$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233322e302f32342d3234203d3e203138303539.roa File: 3230332e3133342e3233322e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: 5UP70GE/jLyvScRPSY7GnfH7hNTgiPcsl886OE+XJiQ= Subject key identifier: 7B:AF:C0:9F:24:27:01:B5:90:A2:94:4F:73:48:13:1C:53:A8:87:F1 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 0EADDE74C19DF98CA0177F0FDA4A12386964C52B Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233322e302f32342d3234203d3e203138303539.roa Signing time: Fri 24 Nov 2023 04:06:19 +0000 ROA not before: Fri 24 Nov 2023 04:01:19 +0000 ROA not after: Fri 22 Nov 2024 04:06:19 +0000 asID: 18059 IP address blocks: 203.134.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 04:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ad:de:74:c1:9d:f9:8c:a0:17:7f:0f:da:4a:12:38:69:64:c5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Nov 24 04:01:19 2023 GMT Not After : Nov 22 04:06:19 2024 GMT Subject: CN=7BAFC09F242701B590A2944F7348131C53A887F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:8e:82:84:8b:8c:27:35:16:6b:81:1e:54: a6:d6:b2:8d:cf:25:53:18:a9:68:1d:28:f7:8e:73: f1:d2:4b:95:43:8e:91:da:35:09:c9:e6:ed:82:d5: fb:ff:7e:98:99:e1:55:4c:8f:db:4c:e9:e0:b1:c5: 72:a6:ae:e0:28:36:35:37:42:95:7f:da:3c:78:5e: 2c:1c:de:00:a3:76:ca:4e:f7:d0:dd:7d:ac:bc:7b: 9b:e1:a7:5d:42:51:0c:e3:90:7b:c1:af:62:fa:88: 5e:74:3b:01:6d:98:ee:cd:75:5f:a4:33:3d:c9:e0: c6:70:af:13:d5:30:5d:f6:b8:57:f1:3e:0f:82:84: 3b:f6:56:36:17:90:8d:18:33:35:5a:12:e5:b9:e4: 4f:c6:09:75:28:39:06:bd:55:e0:a7:a4:4f:7d:bc: 5e:1d:31:e1:36:75:29:b3:1e:0e:2f:d8:33:d3:45: dc:2a:8d:41:37:5a:dd:8e:7b:5f:bd:ac:b2:ef:be: c6:46:5e:42:9e:f0:d3:14:cc:2e:9f:09:bf:36:90: 22:7b:9b:8f:72:ce:e5:55:9c:26:c3:86:5b:9c:79: c2:00:ec:a1:87:ea:20:26:35:b1:93:76:be:4e:39: 0e:1e:6d:89:c2:0e:d2:f5:c7:b8:36:a9:5c:17:20: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AF:C0:9F:24:27:01:B5:90:A2:94:4F:73:48:13:1C:53:A8:87:F1 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233322e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.134.232.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:18:c4:d0:e4:e8:a7:95:97:78:fb:37:07:2e:d7:7e:6a:a8: eb:fd:55:6a:ea:f1:7c:2c:27:35:52:9f:62:35:bb:0c:11:41: ad:6b:c8:3d:66:8b:e5:03:a0:f3:87:c0:06:e2:69:89:e2:12: 44:59:5a:e0:94:a1:d8:04:37:6b:c7:f7:4c:67:15:ef:19:9b: 7e:22:9a:39:84:d5:27:fe:ea:05:93:ec:63:50:41:52:3a:4c: 16:33:77:9f:97:ac:ea:55:27:eb:28:b1:d3:40:c2:39:d1:98: 6e:66:31:86:4c:39:33:22:18:41:34:c0:60:ac:f3:96:aa:48: 0b:ad:d7:94:d1:54:d6:96:a6:21:eb:4d:b9:e0:b5:5e:c0:24: 50:ce:d6:48:8b:65:80:44:41:d6:11:e3:8d:0f:dd:80:bc:54: 9a:27:87:2b:29:1c:1d:d0:7c:7b:f3:f7:ea:b6:25:ac:42:b8: fb:b8:10:59:24:ee:51:a8:71:fc:6c:77:2e:1b:8c:d6:e1:7e: cc:76:70:eb:5d:04:ad:59:d2:2f:fe:e6:e8:3e:b8:d0:aa:4c: 1e:d8:cb:cc:9d:ae:95:68:79:c4:49:f5:0b:40:52:64:9e:6f: c5:94:dc:66:0f:06:55:f6:90:44:ec:12:f2:64:c1:8c:d2:96: 91:4a:88:78 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDq3edMGd+YygF38P2koSOGlkxSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yMzExMjQwNDAxMTlaFw0yNDExMjIwNDA2MTlaMDMxMTAvBgNV BAMTKDdCQUZDMDlGMjQyNzAxQjU5MEEyOTQ0RjczNDgxMzFDNTNBODg3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKo6ChIuMJzUWa4EeVKbWso3P JVMYqWgdKPeOc/HSS5VDjpHaNQnJ5u2C1fv/fpiZ4VVMj9tM6eCxxXKmruAoNjU3 QpV/2jx4Xiwc3gCjdspO99Ddfay8e5vhp11CUQzjkHvBr2L6iF50OwFtmO7NdV+k Mz3J4MZwrxPVMF32uFfxPg+ChDv2VjYXkI0YMzVaEuW55E/GCXUoOQa9VeCnpE99 vF4dMeE2dSmzHg4v2DPTRdwqjUE3Wt2Oe1+9rLLvvsZGXkKe8NMUzC6fCb82kCJ7 m49yzuVVnCbDhlucecIA7KGH6iAmNbGTdr5OOQ4ebYnCDtL1x7g2qVwXIE/hAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUe6/AnyQnAbWQopRPc0gTHFOoh/EwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzMzM0MmUzMjMzMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4boMA0GCSqG SIb3DQEBCwUAA4IBAQBLGMTQ5OinlZd4+zcHLtd+aqjr/VVq6vF8LCc1Up9iNbsM EUGta8g9ZovlA6Dzh8AG4mmJ4hJEWVrglKHYBDdrx/dMZxXvGZt+Ipo5hNUn/uoF k+xjUEFSOkwWM3efl6zqVSfrKLHTQMI50ZhuZjGGTDkzIhhBNMBgrPOWqkgLrdeU 0VTWlqYh60254LVewCRQztZIi2WAREHWEeOND92AvFSaJ4crKRwd0Hx78/fqtiWs Qrj7uBBZJO5RqHH8bHcuG4zW4X7MdnDrXQStWdIv/uboPrjQqkwe2MvMna6VaHnE SfULQFJknm/FlNxmDwZV9pBE7BLyZMGM0paRSoh4 -----END CERTIFICATE-----Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org