$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136352e302f32342d3234203d3e203137373237.roa File: 3230322e35392e3136352e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: HVPcSt8WCkMa9w8cSbZiUsao+ZeR9vCLSAWxjRAnvEc= Subject key identifier: 18:60:E0:34:AC:2C:C5:DF:67:97:24:27:C4:53:DA:94:7E:D9:BA:9E Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 03F0791E164572ED670CDB2C2F1F892212A7B89E Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136352e302f32342d3234203d3e203137373237.roa Signing time: Sun 29 Oct 2023 08:00:01 +0000 ROA not before: Sun 29 Oct 2023 07:55:01 +0000 ROA not after: Sun 27 Oct 2024 08:00:01 +0000 asID: 17727 IP address blocks: 202.59.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f0:79:1e:16:45:72:ed:67:0c:db:2c:2f:1f:89:22:12:a7:b8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 07:55:01 2023 GMT Not After : Oct 27 08:00:01 2024 GMT Subject: CN=1860E034AC2CC5DF67972427C453DA947ED9BA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:ba:07:89:9c:7d:19:ca:89:69:e6:ff:5b: bc:2d:d5:dd:98:bf:4f:cd:cc:ae:a6:b0:04:4e:5a: e5:60:02:f4:de:41:66:e5:55:21:59:40:7b:2d:b2: 40:5a:b8:ab:c0:20:3f:29:c4:9a:45:06:cb:f0:0a: 87:c9:27:75:b4:03:a2:b9:6c:db:17:97:0b:06:f9: f5:52:e7:1b:a9:e8:ae:6a:f6:92:e8:25:1d:15:5d: f0:cb:64:f8:04:69:44:0d:c3:41:c4:4a:30:e7:96: a7:f6:a9:c1:11:a0:12:22:21:03:51:55:6f:06:53: 76:aa:7c:72:ef:18:e9:4d:8f:de:af:cc:05:c4:64: a0:17:5f:f1:af:d8:7b:12:cb:50:d7:38:b2:5a:79: 8e:29:7a:fe:66:11:41:9b:75:fc:62:6f:c1:5b:93: ed:01:ee:af:ed:2a:76:f8:a7:29:1c:cd:15:66:e1: 54:77:f9:c3:74:d1:51:09:c4:82:e9:7f:54:bd:cf: d5:5a:a2:a6:c4:51:eb:e1:27:ac:9b:f1:fb:54:03: 89:9d:f3:e3:c5:51:b4:f7:b5:2d:f9:5d:19:c6:35: 0d:c3:a2:4c:43:3c:e7:08:54:31:73:c4:c4:58:2c: 9d:5e:ec:0b:ec:dd:4d:b5:fe:5e:58:ce:e6:94:0b: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:60:E0:34:AC:2C:C5:DF:67:97:24:27:C4:53:DA:94:7E:D9:BA:9E X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136352e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.165.0/24 Signature Algorithm: sha256WithRSAEncryption 88:b8:19:aa:02:c4:f0:61:15:cb:da:f7:78:de:b7:48:8b:a9: 0e:17:35:c4:d6:16:53:1c:b7:bf:a8:9c:23:4a:5c:66:5d:24: 60:a3:30:d9:f6:33:ee:f8:8e:3a:05:81:5e:8f:7b:8e:34:78: b5:f7:2c:65:e7:27:65:b1:2f:80:04:18:34:7b:b8:79:af:80: b6:e2:ab:38:7d:3c:90:ff:28:1c:83:e4:20:01:d1:07:0c:4e: f6:4f:d6:c8:c9:af:bd:de:09:6b:fd:ca:14:ce:13:f2:08:de: 6e:a7:db:59:73:1d:fc:6b:65:45:33:7f:6c:a1:88:4c:e7:1e: 8b:f3:f7:71:33:8b:20:a1:76:a2:a1:d3:90:02:05:25:a1:34: 46:f3:bd:99:7e:53:54:0e:04:49:7a:e2:09:16:b9:1a:45:36: bc:45:2e:f4:9c:30:76:a0:bf:22:d9:93:d7:17:d3:55:68:5f: 49:3c:f8:23:d4:58:1f:c5:36:db:e5:8e:fe:28:e9:57:4f:4e: ed:f5:74:35:29:0c:2b:2d:4d:d9:87:a1:3f:4b:64:49:0c:65: e0:d8:cb:90:8d:74:7b:76:94:4a:4b:e6:2d:db:7c:a2:6c:57: 64:a9:d3:ff:e8:cf:38:4c:0c:d1:11:c6:42:8e:76:a9:72:dd: 66:53:02:55 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUA/B5HhZFcu1nDNssLx+JIhKnuJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNzU1MDFaFw0yNDEwMjcwODAwMDFaMDMxMTAvBgNV BAMTKDE4NjBFMDM0QUMyQ0M1REY2Nzk3MjQyN0M0NTNEQTk0N0VEOUJBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcboHiZx9GcqJaeb/W7wt1d2Y v0/NzK6msAROWuVgAvTeQWblVSFZQHstskBauKvAID8pxJpFBsvwCofJJ3W0A6K5 bNsXlwsG+fVS5xup6K5q9pLoJR0VXfDLZPgEaUQNw0HESjDnlqf2qcERoBIiIQNR VW8GU3aqfHLvGOlNj96vzAXEZKAXX/Gv2HsSy1DXOLJaeY4pev5mEUGbdfxib8Fb k+0B7q/tKnb4pykczRVm4VR3+cN00VEJxILpf1S9z9VaoqbEUevhJ6yb8ftUA4md 8+PFUbT3tS35XRnGNQ3DokxDPOcIVDFzxMRYLJ1e7Avs3U21/l5YzuaUC5iBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUGGDgNKwsxd9nlyQnxFPalH7Zup4wHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7pTANBgkqhkiG 9w0BAQsFAAOCAQEAiLgZqgLE8GEVy9r3eN63SIupDhc1xNYWUxy3v6icI0pcZl0k YKMw2fYz7viOOgWBXo97jjR4tfcsZecnZbEvgAQYNHu4ea+AtuKrOH08kP8oHIPk IAHRBwxO9k/WyMmvvd4Ja/3KFM4T8gjebqfbWXMd/GtlRTN/bKGITOcei/P3cTOL IKF2oqHTkAIFJaE0RvO9mX5TVA4ESXriCRa5GkU2vEUu9JwwdqC/ItmT1xfTVWhf STz4I9RYH8U22+WO/ijpV09O7fV0NSkMKy1N2YehP0tkSQxl4NjLkI10e3aUSkvm Ldt8omxXZKnT/+jPOEwM0RHGQo52qXLdZlMCVQ== -----END CERTIFICATE-----Generated at Wed May 1 18:10:56 2024 by rpki-client on console-ams.rpki-client.org