$ rpki-client -vvf repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3230322e31302e35382e302f32342d3234203d3e20313336313139.roa File: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (raw, json) Hash identifier: o3WMZYz6/RfKhb+hH+uQ23zvT085Bt8bn8P2vXJFSpE= Subject key identifier: 6E:6E:60:A9:CA:80:87:87:F6:EA:DB:C2:AB:1B:AE:FD:75:BF:91:97 Certificate issuer: /CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Certificate serial: 3001CB9BF6A65716E63789983FDD0172B7B6C067 Authority key identifier: 21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3230322e31302e35382e302f32342d3234203d3e20313336313139.roa Signing time: Wed 18 Oct 2023 07:53:27 +0000 ROA not before: Wed 18 Oct 2023 07:48:27 +0000 ROA not after: Wed 16 Oct 2024 07:53:27 +0000 asID: 136119 IP address blocks: 202.10.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 13:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:01:cb:9b:f6:a6:57:16:e6:37:89:98:3f:dd:01:72:b7:b6:c0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Validity Not Before: Oct 18 07:48:27 2023 GMT Not After : Oct 16 07:53:27 2024 GMT Subject: CN=6E6E60A9CA808787F6EADBC2AB1BAEFD75BF9197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:9c:38:90:e1:dc:36:b4:0a:4c:b3:09:38: d3:39:23:41:40:20:e9:94:c0:43:7b:e6:09:5f:ca: 42:bf:2c:c4:6a:b6:9c:1b:c5:89:2f:23:c0:ec:e2: 57:c0:d8:98:81:ab:f6:31:85:06:92:72:ee:26:ae: bb:57:a9:1c:12:4b:46:e5:5f:7e:1c:eb:74:8a:e6: 9c:40:e8:25:eb:83:b2:af:20:44:70:74:33:0e:28: 6d:47:77:31:10:74:5b:f4:27:97:26:73:7b:83:41: c8:3d:6f:44:57:5c:d3:61:ba:44:2a:9c:91:ae:67: 33:1f:5c:89:82:4a:42:fc:ce:aa:29:ff:21:7e:95: 0d:be:ef:fd:bd:9d:f5:a0:4a:3c:be:e5:1d:45:46: 80:33:28:89:2b:18:44:d2:11:c2:64:f0:e4:4f:d0: ca:72:47:fb:86:e2:4d:89:a2:57:3f:df:1a:04:f0: 2f:38:ad:04:1b:b6:54:6c:3f:e2:27:00:22:bf:65: 12:0b:22:74:cb:f2:37:50:bb:ae:22:63:ff:4e:8d: 08:78:ff:ed:b4:d9:cd:27:ba:10:01:82:9a:91:f0: 0d:4e:ff:7f:60:d8:b7:af:75:07:0d:41:2d:ac:66: ea:1e:70:5c:77:e8:79:4b:9b:b2:0f:7b:ba:ab:7c: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6E:60:A9:CA:80:87:87:F6:EA:DB:C2:AB:1B:AE:FD:75:BF:91:97 X509v3 Authority Key Identifier: keyid:21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3230322e31302e35382e302f32342d3234203d3e20313336313139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.58.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:7a:68:34:f1:1e:79:61:bc:02:17:74:57:1f:66:08:fb:24: ab:2d:c8:92:ce:6b:01:eb:cf:d6:f8:3e:3c:50:48:e1:3f:13: 6b:7b:0d:06:3f:ca:df:41:44:a0:ba:64:ce:dc:a4:c0:e9:3a: 70:10:4a:c0:4a:70:47:e9:e1:b3:4b:85:99:cd:2f:31:44:67: 72:4b:79:2e:fd:31:a3:ed:58:29:98:db:21:7f:23:c0:87:ac: 6d:da:d4:df:9d:c1:44:c8:f3:5b:ae:a6:18:5b:18:32:d9:ee: cd:a9:87:8a:9f:c5:29:83:ec:37:44:36:ab:7e:92:93:b5:28: e1:1c:a7:2d:9a:89:d8:ae:b4:a1:cc:c6:32:22:5e:38:46:5f: e6:11:b1:a7:34:b7:da:54:11:c4:a1:fa:71:e1:4a:5b:34:b8: d1:ca:e9:5e:59:a4:2f:f5:6b:cb:3c:50:f1:e8:31:98:1b:d6: 22:b9:c3:f1:a5:1d:10:2f:e1:0e:6a:dc:75:27:7c:9f:ed:66: b0:f9:7c:62:7c:cf:d9:da:6c:fa:77:88:18:ff:0d:f7:12:9c: 5d:2f:03:70:93:49:da:51:23:30:5f:26:f8:b2:1b:b4:45:09: 0c:0c:3e:aa:ec:5a:cb:c5:f4:f5:f8:07:79:d7:b6:fc:ee:b3: 92:d8:5d:ed -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMAHLm/amVxbmN4mYP90Bcre2wGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNE RDAwOTExQjAeFw0yMzEwMTgwNzQ4MjdaFw0yNDEwMTYwNzUzMjdaMDMxMTAvBgNV BAMTKDZFNkU2MEE5Q0E4MDg3ODdGNkVBREJDMkFCMUJBRUZENzVCRjkxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0Zw4kOHcNrQKTLMJONM5I0FA IOmUwEN75glfykK/LMRqtpwbxYkvI8Ds4lfA2JiBq/YxhQaScu4mrrtXqRwSS0bl X34c63SK5pxA6CXrg7KvIERwdDMOKG1HdzEQdFv0J5cmc3uDQcg9b0RXXNNhukQq nJGuZzMfXImCSkL8zqop/yF+lQ2+7/29nfWgSjy+5R1FRoAzKIkrGETSEcJk8ORP 0MpyR/uG4k2Jolc/3xoE8C84rQQbtlRsP+InACK/ZRILInTL8jdQu64iY/9OjQh4 /+202c0nuhABgpqR8A1O/39g2LevdQcNQS2sZuoecFx36HlLm7IPe7qrfDkRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbm5gqcqAh4f26tvCqxuu/XW/kZcwHwYDVR0j BBgwFoAUIawiC3enfQUWvHO0wpyDY90AkRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGFiYzBiYS05MjIyLTRjNDUtODM0Mi1lYjg2NDNjNDk2N2QvMC8yMUFDMjIwQjc3 QTc3RDA1MTZCQzczQjRDMjlDODM2M0REMDA5MTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNERDAw OTExQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkYWJjMGJhLTkyMjItNGM0NS04 MzQyLWViODY0M2M0OTY3ZC8wLzMyMzAzMjJlMzEzMDJlMzUzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNjMxMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoKOjANBgkqhkiG 9w0BAQsFAAOCAQEALnpoNPEeeWG8Ahd0Vx9mCPskqy3Iks5rAevP1vg+PFBI4T8T a3sNBj/K30FEoLpkztykwOk6cBBKwEpwR+nhs0uFmc0vMURnckt5Lv0xo+1YKZjb IX8jwIesbdrU353BRMjzW66mGFsYMtnuzamHip/FKYPsN0Q2q36Sk7Uo4RynLZqJ 2K60oczGMiJeOEZf5hGxpzS32lQRxKH6ceFKWzS40crpXlmkL/VryzxQ8egxmBvW IrnD8aUdEC/hDmrcdSd8n+1msPl8YnzP2dps+neIGP8N9xKcXS8DcJNJ2lEjMF8m +LIbtEUJDAw+quxay8X09fgHede2/O6zkthd7Q== -----END CERTIFICATE-----Generated at Tue Apr 30 19:13:15 2024 by rpki-client on console-ams.rpki-client.org