$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa File: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (raw, json) Hash identifier: 1ZelHO4wnEg2RIDtCEX6KWbjWC9EYuJWPm9Br4vygmk= Subject key identifier: 38:9D:D0:7A:8C:91:4D:FA:AA:3F:F0:57:D5:60:25:DD:81:B7:31:31 Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 7D397B763BD3DF160788FCAC39021A0FF58F6150 Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa Signing time: Mon 01 Jul 2024 01:03:52 +0000 ROA not before: Mon 01 Jul 2024 00:58:52 +0000 ROA not after: Mon 30 Jun 2025 01:03:52 +0000 asID: 24521 IP address blocks: 123.255.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:39:7b:76:3b:d3:df:16:07:88:fc:ac:39:02:1a:0f:f5:8f:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Jul 1 00:58:52 2024 GMT Not After : Jun 30 01:03:52 2025 GMT Subject: CN=389DD07A8C914DFAAA3FF057D56025DD81B73131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:fe:63:31:1e:12:ca:82:b5:d9:ab:c9:f3: 6a:d5:4f:04:07:d3:d3:7a:f8:04:9f:cd:72:80:ca: f3:90:9e:50:6a:95:96:82:58:86:a7:b6:70:90:20: 0c:f6:4a:cb:7f:a0:86:29:af:4a:f3:47:a4:3b:79: 74:2a:a7:27:d3:6d:60:49:d8:48:2d:0a:25:e8:99: 0f:bd:d2:f9:fd:38:e5:ff:53:b4:58:8e:ed:9b:ce: 34:72:8d:f7:a2:47:d4:b9:2b:e7:81:62:a0:35:62: 88:ae:f2:41:05:50:f3:8d:8e:6f:a9:10:a5:c9:1d: 54:c5:90:f2:69:0f:b8:ba:36:5c:ee:e9:f9:dc:18: c9:67:8f:e5:f8:ca:97:37:e4:35:09:50:38:4a:45: 42:1f:ba:b7:a7:68:ae:4c:1c:73:92:0a:97:43:a0: d3:f0:6f:5b:2b:94:05:30:6b:d2:71:03:ef:dc:f8: bd:d3:9c:cc:60:75:00:4d:f3:ae:bf:77:62:4d:07: 42:cc:0f:e9:91:9e:12:81:63:88:35:bf:e1:2b:93: 02:48:cd:f4:33:9b:a8:08:4e:74:64:3d:a9:92:0b: a2:e2:e3:e1:17:af:c9:c3:6e:15:58:51:21:ff:af: 4f:32:13:6f:ec:9a:58:1b:9c:71:8f:15:ca:51:81: 40:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9D:D0:7A:8C:91:4D:FA:AA:3F:F0:57:D5:60:25:DD:81:B7:31:31 X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.255.200.0/21 Signature Algorithm: sha256WithRSAEncryption d4:1d:c4:47:ce:eb:87:6b:b4:a6:b5:83:30:3c:df:e4:11:c3: 3e:2c:8e:f5:da:ce:99:35:9f:a9:34:fa:46:9b:39:18:5f:a7: 7d:b4:ac:2c:aa:65:22:f4:b7:80:5e:05:3a:9c:20:e0:56:49: c5:39:8f:55:29:28:d3:42:cb:73:71:62:40:74:12:ad:3b:46: 43:85:b1:97:23:02:87:76:57:6d:f5:bb:e7:21:8a:26:51:cd: 9f:20:4f:89:ee:3a:95:a8:b2:3d:99:17:71:5c:29:29:ba:48: 26:84:33:10:11:6a:14:65:ee:d6:e0:20:20:1f:9b:9a:60:00: c5:a5:24:31:78:b2:aa:82:be:af:ac:b3:45:54:e2:90:bb:e0: 2b:4a:77:fe:8a:ae:6d:1f:77:9c:c4:74:a4:ba:0c:58:cd:23: 14:e2:f3:95:65:b2:a1:28:56:95:a6:c5:6b:ef:cd:11:5e:b3: 64:15:95:9d:ac:a2:b8:9e:a1:91:78:63:ff:8a:f4:e0:71:b5: 8c:ca:ce:e0:2e:95:de:28:42:5b:46:53:03:00:42:ae:d2:8a: 36:12:37:af:dd:91:87:79:af:fe:2a:be:13:02:a2:16:26:50: 64:fb:b8:29:7c:79:c6:74:9e:8d:1d:d7:52:64:2c:42:37:61: 7a:9b:1b:ea -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfTl7djvT3xYHiPysOQIaD/WPYVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNDA3MDEwMDU4NTJaFw0yNTA2MzAwMTAzNTJaMDMxMTAvBgNV BAMTKDM4OUREMDdBOEM5MTRERkFBQTNGRjA1N0Q1NjAyNUREODFCNzMxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPv5jMR4SyoK12avJ82rVTwQH 09N6+ASfzXKAyvOQnlBqlZaCWIantnCQIAz2Sst/oIYpr0rzR6Q7eXQqpyfTbWBJ 2EgtCiXomQ+90vn9OOX/U7RYju2bzjRyjfeiR9S5K+eBYqA1Yoiu8kEFUPONjm+p EKXJHVTFkPJpD7i6Nlzu6fncGMlnj+X4ypc35DUJUDhKRUIfurenaK5MHHOSCpdD oNPwb1srlAUwa9JxA+/c+L3TnMxgdQBN866/d2JNB0LMD+mRnhKBY4g1v+ErkwJI zfQzm6gITnRkPamSC6Li4+EXr8nDbhVYUSH/r08yE2/smlgbnHGPFcpRgUBpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOJ3QeoyRTfqqP/BX1WAl3YG3MTEwHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwOWMyMmIxLTFiN2ItNDY3MS1h Yjk0LTVjNWU3NDg4MjU0Ny8wLzMxMzIzMzJlMzIzNTM1MmUzMjMwMzAyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzMjM0MzUzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDe//IMA0GCSqG SIb3DQEBCwUAA4IBAQDUHcRHzuuHa7SmtYMwPN/kEcM+LI712s6ZNZ+pNPpGmzkY X6d9tKwsqmUi9LeAXgU6nCDgVknFOY9VKSjTQstzcWJAdBKtO0ZDhbGXIwKHdldt 9bvnIYomUc2fIE+J7jqVqLI9mRdxXCkpukgmhDMQEWoUZe7W4CAgH5uaYADFpSQx eLKqgr6vrLNFVOKQu+ArSnf+iq5tH3ecxHSkugxYzSMU4vOVZbKhKFaVpsVr780R XrNkFZWdrKK4nqGReGP/ivTgcbWMys7gLpXeKEJbRlMDAEKu0oo2Ejev3ZGHea/+ Kr4TAqIWJlBk+7gpfHnGdJ6NHddSZCxCN2F6mxvq -----END CERTIFICATE-----Generated at Sun Nov 24 08:35:25 2024 by rpki-client on console-ams.rpki-client.org