$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35302e302f32342d3234203d3e203435333132.roa File: 3230322e38312e35302e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: /1Ba+wPJ7WLfjkw/yDi0P4pHbUjuA82TUaAOonpgpKc= Subject key identifier: 6E:A2:64:3A:CE:8A:54:55:50:43:03:A8:56:A4:A2:6F:C3:7E:D5:AA Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Certificate serial: 3910AFC5113E497AC9A4BD5C8DCDF0C3C08697C5 Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35302e302f32342d3234203d3e203435333132.roa Signing time: Fri 22 Dec 2023 08:00:29 +0000 ROA not before: Fri 22 Dec 2023 07:55:29 +0000 ROA not after: Fri 20 Dec 2024 08:00:29 +0000 asID: 45312 IP address blocks: 202.81.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:10:af:c5:11:3e:49:7a:c9:a4:bd:5c:8d:cd:f0:c3:c0:86:97:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Validity Not Before: Dec 22 07:55:29 2023 GMT Not After : Dec 20 08:00:29 2024 GMT Subject: CN=6EA2643ACE8A5455504303A856A4A26FC37ED5AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:4a:4f:79:51:f6:99:d2:d9:0c:18:c0:73: f8:7e:7b:f3:8b:10:73:1e:64:2a:68:59:03:0a:ad: bd:a9:ca:3f:2b:ec:95:92:04:7d:16:30:89:c3:c1: 92:91:8b:87:81:f2:98:d8:0e:b7:73:52:4b:9c:4a: be:0e:7b:f1:38:a3:07:b5:26:4e:dc:5c:ac:8b:e5: b6:10:29:7b:d0:92:40:80:d0:f0:2b:6a:c2:c9:e5: d5:3d:84:52:ad:9f:10:36:74:80:8b:32:47:03:6c: 40:69:3e:9d:05:c5:26:5f:35:5c:eb:d2:69:d3:fa: 78:98:ea:62:5d:d6:56:0e:62:d4:63:b9:38:76:4d: 05:dc:60:43:43:7f:9e:e2:de:a0:a4:62:c7:64:57: 6a:81:de:ee:26:b7:b4:cb:6b:7a:f3:39:10:c9:11: 5a:3c:00:54:a4:e3:9d:1f:ef:a9:2c:9d:e4:d1:b5: 1c:99:1e:59:d1:39:79:c0:4f:a9:10:55:d3:14:c7: f5:80:9e:83:1e:c8:2c:b1:b1:57:d5:07:e7:22:da: 88:c4:f2:95:c5:72:65:f7:44:16:d9:60:b1:32:2c: 89:be:4f:b4:1c:a4:af:34:35:d4:06:da:2e:e4:17: 89:cc:f1:f2:22:7c:02:a6:11:e2:9f:43:f9:f9:6e: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A2:64:3A:CE:8A:54:55:50:43:03:A8:56:A4:A2:6F:C3:7E:D5:AA X509v3 Authority Key Identifier: keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35302e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.81.50.0/24 Signature Algorithm: sha256WithRSAEncryption cb:63:8e:1a:d9:41:92:16:35:5d:0d:fd:57:e8:82:fa:e5:3f: 54:f0:b5:33:51:ca:e9:3f:64:b9:15:b1:6a:5f:e7:d8:06:2e: da:13:79:40:1c:45:6a:6f:2c:44:b5:85:62:0f:60:66:57:fb: e9:6c:c1:da:94:b2:51:f7:48:2f:3d:31:fa:1a:6d:26:cd:ae: 58:f6:de:b3:bd:b6:50:5c:83:c6:2d:57:f2:89:72:b8:0b:9e: c4:a7:0e:3a:a1:60:f8:ad:5b:b0:b6:e8:98:81:04:dd:db:69: 07:48:e2:b8:22:5f:b0:a6:ff:a1:ff:bd:94:c5:a2:3a:1f:d6: d0:ea:92:0b:d7:07:81:8d:7d:1c:95:23:42:78:dd:54:33:97: 14:62:b4:9c:cb:08:50:66:1b:7e:e0:be:33:14:e2:12:8b:54: 69:8c:d1:16:69:21:5e:f3:2b:49:4c:e2:fa:d4:41:20:67:f1: 05:ec:cd:fd:8a:49:84:d4:8d:c8:3d:bd:28:9a:6c:21:00:2a: a6:74:7b:fe:3b:dc:3a:f6:cb:41:68:9e:4e:fb:2e:24:df:b2: 42:86:40:9a:a2:b7:5c:ad:41:91:2b:b0:c4:11:bc:fc:10:5a: 99:ec:f1:cc:3b:6f:ec:40:25:1d:26:5f:db:4a:41:1d:58:d0: 09:0a:a0:b4 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUORCvxRE+SXrJpL1cjc3ww8CGl8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB MEJGQzQ0MTAeFw0yMzEyMjIwNzU1MjlaFw0yNDEyMjAwODAwMjlaMDMxMTAvBgNV BAMTKDZFQTI2NDNBQ0U4QTU0NTU1MDQzMDNBODU2QTRBMjZGQzM3RUQ1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI0kpPeVH2mdLZDBjAc/h+e/OL EHMeZCpoWQMKrb2pyj8r7JWSBH0WMInDwZKRi4eB8pjYDrdzUkucSr4Oe/E4owe1 Jk7cXKyL5bYQKXvQkkCA0PArasLJ5dU9hFKtnxA2dICLMkcDbEBpPp0FxSZfNVzr 0mnT+niY6mJd1lYOYtRjuTh2TQXcYENDf57i3qCkYsdkV2qB3u4mt7TLa3rzORDJ EVo8AFSk450f76ksneTRtRyZHlnROXnAT6kQVdMUx/WAnoMeyCyxsVfVB+ci2ojE 8pXFcmX3RBbZYLEyLIm+T7QcpK80NdQG2i7kF4nM8fIifAKmEeKfQ/n5bmr7AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUbqJkOs6KVFVQQwOoVqSib8N+1aowHwYDVR0j BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4 NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzUzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTIwDQYJKoZIhvcN AQELBQADggEBAMtjjhrZQZIWNV0N/VfogvrlP1TwtTNRyuk/ZLkVsWpf59gGLtoT eUAcRWpvLES1hWIPYGZX++lswdqUslH3SC89MfoabSbNrlj23rO9tlBcg8YtV/KJ crgLnsSnDjqhYPitW7C26JiBBN3baQdI4rgiX7Cm/6H/vZTFojof1tDqkgvXB4GN fRyVI0J43VQzlxRitJzLCFBmG37gvjMU4hKLVGmM0RZpIV7zK0lM4vrUQSBn8QXs zf2KSYTUjcg9vSiabCEAKqZ0e/473Dr2y0Fonk77LiTfskKGQJqit1ytQZErsMQR vPwQWpns8cw7b+xAJR0mX9tKQR1Y0AkKoLQ= -----END CERTIFICATE-----Generated at Tue May 7 18:07:25 2024 by rpki-client on console-fra.rpki-client.org