$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/34332e3232352e36342e302f32322d3234203d3e203538343935.roa File: 34332e3232352e36342e302f32322d3234203d3e203538343935.roa (raw, json) Hash identifier: mPRMfN6p6ItXzf6K7rQvwU8HYow2ggPcgFPYvpjMQlw= Subject key identifier: 65:71:3C:C9:DC:5B:9F:D5:7D:A1:7B:06:19:C4:AE:4F:E4:CA:82:A8 Certificate issuer: /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Certificate serial: 62C2546396DBDC2A45F3CB111BEB76A976EAAE64 Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/34332e3232352e36342e302f32322d3234203d3e203538343935.roa Signing time: Mon 31 Jul 2023 00:06:12 +0000 ROA not before: Mon 31 Jul 2023 00:01:12 +0000 ROA not after: Mon 29 Jul 2024 00:06:12 +0000 asID: 58495 IP address blocks: 43.225.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 02:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c2:54:63:96:db:dc:2a:45:f3:cb:11:1b:eb:76:a9:76:ea:ae:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Validity Not Before: Jul 31 00:01:12 2023 GMT Not After : Jul 29 00:06:12 2024 GMT Subject: CN=65713CC9DC5B9FD57DA17B0619C4AE4FE4CA82A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:36:62:ac:49:44:9c:b1:8f:ed:0a:6c:b2: 23:72:28:4a:8c:b7:6c:c6:f5:49:18:11:cd:84:87: 84:36:e6:18:54:0e:85:94:7f:82:ef:28:e8:80:9f: 05:8d:85:99:9f:48:93:9a:e3:c6:69:29:f6:27:35: 89:31:a5:71:dd:61:92:f7:68:a0:ea:18:18:95:46: 06:eb:00:62:93:40:c1:82:e9:17:17:b5:f7:81:79: 3e:8d:8f:58:e1:5d:12:e6:5c:e7:e9:50:4e:e7:31: 0d:ba:90:43:b7:02:24:cd:8e:d0:5c:15:53:46:df: 43:7d:0b:95:00:c3:d1:d4:d8:2d:83:82:c4:e2:6f: 70:e8:78:b6:c0:82:73:7b:e9:5c:b5:0a:25:1a:b4: ce:90:78:50:b2:46:4d:0f:a0:b5:64:a5:0d:8c:84: 69:3c:8d:34:78:32:bb:55:2d:28:91:0b:ed:63:d4: a6:0a:b1:36:eb:48:bf:73:c3:c7:a6:26:83:9f:ce: 38:86:76:b0:bc:4a:06:19:29:74:15:71:f0:0c:be: e0:a0:65:ff:b8:1d:da:17:b6:9c:2a:a0:36:92:0c: 57:ce:eb:b4:72:00:2c:d9:c2:bb:c8:6c:32:a3:c5: 89:52:bd:8b:00:b7:7e:7e:0b:1a:8f:42:06:61:8b: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:71:3C:C9:DC:5B:9F:D5:7D:A1:7B:06:19:C4:AE:4F:E4:CA:82:A8 X509v3 Authority Key Identifier: keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/34332e3232352e36342e302f32322d3234203d3e203538343935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.64.0/22 Signature Algorithm: sha256WithRSAEncryption 45:ea:ea:1a:5b:79:e1:88:02:39:31:a9:22:b3:00:59:cb:4d: ee:76:a0:38:b2:85:2e:83:38:b3:eb:db:6c:90:53:d1:01:cd: 