$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e382e302f32322d3234203d3e203436303233.roa File: 34332e3235322e382e302f32322d3234203d3e203436303233.roa (raw, json) Hash identifier: gptG0UP/YsuAXBHwxzLnI4wEUoy/7e2e6Ae9v5PlXfo= Subject key identifier: 20:37:0F:27:75:D0:B2:EC:B7:23:68:E1:BF:C4:0C:32:E6:54:FD:A4 Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Certificate serial: 25CF4FF35D548606ABB63D5769D0ADE270EF1D03 Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e382e302f32322d3234203d3e203436303233.roa Signing time: Tue 12 Nov 2024 15:05:38 +0000 ROA not before: Tue 12 Nov 2024 15:00:38 +0000 ROA not after: Tue 11 Nov 2025 15:05:38 +0000 asID: 46023 IP address blocks: 43.252.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:cf:4f:f3:5d:54:86:06:ab:b6:3d:57:69:d0:ad:e2:70:ef:1d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Validity Not Before: Nov 12 15:00:38 2024 GMT Not After : Nov 11 15:05:38 2025 GMT Subject: CN=20370F2775D0B2ECB72368E1BFC40C32E654FDA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:f7:78:58:bf:df:f5:f8:59:be:ca:58:91: 32:39:ce:99:11:ba:84:52:c8:89:87:c7:5b:82:16: b8:33:f0:7b:11:e5:e2:ab:36:14:d2:7d:ec:7f:44: d8:21:67:84:72:2f:52:6a:28:e5:13:74:74:ee:83: ba:a3:26:e0:46:92:7a:92:5d:24:79:90:4a:ed:92: 68:a9:3d:e9:e1:c7:c1:80:45:fa:b2:f3:14:72:24: 74:59:e2:5a:04:aa:98:5e:a4:33:c7:ab:3e:14:51: 3d:32:75:bc:2f:a0:db:e3:b8:24:8e:40:8d:3e:c1: 84:51:b1:c4:f7:8c:59:69:d6:04:1e:9d:b7:a0:3d: d6:45:a1:89:3d:2e:02:c8:3c:cd:5e:e0:8b:8d:1d: 5e:32:4e:6c:80:fc:d0:1c:ad:7f:b4:cb:ae:f8:b1: 78:e6:1c:0a:08:cd:a1:a9:59:ae:66:e9:9c:3e:09: f3:84:2d:37:6d:3b:1c:7b:29:e9:ca:d4:2f:c7:45: 31:5e:06:a1:98:6f:5f:87:f7:af:5c:63:52:9f:22: 8a:87:3a:e9:9e:ca:8b:60:f3:11:27:67:95:71:8c: 06:36:02:54:48:30:1b:d3:30:11:d9:56:90:78:13: 7e:7b:32:20:ff:07:22:fa:d1:3c:0b:35:bb:1c:81: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:37:0F:27:75:D0:B2:EC:B7:23:68:E1:BF:C4:0C:32:E6:54:FD:A4 X509v3 Authority Key Identifier: keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e382e302f32322d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.8.0/22 Signature Algorithm: sha256WithRSAEncryption 08:8d:84:60:24:35:1e:f8:29:a8:dc:8a:48:00:9d:3a:17:b4: 05:ce:fb:5f:b8:39:fa:ba:47:2c:1a:f9:31:67:0d:89:e7:38: 6a:f9:c8:8c:e8:ce:e2:71:4f:f0:cd:b3:8e:a6:f6:86:41:82: db:0f:35:40:fa:2c:ea:eb:50:e0:50:e2:ea:4d:d7:f8:7c:ea: fd:2d:40:a8:67:4f:85:ef:cd:cd:24:c9:f0:f9:01:d5:e5:7f: b8:87:16:98:3b:3e:83:2a:ce:3a:ec:17:1b:6e:50:41:f7:b0: 2f:81:a8:24:91:25:4a:3d:a2:41:fc:aa:4e:6e:3e:34:77:df: 69:1d:83:da:7d:37:b0:4e:f2:3c:16:b3:01:42:b9:40:ab:ca: 48:1e:29:fa:3b:1f:98:93:ef:9c:01:34:3a:d3:1a:b9:20:25: d7:70:78:49:61:fb:00:be:09:0b:6a:d1:6c:1d:b2:f8:fe:81: cd:9f:14:6c:0a:67:4a:c0:50:24:59:82:18:45:29:3d:ca:ea: 3f:db:5c:46:22:e0:51:f4:9b:11:22:0d:70:a9:ef:c0:57:46: 6e:d7:af:42:ae:f0:0e:f0:40:4a:c7:86:ce:23:07:a2:38:4b: fd:62:66:14:be:21:a8:fb:d0:96:ea:d2:25:17:d6:d5:54:d1: ba:10:9c:9d -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUJc9P811Uhgartj1XadCt4nDvHQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3 NjRBNDY5NTAeFw0yNDExMTIxNTAwMzhaFw0yNTExMTExNTA1MzhaMDMxMTAvBgNV BAMTKDIwMzcwRjI3NzVEMEIyRUNCNzIzNjhFMUJGQzQwQzMyRTY1NEZEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfPd4WL/f9fhZvspYkTI5zpkR uoRSyImHx1uCFrgz8HsR5eKrNhTSfex/RNghZ4RyL1JqKOUTdHTug7qjJuBGknqS XSR5kErtkmipPenhx8GARfqy8xRyJHRZ4loEqphepDPHqz4UUT0ydbwvoNvjuCSO QI0+wYRRscT3jFlp1gQenbegPdZFoYk9LgLIPM1e4IuNHV4yTmyA/NAcrX+0y674 sXjmHAoIzaGpWa5m6Zw+CfOELTdtOxx7KenK1C/HRTFeBqGYb1+H969cY1KfIoqH Oumeyotg8xEnZ5VxjAY2AlRIMBvTMBHZVpB4E357MiD/ByL60TwLNbscgeMJAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUIDcPJ3XQsuy3I2jhv8QMMuZU/aQwHwYDVR0j BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB NDY5NS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhOTg1YjAtZTE3YS00MjFiLTk2 NTUtMDMyNDVhMDFhZWY4LzAvMzQzMzJlMzIzNTMyMmUzODJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDM0MzYzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr/AgwDQYJKoZIhvcNAQEL BQADggEBAAiNhGAkNR74KajcikgAnToXtAXO+1+4Ofq6Rywa+TFnDYnnOGr5yIzo zuJxT/DNs46m9oZBgtsPNUD6LOrrUOBQ4upN1/h86v0tQKhnT4Xvzc0kyfD5AdXl f7iHFpg7PoMqzjrsFxtuUEH3sC+BqCSRJUo9okH8qk5uPjR332kdg9p9N7BO8jwW swFCuUCrykgeKfo7H5iT75wBNDrTGrkgJddweElh+wC+CQtq0Wwdsvj+gc2fFGwK Z0rAUCRZghhFKT3K6j/bXEYi4FH0mxEiDXCp78BXRm7Xr0Ku8A7wQErHhs4jB6I4 S/1iZhS+Iaj70Jbq0iUX1tVU0boQnJ0= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org