$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32342d3234203d3e203435333132.roa File: 3230322e38312e34382e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: +p3nOp9lwgJ85sfd5FXqJhxNSJJwI4v2WJ5LHxzepxo= Subject key identifier: A6:20:BC:C2:FF:4F:E0:2E:96:A8:9B:8F:A3:73:CC:D2:8A:C7:3A:4D Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Certificate serial: 0AE68161A0B3E0B2D3FFB3A3CD6ADDFACDF984DD Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32342d3234203d3e203435333132.roa Signing time: Fri 01 Mar 2024 07:02:25 +0000 ROA not before: Fri 01 Mar 2024 06:57:25 +0000 ROA not after: Fri 28 Feb 2025 07:02:25 +0000 asID: 45312 IP address blocks: 202.81.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e6:81:61:a0:b3:e0:b2:d3:ff:b3:a3:cd:6a:dd:fa:cd:f9:84:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Validity Not Before: Mar 1 06:57:25 2024 GMT Not After : Feb 28 07:02:25 2025 GMT Subject: CN=A620BCC2FF4FE02E96A89B8FA373CCD28AC73A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:df:d9:30:fb:77:47:93:d4:0b:0c:b6:57: 67:84:38:7a:69:96:39:f9:30:2e:1d:23:b5:e6:f4: e9:5f:4c:9b:b1:2e:01:41:11:f3:0e:6c:2b:3a:0e: 9d:2f:67:83:80:ae:28:d7:0a:a1:42:b3:31:97:a3: 18:d6:1b:ad:b1:58:0f:68:a3:f0:e6:37:e8:a5:c2: 3e:80:b3:e1:ef:e2:90:ec:f7:93:b1:4f:e6:08:1b: ac:83:7d:04:43:2b:6e:92:6b:ce:02:f0:f7:e5:c5: 27:45:64:7c:63:8d:54:eb:b4:a0:66:6d:fb:74:f8: db:b9:05:75:dc:8e:f8:7e:42:3e:40:77:48:17:69: c6:33:ba:94:cd:c1:b3:73:7e:03:d2:b7:1e:11:71: 55:16:a0:43:42:8e:93:c9:b7:2f:a1:2f:6c:fb:cc: a5:7f:3c:75:9e:31:55:27:93:ec:88:aa:5b:d7:66: 29:ff:08:f7:7b:30:71:11:b3:0e:1e:16:f4:84:c5: cd:f7:72:a1:46:c9:22:14:89:20:57:b2:cd:a1:74: 4f:3c:bf:e5:74:41:02:e9:c2:f7:3c:ae:ae:ca:03: 38:4e:77:7b:b1:86:c5:68:5f:8c:f9:bb:ed:98:4c: 3c:3b:bc:b1:36:5f:79:e6:47:50:1c:98:f3:fc:f3: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:20:BC:C2:FF:4F:E0:2E:96:A8:9B:8F:A3:73:CC:D2:8A:C7:3A:4D X509v3 Authority Key Identifier: keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.81.48.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:8f:62:91:7f:f0:76:7a:04:eb:cc:01:81:3a:24:e1:84:55: 04:01:2b:3f:54:5a:5e:85:2d:b2:3d:5c:34:73:ce:9d:2a:31: 22:83:d4:60:58:a1:02:b3:34:72:4f:bf:37:ee:d1:af:7b:4a: 12:bb:2d:3b:5d:2c:d5:e2:f6:07:dd:22:28:cb:45:c0:05:03: 17:9a:4d:26:32:03:66:4a:7e:b4:4f:56:9e:64:15:fa:7f:5c: 46:6c:9b:55:68:0a:9b:11:ef:8a:46:5c:ff:b0:cb:1a:f6:b5: f1:85:7f:7f:cc:98:53:50:46:12:41:9a:5f:75:af:df:c1:de: fc:ad:fe:bf:ce:82:fd:49:47:8a:c6:9a:43:b9:b8:fe:0e:e2: ce:e5:ed:f0:43:d4:23:ed:06:99:62:df:b9:ef:6b:53:68:5b: 2e:97:aa:37:cd:14:89:43:47:8c:1a:c2:08:fd:97:10:98:6b: 58:fd:30:98:eb:2c:b1:f5:db:c7:33:f2:6e:90:f0:2b:da:29: da:dd:2c:ca:4b:fb:4b:7a:ad:fa:b9:12:37:cf:86:e5:be:d6: ae:c6:ce:7e:da:f5:9a:34:7c:39:10:f2:a5:5e:16:c8:a3:59: 8f:5d:ab:37:b7:29:ae:6d:43:9c:9a:03:30:9a:a3:dd:92:b1: 48:f1:35:3d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCuaBYaCz4LLT/7OjzWrd+s35hN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB MEJGQzQ0MTAeFw0yNDAzMDEwNjU3MjVaFw0yNTAyMjgwNzAyMjVaMDMxMTAvBgNV BAMTKEE2MjBCQ0MyRkY0RkUwMkU5NkE4OUI4RkEzNzNDQ0QyOEFDNzNBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGN/ZMPt3R5PUCwy2V2eEOHpp ljn5MC4dI7Xm9OlfTJuxLgFBEfMObCs6Dp0vZ4OArijXCqFCszGXoxjWG62xWA9o o/DmN+ilwj6As+Hv4pDs95OxT+YIG6yDfQRDK26Sa84C8PflxSdFZHxjjVTrtKBm bft0+Nu5BXXcjvh+Qj5Ad0gXacYzupTNwbNzfgPStx4RcVUWoENCjpPJty+hL2z7 zKV/PHWeMVUnk+yIqlvXZin/CPd7MHERsw4eFvSExc33cqFGySIUiSBXss2hdE88 v+V0QQLpwvc8rq7KAzhOd3uxhsVoX4z5u+2YTDw7vLE2X3nmR1AcmPP886rhAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUpiC8wv9P4C6WqJuPo3PM0orHOk0wHwYDVR0j BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4 NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzQzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTAwDQYJKoZIhvcN AQELBQADggEBAIuPYpF/8HZ6BOvMAYE6JOGEVQQBKz9UWl6FLbI9XDRzzp0qMSKD 1GBYoQKzNHJPvzfu0a97ShK7LTtdLNXi9gfdIijLRcAFAxeaTSYyA2ZKfrRPVp5k Ffp/XEZsm1VoCpsR74pGXP+wyxr2tfGFf3/MmFNQRhJBml91r9/B3vyt/r/Ogv1J R4rGmkO5uP4O4s7l7fBD1CPtBpli37nva1NoWy6XqjfNFIlDR4wawgj9lxCYa1j9 MJjrLLH128cz8m6Q8CvaKdrdLMpL+0t6rfq5EjfPhuW+1q7Gzn7a9Zo0fDkQ8qVe FsijWY9dqze3Ka5tQ5yaAzCao92SsUjxNT0= -----END CERTIFICATE-----Generated at Tue May 7 16:42:47 2024 by rpki-client on console-ams.rpki-client.org