LhW3O4ldmFsBfpos752gfmZWYfJpsWgXAWapsy2 hPbhoD+y0prFnBoUW/aj6CACOPC/eayI/k9LCYPWE8NABvV7Zj39/ah2xhTJlU7v dTnuG3q30fWmtHzanPu3yENTqv+FP3UDGCRuQsoLdn4+n37ZzuheHkN+sOg26Lif rwpBcQOm7xV+aPdRTzCvcb066f70qpHCz6VIgNOz2cqtdQCr31OwoaQFPHRBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgpM17X1U7O7j8l+DRhQuAbKPkrIwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7ojANBgkqhkiG 9w0BAQsFAAOCAQEALMqlbHKLkRMlqslJLhvlw8nvUwhiXrTDVf19M5SBt+HiHewn pajl+uSJEzhuLCxoNmIPmOFkK1IfEsq/jgwMvTPndr262ResqfVzboNixinlq7fT o+L8HXz7bg9HevJIsLtGslWxrpiyDpKewsNLAsKx8EN5funWhRQ8pp4SVjuunASj zHwssyn4ofLHmi1aIzuAlcsn5fS7ieQeRcUD84ujwSiA2lEsAPHENsZyHFVIBX77 wNsj3hf3JGBJA2IbHn/I46cTcIZnfSU+jYCOrarJHpTym2mbCrBk0dhqKeoki/hb HO/i1QWcfhFQOzpE/6HVgKHGuhxneL9x0AiYWA== -----END CERTIFICATE-----Generated at Wed May 1 18:10:56 2024 by rpki-client on console-ams.rpki-client.org