$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e203234323036.roa File: 3230332e38342e3133372e302f32342d3234203d3e203234323036.roa (raw, json) Hash identifier: ZRS6yIa2lHpJDEc8S5cE+BG5XmFeha6rl09TTtG1zH8= Subject key identifier: 0A:62:06:73:CB:2F:09:DA:31:7F:AA:B2:B1:F6:13:69:DB:44:A9:1E Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 7BCA518B661D95A4E7BAD79D572C909044759EDA Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e203234323036.roa Signing time: Fri 29 Sep 2023 15:15:55 +0000 ROA not before: Fri 29 Sep 2023 15:10:55 +0000 ROA not after: Fri 27 Sep 2024 15:15:55 +0000 asID: 24206 IP address blocks: 203.84.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ca:51:8b:66:1d:95:a4:e7:ba:d7:9d:57:2c:90:90:44:75:9e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Sep 29 15:10:55 2023 GMT Not After : Sep 27 15:15:55 2024 GMT Subject: CN=0A620673CB2F09DA317FAAB2B1F61369DB44A91E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:78:70:8e:09:f4:67:1c:52:89:5d:ec:c8: 11:56:0b:2b:5c:ff:3e:94:45:1c:51:1f:b2:2e:49: 2b:e3:8a:b9:10:bd:b0:30:57:4c:55:a1:c8:e6:7b: 7e:43:7f:d9:73:0e:e2:a1:fa:f1:ad:41:6b:60:f0: 40:07:8e:54:6a:21:38:14:f4:c8:f8:aa:fd:7e:92: b0:d9:bd:18:ab:59:c5:a1:2e:7e:76:24:42:d9:6c: a2:83:87:ff:f1:93:84:2b:de:a7:7a:53:2f:67:8a: e2:6e:d3:e0:f1:2a:b7:75:ee:7f:7c:c4:b6:04:43: cd:92:a3:92:43:24:70:0b:a3:c9:a4:ad:cd:16:b3: 7b:80:09:f6:4e:ff:42:11:8c:ab:98:70:51:8b:a7: e5:41:a7:95:1d:cd:5c:61:ea:71:12:1b:7a:fc:d6: 73:fe:05:d3:85:0d:01:50:c5:7c:6e:66:61:40:1c: e6:4a:c4:8c:4e:e0:8d:c0:e2:0a:cd:07:12:f1:4b: 90:f0:c5:4a:6e:9b:43:f0:81:02:98:b5:1b:bf:d8: 5c:00:65:c1:8d:3b:f9:56:d1:33:bd:52:16:43:12: 3c:76:cb:4a:41:f6:be:c4:0d:8b:ca:0c:db:89:27: f0:93:73:69:9f:f7:89:04:aa:87:11:ed:9d:6d:e1: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:62:06:73:CB:2F:09:DA:31:7F:AA:B2:B1:F6:13:69:DB:44:A9:1E X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.137.0/24 Signature Algorithm: sha256WithRSAEncryption 40:74:46:53:dd:86:d1:33:a5:77:c3:74:b9:fc:4e:24:29:af: 51:9b:71:98:b8:3e:6c:c9:1e:d8:ff:c1:13:f7:1c:8e:19:e3: c7:8c:48:8e:3a:c3:a5:c6:ef:24:43:f3:d1:32:1f:72:f2:b8: a9:dc:82:e8:7e:dd:80:ba:a6:dd:7b:00:d7:1d:90:ba:49:95: 5d:e5:58:a6:4c:8f:43:00:fe:97:45:a1:49:2a:25:15:3e:67: c8:39:b3:1c:e7:81:48:66:ed:23:02:4f:51:69:05:e5:fa:3f: 45:ba:41:67:99:71:01:4a:9c:76:ba:be:aa:c7:24:1d:8e:54: d5:50:4f:0e:bd:c6:76:8e:4f:d1:90:20:a0:78:fd:d4:f9:b8: 23:9e:92:b8:e5:53:28:08:c2:ba:e0:05:f8:37:64:b0:a3:c1: f0:d5:28:60:ef:31:05:e9:dc:ec:88:54:ee:ee:53:f2:5e:6e: 42:ec:e9:5d:9a:e0:18:43:9a:22:a9:bf:32:32:87:b0:b3:61: 15:0b:75:be:f6:12:2f:28:a0:f5:fa:e6:00:37:b3:ea:9e:6d: 7b:d9:a8:91:32:f3:8e:65:75:6f:5c:17:b7:e4:5f:db:e2:5a: a9:1a:3c:ed:fc:c0:8b:59:f9:53:a8:07:fb:01:61:1d:5a:11: c4:5e:9e:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUe8pRi2YdlaTnutedVyyQkER1ntowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yMzA5MjkxNTEwNTVaFw0yNDA5MjcxNTE1NTVaMDMxMTAvBgNV BAMTKDBBNjIwNjczQ0IyRjA5REEzMTdGQUFCMkIxRjYxMzY5REI0NEE5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDm3hwjgn0ZxxSiV3syBFWCytc /z6URRxRH7IuSSvjirkQvbAwV0xVocjme35Df9lzDuKh+vGtQWtg8EAHjlRqITgU 9Mj4qv1+krDZvRirWcWhLn52JELZbKKDh//xk4Qr3qd6Uy9niuJu0+DxKrd17n98 xLYEQ82So5JDJHALo8mkrc0Ws3uACfZO/0IRjKuYcFGLp+VBp5UdzVxh6nESG3r8 1nP+BdOFDQFQxXxuZmFAHOZKxIxO4I3A4grNBxLxS5DwxUpum0PwgQKYtRu/2FwA ZcGNO/lW0TO9UhZDEjx2y0pB9r7EDYvKDNuJJ/CTc2mf94kEqocR7Z1t4daDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCmIGc8svCdoxf6qysfYTadtEqR4wHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtUiTANBgkqhkiG 9w0BAQsFAAOCAQEAQHRGU92G0TOld8N0ufxOJCmvUZtxmLg+bMke2P/BE/ccjhnj x4xIjjrDpcbvJEPz0TIfcvK4qdyC6H7dgLqm3XsA1x2QukmVXeVYpkyPQwD+l0Wh SSolFT5nyDmzHOeBSGbtIwJPUWkF5fo/RbpBZ5lxAUqcdrq+qsckHY5U1VBPDr3G do5P0ZAgoHj91Pm4I56SuOVTKAjCuuAF+DdksKPB8NUoYO8xBenc7IhU7u5T8l5u QuzpXZrgGEOaIqm/MjKHsLNhFQt1vvYSLyig9frmADez6p5te9mokTLzjmV1b1wX t+Rf2+JaqRo87fzAi1n5U6gH+wFhHVoRxF6eqg== -----END CERTIFICATE-----Generated at Thu May 2 10:17:06 2024 by rpki-client on console-ams.rpki-client.org