84:87:21:2c:2e:79:8d:0a:68:2e:d0:d5:29:9a:23:6b:19:ca: 51:80:a4:9b:d5:29:6a:89:06:44:f4:a6:33:4a:62:d8:30:2f: 42:18:20:0c:ab:a3:75:2d:73:12:c1:e4:b2:6b:4a:e6:ff:9d: 16:96:37:43:a9:c0:a8:18:57:e1:12:96:8f:45:af:20:92:9f: 20:56:dc:ce:66:7c:b8:45:f1:da:10:2f:3c:d6:e7:05:e5:00: 9f:db:22:85:c2:dc:4e:45:40:1f:54:b1:66:3a:3d:1f:39:ac: 6c:b3:b0:84:d0:96:bf:9a:36:a0:b7:56:5b:21:51:d3:d4:e0: 35:06:65:dc:73:39:e9:b9:d0:6b:de:c1:d1:5c:eb:1c:f4:9b: 9c:c0:4f:84:ad:79:36:07:0d:18:f0:0e:2d:8a:b7:e7:34:6d: dc:8a:ff:05:7f:c1:b4:56:61:9c:0d:3e:71:3d:c4:1a:fe:1a: c1:bc:47:bc:bf:8d:f4:cb:35:71:1f:32:ef:16:8b:29:57:e8: 37:00:f5:24:3c:ae:96:1b:7a:2f:e6:11:b9:2c:e7:a5:28:f6: b2:dd:04:e5 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUYsJUY5bb3CpF88sRG+t2qXbqrmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEz QTlDMjVDNjAeFw0yMzA3MzEwMDAxMTJaFw0yNDA3MjkwMDA2MTJaMDMxMTAvBgNV BAMTKDY1NzEzQ0M5REM1QjlGRDU3REExN0IwNjE5QzRBRTRGRTRDQTgyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkDZirElEnLGP7QpssiNyKEqM t2zG9UkYEc2Eh4Q25hhUDoWUf4LvKOiAnwWNhZmfSJOa48ZpKfYnNYkxpXHdYZL3 aKDqGBiVRgbrAGKTQMGC6RcXtfeBeT6Nj1jhXRLmXOfpUE7nMQ26kEO3AiTNjtBc FVNG30N9C5UAw9HU2C2DgsTib3DoeLbAgnN76Vy1CiUatM6QeFCyRk0PoLVkpQ2M hGk8jTR4MrtVLSiRC+1j1KYKsTbrSL9zw8emJoOfzjiGdrC8SgYZKXQVcfAMvuCg Zf+4HdoXtpwqoDaSDFfO67RyACzZwrvIbDKjxYlSvYsAt35+CxqPQgZhi0tvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUZXE8ydxbn9V9oXsGGcSuT+TKgqgwHwYDVR0j BBgwFoAUblU0q6bvPJjI0M9Dd5XSWjqcJcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjkxNzc3ZS1jZGI0LTQ4OTctYjI4Ny1lNThlNDI0YzE5OWQvMC82RTU1MzRBQkE2 RUYzQzk4QzhEMENGNDM3Nzk1RDI1QTNBOUMyNUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEzQTlD MjVDNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2OTE3NzdlLWNkYjQtNDg5Ny1i Mjg3LWU1OGU0MjRjMTk5ZC8wLzM0MzMyZTMyMzIzNTJlMzYzNDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM1MzgzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr4UAwDQYJKoZIhvcN AQELBQADggEBAEXq6hpbeeGIAjkxqSKzAFnLTe52oDiyhS6DOLPr22yQU9EBzYSH ISwueY0KaC7Q1SmaI2sZylGApJvVKWqJBkT0pjNKYtgwL0IYIAyro3UtcxLB5LJr Sub/nRaWN0OpwKgYV+ESlo9FryCSnyBW3M5mfLhF8doQLzzW5wXlAJ/bIoXC3E5F QB9UsWY6PR85rGyzsITQlr+aNqC3VlshUdPU4DUGZdxzOem50GvewdFc6xz0m5zA T4SteTYHDRjwDi2Kt+c0bdyK/wV/wbRWYZwNPnE9xBr+GsG8R7y/jfTLNXEfMu8W iylX6DcA9SQ8rpYbei/mEbks56Uo9rLdBOU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:13:22 2024 by rpki-client on console-ams.rpki-client.org