$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e39362e302f32312d3234203d3e2039333431.roa File: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (raw, json) Hash identifier: qX8gePdtOM473piPBMTP7kWrRHBc8lexc0ZQr/Op85s= Subject key identifier: C9:23:17:C9:38:53:C4:43:BD:BE:A5:EB:A9:2E:73:FD:2D:EB:8E:8B Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 563D0648B51F2A59F5F29047594B4A39E11A2CD5 Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e39362e302f32312d3234203d3e2039333431.roa Signing time: Tue 11 Jul 2023 11:01:53 +0000 ROA not before: Tue 11 Jul 2023 10:56:53 +0000 ROA not after: Tue 09 Jul 2024 11:01:53 +0000 asID: 9341 IP address blocks: 223.25.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3d:06:48:b5:1f:2a:59:f5:f2:90:47:59:4b:4a:39:e1:1a:2c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Jul 11 10:56:53 2023 GMT Not After : Jul 9 11:01:53 2024 GMT Subject: CN=C92317C93853C443BDBEA5EBA92E73FD2DEB8E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:1a:e2:ca:cd:74:22:e0:e2:2b:4c:b4:fe: 5b:f5:1c:f9:0c:29:01:09:5a:77:36:0b:5a:ef:fa: 1c:43:df:c5:71:67:dc:0c:65:04:5a:c9:79:5f:62: 76:6a:ca:55:07:54:5b:d0:40:d5:a2:24:7a:fc:6f: 62:d1:5f:1e:dd:af:0b:0d:1a:9e:51:59:4e:07:c9: 66:b1:6a:87:f6:35:2d:46:fe:11:e3:8b:33:84:8c: 7c:48:4c:1c:77:56:38:95:04:39:cf:68:39:17:f9: 84:2a:ea:49:5e:59:76:3e:23:09:7f:45:09:03:61: 07:d4:75:fc:05:ba:c3:f3:4d:1d:aa:db:a4:88:39: c5:a4:96:86:9b:d7:7d:cb:d7:df:b6:c6:d6:54:d2: 0a:d7:b4:15:9d:17:c1:03:52:ca:61:a0:a3:16:e1: 32:d0:c3:02:a8:d5:12:c9:52:ef:65:af:57:1d:39: 4f:3d:ea:ef:b9:ec:8e:e2:0c:86:11:7c:23:47:2a: 91:40:12:47:a2:d1:e7:39:0d:83:e6:77:5d:19:bc: 55:91:1a:c7:ee:c0:86:9b:f2:35:e9:4f:fa:f8:f0: 04:e2:de:3b:fc:ef:3c:44:fa:39:92:f4:91:96:e6: b5:f7:2b:53:b3:52:78:3f:28:36:db:1f:81:4b:47: dc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:23:17:C9:38:53:C4:43:BD:BE:A5:EB:A9:2E:73:FD:2D:EB:8E:8B X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e39362e302f32312d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.96.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:38:5f:4a:c5:63:58:f2:5f:9f:32:d7:8f:27:98:dd:d0:c5: 6a:80:db:38:d8:89:d9:c9:df:ec:7f:9e:a5:50:c1:b9:85:4f: 9a:68:81:09:82:81:59:14:ef:4e:ff:27:b9:fb:29:87:4b:89: 46:f1:82:3d:27:54:f2:5b:bd:fc:e7:98:1c:82:a3:fb:4c:1c: 2f:6d:a0:be:0b:45:1d:13:35:ee:13:52:80:f9:d9:84:fe:da: a4:33:35:b8:58:a4:e2:89:74:a4:23:14:9e:98:34:30:78:74: d0:c1:3c:de:5d:66:fe:50:e2:8a:8b:1c:b3:ae:d5:d8:48:f5: ac:70:ad:db:1f:c8:ae:53:f3:dd:18:10:95:69:55:8f:f0:74: 15:c3:f7:bf:5e:fe:52:40:96:04:d7:8d:17:80:02:ab:c1:3e: 5a:d2:7f:54:d1:1f:27:2a:18:ef:6d:99:4f:47:be:94:3f:53: c3:0b:14:7b:1a:b5:1f:66:bd:32:8b:6a:ce:24:fa:16:4d:fa: e3:ed:ba:92:d9:88:48:65:e1:3b:d3:8c:7a:74:d0:2a:d0:20: ec:4f:9b:32:10:9c:2d:77:91:24:f0:d4:6a:2c:13:f6:ab:94: 7f:29:08:c7:19:16:de:da:3e:4a:ad:0e:93:11:e0:82:16:5c: cb:c7:d1:5e -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUVj0GSLUfKln18pBHWUtKOeEaLNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yMzA3MTExMDU2NTNaFw0yNDA3MDkxMTAxNTNaMDMxMTAvBgNV BAMTKEM5MjMxN0M5Mzg1M0M0NDNCREJFQTVFQkE5MkU3M0ZEMkRFQjhFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAxriys10IuDiK0y0/lv1HPkM KQEJWnc2C1rv+hxD38VxZ9wMZQRayXlfYnZqylUHVFvQQNWiJHr8b2LRXx7drwsN Gp5RWU4HyWaxaof2NS1G/hHjizOEjHxITBx3VjiVBDnPaDkX+YQq6kleWXY+Iwl/ RQkDYQfUdfwFusPzTR2q26SIOcWkloab133L19+2xtZU0grXtBWdF8EDUsphoKMW 4TLQwwKo1RLJUu9lr1cdOU896u+57I7iDIYRfCNHKpFAEkei0ec5DYPmd10ZvFWR GsfuwIab8jXpT/r48ATi3jv87zxE+jmS9JGW5rX3K1OzUng/KDbbH4FLR9wTAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUySMXyThTxEO9vqXrqS5z/S3rjoswHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvMzIzMjMzMmUzMjM1MmUzOTM2MmUzMDJmMzIzMTJk MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPfGWAwDQYJKoZIhvcNAQEL BQADggEBAF44X0rFY1jyX58y148nmN3QxWqA2zjYidnJ3+x/nqVQwbmFT5pogQmC gVkU707/J7n7KYdLiUbxgj0nVPJbvfznmByCo/tMHC9toL4LRR0TNe4TUoD52YT+ 2qQzNbhYpOKJdKQjFJ6YNDB4dNDBPN5dZv5Q4oqLHLOu1dhI9axwrdsfyK5T890Y EJVpVY/wdBXD979e/lJAlgTXjReAAqvBPlrSf1TRHycqGO9tmU9HvpQ/U8MLFHsa tR9mvTKLas4k+hZN+uPtupLZiEhl4TvTjHp00CrQIOxPmzIQnC13kSTw1GosE/ar lH8pCMcZFt7aPkqtDpMR4IIWXMvH0V4= -----END CERTIFICATE-----Generated at Thu May 16 20:24:20 2024 by rpki-client on console-ams.rpki-client.org