$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3230332e3136302e35362e302f32312d3234203d3e203234353237.roa File: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (raw, json) Hash identifier: exbNjM5qviES/eWn/DifRl5PkWLQOOG3fUgKHForS+s= Subject key identifier: 59:25:FD:4B:D4:33:F5:07:C2:C4:B8:B4:B5:37:69:A1:E4:30:46:C2 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 79032C9CCC094566C8237FE24056A81E5D3B3AD8 Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3230332e3136302e35362e302f32312d3234203d3e203234353237.roa Signing time: Mon 31 Jul 2023 00:01:16 +0000 ROA not before: Sun 30 Jul 2023 23:56:16 +0000 ROA not after: Mon 29 Jul 2024 00:01:16 +0000 asID: 24527 IP address blocks: 203.160.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 01:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:03:2c:9c:cc:09:45:66:c8:23:7f:e2:40:56:a8:1e:5d:3b:3a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Jul 30 23:56:16 2023 GMT Not After : Jul 29 00:01:16 2024 GMT Subject: CN=5925FD4BD433F507C2C4B8B4B53769A1E43046C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:50:2b:bd:2f:9c:e6:69:b0:d5:11:13:37: 06:31:d8:58:3f:ab:55:c2:3a:dd:58:e2:7b:bf:3c: 74:3a:04:35:74:0b:e0:57:65:93:c2:e4:3f:59:f2: dd:f5:4f:33:b4:c9:a5:ad:60:d4:bd:eb:ad:4b:1c: 3b:62:cb:7d:da:ec:85:b6:f6:b8:f5:2f:96:df:9d: 1c:c0:93:b6:f9:45:d2:b7:c6:14:f1:44:05:3d:02: d3:5f:98:b4:8c:83:ee:d4:5d:a7:73:76:9d:1b:26: d8:fe:e6:4b:1b:57:54:3e:78:bd:45:00:67:b3:cf: cd:4e:f2:f0:d8:3f:c7:6c:69:a7:bd:64:2b:ba:82: 37:e2:21:44:29:df:b5:af:f8:85:90:b9:60:ed:73: c0:3e:c9:ee:83:f8:3e:03:d5:d4:99:91:61:57:5a: 25:91:bb:cf:da:c5:eb:86:77:c2:d9:5f:b3:84:b9: dc:50:8e:bb:d2:85:cc:1b:b2:59:67:3d:42:2b:13: fa:c5:ea:4e:53:b9:04:0a:50:c1:43:10:2e:91:92: dc:11:ea:01:49:0a:70:77:a0:fb:6f:98:8d:35:84: 00:9e:42:c9:0e:2c:1d:ef:b1:cd:f1:3f:74:c6:d5: ec:43:98:eb:b0:f5:3c:46:50:50:9c:86:05:77:17: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:25:FD:4B:D4:33:F5:07:C2:C4:B8:B4:B5:37:69:A1:E4:30:46:C2 X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3230332e3136302e35362e302f32312d3234203d3e203234353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.160.56.0/21 Signature Algorithm: sha256WithRSAEncryption 82:3f:59:9e:5e:3c:a3:d2:69:5a:76:dd:ac:61:26:7f:96:6f: d7:c1:22:4d:aa:41:ff:00:b8:73:09:1f:fc:e4:05:cd:3c:bd: ff:de:18:27:11:ad:95:e9:a1:db:df:24:44:b6:7d:17:2b:e5: 8e:d3:a5:d9:2e:7c:00:ea:fb:82:a2:96:98:8d:47:0d:be:74: 4d:db:6b:cc:69:a7:21:bc:ee:e4:b5:5b:b1:56:90:73:09:18: 01:82:98:9b:9b:56:51:dd:7f:03:c2:ed:b5:2a:bb:5f:46:bf: ab:b5:85:98:b4:1a:4a:57:08:c2:50:6f:86:ba:58:24:86:1c: d4:54:81:4d:e1:82:97:20:a5:63:cf:25:11:05:a2:3d:f7:9d: 05:db:4c:cd:66:6f:96:4a:56:e5:ba:58:4d:56:0e:4b:bb:ca: 03:df:97:91:13:ce:52:97:85:50:a4:40:d5:35:0d:27:9e:8b: 15:27:8f:48:e0:66:3e:71:83:7e:79:79:51:17:ba:2c:4a:c9: fc:4f:65:50:dd:52:bf:74:cc:96:23:d8:9b:fb:6d:13:95:b2: 87:fe:04:bf:a3:35:96:84:8d:9f:d6:f1:5d:75:1c:04:ad:86: a1:fd:d5:9a:77:09:b0:3f:75:39:f8:d9:1a:08:85:29:68:03: 89:03:61:a2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeQMsnMwJRWbII3/iQFaoHl07OtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yMzA3MzAyMzU2MTZaFw0yNDA3MjkwMDAxMTZaMDMxMTAvBgNV BAMTKDU5MjVGRDRCRDQzM0Y1MDdDMkM0QjhCNEI1Mzc2OUExRTQzMDQ2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4FArvS+c5mmw1RETNwYx2Fg/ q1XCOt1Y4nu/PHQ6BDV0C+BXZZPC5D9Z8t31TzO0yaWtYNS9661LHDtiy33a7IW2 9rj1L5bfnRzAk7b5RdK3xhTxRAU9AtNfmLSMg+7UXadzdp0bJtj+5ksbV1Q+eL1F AGezz81O8vDYP8dsaae9ZCu6gjfiIUQp37Wv+IWQuWDtc8A+ye6D+D4D1dSZkWFX WiWRu8/axeuGd8LZX7OEudxQjrvShcwbsllnPUIrE/rF6k5TuQQKUMFDEC6RktwR 6gFJCnB3oPtvmI01hACeQskOLB3vsc3xP3TG1exDmOuw9TxGUFCchgV3F+alAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWSX9S9Qz9QfCxLi0tTdpoeQwRsIwHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2Yjg3ZmViLTBmZTItNDE4YS1h MzdhLWJlM2RkMWYwZTYzYy8wLzMyMzAzMzJlMzEzNjMwMmUzNTM2MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8ugODANBgkqhkiG 9w0BAQsFAAOCAQEAgj9Znl48o9JpWnbdrGEmf5Zv18EiTapB/wC4cwkf/OQFzTy9 /94YJxGtlemh298kRLZ9FyvljtOl2S58AOr7gqKWmI1HDb50TdtrzGmnIbzu5LVb sVaQcwkYAYKYm5tWUd1/A8LttSq7X0a/q7WFmLQaSlcIwlBvhrpYJIYc1FSBTeGC lyClY88lEQWiPfedBdtMzWZvlkpW5bpYTVYOS7vKA9+XkRPOUpeFUKRA1TUNJ56L FSePSOBmPnGDfnl5URe6LErJ/E9lUN1Sv3TMliPYm/ttE5Wyh/4Ev6M1loSNn9bx XXUcBK2Gof3VmncJsD91OfjZGgiFKWgDiQNhog== -----END CERTIFICATE-----Generated at Wed Apr 17 20:11:26 2024 by rpki-client on console-fra.rpki-client.org