$ rpki-client -vvf repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/32372e3131312e33342e302f32342d3234203d3e203538343737.roa File: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: Pa4d5DRT+Z2qzEntNYDFq6d4yDn9TS5byEHJUUm5uYc= Subject key identifier: 19:E1:B0:83:44:9C:D9:1A:F7:0A:1B:0D:F7:0C:43:41:E0:63:8A:E9 Certificate issuer: /CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Certificate serial: 0D103486B69FBF137950E09AEFB9F0A3800184E8 Authority key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/32372e3131312e33342e302f32342d3234203d3e203538343737.roa Signing time: Thu 14 Dec 2023 12:00:33 +0000 ROA not before: Thu 14 Dec 2023 11:55:33 +0000 ROA not after: Thu 12 Dec 2024 12:00:33 +0000 asID: 58477 IP address blocks: 27.111.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:10:34:86:b6:9f:bf:13:79:50:e0:9a:ef:b9:f0:a3:80:01:84:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Validity Not Before: Dec 14 11:55:33 2023 GMT Not After : Dec 12 12:00:33 2024 GMT Subject: CN=19E1B083449CD91AF70A1B0DF70C4341E0638AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:13:07:f0:83:cc:fd:46:a5:69:e0:fa:09:02: b4:11:c7:fe:92:1e:fc:26:f5:b4:50:01:90:16:60: 31:e2:92:eb:65:81:b3:88:37:cd:8b:d0:ad:d2:ea: 26:27:f3:60:5f:2f:59:9a:15:0f:ad:b6:ad:cc:ea: 1c:53:7b:3a:48:19:21:09:7e:6a:10:aa:7b:c5:26: 88:73:d6:59:c2:0d:30:78:51:3e:eb:a2:a4:34:9e: 72:a7:21:f5:eb:91:06:15:d0:92:c7:58:67:c4:7a: 73:c2:d8:f2:b0:ff:09:f7:78:df:04:c1:86:0b:e4: 68:85:05:7b:71:a1:7b:47:87:02:52:e5:84:42:0a: 9b:50:d4:2d:e1:53:95:5c:64:f1:f8:57:58:70:fc: a5:96:5e:68:26:2b:64:81:b7:b6:ef:38:49:0d:cd: 4b:f4:17:38:b3:67:23:2b:7f:af:64:8f:ee:df:2b: d7:17:7e:07:10:c2:af:85:02:d9:18:24:48:65:01: 19:8e:ff:ec:58:99:0f:a7:13:cf:e8:78:5f:de:9f: 9e:11:d0:d2:52:3d:80:d7:c0:08:1c:4e:bb:6f:ce: cc:1f:5d:25:33:1a:d9:12:cc:53:8f:42:21:b1:0d: 75:49:92:b9:87:00:fd:72:51:66:c4:5d:82:a3:97: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E1:B0:83:44:9C:D9:1A:F7:0A:1B:0D:F7:0C:43:41:E0:63:8A:E9 X509v3 Authority Key Identifier: keyid:42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/32372e3131312e33342e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.111.34.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ac:c1:a0:97:fc:23:12:4b:a0:ac:1a:45:9c:f0:84:3f:f7: 5d:d7:f6:bd:7f:1b:71:8c:22:bc:26:18:04:c7:b7:ad:cd:81: 24:ff:78:35:65:88:9a:bf:a2:55:87:2e:27:6d:6f:ce:e7:e2: 2b:64:e3:33:36:7c:ee:bd:9d:6a:f4:8f:75:6f:47:9a:05:1e: 0e:9b:b4:0b:b4:19:01:81:af:e2:da:a5:2b:c9:c8:1f:71:f0: c3:34:d6:f0:1a:5e:05:72:06:b1:4e:92:8e:35:be:aa:d3:c6: a4:9a:9e:95:6f:9f:8c:8a:5f:67:e4:2a:00:29:1d:9f:b2:c4: 7d:f1:43:7b:d2:4d:61:54:53:34:69:7f:bb:ff:06:a0:41:2c: 8b:b3:c4:45:6d:f7:b5:64:42:b2:8d:90:d5:ee:00:48:6f:05: 53:8f:78:05:f6:d9:b6:b4:02:ac:11:e5:e5:2b:39:a5:fa:39: 92:bd:18:b2:0a:80:20:8f:e9:26:fc:80:af:c7:de:e6:33:cb: c1:ad:e9:fe:c6:42:35:0e:4c:7c:0a:9b:82:1d:6d:da:96:8f: ab:1f:65:a1:41:e1:a8:1a:a9:a9:77:c8:40:09:ab:c6:81:c5: 62:8c:be:d1:59:c4:4c:23:2a:5a:b7:d0:85:78:fc:d8:9f:ba: b5:10:cc:8b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDRA0hrafvxN5UOCa77nwo4ABhOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFF Q0M3RkU5NjAeFw0yMzEyMTQxMTU1MzNaFw0yNDEyMTIxMjAwMzNaMDMxMTAvBgNV BAMTKDE5RTFCMDgzNDQ5Q0Q5MUFGNzBBMUIwREY3MEM0MzQxRTA2MzhBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoEwfwg8z9RqVp4PoJArQRx/6S Hvwm9bRQAZAWYDHikutlgbOIN82L0K3S6iYn82BfL1maFQ+ttq3M6hxTezpIGSEJ fmoQqnvFJohz1lnCDTB4UT7roqQ0nnKnIfXrkQYV0JLHWGfEenPC2PKw/wn3eN8E wYYL5GiFBXtxoXtHhwJS5YRCCptQ1C3hU5VcZPH4V1hw/KWWXmgmK2SBt7bvOEkN zUv0FzizZyMrf69kj+7fK9cXfgcQwq+FAtkYJEhlARmO/+xYmQ+nE8/oeF/en54R 0NJSPYDXwAgcTrtvzswfXSUzGtkSzFOPQiGxDXVJkrmHAP1yUWbEXYKjlyLFAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUGeGwg0Sc2Rr3ChsN9wxDQeBjiukwHwYDVR0j BBgwFoAUQoqkJA50Hyfjoh78KdRfCuzH/pYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDNlMmU2Ny1hMTcxLTRkOWUtYTkzNS00MDY5MDJiMWUxM2IvMC80MjhBQTQyNDBF NzQxRjI3RTNBMjFFRkMyOUQ0NUYwQUVDQzdGRTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFFQ0M3 RkU5Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0M2UyZTY3LWExNzEtNGQ5ZS1h OTM1LTQwNjkwMmIxZTEzYi8wLzMyMzcyZTMxMzEzMTJlMzMzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbbyIwDQYJKoZIhvcN AQELBQADggEBAICswaCX/CMSS6CsGkWc8IQ/913X9r1/G3GMIrwmGATHt63NgST/ eDVliJq/olWHLidtb87n4itk4zM2fO69nWr0j3VvR5oFHg6btAu0GQGBr+LapSvJ yB9x8MM01vAaXgVyBrFOko41vqrTxqSanpVvn4yKX2fkKgApHZ+yxH3xQ3vSTWFU UzRpf7v/BqBBLIuzxEVt97VkQrKNkNXuAEhvBVOPeAX22ba0AqwR5eUrOaX6OZK9 GLIKgCCP6Sb8gK/H3uYzy8Gt6f7GQjUOTHwKm4IdbdqWj6sfZaFB4agaqal3yEAJ q8aBxWKMvtFZxEwjKlq30IV4/NifurUQzIs= -----END CERTIFICATE-----Generated at Mon May 6 05:55:15 2024 by rpki-client on console-ams.rpki-client.org