$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3137302e302f32342d3234203d3e203137373237.roa File: 3230322e35392e3137302e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: Bcasuyik9+0F0iUkgsTjzGSsEcAXxHKRQVdB3DCktEU= Subject key identifier: 1A:66:04:21:17:A6:F5:B8:08:A8:DE:DA:95:10:0D:B4:10:72:9F:FF Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 77AD9602ECEDD549BF0B626AC3C24111D336F978 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3137302e302f32342d3234203d3e203137373237.roa Signing time: Sun 29 Oct 2023 08:00:02 +0000 ROA not before: Sun 29 Oct 2023 07:55:02 +0000 ROA not after: Sun 27 Oct 2024 08:00:02 +0000 asID: 17727 IP address blocks: 202.59.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ad:96:02:ec:ed:d5:49:bf:0b:62:6a:c3:c2:41:11:d3:36:f9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 07:55:02 2023 GMT Not After : Oct 27 08:00:02 2024 GMT Subject: CN=1A66042117A6F5B808A8DEDA95100DB410729FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0d:84:39:e5:fc:b2:99:02:cb:7d:dd:53:42: 8c:65:d6:4e:27:c1:a8:c8:54:3d:8d:df:9b:1b:c7: ee:e6:4c:9f:7d:01:29:96:88:8f:17:3e:9b:c9:a4: 26:6d:93:64:86:15:d1:2c:ae:5f:06:f1:49:b6:3e: 21:23:45:94:4c:37:0f:c6:d3:66:8d:03:b3:50:b2: 0a:50:58:bd:2d:c6:66:38:07:78:ac:0c:ce:35:72: 2a:9b:83:ab:be:e2:f6:77:0f:3a:0c:38:cf:2e:c7: 89:86:e4:2b:06:d3:63:02:31:4c:8b:26:17:98:ba: 59:2a:b2:13:ab:9c:c3:f7:a8:89:0f:77:05:90:79: 97:1d:f7:3c:95:30:15:a5:68:3d:fa:9f:72:d8:ec: 46:a0:63:e3:fb:3c:bd:d8:b8:f0:5b:54:a0:3d:47: 1e:db:b3:c7:4f:ce:70:9e:5f:f7:27:78:9b:b1:cd: 73:8d:98:d9:35:46:f8:6d:a1:6a:13:63:2d:1e:51: 56:d6:5b:ab:d0:3b:9a:76:bd:af:eb:77:38:a8:84: 45:89:06:84:05:94:c0:b9:e3:d6:fa:1e:92:14:78: 70:1b:fc:0e:08:0e:2c:40:c5:43:a3:01:a9:9a:b9: 47:dc:bb:0c:b3:0d:36:27:26:f1:3a:50:3f:5a:a5: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:66:04:21:17:A6:F5:B8:08:A8:DE:DA:95:10:0D:B4:10:72:9F:FF X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3137302e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.170.0/24 Signature Algorithm: sha256WithRSAEncryption be:71:69:1d:d7:7f:49:c5:e5:8d:c6:52:ee:b6:98:f0:c4:50: 92:59:fa:3e:7d:48:c1:2c:89:4e:6b:2d:43:ee:a2:21:ba:bf: e7:d3:59:ab:e3:1a:cb:57:06:1d:06:e7:c8:7e:2b:1f:8a:ac: 52:62:af:b4:af:b8:d6:2e:f1:50:7d:9c:c5:09:10:29:26:00: 12:1a:a0:15:92:01:f7:b9:28:03:be:46:2d:e2:01:8d:e5:88: 2a:00:2c:14:fe:96:4d:cb:78:9f:82:77:e3:09:a5:52:e9:ce: 98:75:f2:b1:a2:18:fe:a4:0d:56:d4:cc:8b:f0:95:7c:12:ee: 4c:e4:84:26:30:4d:2f:12:6c:08:47:20:43:6e:74:9b:13:74: d7:cc:49:59:07:20:1e:bb:6d:fe:c1:e4:08:e6:16:36:9e:f4: 48:e0:1f:f4:ab:77:25:a3:fb:9d:10:25:cd:b2:14:30:d1:27: ad:7c:f1:d1:5e:19:8d:11:a2:dc:10:11:11:6b:fc:e7:5a:3f: 20:09:dc:7c:88:8f:8e:4a:37:19:ba:8a:bd:22:88:1f:58:fe: c0:49:7a:b2:d7:fb:fb:be:60:f9:8d:45:f1:26:1c:e4:e6:48: cb:db:e0:7e:57:17:f8:ea:ce:eb:04:2a:d2:17:08:56:26:b7: 67:b0:58:a7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUd62WAuzt1Um/C2Jqw8JBEdM2+XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNzU1MDJaFw0yNDEwMjcwODAwMDJaMDMxMTAvBgNV BAMTKDFBNjYwNDIxMTdBNkY1QjgwOEE4REVEQTk1MTAwREI0MTA3MjlGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjDYQ55fyymQLLfd1TQoxl1k4n wajIVD2N35sbx+7mTJ99ASmWiI8XPpvJpCZtk2SGFdEsrl8G8Um2PiEjRZRMNw/G 02aNA7NQsgpQWL0txmY4B3isDM41ciqbg6u+4vZ3DzoMOM8ux4mG5CsG02MCMUyL JheYulkqshOrnMP3qIkPdwWQeZcd9zyVMBWlaD36n3LY7EagY+P7PL3YuPBbVKA9 Rx7bs8dPznCeX/cneJuxzXONmNk1RvhtoWoTYy0eUVbWW6vQO5p2va/rdziohEWJ BoQFlMC549b6HpIUeHAb/A4IDixAxUOjAamauUfcuwyzDTYnJvE6UD9apannAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUGmYEIRem9bgIqN7alRANtBByn/8wHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7qjANBgkqhkiG 9w0BAQsFAAOCAQEAvnFpHdd/ScXljcZS7raY8MRQkln6Pn1IwSyJTmstQ+6iIbq/ 59NZq+May1cGHQbnyH4rH4qsUmKvtK+41i7xUH2cxQkQKSYAEhqgFZIB97koA75G LeIBjeWIKgAsFP6WTct4n4J34wmlUunOmHXysaIY/qQNVtTMi/CVfBLuTOSEJjBN LxJsCEcgQ250mxN018xJWQcgHrtt/sHkCOYWNp70SOAf9Kt3JaP7nRAlzbIUMNEn rXzx0V4ZjRGi3BAREWv851o/IAncfIiPjko3GbqKvSKIH1j+wEl6stf7+75g+Y1F 8SYc5OZIy9vgflcX+OrO6wQq0hcIVia3Z7BYpw== -----END CERTIFICATE-----Generated at Wed May 1 18:10:56 2024 by rpki-client on console-ams.rpki-client.org