$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134332e302f32342d3234203d3e20313530393732.roa File: 3230332e38342e3134332e302f32342d3234203d3e20313530393732.roa (raw, json) Hash identifier: 0PFfSypPWNkUeezO3p2ch7NKNyPePX3Q2s2UePk6yNM= Subject key identifier: C0:62:AE:F5:EB:30:2B:0C:12:F2:8A:8A:A5:5F:53:78:73:CB:96:6E Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 14308BA120CD6F0234A197FC2ABC3C7504051CEA Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134332e302f32342d3234203d3e20313530393732.roa Signing time: Tue 02 Apr 2024 13:00:00 +0000 ROA not before: Tue 02 Apr 2024 12:55:00 +0000 ROA not after: Tue 01 Apr 2025 13:00:00 +0000 asID: 150972 IP address blocks: 203.84.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 05:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:30:8b:a1:20:cd:6f:02:34:a1:97:fc:2a:bc:3c:75:04:05:1c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Apr 2 12:55:00 2024 GMT Not After : Apr 1 13:00:00 2025 GMT Subject: CN=C062AEF5EB302B0C12F28A8AA55F537873CB966E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:ab:55:91:51:33:f1:64:ec:41:e9:90:97: a6:58:b5:48:79:4c:ec:21:60:01:87:60:4d:40:fa: 43:0f:51:d8:ce:24:ca:a9:02:fb:e2:8b:9d:8c:1d: 3b:b3:16:3e:38:06:18:de:f7:4c:89:6e:6c:20:f2: 19:5d:c6:d4:52:c4:da:a1:78:4f:75:3c:09:fb:d2: b5:58:42:38:d2:61:92:23:a7:95:17:c2:eb:52:a6: 95:37:ba:21:e0:f1:de:ef:1e:db:d3:9c:01:ba:af: 0a:1f:e2:ef:89:a9:47:c8:49:35:5c:64:1e:b4:ae: e8:08:14:7b:91:c7:27:2f:2a:64:3e:e0:7a:72:bd: 4a:d4:83:26:75:37:c1:39:87:c8:e2:c5:f5:35:9b: 2d:48:d4:c3:a9:57:a8:11:46:2c:dc:60:e9:62:f3: 67:48:7e:b4:d0:3b:fa:18:a3:8a:86:c3:f6:19:a4: 53:22:a1:4f:aa:57:bb:83:b7:ef:8c:3a:ec:d2:92: f8:7a:b4:60:46:10:a3:1b:ce:a8:b6:5d:ac:6d:b5: a8:43:20:85:eb:f7:4b:76:be:e2:72:b5:48:57:8b: e4:6b:89:b0:e9:58:d2:c3:03:29:1d:04:62:4a:92: 82:b4:94:94:d3:7a:06:2f:2d:7b:a5:3a:9f:09:66: f2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:62:AE:F5:EB:30:2B:0C:12:F2:8A:8A:A5:5F:53:78:73:CB:96:6E X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134332e302f32342d3234203d3e20313530393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.143.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:0f:ba:ff:f6:fa:1a:c3:6d:60:da:be:07:15:28:4b:34:67: 81:3e:65:6b:dd:f9:dd:0b:d2:45:a5:db:93:c0:e9:98:2e:a6: 5e:93:c2:3e:9f:86:14:a2:b9:b1:5b:e5:1b:20:69:7b:48:0d: fa:b6:2d:c4:fa:9a:45:ac:bb:7d:14:69:cb:d0:a2:93:af:8e: ab:b9:e3:2e:00:05:10:36:4a:21:f5:c4:85:23:a6:75:5d:a6: 0d:5e:fa:bf:28:2a:3e:c2:92:90:22:d4:39:0a:82:c6:cc:7e: cc:1f:d7:17:18:e6:97:db:d3:c6:e3:1b:0e:e2:19:12:bb:28: 81:a1:7a:7a:01:29:6f:51:c1:1c:89:9e:6c:3d:7a:52:ca:ad: fc:2f:fe:d0:d2:86:67:9d:d8:ae:63:e2:52:aa:a6:e6:52:b6: ab:83:16:f1:0e:09:b9:a2:93:47:1b:a0:4e:e8:c6:82:91:33: c5:ca:a1:48:55:76:95:a7:d9:21:3e:46:fd:f3:11:11:6d:5f: 59:42:21:1a:8e:08:da:05:3a:16:f1:11:d0:c7:fd:16:51:93: 2a:4a:0a:7c:62:0e:4b:1f:a2:c0:83:28:24:d7:ed:dc:42:0d: 0b:3b:66:90:bd:fd:74:27:5c:aa:24:88:22:8a:ac:80:ab:29: aa:c6:5a:0d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFDCLoSDNbwI0oZf8Krw8dQQFHOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNDA0MDIxMjU1MDBaFw0yNTA0MDExMzAwMDBaMDMxMTAvBgNV BAMTKEMwNjJBRUY1RUIzMDJCMEMxMkYyOEE4QUE1NUY1Mzc4NzNDQjk2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZFKtVkVEz8WTsQemQl6ZYtUh5 TOwhYAGHYE1A+kMPUdjOJMqpAvvii52MHTuzFj44Bhje90yJbmwg8hldxtRSxNqh eE91PAn70rVYQjjSYZIjp5UXwutSppU3uiHg8d7vHtvTnAG6rwof4u+JqUfISTVc ZB60rugIFHuRxycvKmQ+4HpyvUrUgyZ1N8E5h8jixfU1my1I1MOpV6gRRizcYOli 82dIfrTQO/oYo4qGw/YZpFMioU+qV7uDt++MOuzSkvh6tGBGEKMbzqi2XaxttahD IIXr90t2vuJytUhXi+RribDpWNLDAykdBGJKkoK0lJTTegYvLXulOp8JZvK3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUwGKu9eswKwwS8oqKpV9TeHPLlm4wHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1SPMA0GCSqG SIb3DQEBCwUAA4IBAQBfD7r/9voaw21g2r4HFShLNGeBPmVr3fndC9JFpduTwOmY LqZek8I+n4YUormxW+UbIGl7SA36ti3E+ppFrLt9FGnL0KKTr46rueMuAAUQNkoh 9cSFI6Z1XaYNXvq/KCo+wpKQItQ5CoLGzH7MH9cXGOaX29PG4xsO4hkSuyiBoXp6 ASlvUcEciZ5sPXpSyq38L/7Q0oZnndiuY+JSqqbmUrargxbxDgm5opNHG6BO6MaC kTPFyqFIVXaVp9khPkb98xERbV9ZQiEajgjaBToW8RHQx/0WUZMqSgp8Yg5LH6LA gygk1+3cQg0LO2aQvf10J1yqJIgiiqyAqymqxloN -----END CERTIFICATE-----Generated at Fri May 17 04:26:15 2024 by rpki-client on console-fra.rpki-client.org