$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa File: 34332e3234372e33342e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: IcNsF5EtxC9xMwPfivG4cTxN6DSIg5K8w2AqHEngCdg= Subject key identifier: B7:5E:20:F0:EB:C5:E0:8B:4F:C6:98:DC:EE:6E:FF:F4:08:F1:7F:07 Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Certificate serial: 7CC7C78DE782883B015536D4E7DA7A1421948B40 Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa Signing time: Fri 05 Jan 2024 04:29:17 +0000 ROA not before: Fri 05 Jan 2024 04:24:17 +0000 ROA not after: Fri 03 Jan 2025 04:29:17 +0000 asID: 45312 IP address blocks: 43.247.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c7:c7:8d:e7:82:88:3b:01:55:36:d4:e7:da:7a:14:21:94:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Validity Not Before: Jan 5 04:24:17 2024 GMT Not After : Jan 3 04:29:17 2025 GMT Subject: CN=B75E20F0EBC5E08B4FC698DCEE6EFFF408F17F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:b1:ad:04:d2:59:6a:55:2c:b8:2f:f6:1a: 54:ed:76:44:c2:fe:dd:27:5a:12:38:6a:93:b4:33: f1:78:24:92:2a:89:9e:fc:c6:4e:c3:93:3c:1d:5c: 99:5f:e5:00:7d:98:47:6b:71:be:02:16:d9:92:7d: 8d:58:0b:74:15:dc:13:e8:a2:cc:59:5b:f8:63:81: ce:2d:81:b2:f2:8d:61:25:57:28:5f:a1:2e:40:42: d5:92:b4:b5:a0:e2:58:3b:51:e5:d3:86:50:d0:f2: e7:2c:0c:65:55:ad:1a:92:3f:eb:02:b2:b3:4c:30: 80:d3:9b:1c:47:24:03:d5:06:91:50:33:7f:e3:a2: 1a:61:f1:43:60:8b:1c:9e:b3:b2:93:9d:2a:13:f4: 1d:80:08:4c:12:2c:8d:f5:cd:cd:9a:fa:fd:05:2a: 94:ae:c5:0f:1d:bb:81:68:6d:52:74:f4:fb:f4:d4: 98:24:cf:14:ad:07:c3:5f:c2:6f:ed:70:f7:69:4c: 70:46:54:8c:2f:9a:78:26:77:f3:19:9a:27:c6:8b: 63:2a:e1:5c:8d:75:60:1a:b6:2e:ba:56:67:f2:b1: 18:f0:00:ec:8b:f8:96:2a:9f:b1:96:46:d7:c6:59: dc:5b:57:b9:5f:80:07:18:44:68:67:f4:2c:43:84: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5E:20:F0:EB:C5:E0:8B:4F:C6:98:DC:EE:6E:FF:F4:08:F1:7F:07 X509v3 Authority Key Identifier: keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.34.0/24 Signature Algorithm: sha256WithRSAEncryption 95:6c:82:b4:67:7c:2d:72:d3:62:c9:fc:54:61:1b:e2:a7:5f: c5:57:99:db:fb:7e:e2:01:bc:34:b2:a8:05:d0:65:1f:4a:55: d1:0f:ce:eb:aa:45:d3:3c:47:a8:44:8b:9b:5c:cf:87:69:5c: f0:39:81:b0:ac:b6:f2:99:8d:c2:1e:b1:1c:72:82:7f:cc:6d: e4:8f:14:87:57:f4:45:a2:3e:46:2f:3c:db:88:fb:dc:ab:a6: f4:5d:77:53:14:5f:ce:0b:52:88:91:c3:08:0b:ef:7b:06:ed: 56:62:da:40:4a:d8:1d:fc:b0:83:8d:db:1b:0e:d8:c1:03:11: 50:c1:f9:5d:ad:3d:e4:e1:c9:ac:f9:06:3a:ec:a5:d1:33:ce: 30:de:17:59:85:cd:1a:71:f5:0d:4b:0c:b9:28:e5:cb:59:55: 80:ad:50:e0:3b:2f:29:8f:93:bc:79:e1:ca:32:83:28:0a:54: df:9a:ee:6d:38:4b:76:4b:b7:38:22:73:46:4b:c0:83:43:db: c6:85:e5:13:bd:54:28:f6:d5:ad:d3:82:01:5e:f4:df:65:d0: cd:a0:47:aa:63:77:00:78:48:a4:1c:6d:fc:0f:3b:c1:ef:38: 9d:ea:01:25:c8:c5:80:3c:21:3d:cf:ef:26:c9:3a:d6:4d:8b: d1:2e:5b:cc -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUfMfHjeeCiDsBVTbU59p6FCGUi0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB MEJGQzQ0MTAeFw0yNDAxMDUwNDI0MTdaFw0yNTAxMDMwNDI5MTdaMDMxMTAvBgNV BAMTKEI3NUUyMEYwRUJDNUUwOEI0RkM2OThEQ0VFNkVGRkY0MDhGMTdGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6H7GtBNJZalUsuC/2GlTtdkTC /t0nWhI4apO0M/F4JJIqiZ78xk7DkzwdXJlf5QB9mEdrcb4CFtmSfY1YC3QV3BPo osxZW/hjgc4tgbLyjWElVyhfoS5AQtWStLWg4lg7UeXThlDQ8ucsDGVVrRqSP+sC srNMMIDTmxxHJAPVBpFQM3/johph8UNgixyes7KTnSoT9B2ACEwSLI31zc2a+v0F KpSuxQ8du4FobVJ09Pv01JgkzxStB8Nfwm/tcPdpTHBGVIwvmngmd/MZmifGi2Mq 4VyNdWAati66VmfysRjwAOyL+JYqn7GWRtfGWdxbV7lfgAcYRGhn9CxDhMN/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUt14g8OvF4ItPxpjc7m7/9AjxfwcwHwYDVR0j BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4 NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzM0MzMyZTMyMzQzNzJlMzMzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr9yIwDQYJKoZIhvcN AQELBQADggEBAJVsgrRnfC1y02LJ/FRhG+KnX8VXmdv7fuIBvDSyqAXQZR9KVdEP zuuqRdM8R6hEi5tcz4dpXPA5gbCstvKZjcIesRxygn/MbeSPFIdX9EWiPkYvPNuI +9yrpvRdd1MUX84LUoiRwwgL73sG7VZi2kBK2B38sION2xsO2MEDEVDB+V2tPeTh yaz5BjrspdEzzjDeF1mFzRpx9Q1LDLko5ctZVYCtUOA7LymPk7x54coygygKVN+a 7m04S3ZLtzgic0ZLwIND28aF5RO9VCj21a3TggFe9N9l0M2gR6pjdwB4SKQcbfwP O8HvOJ3qASXIxYA8IT3P7ybJOtZNi9EuW8w= -----END CERTIFICATE-----Generated at Tue May 7 18:07:25 2024 by rpki-client on console-fra.rpki-client.org