$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136382e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3136382e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: BrnfbS889zsZf/tye8VWfJcaLXs4vwDHDr6OhVNEaNk= Subject key identifier: D3:F3:30:37:A1:98:73:BC:45:A2:9E:E5:6E:5D:D3:07:F6:6F:29:A1 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 7BFD211373992874040F4F957C25903986FD4762 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136382e302f32342d3234203d3e203138303539.roa Signing time: Fri 24 Nov 2023 03:23:00 +0000 ROA not before: Fri 24 Nov 2023 03:18:00 +0000 ROA not after: Fri 22 Nov 2024 03:23:00 +0000 asID: 18059 IP address blocks: 202.43.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fd:21:13:73:99:28:74:04:0f:4f:95:7c:25:90:39:86:fd:47:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Nov 24 03:18:00 2023 GMT Not After : Nov 22 03:23:00 2024 GMT Subject: CN=D3F33037A19873BC45A29EE56E5DD307F66F29A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:08:d5:f2:b0:c0:f9:6f:81:c8:61:d3:a9:8a: c9:ea:cc:74:22:d6:c1:e2:d6:24:49:86:93:96:0d: 86:67:62:56:89:61:44:76:a6:b6:d0:e0:b0:62:4d: 07:5f:e1:cf:19:f2:d2:ff:b6:35:da:d0:73:2d:74: 16:e2:9e:7e:c6:d4:25:fe:c1:8a:25:9b:ea:2a:61: 25:4a:d5:f1:2f:5b:a3:71:98:e5:eb:83:18:13:b1: 20:4e:82:4d:44:8f:a7:f7:33:ec:44:f1:39:5d:77: 69:6e:6e:87:04:f7:9a:6b:bc:35:f3:1f:9e:c2:7d: 3c:ef:04:af:d4:19:32:22:11:ac:ce:5f:a9:52:cf: 22:c7:a1:40:3f:dc:aa:23:a0:96:1d:81:d5:28:d8: a5:92:fa:04:8b:8c:71:5f:ed:88:5d:12:7d:e9:75: 96:d2:c1:c6:c7:36:65:c1:d2:54:41:64:9f:f7:82: e0:47:10:78:d6:ec:17:05:47:f0:9e:9f:dd:9b:e9: 4a:ec:f3:af:f1:2c:96:a6:09:ac:cb:9a:ef:ce:82: 48:fa:c0:8a:75:f8:92:08:76:54:2c:50:ba:f6:9e: 32:91:ed:e4:7b:4c:d0:41:3f:93:47:7d:d9:21:a4: 10:c3:23:36:0a:35:31:33:d5:ff:71:78:00:0c:f0: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F3:30:37:A1:98:73:BC:45:A2:9E:E5:6E:5D:D3:07:F6:6F:29:A1 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136382e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.168.0/24 Signature Algorithm: sha256WithRSAEncryption 09:8b:1a:96:8f:d6:05:2d:62:69:ba:e3:a0:2d:57:56:98:97: 88:65:0a:66:e1:c1:4d:e3:f5:42:78:ec:7c:81:f3:d5:f8:26: 1f:27:61:03:88:1b:a0:83:69:ba:41:ad:ae:f9:8b:e7:56:9d: 3a:fe:4c:89:dd:93:a8:30:22:b3:72:b0:c0:d0:96:44:d4:86: 78:b2:26:58:12:d5:7d:a8:65:47:e9:30:e3:1a:d6:4b:9d:98: ac:ba:fd:a6:86:ff:9c:72:b4:d6:26:93:97:5d:4b:28:44:44: ce:22:a7:c8:37:73:b1:75:64:32:26:9c:08:31:df:f3:81:12: 08:16:0b:16:89:fa:4c:0d:a3:a0:ea:a6:54:28:76:00:5f:be: 4d:c9:2b:78:0c:e2:08:18:f1:d4:e7:5a:f6:37:83:92:ad:d3: 4c:aa:b0:d3:05:69:6f:bb:c2:bc:b8:34:3c:ed:c5:9c:2b:67: 7e:f1:b4:cd:e4:64:d8:0e:46:a6:9e:4c:7b:12:fd:17:31:e6: d8:17:f8:3c:e3:77:54:1a:24:86:ff:64:f9:37:a8:16:38:98: 75:30:59:85:ba:45:be:52:0d:67:ba:d7:e9:ba:50:ea:de:46: ed:50:d4:55:04:a2:4d:c7:73:1f:b7:8c:12:e3:c9:dd:8c:6b: 85:e0:7e:8d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUe/0hE3OZKHQED0+VfCWQOYb9R2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yMzExMjQwMzE4MDBaFw0yNDExMjIwMzIzMDBaMDMxMTAvBgNV BAMTKEQzRjMzMDM3QTE5ODczQkM0NUEyOUVFNTZFNUREMzA3RjY2RjI5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrCNXysMD5b4HIYdOpisnqzHQi 1sHi1iRJhpOWDYZnYlaJYUR2prbQ4LBiTQdf4c8Z8tL/tjXa0HMtdBbinn7G1CX+ wYolm+oqYSVK1fEvW6NxmOXrgxgTsSBOgk1Ej6f3M+xE8Tldd2lubocE95prvDXz H57CfTzvBK/UGTIiEazOX6lSzyLHoUA/3KojoJYdgdUo2KWS+gSLjHFf7YhdEn3p dZbSwcbHNmXB0lRBZJ/3guBHEHjW7BcFR/Cen92b6Urs86/xLJamCazLmu/Ogkj6 wIp1+JIIdlQsULr2njKR7eR7TNBBP5NHfdkhpBDDIzYKNTEz1f9xeAAM8F39AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU0/MwN6GYc7xFop7lbl3TB/ZvKaEwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorqDANBgkqhkiG 9w0BAQsFAAOCAQEACYsalo/WBS1iabrjoC1XVpiXiGUKZuHBTeP1QnjsfIHz1fgm HydhA4gboINpukGtrvmL51adOv5Mid2TqDAis3KwwNCWRNSGeLImWBLVfahlR+kw 4xrWS52YrLr9pob/nHK01iaTl11LKEREziKnyDdzsXVkMiacCDHf84ESCBYLFon6 TA2joOqmVCh2AF++TckreAziCBjx1Oda9jeDkq3TTKqw0wVpb7vCvLg0PO3FnCtn fvG0zeRk2A5Gpp5MexL9FzHm2Bf4PON3VBokhv9k+TeoFjiYdTBZhbpFvlINZ7rX 6bpQ6t5G7VDUVQSiTcdzH7eMEuPJ3YxrheB+jQ== -----END CERTIFICATE-----Generated at Sun Apr 28 15:44:29 2024 by rpki-client on console-fra.rpki-client.org