$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa File: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (raw, json) Hash identifier: +CWIDJDcYNdG6zQ8aTLHVaL5jMUMEIBbKlPMa51s4+U= Subject key identifier: C8:FB:CC:95:4A:CC:5A:1D:06:F4:43:63:51:49:87:65:12:8C:67:F3 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 4C94334202F1E202D1640F7A6CEEB717DEE71B40 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa Signing time: Mon 31 Jul 2023 00:08:31 +0000 ROA not before: Mon 31 Jul 2023 00:03:31 +0000 ROA not after: Mon 29 Jul 2024 00:08:31 +0000 asID: 38156 IP address blocks: 203.190.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 10:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:94:33:42:02:f1:e2:02:d1:64:0f:7a:6c:ee:b7:17:de:e7:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Jul 31 00:03:31 2023 GMT Not After : Jul 29 00:08:31 2024 GMT Subject: CN=C8FBCC954ACC5A1D06F4436351498765128C67F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:af:41:cb:20:44:bc:ea:55:df:a9:c2:56: 50:48:03:a8:6d:43:5c:61:85:52:8d:1b:14:ec:e8: d7:3a:2d:52:98:0d:a9:31:1d:7d:c7:9b:11:83:42: ea:6b:f9:6e:e1:0c:84:54:a5:5e:a8:d5:9d:49:b7: 15:2a:cc:7d:58:e2:ee:23:15:ed:14:0d:f5:98:91: 02:df:35:93:be:21:7a:01:5d:de:27:a9:22:f3:5f: 43:93:6d:ec:a8:d1:1e:6a:7e:04:34:51:28:69:e1: a8:2b:54:b5:c5:77:45:64:e5:cb:25:f6:2b:90:8e: 3c:f6:6f:3e:18:ef:e6:55:84:bf:2d:0e:29:98:bd: 42:30:c2:13:ad:2d:39:d2:50:59:f4:89:a3:a2:88: b2:1e:23:5f:1d:a5:90:05:86:65:99:de:ae:a4:eb: ff:76:53:21:b2:88:53:52:5c:51:62:49:85:96:8a: c2:b2:f2:71:6a:7a:56:9f:e6:6a:ec:78:11:1a:c4: 6c:d7:d2:af:e2:b8:84:86:d8:4e:d6:a8:86:15:d8: 1f:d1:0c:d4:c7:c9:78:05:58:3c:15:c2:42:65:d7: 64:38:55:5f:30:98:b5:f0:4d:b8:be:6b:04:c6:de: ca:91:87:0a:71:c5:e1:64:f0:3f:10:79:aa:40:67: 99:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FB:CC:95:4A:CC:5A:1D:06:F4:43:63:51:49:87:65:12:8C:67:F3 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.118.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:16:11:a6:34:6a:28:d1:1e:11:a5:2a:c7:4e:87:e8:80:83: 4f:f5:31:fd:65:b6:de:00:2a:a0:2a:01:fd:37:fb:99:c7:fa: 94:ce:2d:ae:bf:83:f7:67:ba:e9:ed:71:9a:a3:94:cb:0f:96: de:cc:3b:c1:bf:36:0b:1e:ef:d6:6b:4c:d3:a7:8b:65:62:19: fc:2b:e9:5e:fa:31:81:05:35:50:64:1e:d2:bd:61:64:34:64: e0:8c:67:3a:18:9d:31:7f:f2:98:5a:29:7e:ce:74:0b:ba:f9: 89:82:43:40:a8:ef:d6:b0:9f:b9:64:ca:6f:36:27:5f:ed:c8: 70:c8:74:3a:b2:89:f0:ab:05:44:67:b5:1f:d4:2e:b2:9e:11: 57:bc:42:cd:5c:b7:5d:a1:e7:50:d6:9e:d8:e9:79:9b:54:db: 10:b2:28:0f:97:5f:ee:a1:0b:13:fa:22:f1:94:a6:4b:2c:8b: 6a:5e:4a:a9:71:fe:dc:f0:f6:e9:d8:b2:5e:d0:c4:7e:18:b3: 48:46:a2:04:5b:84:cf:01:51:2e:56:aa:11:58:5d:4f:65:a1: 5e:b9:75:59:5e:2d:a0:84:74:da:20:9a:92:4d:ef:c2:00:cf: 82:ca:6f:c2:7f:ef:3f:26:38:65:a8:cd:0d:98:13:38:64:47: fd:26:6a:c6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTJQzQgLx4gLRZA96bO63F97nG0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yMzA3MzEwMDAzMzFaFw0yNDA3MjkwMDA4MzFaMDMxMTAvBgNV BAMTKEM4RkJDQzk1NEFDQzVBMUQwNkY0NDM2MzUxNDk4NzY1MTI4QzY3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhLq9ByyBEvOpV36nCVlBIA6ht Q1xhhVKNGxTs6Nc6LVKYDakxHX3HmxGDQupr+W7hDIRUpV6o1Z1JtxUqzH1Y4u4j Fe0UDfWYkQLfNZO+IXoBXd4nqSLzX0OTbeyo0R5qfgQ0UShp4agrVLXFd0Vk5csl 9iuQjjz2bz4Y7+ZVhL8tDimYvUIwwhOtLTnSUFn0iaOiiLIeI18dpZAFhmWZ3q6k 6/92UyGyiFNSXFFiSYWWisKy8nFqelaf5mrseBEaxGzX0q/iuISG2E7WqIYV2B/R DNTHyXgFWDwVwkJl12Q4VV8wmLXwTbi+awTG3sqRhwpxxeFk8D8QeapAZ5mxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyPvMlUrMWh0G9ENjUUmHZRKMZ/MwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzAzMzJlMzEzOTMwMmUzMTMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy752MA0GCSqG SIb3DQEBCwUAA4IBAQBtFhGmNGoo0R4RpSrHTofogINP9TH9ZbbeACqgKgH9N/uZ x/qUzi2uv4P3Z7rp7XGao5TLD5bezDvBvzYLHu/Wa0zTp4tlYhn8K+le+jGBBTVQ ZB7SvWFkNGTgjGc6GJ0xf/KYWil+znQLuvmJgkNAqO/WsJ+5ZMpvNidf7chwyHQ6 sonwqwVEZ7Uf1C6ynhFXvELNXLddoedQ1p7Y6XmbVNsQsigPl1/uoQsT+iLxlKZL LItqXkqpcf7c8Pbp2LJe0MR+GLNIRqIEW4TPAVEuVqoRWF1PZaFeuXVZXi2ghHTa IJqSTe/CAM+Cym/Cf+8/JjhlqM0NmBM4ZEf9JmrG -----END CERTIFICATE-----Generated at Wed Apr 24 11:01:38 2024 by rpki-client on console-ams.rpki-client.org