$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e382e302f32332d3234203d3e203436303233.roa File: 34332e3235322e382e302f32332d3234203d3e203436303233.roa (raw, json) Hash identifier: ZSZATguC9iT6IZYST0nkyGArCnXwJm32Yk2bjl8FZEQ= Subject key identifier: 33:52:3B:E6:25:CB:59:28:7C:AC:01:05:A4:D6:CB:91:B9:25:84:D3 Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Certificate serial: 5CDC3D83C20A08027C37A0ADA522BCAEE373E8BB Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e382e302f32332d3234203d3e203436303233.roa Signing time: Tue 12 Nov 2024 15:06:06 +0000 ROA not before: Tue 12 Nov 2024 15:01:06 +0000 ROA not after: Tue 11 Nov 2025 15:06:06 +0000 asID: 46023 IP address blocks: 43.252.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:dc:3d:83:c2:0a:08:02:7c:37:a0:ad:a5:22:bc:ae:e3:73:e8:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Validity Not Before: Nov 12 15:01:06 2024 GMT Not After : Nov 11 15:06:06 2025 GMT Subject: CN=33523BE625CB59287CAC0105A4D6CB91B92584D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:f4:50:29:ed:56:37:3b:d1:61:bf:ba:b4: d8:8b:c6:a0:06:56:08:bb:28:aa:a6:b1:7d:e7:ec: 15:69:03:83:30:c1:04:82:05:e1:f2:d6:ac:02:9a: ea:dc:c0:73:7c:f5:e0:83:1a:dc:fa:28:39:2e:e8: 81:82:59:28:14:b5:ab:ef:bd:32:9e:95:31:f0:e8: 23:c7:b3:9f:cc:62:20:f3:9b:c2:dc:b0:c4:04:31: be:e0:a3:d2:36:72:a6:49:b3:2a:38:ab:5a:81:2d: 00:91:36:08:66:a3:a3:da:9d:01:ff:3a:db:a4:7d: 28:e7:d9:df:0b:26:de:0b:0e:35:49:a5:45:0b:2a: f2:e5:b3:8d:ad:da:22:7b:0f:7e:6c:3d:fe:a2:23: fe:53:8d:3e:b5:c2:84:e3:31:ee:4a:02:f4:89:94: c5:1b:9b:a3:35:c5:98:66:67:0a:63:0c:d8:18:8b: eb:8f:eb:f8:65:96:f0:7b:e1:53:d7:fa:2d:32:7d: 25:15:c1:44:13:03:a4:ae:d5:97:3b:35:b1:d3:c2: 0a:50:ef:d7:07:c4:01:79:3f:ec:6f:5e:ff:7c:de: 98:b5:05:41:f8:7b:a6:ed:53:8f:3c:da:b8:53:ef: ce:69:ca:02:25:db:00:5a:68:5b:1e:12:80:bd:eb: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:52:3B:E6:25:CB:59:28:7C:AC:01:05:A4:D6:CB:91:B9:25:84:D3 X509v3 Authority Key Identifier: keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e382e302f32332d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.8.0/23 Signature Algorithm: sha256WithRSAEncryption 18:cc:64:eb:f2:9e:dd:22:6b:95:0f:34:64:eb:53:66:13:b6: 80:c7:03:d5:9d:ee:d8:96:86:59:65:35:85:db:f8:45:2a:df: 59:7e:4b:fb:cb:94:fe:3b:63:39:b2:56:ab:5e:7e:25:d2:c5: 13:7f:52:25:a6:a5:ae:f9:89:35:79:fd:f6:da:d4:1c:c7:19: 32:d2:29:a4:62:6b:3a:d0:a4:df:47:5a:7a:45:97:c7:1d:c3: 3c:f1:41:58:e0:0b:ad:59:d8:cc:21:bf:ab:00:31:9f:59:06: e6:b6:60:75:27:1d:cd:79:6d:17:f6:11:02:f6:a9:0b:0d:3d: 08:55:1c:1f:6e:5b:9e:bc:f4:65:50:14:b2:de:78:d5:6d:d1: 83:0a:3d:94:c1:74:61:fb:ef:9f:bb:05:4e:c9:d5:78:52:3f: e9:4f:fa:22:c4:58:d1:59:bf:53:cb:21:72:4d:9d:62:7a:2b: 74:ba:ea:11:0f:73:02:71:53:05:c7:a7:83:0b:fd:ab:41:3f: 84:7f:6b:e9:6d:c5:f7:69:df:00:c8:c7:07:4c:a8:5c:23:dd: 71:79:a1:33:f4:f3:ca:48:b0:12:fc:e1:81:98:8b:b1:44:c1: 83:89:f9:c4:b2:7d:4c:b4:79:d3:5c:02:8c:f7:97:65:ef:e0: 25:cf:c5:cb -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUXNw9g8IKCAJ8N6CtpSK8ruNz6LswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3 NjRBNDY5NTAeFw0yNDExMTIxNTAxMDZaFw0yNTExMTExNTA2MDZaMDMxMTAvBgNV BAMTKDMzNTIzQkU2MjVDQjU5Mjg3Q0FDMDEwNUE0RDZDQjkxQjkyNTg0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1/RQKe1WNzvRYb+6tNiLxqAG Vgi7KKqmsX3n7BVpA4MwwQSCBeHy1qwCmurcwHN89eCDGtz6KDku6IGCWSgUtavv vTKelTHw6CPHs5/MYiDzm8LcsMQEMb7go9I2cqZJsyo4q1qBLQCRNghmo6PanQH/ OtukfSjn2d8LJt4LDjVJpUULKvLls42t2iJ7D35sPf6iI/5TjT61woTjMe5KAvSJ lMUbm6M1xZhmZwpjDNgYi+uP6/hllvB74VPX+i0yfSUVwUQTA6Su1Zc7NbHTwgpQ 79cHxAF5P+xvXv983pi1BUH4e6btU4882rhT785pygIl2wBaaFseEoC9604BAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUM1I75iXLWSh8rAEFpNbLkbklhNMwHwYDVR0j BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB NDY5NS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhOTg1YjAtZTE3YS00MjFiLTk2 NTUtMDMyNDVhMDFhZWY4LzAvMzQzMzJlMzIzNTMyMmUzODJlMzAyZjMyMzMyZDMy MzQyMDNkM2UyMDM0MzYzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEr/AgwDQYJKoZIhvcNAQEL BQADggEBABjMZOvynt0ia5UPNGTrU2YTtoDHA9Wd7tiWhlllNYXb+EUq31l+S/vL lP47YzmyVqtefiXSxRN/UiWmpa75iTV5/fba1BzHGTLSKaRiazrQpN9HWnpFl8cd wzzxQVjgC61Z2Mwhv6sAMZ9ZBua2YHUnHc15bRf2EQL2qQsNPQhVHB9uW5689GVQ FLLeeNVt0YMKPZTBdGH775+7BU7J1XhSP+lP+iLEWNFZv1PLIXJNnWJ6K3S66hEP cwJxUwXHp4ML/atBP4R/a+ltxfdp3wDIxwdMqFwj3XF5oTP088pIsBL84YGYi7FE wYOJ+cSyfUy0edNcAoz3l2Xv4CXPxcs= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org