$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa File: 3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa (raw, json) Hash identifier: c14EOE2Xu2VZRFooSJxxw0Hj9pqv9JHkwbMjrFDYgoE= Subject key identifier: 5D:9D:3A:87:C4:F5:B7:33:F0:5F:E2:36:99:4E:0F:6A:A2:50:C9:AF Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Certificate serial: 6C4F871F8A90415B2FBF801C7B6DC8E39DC21384 Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa Signing time: Mon 31 Jul 2023 00:02:24 +0000 ROA not before: Sun 30 Jul 2023 23:57:24 +0000 ROA not after: Mon 29 Jul 2024 00:02:24 +0000 asID: 4787 IP address blocks: 125.208.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4f:87:1f:8a:90:41:5b:2f:bf:80:1c:7b:6d:c8:e3:9d:c2:13:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Validity Not Before: Jul 30 23:57:24 2023 GMT Not After : Jul 29 00:02:24 2024 GMT Subject: CN=5D9D3A87C4F5B733F05FE236994E0F6AA250C9AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:a7:e1:a1:d6:70:13:1c:9d:01:f2:5e:32: 7d:75:c7:d5:d9:0b:b5:45:d6:20:92:b3:a8:e1:65: 76:78:44:00:2b:82:e8:3e:bb:4b:fb:5a:aa:43:a1: fe:df:e1:0d:5a:53:ce:30:b9:d8:52:0a:dc:b5:47: 9f:50:be:43:91:5e:50:da:bf:2e:a4:a6:08:6d:b8: 3e:d6:1f:b9:7c:e8:36:da:b9:e8:51:58:eb:97:f4: e4:70:01:44:78:c8:71:fe:03:ec:39:84:7c:34:56: e9:0a:04:ab:cd:4f:99:d9:2c:49:a4:61:3f:9d:e2: 84:05:f4:c2:60:1f:a4:71:48:e3:e4:21:fc:50:81: 93:5d:38:4f:ef:91:64:87:a5:bd:cc:84:68:4e:19: 2b:9c:ee:9d:f4:31:74:12:a1:b9:78:7e:f9:ba:6e: 89:a6:44:ad:4b:c6:28:ae:41:be:00:59:52:93:0e: a5:c7:01:82:08:d9:cf:c2:9f:71:9f:91:fb:28:76: 8e:6d:fa:67:43:e9:09:7e:7f:05:a7:7b:fd:01:c5: ab:61:40:5d:ff:2f:c7:fa:0d:70:b2:7b:fd:d0:49: af:5f:c4:46:08:f7:7d:e6:5f:5c:a1:59:a9:9c:59: 13:d9:ca:07:d7:30:ca:b9:66:cb:c3:4b:73:2e:5b: eb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9D:3A:87:C4:F5:B7:33:F0:5F:E2:36:99:4E:0F:6A:A2:50:C9:AF X509v3 Authority Key Identifier: keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.208.128.0/18 Signature Algorithm: sha256WithRSAEncryption 72:91:89:fc:a6:b6:26:36:05:9a:97:19:4a:48:db:a5:8b:56: 39:33:24:ac:74:01:40:8b:a0:43:71:3a:51:53:0c:b6:e6:e2: 6d:63:4c:e6:18:84:25:18:28:a6:8d:93:a7:bd:7c:3d:7b:e8: ec:fe:f2:0e:33:47:ea:33:44:d6:ea:3d:a2:3e:a4:03:af:03: 28:33:6a:e9:a7:9f:e8:6a:3d:8b:8d:57:df:04:fd:46:87:5c: 89:bd:90:2a:72:cc:e8:6d:f8:90:02:08:06:d2:93:72:61:ab: 77:94:be:27:8e:11:bf:c3:7f:89:ed:39:84:af:f4:6c:e5:c2: 80:2d:8b:a4:e9:0a:69:41:a8:29:4c:7e:8d:8a:95:bd:27:c4: d6:9a:da:0b:f4:12:c4:bc:be:f0:16:8f:1f:72:cf:36:20:e9: 5f:9d:ec:49:e4:b7:c1:42:9f:50:49:3a:7d:6d:2c:b6:32:6f: 2c:a4:a9:17:4c:38:f5:50:c1:5c:41:a0:1a:78:89:40:fa:2e: 31:b4:04:c0:1b:f7:8a:70:bd:64:26:85:bd:5b:c0:c8:18:65: 06:a1:55:2d:ae:90:6b:d8:e1:60:43:fc:91:95:42:66:24:45: b8:aa:6c:3f:b3:c0:5e:96:de:06:0b:a5:9b:06:df:38:c6:cd: bb:11:e3:49 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbE+HH4qQQVsvv4Ace23I453CE4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz N0Q2OTk4QTAeFw0yMzA3MzAyMzU3MjRaFw0yNDA3MjkwMDAyMjRaMDMxMTAvBgNV BAMTKDVEOUQzQTg3QzRGNUI3MzNGMDVGRTIzNjk5NEUwRjZBQTI1MEM5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEafhodZwExydAfJeMn11x9XZ C7VF1iCSs6jhZXZ4RAArgug+u0v7WqpDof7f4Q1aU84wudhSCty1R59QvkORXlDa vy6kpghtuD7WH7l86DbauehRWOuX9ORwAUR4yHH+A+w5hHw0VukKBKvNT5nZLEmk YT+d4oQF9MJgH6RxSOPkIfxQgZNdOE/vkWSHpb3MhGhOGSuc7p30MXQSobl4fvm6 bommRK1LxiiuQb4AWVKTDqXHAYII2c/Cn3Gfkfsodo5t+mdD6Ql+fwWne/0Bxath QF3/L8f6DXCye/3QSa9fxEYI933mX1yhWamcWRPZygfXMMq5ZsvDS3MuW+tnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXZ06h8T1tzPwX+I2mU4PaqJQya8wHwYDVR0j BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1 REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2 OTk4QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzIzNTJlMzIzMDM4MmUzMTMyMzgyZTMwMmYz MTM4MmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBn3QgDANBgkqhkiG 9w0BAQsFAAOCAQEAcpGJ/Ka2JjYFmpcZSkjbpYtWOTMkrHQBQIugQ3E6UVMMtubi bWNM5hiEJRgopo2Tp718PXvo7P7yDjNH6jNE1uo9oj6kA68DKDNq6aef6Go9i41X 3wT9Rodcib2QKnLM6G34kAIIBtKTcmGrd5S+J44Rv8N/ie05hK/0bOXCgC2LpOkK aUGoKUx+jYqVvSfE1praC/QSxLy+8BaPH3LPNiDpX53sSeS3wUKfUEk6fW0stjJv LKSpF0w49VDBXEGgGniJQPouMbQEwBv3inC9ZCaFvVvAyBhlBqFVLa6Qa9jhYEP8 kZVCZiRFuKpsP7PAXpbeBgulmwbfOMbNuxHjSQ== -----END CERTIFICATE-----Generated at Fri May 3 03:08:35 2024 by rpki-client on console-ams.rpki-client.org