$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136392e302f32342d3234203d3e203137373237.roa File: 3230322e35392e3136392e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: Wv3cqtqerxA/CieAVDIYTg8QAzeowXW4Db2+FQpayXI= Subject key identifier: 9E:F9:0A:95:2B:B7:71:B3:E9:01:54:AE:05:34:1D:31:2A:C7:2F:B2 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 190EA002E68F572A894BDD42AE72B084743F9C78 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136392e302f32342d3234203d3e203137373237.roa Signing time: Sun 29 Oct 2023 08:00:03 +0000 ROA not before: Sun 29 Oct 2023 07:55:03 +0000 ROA not after: Sun 27 Oct 2024 08:00:03 +0000 asID: 17727 IP address blocks: 202.59.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0e:a0:02:e6:8f:57:2a:89:4b:dd:42:ae:72:b0:84:74:3f:9c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 07:55:03 2023 GMT Not After : Oct 27 08:00:03 2024 GMT Subject: CN=9EF90A952BB771B3E90154AE05341D312AC72FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:e6:f1:e3:12:a3:b6:ef:a9:19:9f:74:9b: f3:33:56:50:1b:e3:45:06:a1:8e:3c:50:5a:ca:ac: a0:d5:26:e6:e0:db:2f:8a:68:79:bc:f7:b2:18:90: ac:c1:fd:33:cb:3c:8f:e0:44:23:46:0f:af:ed:c4: 46:48:45:76:79:f4:4d:57:a9:1c:71:6c:53:11:32: d1:ea:3a:66:bf:ad:dc:4f:be:70:50:22:a0:82:4c: 2a:4e:88:a5:76:30:e8:e8:86:2e:ea:da:3b:86:31: d9:3d:45:5d:a3:f8:15:ad:e4:0c:bf:39:1b:c4:43: 1d:4a:bc:65:3e:00:c5:38:8f:13:93:3c:23:e7:e2: d2:5e:18:33:dd:2c:e1:c0:a2:ad:0e:80:48:7a:64: d2:f8:7a:49:15:c0:e6:aa:b8:00:43:e8:e6:81:73: 20:e4:cf:d6:ad:fc:e7:be:6b:e6:aa:f0:d9:6c:f0: 7a:c7:81:46:ee:53:e4:01:73:1e:be:f5:cd:11:68: 1c:a0:e6:28:7e:a3:e1:4d:47:c4:b6:81:ff:9f:03: fa:38:c3:6a:fe:5a:40:1a:8e:32:63:cb:93:82:8f: 29:42:e9:bb:d7:c2:1e:2d:e3:78:c7:88:0a:79:9d: b6:22:a1:9d:ca:36:60:aa:b4:58:46:23:10:35:84: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F9:0A:95:2B:B7:71:B3:E9:01:54:AE:05:34:1D:31:2A:C7:2F:B2 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136392e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.169.0/24 Signature Algorithm: sha256WithRSAEncryption c2:28:4d:11:4f:58:d0:14:ca:fe:db:9e:39:3c:53:cf:8e:a7: 90:81:2d:23:cb:db:c6:e6:b9:5b:3c:8c:5e:5d:8c:fd:37:31: 79:d7:6b:29:da:68:9d:5d:83:98:eb:17:21:2c:a2:0d:ee:b8: 6b:26:be:72:a6:5a:aa:1d:fa:29:63:37:95:1f:5f:a7:a7:a7: 5c:9d:f6:98:55:b8:38:db:3f:a9:e9:a6:20:de:44:7e:90:d9: e1:6e:37:3a:8f:31:91:f9:f9:98:ce:09:30:a1:80:1d:d6:aa: a7:29:b0:c4:d6:e4:05:56:2f:5d:07:74:85:8b:98:98:35:c1: 8e:76:ed:e6:64:b2:45:7f:88:62:8b:58:7f:a3:5b:2e:dd:e7: 1e:e5:82:b1:7f:61:df:c0:ef:76:a2:24:f8:d1:2f:d5:81:a2: 0e:e2:70:ec:95:76:e1:07:a6:f4:ec:7d:48:6a:93:e2:64:b3: dc:5e:af:da:67:9a:98:38:ed:6f:55:a6:64:2d:92:87:72:cf: 49:f8:17:0d:00:2f:65:1a:bd:b3:73:d7:d9:ab:28:68:a3:9d: 0c:10:6f:68:74:5c:40:42:e1:57:9f:d1:90:7a:ad:f9:8e:3e: 30:ba:c9:6e:67:3e:05:ea:e6:44:cd:e8:01:bd:3f:24:96:bf: c9:14:c3:58 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGQ6gAuaPVyqJS91CrnKwhHQ/nHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNzU1MDNaFw0yNDEwMjcwODAwMDNaMDMxMTAvBgNV BAMTKDlFRjkwQTk1MkJCNzcxQjNFOTAxNTRBRTA1MzQxRDMxMkFDNzJGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPebx4xKjtu+pGZ90m/MzVlAb 40UGoY48UFrKrKDVJubg2y+KaHm897IYkKzB/TPLPI/gRCNGD6/txEZIRXZ59E1X qRxxbFMRMtHqOma/rdxPvnBQIqCCTCpOiKV2MOjohi7q2juGMdk9RV2j+BWt5Ay/ ORvEQx1KvGU+AMU4jxOTPCPn4tJeGDPdLOHAoq0OgEh6ZNL4ekkVwOaquABD6OaB cyDkz9at/Oe+a+aq8Nls8HrHgUbuU+QBcx6+9c0RaByg5ih+o+FNR8S2gf+fA/o4 w2r+WkAajjJjy5OCjylC6bvXwh4t43jHiAp5nbYioZ3KNmCqtFhGIxA1hEZhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUnvkKlSu3cbPpAVSuBTQdMSrHL7IwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7qTANBgkqhkiG 9w0BAQsFAAOCAQEAwihNEU9Y0BTK/tueOTxTz46nkIEtI8vbxua5WzyMXl2M/Tcx eddrKdponV2DmOsXISyiDe64aya+cqZaqh36KWM3lR9fp6enXJ32mFW4ONs/qemm IN5EfpDZ4W43Oo8xkfn5mM4JMKGAHdaqpymwxNbkBVYvXQd0hYuYmDXBjnbt5mSy RX+IYotYf6NbLt3nHuWCsX9h38DvdqIk+NEv1YGiDuJw7JV24Qem9Ox9SGqT4mSz 3F6v2meamDjtb1WmZC2Sh3LPSfgXDQAvZRq9s3PX2asoaKOdDBBvaHRcQELhV5/R kHqt+Y4+MLrJbmc+BermRM3oAb0/JJa/yRTDWA== -----END CERTIFICATE-----Generated at Wed May 1 18:10:56 2024 by rpki-client on console-ams.rpki-client.org