$ rpki-client -vvf repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/3131392e3233352e31362e302f32302d3234203d3e203234353332.roa File: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (raw, json) Hash identifier: XcBjcZy0p8TxBZrS2TlS6e6MAgHjo+EAz20bGzRADcU= Subject key identifier: ED:55:5A:9B:50:2F:62:9B:80:92:DB:E3:78:31:9E:09:72:EE:10:13 Certificate issuer: /CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Certificate serial: 6542F73B2F68E7775556E841B2C84AF3A7827F8D Authority key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/3131392e3233352e31362e302f32302d3234203d3e203234353332.roa Signing time: Mon 31 Jul 2023 00:12:20 +0000 ROA not before: Mon 31 Jul 2023 00:07:20 +0000 ROA not after: Mon 29 Jul 2024 00:12:20 +0000 asID: 24532 IP address blocks: 119.235.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:42:f7:3b:2f:68:e7:77:55:56:e8:41:b2:c8:4a:f3:a7:82:7f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Validity Not Before: Jul 31 00:07:20 2023 GMT Not After : Jul 29 00:12:20 2024 GMT Subject: CN=ED555A9B502F629B8092DBE378319E0972EE1013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:58:60:3b:a6:eb:f1:d2:21:15:ce:40:0c: 8d:be:84:b4:6f:6b:03:2a:26:e2:0a:b8:50:49:33: d0:2c:58:b8:54:23:6c:aa:0d:47:07:3a:3f:d4:47: 97:cd:ae:5a:94:3f:bc:47:8c:ca:88:39:06:57:6a: 9c:25:ea:a9:e2:ad:69:8f:71:87:05:31:71:6b:b0: 10:8d:ff:b7:e4:66:fc:fe:6b:b2:0b:bb:8c:f7:d2: c4:5f:96:16:10:83:8d:6a:f4:b4:8a:12:e3:2d:4d: b2:f6:22:c6:5e:a4:6a:af:d9:e3:81:54:56:64:4a: 5a:14:c8:7f:59:c7:ed:f9:a1:a8:50:25:0e:f8:37: f2:0a:c9:8d:b9:f6:e0:31:d0:6a:f1:29:b7:e8:d0: 6d:59:2d:1f:24:f8:b3:88:83:43:bd:0a:55:05:4c: 07:3a:65:0b:44:03:93:80:f1:2c:8e:65:fa:bc:52: 6b:83:67:81:7d:da:80:36:90:d4:35:38:2e:32:ea: fc:dc:96:d9:b0:97:e9:d3:c9:7f:b4:95:9c:9c:b2: a8:e0:67:25:19:d0:41:5f:92:15:86:e2:6b:8f:31: f3:96:55:8e:8b:5e:49:97:ba:d5:5a:b4:46:1d:66: 81:48:5d:41:c7:6a:b6:2d:f6:de:3b:c4:08:f7:9e: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:55:5A:9B:50:2F:62:9B:80:92:DB:E3:78:31:9E:09:72:EE:10:13 X509v3 Authority Key Identifier: keyid:42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/3131392e3233352e31362e302f32302d3234203d3e203234353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.16.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:63:78:4a:f1:83:ed:f8:61:9b:71:f8:f8:47:0f:c2:b0:e6: f6:63:1c:36:5c:46:43:32:a2:e5:f9:ad:2e:58:a3:5f:fd:3a: 0c:00:38:43:9f:57:15:5a:7e:a7:7f:27:7b:7f:88:c4:13:0a: cb:de:79:aa:94:8a:bd:85:74:15:e5:93:31:d8:7b:ad:01:04: 37:0e:50:69:47:8e:a3:09:a6:fd:e8:32:8a:7a:1a:1e:ab:4a: 28:7a:50:14:cb:62:07:d7:79:b8:1a:bc:e1:43:aa:83:88:7c: 19:2c:61:30:74:36:9e:88:c5:1e:1a:3a:54:45:ad:e4:a8:18: 07:1b:56:47:12:f1:ac:6b:0c:b4:d3:4c:4b:f0:21:23:72:ff: ff:b5:33:07:2f:45:79:8c:37:91:9c:bb:b6:e8:b2:be:42:84: df:5b:45:f6:3f:50:a1:ef:e5:f4:f6:3f:54:e8:55:3b:e3:6e: f5:f7:7d:f8:dd:53:30:7e:c8:6d:a7:40:1e:75:73:54:e3:c9: a8:69:dd:00:6c:27:c2:f0:02:31:1e:17:42:9a:4b:09:26:31: 31:c9:2e:91:9d:ac:8f:a5:19:f9:ea:45:87:6c:09:14:93:97: 3f:a7:69:53:d4:5e:48:28:9c:c7:d7:bf:4a:bf:d3:9e:2c:67: fe:66:e8:cd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZUL3Oy9o53dVVuhBsshK86eCf40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFF Q0M3RkU5NjAeFw0yMzA3MzEwMDA3MjBaFw0yNDA3MjkwMDEyMjBaMDMxMTAvBgNV BAMTKEVENTU1QTlCNTAyRjYyOUI4MDkyREJFMzc4MzE5RTA5NzJFRTEwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmFhgO6br8dIhFc5ADI2+hLRv awMqJuIKuFBJM9AsWLhUI2yqDUcHOj/UR5fNrlqUP7xHjMqIOQZXapwl6qnirWmP cYcFMXFrsBCN/7fkZvz+a7ILu4z30sRflhYQg41q9LSKEuMtTbL2IsZepGqv2eOB VFZkSloUyH9Zx+35oahQJQ74N/IKyY259uAx0GrxKbfo0G1ZLR8k+LOIg0O9ClUF TAc6ZQtEA5OA8SyOZfq8UmuDZ4F92oA2kNQ1OC4y6vzcltmwl+nTyX+0lZycsqjg ZyUZ0EFfkhWG4muPMfOWVY6LXkmXutVatEYdZoFIXUHHarYt9t47xAj3ni7TAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7VVam1AvYpuAktvjeDGeCXLuEBMwHwYDVR0j BBgwFoAUQoqkJA50Hyfjoh78KdRfCuzH/pYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDNlMmU2Ny1hMTcxLTRkOWUtYTkzNS00MDY5MDJiMWUxM2IvMC80MjhBQTQyNDBF NzQxRjI3RTNBMjFFRkMyOUQ0NUYwQUVDQzdGRTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFFQ0M3 RkU5Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0M2UyZTY3LWExNzEtNGQ5ZS1h OTM1LTQwNjkwMmIxZTEzYi8wLzMxMzEzOTJlMzIzMzM1MmUzMTM2MmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHfrEDANBgkqhkiG 9w0BAQsFAAOCAQEAC2N4SvGD7fhhm3H4+EcPwrDm9mMcNlxGQzKi5fmtLlijX/06 DAA4Q59XFVp+p38ne3+IxBMKy955qpSKvYV0FeWTMdh7rQEENw5QaUeOowmm/egy inoaHqtKKHpQFMtiB9d5uBq84UOqg4h8GSxhMHQ2nojFHho6VEWt5KgYBxtWRxLx rGsMtNNMS/AhI3L//7UzBy9FeYw3kZy7tuiyvkKE31tF9j9Qoe/l9PY/VOhVO+Nu 9fd9+N1TMH7IbadAHnVzVOPJqGndAGwnwvACMR4XQppLCSYxMckukZ2sj6UZ+epF h2wJFJOXP6dpU9ReSCicx9e/Sr/Tnixn/mbozQ== -----END CERTIFICATE-----Generated at Thu Apr 25 01:19:15 2024 by rpki-client on console-fra.rpki-client.org