$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136382e302f32342d3234203d3e203137373237.roa File: 3230322e35392e3136382e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: pkvlLEHMjXG5Jn49AzwgkdpVvy5gGcr0vw4db0XSw34= Subject key identifier: 19:E2:1D:9E:F0:A3:95:A9:AE:E3:05:6A:C6:D0:5A:98:FC:DD:49:FF Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 6DEEEF0DADAE95FDFF534B5287DB8854695DD952 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136382e302f32342d3234203d3e203137373237.roa Signing time: Sun 29 Oct 2023 08:00:00 +0000 ROA not before: Sun 29 Oct 2023 07:55:00 +0000 ROA not after: Sun 27 Oct 2024 08:00:00 +0000 asID: 17727 IP address blocks: 202.59.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ee:ef:0d:ad:ae:95:fd:ff:53:4b:52:87:db:88:54:69:5d:d9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 07:55:00 2023 GMT Not After : Oct 27 08:00:00 2024 GMT Subject: CN=19E21D9EF0A395A9AEE3056AC6D05A98FCDD49FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e1:0c:4b:23:65:7e:0f:10:fa:de:03:ff:a1: a8:ea:8c:90:46:b1:e4:9f:b3:ce:49:8a:6b:e0:c3: ef:6e:26:90:df:66:dc:a7:f1:25:69:97:c9:fa:1e: b1:06:c5:65:26:c5:ab:8d:84:fb:b4:a0:4e:16:e3: 79:e6:8c:df:05:e4:cd:be:92:48:db:c4:eb:64:6f: ba:ba:4b:dd:51:91:61:e0:7d:08:c1:f1:73:41:38: 4f:d5:fa:4a:7a:16:de:ac:5e:50:9d:df:84:75:d9: 96:50:e9:7c:af:5d:11:39:fb:95:86:21:e5:48:f6: bb:3a:be:35:38:05:c2:fa:e7:3e:08:61:44:8e:9e: 8f:f6:80:4b:b2:4f:a8:33:07:54:39:3a:2f:18:89: ed:71:b0:26:60:a6:3e:b1:7c:af:f0:24:47:71:55: 2d:c3:91:1a:fa:cf:c7:c1:37:9a:81:ad:b2:bd:59: 9a:90:1b:d0:14:5a:cd:5c:95:49:db:4f:b1:77:1d: 59:0f:52:3d:e9:32:50:00:52:54:ce:78:af:f8:b4: 69:cc:7e:b3:1d:03:c3:d5:19:d1:8e:06:48:d0:ab: 10:9d:5d:3f:d9:0e:ab:ac:9f:4c:7c:9b:c9:43:46: da:eb:62:cf:21:d7:52:24:45:f8:57:2e:8e:e0:01: 37:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E2:1D:9E:F0:A3:95:A9:AE:E3:05:6A:C6:D0:5A:98:FC:DD:49:FF X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136382e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.168.0/24 Signature Algorithm: sha256WithRSAEncryption be:00:4d:50:2a:aa:48:66:bf:1d:7e:cc:df:eb:19:c4:8b:3f: 45:5d:01:40:ab:1e:9b:6f:b0:b9:ec:25:ed:fe:d8:2b:fa:d1: 6a:9b:07:02:7b:31:cc:39:69:3b:3c:cc:65:47:59:41:f7:4f: 4f:02:b8:56:2d:a6:13:2f:66:90:4a:3b:06:d6:e5:65:2d:52: a8:3b:1e:9d:ce:aa:c9:bd:e1:73:c1:cd:4d:44:82:ae:1c:2e: 27:58:12:6b:78:2e:c6:7d:f1:cc:bc:7d:95:f8:7e:34:90:a3: f8:04:d5:33:d3:d7:b8:ee:15:5a:67:e9:1c:b2:e4:69:23:2f: ac:ef:48:47:f5:6c:ab:87:a1:d4:28:81:a3:6f:d4:ce:48:1e: f1:a4:64:00:b1:6f:a9:bf:6e:ea:01:17:26:12:23:a9:8a:42: 2c:c1:2f:fa:be:78:50:7f:a8:7e:c9:83:d6:07:fe:af:34:e2: 5e:be:f4:0b:d4:03:c6:9b:08:08:fb:3e:5e:66:39:d7:ef:37: a3:73:18:72:dd:d9:85:07:ff:62:9f:c0:1d:dc:65:23:93:f5: 6e:a7:f8:fe:48:7a:6c:44:f1:42:35:61:c9:b3:e9:f2:94:4c: 85:7f:a7:5a:0f:48:01:e7:f6:7e:bd:c1:00:b9:07:85:3b:a5: fb:d3:b7:7d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbe7vDa2ulf3/U0tSh9uIVGld2VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNzU1MDBaFw0yNDEwMjcwODAwMDBaMDMxMTAvBgNV BAMTKDE5RTIxRDlFRjBBMzk1QTlBRUUzMDU2QUM2RDA1QTk4RkNERDQ5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq4QxLI2V+DxD63gP/oajqjJBG seSfs85Jimvgw+9uJpDfZtyn8SVpl8n6HrEGxWUmxauNhPu0oE4W43nmjN8F5M2+ kkjbxOtkb7q6S91RkWHgfQjB8XNBOE/V+kp6Ft6sXlCd34R12ZZQ6XyvXRE5+5WG IeVI9rs6vjU4BcL65z4IYUSOno/2gEuyT6gzB1Q5Oi8Yie1xsCZgpj6xfK/wJEdx VS3DkRr6z8fBN5qBrbK9WZqQG9AUWs1clUnbT7F3HVkPUj3pMlAAUlTOeK/4tGnM frMdA8PVGdGOBkjQqxCdXT/ZDqusn0x8m8lDRtrrYs8h11IkRfhXLo7gATejAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUGeIdnvCjlamu4wVqxtBamPzdSf8wHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7qDANBgkqhkiG 9w0BAQsFAAOCAQEAvgBNUCqqSGa/HX7M3+sZxIs/RV0BQKsem2+wuewl7f7YK/rR apsHAnsxzDlpOzzMZUdZQfdPTwK4Vi2mEy9mkEo7BtblZS1SqDsenc6qyb3hc8HN TUSCrhwuJ1gSa3guxn3xzLx9lfh+NJCj+ATVM9PXuO4VWmfpHLLkaSMvrO9IR/Vs q4eh1CiBo2/Uzkge8aRkALFvqb9u6gEXJhIjqYpCLMEv+r54UH+ofsmD1gf+rzTi Xr70C9QDxpsICPs+XmY51+83o3MYct3ZhQf/Yp/AHdxlI5P1bqf4/kh6bETxQjVh ybPp8pRMhX+nWg9IAef2fr3BALkHhTul+9O3fQ== -----END CERTIFICATE-----Generated at Wed May 1 19:11:08 2024 by rpki-client on console-fra.rpki-client.org