$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/34332e3234352e3138382e302f32322d3234203d3e203538333736.roa File: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (raw, json) Hash identifier: VMPZ5L66xVw8XFPJfATRvasXZxh8TUn2qALiFpXxjyw= Subject key identifier: B3:FE:CC:BA:B2:9F:3D:34:3C:E1:6F:5C:03:7F:B7:3B:41:EB:1B:3D Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 7CF2DBB3C13726061520079964CF6335CB131A1C Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/34332e3234352e3138382e302f32322d3234203d3e203538333736.roa Signing time: Mon 31 Jul 2023 00:07:27 +0000 ROA not before: Mon 31 Jul 2023 00:02:27 +0000 ROA not after: Mon 29 Jul 2024 00:07:27 +0000 asID: 58376 IP address blocks: 43.245.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 01:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f2:db:b3:c1:37:26:06:15:20:07:99:64:cf:63:35:cb:13:1a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Jul 31 00:02:27 2023 GMT Not After : Jul 29 00:07:27 2024 GMT Subject: CN=B3FECCBAB29F3D343CE16F5C037FB73B41EB1B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:f1:6c:b9:e2:d5:dc:be:b9:f0:44:be:4e: 93:f7:86:0e:a7:8a:c3:7f:b0:d4:6a:b2:e8:69:0a: b5:6c:d3:73:a7:df:56:3e:e3:fe:02:67:ea:d1:b0: 5d:20:fb:68:23:dd:77:22:19:55:07:fc:c0:a9:5a: c9:16:f3:f7:2c:eb:bd:31:15:a5:4f:20:d3:be:cb: f5:f8:d1:28:f3:40:06:ba:4d:a2:74:06:87:19:68: 1e:32:f9:c8:a8:9c:4d:8e:b7:c2:15:06:7c:da:e9: 70:54:2f:83:56:1b:a9:ca:5e:d5:bd:7e:24:d4:d4: 32:5e:ca:53:96:ee:47:f1:a7:81:5b:fb:8d:65:70: 0d:a7:d6:ff:2e:32:47:8f:33:ca:2d:90:55:cf:c2: fc:43:96:fe:ea:9e:9f:20:ac:4a:b5:c1:7d:04:3d: 21:45:c0:83:f6:a7:a0:39:de:49:e1:6b:ca:53:80: 6e:38:83:73:24:7c:e1:88:02:a7:26:ad:af:63:b0: 5b:0e:b2:ff:34:40:30:e9:0a:58:4f:c3:76:b2:80: 51:49:a4:69:41:30:3d:97:98:72:a0:73:1c:fb:f9: 12:a5:6a:70:43:20:74:ab:60:0e:b2:b8:5b:58:9e: 70:3e:b5:8e:c0:e0:ae:2e:b8:c0:de:b5:b8:2a:68: a6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FE:CC:BA:B2:9F:3D:34:3C:E1:6F:5C:03:7F:B7:3B:41:EB:1B:3D X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/34332e3234352e3138382e302f32322d3234203d3e203538333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.188.0/22 Signature Algorithm: sha256WithRSAEncryption 97:a0:b1:77:80:0d:17:ad:21:46:e3:16:6b:8c:63:4f:4b:7c: 99:82:73:95:53:c4:bf:0a:70:7e:91:a7:70:cf:54:52:b9:4c: 94:40:f6:c6:b4:5f:11:2a:61:2f:e9:59:a2:72:fc:63:ac:44: c1:28:8d:b8:60:33:a9:56:ac:a2:c8:46:e7:50:09:e4:70:1d: 2d:ad:ef:e3:09:92:fd:4e:26:b5:75:ca:ce:c6:1e:87:d7:6b: 51:61:96:f8:c1:b0:df:54:b9:b0:9a:4d:3c:25:46:06:ac:f3: 36:36:99:40:3c:31:9a:81:7e:6e:44:9f:ec:94:d8:b5:d7:82: c0:da:b4:3a:16:a4:9e:cc:e2:ea:a5:b2:50:2a:8d:60:3f:33: f5:1a:6f:d8:f0:11:c5:29:20:7a:da:ab:5a:6b:a1:6c:ad:e3: 85:36:de:58:84:fc:97:cb:a3:af:62:bc:d4:96:5f:19:5a:d2: 8c:66:a5:be:9c:e1:9a:93:64:33:3c:fb:44:3b:75:b2:67:2a: d8:df:97:8e:cf:82:d9:20:ff:b2:ee:48:ff:2b:13:78:8e:fe: c6:0f:57:c3:4d:e6:6e:60:1d:52:8a:1c:50:fb:7b:b5:85:0f: bc:52:4d:65:55:ca:47:e4:bd:43:29:cd:4b:60:02:69:25:a1: b5:bc:c2:be -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfPLbs8E3JgYVIAeZZM9jNcsTGhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yMzA3MzEwMDAyMjdaFw0yNDA3MjkwMDA3MjdaMDMxMTAvBgNV BAMTKEIzRkVDQ0JBQjI5RjNEMzQzQ0UxNkY1QzAzN0ZCNzNCNDFFQjFCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJA/FsueLV3L658ES+TpP3hg6n isN/sNRqsuhpCrVs03On31Y+4/4CZ+rRsF0g+2gj3XciGVUH/MCpWskW8/cs670x FaVPINO+y/X40SjzQAa6TaJ0BocZaB4y+cionE2Ot8IVBnza6XBUL4NWG6nKXtW9 fiTU1DJeylOW7kfxp4Fb+41lcA2n1v8uMkePM8otkFXPwvxDlv7qnp8grEq1wX0E PSFFwIP2p6A53knha8pTgG44g3MkfOGIAqcmra9jsFsOsv80QDDpClhPw3aygFFJ pGlBMD2XmHKgcxz7+RKlanBDIHSrYA6yuFtYnnA+tY7A4K4uuMDetbgqaKZ/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUs/7MurKfPTQ84W9cA3+3O0HrGz0wHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMwLTk1ZGMtNGI3Mi1h ZTFiLWFkMWU5OGIwZTE3OS8wLzM0MzMyZTMyMzQzNTJlMzEzODM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzODMzMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv1vDANBgkqhkiG 9w0BAQsFAAOCAQEAl6Cxd4ANF60hRuMWa4xjT0t8mYJzlVPEvwpwfpGncM9UUrlM lED2xrRfESphL+lZonL8Y6xEwSiNuGAzqVasoshG51AJ5HAdLa3v4wmS/U4mtXXK zsYeh9drUWGW+MGw31S5sJpNPCVGBqzzNjaZQDwxmoF+bkSf7JTYtdeCwNq0Ohak nszi6qWyUCqNYD8z9Rpv2PARxSkgetqrWmuhbK3jhTbeWIT8l8ujr2K81JZfGVrS jGalvpzhmpNkMzz7RDt1smcq2N+Xjs+C2SD/su5I/ysTeI7+xg9Xw03mbmAdUooc UPt7tYUPvFJNZVXKR+S9QynNS2ACaSWhtbzCvg== -----END CERTIFICATE-----Generated at Wed Apr 24 01:53:49 2024 by rpki-client on console-ams.rpki-client.org