$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133392e302f32342d3234203d3e203538343034.roa File: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (raw, json) Hash identifier: gob+xEPM7WKJN0PLWYhFd0rggbO0AzhOmiiOC3MP3is= Subject key identifier: 7A:5D:27:92:54:BE:E8:2A:66:9A:72:3B:78:EE:C0:E6:A7:FC:C1:F6 Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 3723D58E442AA1A9660EF0767077E3BF1FB99527 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133392e302f32342d3234203d3e203538343034.roa Signing time: Sun 26 Nov 2023 14:00:01 +0000 ROA not before: Sun 26 Nov 2023 13:55:01 +0000 ROA not after: Sun 24 Nov 2024 14:00:01 +0000 asID: 58404 IP address blocks: 43.252.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 14:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:23:d5:8e:44:2a:a1:a9:66:0e:f0:76:70:77:e3:bf:1f:b9:95:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Nov 26 13:55:01 2023 GMT Not After : Nov 24 14:00:01 2024 GMT Subject: CN=7A5D279254BEE82A669A723B78EEC0E6A7FCC1F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:8e:8b:c6:86:87:e0:b1:9c:86:5b:c8:d1: 62:a8:79:63:f5:7e:6a:9d:49:97:fb:db:14:55:d7: 43:68:0b:cc:29:81:ed:8a:af:63:71:1e:3b:58:5e: ed:7a:c5:d3:65:65:30:22:58:57:78:85:4d:35:6a: 1f:a3:ed:ea:08:96:02:48:c8:70:d0:8c:95:ca:6b: 98:55:26:32:09:13:ef:97:38:34:19:ab:ff:2a:bf: d0:89:13:a2:6e:e0:c1:11:21:9a:fd:ee:50:61:8f: 35:e8:6b:4d:2e:24:27:8a:11:1b:7f:8c:13:52:cb: c8:0d:f1:fe:86:46:6f:0a:a7:69:4a:3d:7b:34:0a: 39:f3:0f:2f:f6:32:4a:1c:74:ba:5e:64:bb:8e:4a: 84:69:3d:0a:f6:eb:93:5b:cf:cb:e6:d4:b8:95:ca: ea:4e:c1:d3:d2:e3:01:1c:4d:47:1c:d9:f0:da:d1: cc:a6:d4:fa:04:6e:7c:2c:fd:d5:21:c6:70:04:c2: 6c:f4:0d:d3:26:40:25:c9:4b:5f:97:f0:0d:51:f0: 5d:96:81:4b:62:3c:64:2c:3f:1a:f7:c5:8f:2d:c2: 67:cc:2f:51:07:1f:d4:73:30:80:5d:02:6b:77:9a: 5f:5f:f6:f3:da:f4:58:95:3a:8f:dd:02:1e:7e:63: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5D:27:92:54:BE:E8:2A:66:9A:72:3B:78:EE:C0:E6:A7:FC:C1:F6 X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133392e302f32342d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.139.0/24 Signature Algorithm: sha256WithRSAEncryption 93:da:8e:8b:9a:0e:c8:75:c9:82:63:ed:42:1a:38:ba:71:52: 87:63:76:1e:5c:e0:0d:4c:b1:68:f0:b4:fa:5c:e8:fd:0f:84: 7a:a0:67:bc:3e:72:c0:4b:ca:80:2e:48:e2:88:61:5d:1b:c4: fa:cd:72:54:1f:54:7a:cc:6a:bb:95:92:0e:0c:4c:95:cc:c3: ee:58:c8:e4:fa:0c:e2:da:b4:0c:47:1d:36:03:7a:ac:eb:28: a3:a3:40:9c:f4:e9:3e:1e:18:ac:76:c6:4f:34:cf:18:90:bf: 15:85:bf:92:73:54:70:59:ed:f6:c7:c3:8f:8b:d6:88:e3:36: b0:2f:b3:25:73:70:07:0b:8d:b4:67:f9:a9:b2:d1:74:f3:14: 9d:91:4d:0d:c9:bc:a5:8f:9d:a5:b2:63:7d:4b:ce:28:0d:7f: 64:92:55:07:82:a5:e4:75:25:4c:c4:69:67:17:79:f2:8f:f9: 98:26:ee:1b:3c:8f:c3:1b:8c:f3:ce:d4:52:5b:0c:5a:af:42: b9:4a:b8:fc:df:ca:f2:d4:35:9a:1b:9a:18:4d:0b:1f:a1:bd: be:2d:84:f0:77:25:ee:23:78:08:6b:c2:e8:be:5c:72:48:d8: d5:da:a6:57:28:c7:0d:db:30:17:ea:2b:21:4f:8f:54:47:f6: 95:e9:73:f6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNyPVjkQqoalmDvB2cHfjvx+5lScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yMzExMjYxMzU1MDFaFw0yNDExMjQxNDAwMDFaMDMxMTAvBgNV BAMTKDdBNUQyNzkyNTRCRUU4MkE2NjlBNzIzQjc4RUVDMEU2QTdGQ0MxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW9Y6LxoaH4LGchlvI0WKoeWP1 fmqdSZf72xRV10NoC8wpge2Kr2NxHjtYXu16xdNlZTAiWFd4hU01ah+j7eoIlgJI yHDQjJXKa5hVJjIJE++XODQZq/8qv9CJE6Ju4MERIZr97lBhjzXoa00uJCeKERt/ jBNSy8gN8f6GRm8Kp2lKPXs0CjnzDy/2MkocdLpeZLuOSoRpPQr265Nbz8vm1LiV yupOwdPS4wEcTUcc2fDa0cym1PoEbnws/dUhxnAEwmz0DdMmQCXJS1+X8A1R8F2W gUtiPGQsPxr3xY8twmfML1EHH9RzMIBdAmt3ml9f9vPa9FiVOo/dAh5+YybtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUel0nklS+6CpmmnI7eO7A5qf8wfYwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMGY5MTYzLTNlNWEtNGVmYS04 YmQ5LTRhYzRiYzYzMDQxNC8wLzM0MzMyZTMyMzUzMjJlMzEzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8izANBgkqhkiG 9w0BAQsFAAOCAQEAk9qOi5oOyHXJgmPtQho4unFSh2N2HlzgDUyxaPC0+lzo/Q+E eqBnvD5ywEvKgC5I4ohhXRvE+s1yVB9Uesxqu5WSDgxMlczD7ljI5PoM4tq0DEcd NgN6rOsoo6NAnPTpPh4YrHbGTzTPGJC/FYW/knNUcFnt9sfDj4vWiOM2sC+zJXNw BwuNtGf5qbLRdPMUnZFNDcm8pY+dpbJjfUvOKA1/ZJJVB4Kl5HUlTMRpZxd58o/5 mCbuGzyPwxuM887UUlsMWq9CuUq4/N/K8tQ1mhuaGE0LH6G9vi2E8Hcl7iN4CGvC 6L5cckjY1dqmVyjHDdswF+orIU+PVEf2lelz9g== -----END CERTIFICATE-----Generated at Thu Apr 18 05:45:39 2024 by rpki-client on console-ams.rpki-client.org