$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa File: 3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: vT+Fa0MTZspmh5HVvNrNjIspYca3gT2aWsFFvjFr3a8= Subject key identifier: 67:BF:5D:2A:E5:DA:3F:9C:6E:3E:B1:1A:66:9A:03:14:DF:A0:8A:89 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 7FFC6DF49E2C6C92C4A8FA4E43C94DDB17DA8223 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa Signing time: Fri 24 Nov 2023 04:08:11 +0000 ROA not before: Fri 24 Nov 2023 04:03:11 +0000 ROA not after: Fri 22 Nov 2024 04:08:11 +0000 asID: 18059 IP address blocks: 203.134.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fc:6d:f4:9e:2c:6c:92:c4:a8:fa:4e:43:c9:4d:db:17:da:82:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Nov 24 04:03:11 2023 GMT Not After : Nov 22 04:08:11 2024 GMT Subject: CN=67BF5D2AE5DA3F9C6E3EB11A669A0314DFA08A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:d8:e4:ef:7b:29:4e:a2:8e:7f:f0:5d:71: 3f:e9:98:92:78:40:98:7f:3d:5a:fd:3b:25:d6:2a: ad:f3:94:5b:1f:de:f0:99:11:1f:37:e1:df:7a:c8: b7:3b:b9:a1:a6:dd:34:e5:2d:ad:2d:86:78:f4:24: 5b:d3:0d:22:da:09:79:21:98:ff:60:4d:f1:4f:1a: a9:3e:5e:28:53:23:a2:dd:e4:e6:90:1b:82:71:e3: 9a:d8:7e:21:74:77:05:d5:c3:03:c1:d5:a0:17:33: cb:c4:52:d9:75:81:8e:30:8a:e7:af:16:45:94:12: cd:11:75:e3:76:6e:fe:b9:d8:ef:68:14:ec:2d:21: 78:1b:fb:2c:9b:a4:c3:42:1b:e5:c1:1d:c1:a7:a8: 7d:17:84:0b:80:73:27:7f:41:a7:78:94:b7:31:88: 27:04:6d:f9:48:3d:c1:5a:f8:79:1b:50:54:98:49: e8:e2:5b:44:1f:1c:fc:ba:67:3f:c3:7a:7f:e3:7c: 9d:2d:19:f2:f4:fe:47:f0:89:13:bf:12:b3:3d:fd: f4:57:d3:3b:0d:0d:c5:e4:ae:a5:82:8a:ea:ae:87: 69:e3:6c:7c:35:8d:14:c2:5b:69:80:6c:95:c2:e0: 43:c9:1a:11:5e:dd:d9:24:97:47:98:3f:ad:77:5c: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:5D:2A:E5:DA:3F:9C:6E:3E:B1:1A:66:9A:03:14:DF:A0:8A:89 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.134.239.0/24 Signature Algorithm: sha256WithRSAEncryption 28:38:2b:aa:d8:98:99:dd:da:f9:fb:a3:22:80:1f:0d:51:5a: af:27:49:20:fe:26:6d:d0:c8:e5:d4:36:2b:d7:97:0c:7d:f0: 8d:b3:2a:be:e3:ae:71:f9:8b:51:7d:88:82:e7:b8:44:b7:89: 67:8c:d8:8d:c9:da:7b:07:e2:4d:21:d3:f1:29:d0:33:8a:bc: 9a:4f:82:c9:c3:b9:ad:94:9b:80:59:d0:93:ae:25:c5:a8:81: e3:bb:cc:9c:52:07:be:83:eb:16:c8:55:07:04:2c:03:f9:d3: f6:cf:33:fb:48:bf:47:fc:11:29:2a:99:7a:e4:a9:3a:ad:ff: 28:dc:77:3e:04:39:42:a6:f4:3b:7a:05:a9:de:79:7f:1d:04: c9:8f:73:51:84:a9:1e:1f:5f:8e:62:3f:e6:0e:4c:87:48:83: f4:3c:6b:be:bb:df:ae:56:90:58:1b:c7:6d:6f:b5:c7:f1:f7: 00:7a:0c:02:11:c8:ad:a7:53:18:3f:a6:e6:47:5d:fd:3f:96: cf:a6:73:ab:b8:a0:62:ea:a3:9b:92:2f:6c:c7:10:45:70:b4: bc:fe:90:b1:50:c7:65:1f:c8:08:51:94:3c:9d:d2:a2:02:e9: 62:1c:47:2b:ad:a8:10:78:7f:0c:e9:88:d7:a4:46:bf:7e:2d: 3f:23:38:0d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUf/xt9J4sbJLEqPpOQ8lN2xfagiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yMzExMjQwNDAzMTFaFw0yNDExMjIwNDA4MTFaMDMxMTAvBgNV BAMTKDY3QkY1RDJBRTVEQTNGOUM2RTNFQjExQTY2OUEwMzE0REZBMDhBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8stjk73spTqKOf/BdcT/pmJJ4 QJh/PVr9OyXWKq3zlFsf3vCZER834d96yLc7uaGm3TTlLa0thnj0JFvTDSLaCXkh mP9gTfFPGqk+XihTI6Ld5OaQG4Jx45rYfiF0dwXVwwPB1aAXM8vEUtl1gY4wiuev FkWUEs0RdeN2bv652O9oFOwtIXgb+yybpMNCG+XBHcGnqH0XhAuAcyd/Qad4lLcx iCcEbflIPcFa+HkbUFSYSejiW0QfHPy6Zz/Den/jfJ0tGfL0/kfwiRO/ErM9/fRX 0zsNDcXkrqWCiuquh2njbHw1jRTCW2mAbJXC4EPJGhFe3dkkl0eYP613XBUJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZ79dKuXaP5xuPrEaZpoDFN+giokwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzMzM0MmUzMjMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4bvMA0GCSqG SIb3DQEBCwUAA4IBAQAoOCuq2JiZ3dr5+6MigB8NUVqvJ0kg/iZt0Mjl1DYr15cM ffCNsyq+465x+YtRfYiC57hEt4lnjNiNydp7B+JNIdPxKdAziryaT4LJw7mtlJuA WdCTriXFqIHju8ycUge+g+sWyFUHBCwD+dP2zzP7SL9H/BEpKpl65Kk6rf8o3Hc+ BDlCpvQ7egWp3nl/HQTJj3NRhKkeH1+OYj/mDkyHSIP0PGu+u9+uVpBYG8dtb7XH 8fcAegwCEcitp1MYP6bmR139P5bPpnOruKBi6qObki9sxxBFcLS8/pCxUMdlH8gI UZQ8ndKiAuliHEcrragQeH8M6YjXpEa/fi0/IzgN -----END CERTIFICATE-----Generated at Tue Apr 30 19:13:16 2024 by rpki-client on console-ams.rpki-client.org