$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133392e302f32342d3234203d3e203234323036.roa File: 3230332e38342e3133392e302f32342d3234203d3e203234323036.roa (raw, json) Hash identifier: GSDe6DLnpiIaMCL+LHoLk2uGkJOW8mu7XcqDfrxBPvY= Subject key identifier: 4C:F8:4F:2C:BC:54:CF:04:A6:AA:B2:DF:23:05:30:68:5F:B1:3B:5A Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 05BEB8CAF579868BA8A3C8C133D9F305E1274AD4 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133392e302f32342d3234203d3e203234323036.roa Signing time: Fri 29 Sep 2023 15:16:28 +0000 ROA not before: Fri 29 Sep 2023 15:11:28 +0000 ROA not after: Fri 27 Sep 2024 15:16:28 +0000 asID: 24206 IP address blocks: 203.84.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:be:b8:ca:f5:79:86:8b:a8:a3:c8:c1:33:d9:f3:05:e1:27:4a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Sep 29 15:11:28 2023 GMT Not After : Sep 27 15:16:28 2024 GMT Subject: CN=4CF84F2CBC54CF04A6AAB2DF230530685FB13B5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:24:a5:e7:87:67:9e:02:56:31:7d:9e:cd:af: 76:c5:2d:1a:58:87:85:47:45:6d:00:ee:02:c8:6c: af:82:6f:05:40:48:67:13:56:54:73:79:17:b1:fb: 9d:2d:53:2a:78:71:23:cd:ea:f7:d6:c4:91:42:3a: 61:c1:65:c1:f9:80:35:0b:2b:c8:fe:42:c7:c8:55: f6:61:6c:fb:f2:83:af:b8:56:68:b7:ec:68:e0:1a: 78:61:64:e7:90:bd:8a:90:92:05:dc:30:95:07:d9: 4b:03:78:56:ee:74:fe:3f:8a:de:9b:65:04:90:4f: fa:77:2d:a9:c6:42:d7:dd:9a:1d:2d:39:a8:a2:9b: 00:fc:d2:b5:a8:9e:f1:28:dc:f9:87:61:cc:b8:6b: 93:c8:64:93:48:09:8a:36:db:33:7e:5d:b2:df:67: 9a:8f:86:da:2b:0d:b8:f9:b1:d2:2d:06:cc:59:94: b8:f0:70:b2:e0:ab:68:2a:e0:0e:3c:14:23:23:ea: f5:f1:19:24:8f:ca:c0:f0:54:09:95:c4:9b:2c:5b: 68:40:88:35:bb:3b:5e:21:9f:f8:a4:cf:7a:90:75: 55:a9:4e:7f:0c:b1:72:de:18:d8:f7:17:eb:e6:f4: 66:7a:ff:97:74:58:11:0c:ba:d6:99:cd:bf:f9:1a: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F8:4F:2C:BC:54:CF:04:A6:AA:B2:DF:23:05:30:68:5F:B1:3B:5A X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133392e302f32342d3234203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.139.0/24 Signature Algorithm: sha256WithRSAEncryption 66:36:51:2b:c1:5b:78:a6:51:e4:33:a5:b1:cd:d5:d3:b9:09: 43:86:33:81:ab:9d:e7:ee:cc:73:02:dd:f7:db:92:c7:67:0b: 0c:4b:b3:dd:fe:17:7e:72:44:bf:24:dd:6a:6e:b9:99:00:35: b3:45:8e:bd:b4:6e:ee:b8:30:c9:99:c5:af:26:85:18:33:f5: c0:53:f8:0e:0e:4d:5f:85:85:15:62:93:a0:ca:38:36:6e:db: b7:8a:45:38:0f:59:29:b7:f1:7b:dc:5d:df:4b:ed:58:6b:81: cf:ee:8a:1a:72:6a:0e:e1:18:ff:13:bc:98:db:f9:35:d2:b4: 47:53:f5:94:ca:33:ea:6a:5a:33:d1:b6:80:a9:20:1c:3d:b6: 6a:3f:c5:80:31:a5:ca:b1:c7:2c:9b:08:75:b2:2e:a0:ec:78: 51:8b:22:6e:25:bb:37:aa:e2:cf:3d:f1:1d:1d:2f:1c:3e:dc: 30:d2:ef:0b:75:8c:f6:ab:cf:7d:f3:91:72:8b:76:01:54:41: c2:53:e2:30:8c:fa:b0:1a:f4:d5:3d:f0:6c:68:fa:4d:e3:de: 7f:02:1e:75:ab:c4:dc:8f:35:3e:44:30:b9:ea:27:91:1e:e8: b3:f7:76:1b:fc:f2:4c:4b:2d:35:05:e8:23:41:a6:2a:2b:b3: c0:59:c7:e2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBb64yvV5houoo8jBM9nzBeEnStQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yMzA5MjkxNTExMjhaFw0yNDA5MjcxNTE2MjhaMDMxMTAvBgNV BAMTKDRDRjg0RjJDQkM1NENGMDRBNkFBQjJERjIzMDUzMDY4NUZCMTNCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlJKXnh2eeAlYxfZ7Nr3bFLRpY h4VHRW0A7gLIbK+CbwVASGcTVlRzeRex+50tUyp4cSPN6vfWxJFCOmHBZcH5gDUL K8j+QsfIVfZhbPvyg6+4Vmi37GjgGnhhZOeQvYqQkgXcMJUH2UsDeFbudP4/it6b ZQSQT/p3LanGQtfdmh0tOaiimwD80rWonvEo3PmHYcy4a5PIZJNICYo22zN+XbLf Z5qPhtorDbj5sdItBsxZlLjwcLLgq2gq4A48FCMj6vXxGSSPysDwVAmVxJssW2hA iDW7O14hn/ikz3qQdVWpTn8MsXLeGNj3F+vm9GZ6/5d0WBEMutaZzb/5GiC5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTPhPLLxUzwSmqrLfIwUwaF+xO1owHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtUizANBgkqhkiG 9w0BAQsFAAOCAQEAZjZRK8FbeKZR5DOlsc3V07kJQ4Yzgaud5+7McwLd99uSx2cL DEuz3f4XfnJEvyTdam65mQA1s0WOvbRu7rgwyZnFryaFGDP1wFP4Dg5NX4WFFWKT oMo4Nm7bt4pFOA9ZKbfxe9xd30vtWGuBz+6KGnJqDuEY/xO8mNv5NdK0R1P1lMoz 6mpaM9G2gKkgHD22aj/FgDGlyrHHLJsIdbIuoOx4UYsibiW7N6rizz3xHR0vHD7c MNLvC3WM9qvPffORcot2AVRBwlPiMIz6sBr01T3wbGj6TePefwIedavE3I81PkQw ueonkR7os/d2G/zyTEstNQXoI0GmKiuzwFnH4g== -----END CERTIFICATE-----Generated at Thu May 2 10:17:06 2024 by rpki-client on console-ams.rpki-client.org