$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa File: 3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa (raw, json) Hash identifier: CU0E6ODLOVr7R0e/WE9Jmu1sx/4RgJSVG+qslNVFaLw= Subject key identifier: 11:F5:8E:58:B1:90:57:8E:46:F7:85:03:52:F9:B3:27:B3:6B:67:DA Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 19B06B51E1278663B77A2C6F57ED7445207805C5 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa Signing time: Thu 25 Jan 2024 09:00:02 +0000 ROA not before: Thu 25 Jan 2024 08:55:02 +0000 ROA not after: Thu 23 Jan 2025 09:00:02 +0000 asID: 133840 IP address blocks: 203.161.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 19:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b0:6b:51:e1:27:86:63:b7:7a:2c:6f:57:ed:74:45:20:78:05:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Jan 25 08:55:02 2024 GMT Not After : Jan 23 09:00:02 2025 GMT Subject: CN=11F58E58B190578E46F7850352F9B327B36B67DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:9e:00:d6:e1:39:5f:36:56:61:6a:d0:54: 63:55:28:a4:ca:60:b2:48:32:6f:9e:1d:75:cf:39: 1a:d4:96:38:80:a0:d8:19:4f:4a:df:45:92:62:fa: 5f:26:a2:30:50:b3:74:6a:14:c3:9e:8f:73:99:43: 9d:bd:fa:fe:cc:22:8f:a6:e5:11:99:ff:e1:57:45: 26:b5:32:1d:d5:55:76:4e:8f:e8:b5:7d:cb:5c:01: c9:40:16:c6:da:0a:e1:89:ae:2b:6f:b7:53:92:59: 0c:cc:ac:e4:4d:59:16:68:1e:6e:81:f9:5a:42:69: 68:c9:e9:51:b7:bf:9b:a4:9d:c2:4b:71:60:4a:b4: 6e:11:eb:62:f2:cc:ba:b6:06:b0:98:c1:c3:da:47: 1a:11:46:1f:32:02:29:db:ae:fd:59:34:a6:87:f3: 78:4b:25:94:64:79:d9:3f:d5:cc:65:98:31:4d:04: 0c:ec:37:5a:74:97:fe:9f:3a:4e:94:63:3a:73:43: c5:3b:bb:61:bf:c1:7d:f0:57:7b:17:88:80:f5:9b: 32:b5:ab:8e:7f:1b:f8:af:72:8f:ab:c1:87:72:ba: eb:68:93:7a:8d:86:44:37:f9:4e:53:40:82:eb:75: 4d:9a:27:75:2c:f9:d0:70:cf:84:6b:6d:84:42:61: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:8E:58:B1:90:57:8E:46:F7:85:03:52:F9:B3:27:B3:6B:67:DA X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.18.0/24 Signature Algorithm: sha256WithRSAEncryption 15:74:8f:af:84:ea:1a:a9:b6:4b:aa:60:a1:0f:91:83:80:e4: 0c:69:71:30:e0:26:10:df:45:f2:5f:f0:80:31:b5:07:d4:f3: 1c:58:93:18:fe:84:c7:8a:ca:67:a2:bd:65:f6:7b:a7:ab:bb: 02:c2:dd:96:82:ca:38:f1:dd:04:fa:b7:0d:18:bc:d5:f9:b0: cf:87:05:82:77:05:cf:7c:6b:22:ac:d5:38:fa:2e:2e:43:fa: 9b:36:44:ed:9b:ac:72:f8:e6:2d:e1:e2:5f:61:f5:73:ac:0d: bd:a1:06:d8:0d:0c:1d:31:2c:18:c6:08:d1:c9:19:a4:af:1d: 14:59:67:0c:b1:ad:94:22:40:b7:8d:ed:69:56:74:7c:bd:5d: ae:0a:76:83:ce:8f:8a:90:98:70:02:d1:35:a8:ee:a1:f3:e5: 7c:7f:e5:c9:a8:04:1d:ec:90:18:e1:dd:c7:76:c8:c7:94:5a: 35:45:b1:d7:34:88:68:68:f8:63:dc:3d:ac:f3:be:be:69:92: 9b:c4:aa:32:9a:7b:42:0c:cf:97:32:36:a9:46:73:69:d5:1d: 0b:3a:b4:fd:4e:09:8b:3d:e9:e0:2c:8d:e5:47:74:16:3e:c3: dc:de:56:93:bc:89:51:88:07:2c:18:d7:23:d7:56:35:28:4c: 0b:22:c5:ca -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGbBrUeEnhmO3eixvV+10RSB4BcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNDAxMjUwODU1MDJaFw0yNTAxMjMwOTAwMDJaMDMxMTAvBgNV BAMTKDExRjU4RTU4QjE5MDU3OEU0NkY3ODUwMzUyRjlCMzI3QjM2QjY3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtJ4A1uE5XzZWYWrQVGNVKKTK YLJIMm+eHXXPORrUljiAoNgZT0rfRZJi+l8mojBQs3RqFMOej3OZQ529+v7MIo+m 5RGZ/+FXRSa1Mh3VVXZOj+i1fctcAclAFsbaCuGJritvt1OSWQzMrORNWRZoHm6B +VpCaWjJ6VG3v5ukncJLcWBKtG4R62LyzLq2BrCYwcPaRxoRRh8yAinbrv1ZNKaH 83hLJZRkedk/1cxlmDFNBAzsN1p0l/6fOk6UYzpzQ8U7u2G/wX3wV3sXiID1mzK1 q45/G/ivco+rwYdyuutok3qNhkQ3+U5TQILrdU2aJ3Us+dBwz4RrbYRCYfoRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEfWOWLGQV45G94UDUvmzJ7NrZ9owHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzAzMzJlMzEzNjMxMmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy6ESMA0GCSqG SIb3DQEBCwUAA4IBAQAVdI+vhOoaqbZLqmChD5GDgOQMaXEw4CYQ30XyX/CAMbUH 1PMcWJMY/oTHispnor1l9nunq7sCwt2Wgso48d0E+rcNGLzV+bDPhwWCdwXPfGsi rNU4+i4uQ/qbNkTtm6xy+OYt4eJfYfVzrA29oQbYDQwdMSwYxgjRyRmkrx0UWWcM sa2UIkC3je1pVnR8vV2uCnaDzo+KkJhwAtE1qO6h8+V8f+XJqAQd7JAY4d3HdsjH lFo1RbHXNIhoaPhj3D2s876+aZKbxKoymntCDM+XMjapRnNp1R0LOrT9TgmLPeng LI3lR3QWPsPc3laTvIlRiAcsGNcj11Y1KEwLIsXK -----END CERTIFICATE-----Generated at Sun May 12 05:44:04 2024 by rpki-client on console-ams.rpki-client.org