$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136332e302f32342d3234203d3e203137373237.roa File: 3230322e35392e3136332e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: opth+8ZYK36EWg9uil3I+/yS3EcvuxcCshHKvPWdteQ= Subject key identifier: E7:40:E1:FF:18:47:17:15:4D:8F:89:69:E3:1F:67:D4:87:D3:86:58 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 0B92201FB65A90B1B7E42ECE9A33C78F6A85841F Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136332e302f32342d3234203d3e203137373237.roa Signing time: Sun 29 Oct 2023 08:00:04 +0000 ROA not before: Sun 29 Oct 2023 07:55:04 +0000 ROA not after: Sun 27 Oct 2024 08:00:04 +0000 asID: 17727 IP address blocks: 202.59.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:92:20:1f:b6:5a:90:b1:b7:e4:2e:ce:9a:33:c7:8f:6a:85:84:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 07:55:04 2023 GMT Not After : Oct 27 08:00:04 2024 GMT Subject: CN=E740E1FF184717154D8F8969E31F67D487D38658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:a3:4d:14:d3:97:71:32:79:c8:cf:0d:4d: 43:a8:3a:12:78:3d:93:c8:1c:ad:4f:eb:43:93:41: 10:b2:bb:16:c9:cc:0d:da:90:17:d3:18:85:52:1d: 5c:4d:5b:d5:26:59:b1:2a:9c:35:9d:aa:32:ae:07: 11:64:b1:24:bd:6e:29:25:7b:86:24:fb:94:65:ba: 5d:94:6f:4e:31:94:16:57:24:84:4d:00:92:07:d1: d3:b2:ba:2b:e0:e8:e7:e3:13:c7:6d:07:93:9c:f8: e3:53:7c:40:04:5f:df:d4:13:9f:d4:f5:94:3f:d5: 24:6b:48:9c:88:37:5a:14:db:39:72:fb:85:e7:62: fe:c8:0e:39:8d:5f:18:c4:6e:a0:aa:4d:81:73:c3: 65:7b:db:d7:5c:e7:11:2d:04:cf:15:9b:2a:19:a6: 62:44:0b:3e:6a:01:34:88:76:5c:6a:75:b3:99:88: ed:ad:a1:25:5e:54:51:84:df:f8:67:e3:64:ef:52: d1:07:a7:ee:96:bf:3d:d8:97:4d:3a:39:25:41:ca: 2f:81:27:8b:17:e3:86:00:df:eb:34:99:49:98:a3: 57:13:8c:d2:36:e0:9a:d3:5d:a1:b1:b9:e9:e0:68: 24:20:7c:7f:05:6d:9a:8d:99:4f:ed:35:85:b4:4e: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:40:E1:FF:18:47:17:15:4D:8F:89:69:E3:1F:67:D4:87:D3:86:58 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136332e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.163.0/24 Signature Algorithm: sha256WithRSAEncryption 26:1f:6a:e2:a3:1b:3b:89:b6:93:8b:1f:7a:da:74:f1:62:13: f0:e6:a0:98:47:e3:6b:cb:ad:4c:57:2d:e3:ad:21:b7:73:04: 97:69:dc:ed:f5:b7:76:48:b4:2c:b9:cb:7f:ce:60:2c:aa:7b: 85:da:6d:e1:96:bb:6e:01:d0:7a:a9:3e:0a:29:3f:9b:9c:8a: bd:f8:81:d7:90:63:2c:ee:89:05:79:d6:cb:3a:5d:46:20:23: ed:26:2c:f8:c4:12:37:3c:2a:94:71:b7:41:0a:0a:1c:ff:fd: f7:0b:d4:4e:e9:c3:1d:01:6a:bb:1b:30:c3:a5:df:64:5c:de: f0:95:61:be:93:ab:8c:c0:5a:f1:0c:d3:7c:25:05:05:ab:e2: 56:19:cb:88:9e:38:c6:ae:30:ee:e8:a1:4a:25:33:2c:17:48: 25:5f:21:1f:1f:c9:95:ab:4f:00:49:17:5c:f5:8f:f3:a0:97: c5:89:95:0b:e9:9f:55:d1:b3:99:91:3b:e1:65:03:e9:be:74: 79:f1:01:81:ba:3f:82:29:b9:eb:98:57:b4:10:eb:a4:68:54: 1b:98:b0:57:04:19:1e:e1:10:e8:e3:d0:1d:24:cd:9e:d8:74: 13:f6:90:e3:11:4c:5f:fc:4e:d1:a8:64:0f:4e:09:da:5e:cb: 1f:c6:c4:e6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUC5IgH7ZakLG35C7OmjPHj2qFhB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNzU1MDRaFw0yNDEwMjcwODAwMDRaMDMxMTAvBgNV BAMTKEU3NDBFMUZGMTg0NzE3MTU0RDhGODk2OUUzMUY2N0Q0ODdEMzg2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsX6NNFNOXcTJ5yM8NTUOoOhJ4 PZPIHK1P60OTQRCyuxbJzA3akBfTGIVSHVxNW9UmWbEqnDWdqjKuBxFksSS9bikl e4Yk+5Rlul2Ub04xlBZXJIRNAJIH0dOyuivg6OfjE8dtB5Oc+ONTfEAEX9/UE5/U 9ZQ/1SRrSJyIN1oU2zly+4XnYv7IDjmNXxjEbqCqTYFzw2V729dc5xEtBM8VmyoZ pmJECz5qATSIdlxqdbOZiO2toSVeVFGE3/hn42TvUtEHp+6Wvz3Yl006OSVByi+B J4sX44YA3+s0mUmYo1cTjNI24JrTXaGxuengaCQgfH8FbZqNmU/tNYW0Tnf5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU50Dh/xhHFxVNj4lp4x9n1IfThlgwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7ozANBgkqhkiG 9w0BAQsFAAOCAQEAJh9q4qMbO4m2k4sfetp08WIT8OagmEfja8utTFct460ht3ME l2nc7fW3dki0LLnLf85gLKp7hdpt4Za7bgHQeqk+Cik/m5yKvfiB15BjLO6JBXnW yzpdRiAj7SYs+MQSNzwqlHG3QQoKHP/99wvUTunDHQFquxsww6XfZFze8JVhvpOr jMBa8QzTfCUFBaviVhnLiJ44xq4w7uihSiUzLBdIJV8hHx/JlatPAEkXXPWP86CX xYmVC+mfVdGzmZE74WUD6b50efEBgbo/gim565hXtBDrpGhUG5iwVwQZHuEQ6OPQ HSTNnth0E/aQ4xFMX/xO0ahkD04J2l7LH8bE5g== -----END CERTIFICATE-----Generated at Wed May 1 18:10:56 2024 by rpki-client on console-ams.rpki-client.org