$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa File: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (raw, json) Hash identifier: VnwQNKGST3423f7ROowdWhnGGks1pox92ZjveSETg8c= Subject key identifier: 79:E2:C6:93:2E:DB:0F:18:D9:71:53:2B:64:DD:27:78:71:D4:85:F6 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 1F727BF571F94DD8A97311DFE8232A91C2530EDD Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa Signing time: Sun 09 Jul 2023 11:22:08 +0000 ROA not before: Sun 09 Jul 2023 11:17:08 +0000 ROA not after: Sun 07 Jul 2024 11:22:08 +0000 asID: 149718 IP address blocks: 223.25.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:72:7b:f5:71:f9:4d:d8:a9:73:11:df:e8:23:2a:91:c2:53:0e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Jul 9 11:17:08 2023 GMT Not After : Jul 7 11:22:08 2024 GMT Subject: CN=79E2C6932EDB0F18D971532B64DD277871D485F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:65:09:0c:7d:88:d0:a1:ab:03:35:84:6c: b5:51:ab:5a:1c:07:c7:3b:2d:7f:89:0d:b2:e2:72: 01:f8:c0:3a:f6:77:a5:76:86:6b:1d:33:da:d4:6e: 29:05:6f:f4:79:b1:cc:dc:04:3e:19:bb:4f:f8:cc: f3:44:16:1e:02:2f:f2:d1:98:9f:6d:84:02:a4:c0: 76:e2:6d:d0:7c:6e:5d:03:c9:9c:40:4a:40:9b:e7: a6:da:44:8a:c1:fc:5d:64:df:6b:3b:be:76:55:d4: 02:3a:d8:eb:83:ed:c0:29:be:0d:d0:cf:e0:e2:0b: 3b:a8:33:e0:9c:7c:32:c5:db:75:6f:81:00:55:67: 2b:b2:15:07:e3:b6:72:90:2c:c1:8e:8f:31:1c:ac: 9e:14:09:8d:38:cc:9c:a5:70:fd:df:b6:ac:a7:76: 55:93:e4:d2:de:14:d3:e2:93:46:74:c6:ea:9d:8e: 2b:0e:71:ef:b6:8c:fd:1d:47:1a:1a:67:37:cc:cf: 4a:58:17:e3:bf:3e:fb:b4:92:92:de:59:25:b9:37: 6b:a1:a5:5d:b6:c1:5b:83:0d:d5:f8:61:06:23:1d: 7c:89:e5:fe:33:bf:e7:9e:a9:25:52:00:bd:5f:d1: 89:9f:fa:7c:ab:57:5b:bd:5d:46:e3:ae:87:88:9b: e3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E2:C6:93:2E:DB:0F:18:D9:71:53:2B:64:DD:27:78:71:D4:85:F6 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.109.0/24 Signature Algorithm: sha256WithRSAEncryption 37:74:d8:20:62:5b:3b:c0:23:0b:d1:8f:af:56:e5:7d:0b:de: e3:1b:b9:53:2a:51:36:95:51:de:d2:42:33:27:ca:23:f3:32: 40:b9:a2:cb:93:a0:f2:d3:1b:d0:ec:27:5f:02:6b:46:61:29: 8f:ac:46:e0:7e:e3:9e:68:97:a6:a4:80:dd:a4:a8:2f:da:7b: 2b:56:c8:e4:19:36:88:6c:ea:4d:74:f7:d6:1f:0a:3e:26:d1: c6:c4:f1:90:31:be:41:8e:2d:4c:7c:54:26:dd:22:a7:1c:83: b9:5c:2d:bc:64:a3:14:72:88:21:9a:0f:a9:c1:81:a9:b0:77: 2e:ea:cc:3d:eb:5c:98:9a:f9:cc:c1:b1:c3:fb:6e:ae:cc:9f: 1a:15:f6:52:45:9a:43:dd:b1:b8:bc:00:86:c2:32:02:08:17: f3:98:ad:40:94:93:f7:c9:8f:32:1b:8e:00:44:fc:ae:63:ce: 51:6d:b7:e7:69:1f:81:cb:b8:8f:86:fc:ff:66:c2:40:27:3f: 23:9c:9d:e4:1d:f4:1b:44:6e:00:c1:33:62:42:a0:52:ae:4c: 2a:08:eb:08:15:01:89:4e:37:70:24:7e:ba:00:86:8c:2b:ab: 7e:1c:ab:68:d2:ad:c1:de:b1:02:4f:85:cf:b3:b0:11:a6:e3: d6:61:29:8b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUH3J79XH5TdipcxHf6CMqkcJTDt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yMzA3MDkxMTE3MDhaFw0yNDA3MDcxMTIyMDhaMDMxMTAvBgNV BAMTKDc5RTJDNjkzMkVEQjBGMThEOTcxNTMyQjY0REQyNzc4NzFENDg1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDWUJDH2I0KGrAzWEbLVRq1oc B8c7LX+JDbLicgH4wDr2d6V2hmsdM9rUbikFb/R5sczcBD4Zu0/4zPNEFh4CL/LR mJ9thAKkwHbibdB8bl0DyZxASkCb56baRIrB/F1k32s7vnZV1AI62OuD7cApvg3Q z+DiCzuoM+CcfDLF23VvgQBVZyuyFQfjtnKQLMGOjzEcrJ4UCY04zJylcP3ftqyn dlWT5NLeFNPik0Z0xuqdjisOce+2jP0dRxoaZzfMz0pYF+O/Pvu0kpLeWSW5N2uh pV22wVuDDdX4YQYjHXyJ5f4zv+eeqSVSAL1f0Ymf+nyrV1u9XUbjroeIm+P1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeeLGky7bDxjZcVMrZN0neHHUhfYwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xltMA0GCSqG SIb3DQEBCwUAA4IBAQA3dNggYls7wCML0Y+vVuV9C97jG7lTKlE2lVHe0kIzJ8oj 8zJAuaLLk6Dy0xvQ7CdfAmtGYSmPrEbgfuOeaJempIDdpKgv2nsrVsjkGTaIbOpN dPfWHwo+JtHGxPGQMb5Bji1MfFQm3SKnHIO5XC28ZKMUcoghmg+pwYGpsHcu6sw9 61yYmvnMwbHD+26uzJ8aFfZSRZpD3bG4vACGwjICCBfzmK1AlJP3yY8yG44ARPyu Y85RbbfnaR+By7iPhvz/ZsJAJz8jnJ3kHfQbRG4AwTNiQqBSrkwqCOsIFQGJTjdw JH66AIaMK6t+HKto0q3B3rECT4XPs7ARpuPWYSmL -----END CERTIFICATE-----Generated at Thu May 16 20:24:20 2024 by rpki-client on console-ams.rpki-client.org