$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e392e302f32342d3234203d3e203436303233.roa File: 34332e3235322e392e302f32342d3234203d3e203436303233.roa (raw, json) Hash identifier: G1irvFRU7aY7OQ+ahC1FVycsqULqS7YmvY210UyluQc= Subject key identifier: 00:11:CB:1F:29:4B:33:85:5F:5A:4B:34:1B:D3:A5:F2:C6:A8:D2:37 Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Certificate serial: 1F365ABDBD1C2499A36494962B8AEA4F22218D72 Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e392e302f32342d3234203d3e203436303233.roa Signing time: Mon 12 Aug 2024 15:18:17 +0000 ROA not before: Mon 12 Aug 2024 15:13:17 +0000 ROA not after: Mon 11 Aug 2025 15:18:17 +0000 asID: 46023 IP address blocks: 43.252.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:36:5a:bd:bd:1c:24:99:a3:64:94:96:2b:8a:ea:4f:22:21:8d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Validity Not Before: Aug 12 15:13:17 2024 GMT Not After : Aug 11 15:18:17 2025 GMT Subject: CN=0011CB1F294B33855F5A4B341BD3A5F2C6A8D237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f4:45:06:76:c5:5a:b1:d0:97:73:c8:74:4e: 87:6c:41:7c:c9:a1:75:e6:f7:cb:2b:52:4a:02:68: 5b:74:83:73:45:f4:34:f4:80:85:ec:4a:d0:54:7c: 27:39:85:21:19:27:c4:47:76:d8:ea:6b:7e:6d:8f: f2:89:44:0d:cd:ac:f5:4f:c2:4c:80:cb:0e:f8:7d: 57:62:c1:da:d7:6e:cf:06:48:89:3c:88:c3:41:83: e7:25:04:d8:18:91:84:2f:23:a3:eb:cd:71:48:d4: c4:ed:56:db:bc:02:e3:7e:a0:4b:d1:87:9e:37:4b: e9:da:0b:1b:8d:0b:86:12:35:bd:80:7e:31:a3:75: c7:76:6f:a3:04:5e:a6:da:2b:7c:30:25:48:d7:7a: db:bf:31:57:28:f9:42:6d:c6:61:2b:b2:5e:bf:4f: 20:a0:bb:da:cb:86:d0:90:45:56:03:64:12:3d:76: ad:23:8a:97:d6:d9:38:5d:60:5d:de:29:c1:80:66: e6:a9:df:d2:d4:07:44:38:05:8a:c3:73:f6:c7:bf: 0b:c0:27:ca:71:8f:6f:ba:29:12:e3:b0:1e:b8:1d: 44:01:cb:b5:fb:f8:a0:30:e9:1d:96:cc:f6:2a:66: 5f:3e:d2:91:c5:4d:5d:f7:53:24:94:3a:39:4a:96: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:CB:1F:29:4B:33:85:5F:5A:4B:34:1B:D3:A5:F2:C6:A8:D2:37 X509v3 Authority Key Identifier: keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e392e302f32342d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.9.0/24 Signature Algorithm: sha256WithRSAEncryption a1:e8:74:d1:26:1a:02:dc:62:d0:e9:dd:f5:9a:86:60:81:5d: f1:8b:ec:5d:1c:3e:af:e2:34:80:a2:6b:ee:ef:11:3b:de:5f: 1e:fe:16:aa:68:ef:75:f8:0c:12:09:6c:6e:4d:92:9f:32:44: b5:45:d4:79:08:2a:59:70:0a:1e:0a:36:1f:a2:b5:9a:0c:c7: fc:ba:f8:6a:f9:b4:f5:e0:51:5f:ec:0e:27:32:f1:03:c1:19: 81:48:fe:a0:c2:a9:91:cf:f5:ba:ff:f3:3e:8b:17:5a:4e:6c: 5d:1f:f0:61:4c:22:e8:24:90:89:99:50:72:ed:51:fc:9a:23: 92:83:d8:21:a5:fa:00:14:fd:59:de:24:fc:ac:0f:6c:0e:ab: 45:8a:1c:00:53:35:5f:1a:e1:a3:c1:82:81:83:28:e3:8f:41: 9a:7a:05:9f:30:e6:c6:e7:ad:41:ec:2e:2a:cf:08:9e:fc:0a: df:22:b0:b7:c4:af:93:0a:14:d0:7a:40:a0:67:20:98:5e:76: 54:ca:76:de:3e:b5:bf:7f:da:3c:c9:ce:33:f1:6b:70:9a:a6: 4e:4b:c4:fb:2b:d2:f8:25:b0:3c:51:15:aa:ac:a2:04:d3:f2: 60:6a:37:7c:63:b3:55:58:68:c6:a2:2a:d9:ee:36:73:4f:55: 5c:39:34:e0 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUHzZavb0cJJmjZJSWK4rqTyIhjXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3 NjRBNDY5NTAeFw0yNDA4MTIxNTEzMTdaFw0yNTA4MTExNTE4MTdaMDMxMTAvBgNV BAMTKDAwMTFDQjFGMjk0QjMzODU1RjVBNEIzNDFCRDNBNUYyQzZBOEQyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD39EUGdsVasdCXc8h0TodsQXzJ oXXm98srUkoCaFt0g3NF9DT0gIXsStBUfCc5hSEZJ8RHdtjqa35tj/KJRA3NrPVP wkyAyw74fVdiwdrXbs8GSIk8iMNBg+clBNgYkYQvI6PrzXFI1MTtVtu8AuN+oEvR h543S+naCxuNC4YSNb2AfjGjdcd2b6MEXqbaK3wwJUjXetu/MVco+UJtxmErsl6/ TyCgu9rLhtCQRVYDZBI9dq0jipfW2ThdYF3eKcGAZuap39LUB0Q4BYrDc/bHvwvA J8pxj2+6KRLjsB64HUQBy7X7+KAw6R2WzPYqZl8+0pHFTV33UySUOjlKliQ7AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUABHLHylLM4VfWks0G9Ol8sao0jcwHwYDVR0j BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB NDY5NS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhOTg1YjAtZTE3YS00MjFiLTk2 NTUtMDMyNDVhMDFhZWY4LzAvMzQzMzJlMzIzNTMyMmUzOTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM0MzYzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr/AkwDQYJKoZIhvcNAQEL BQADggEBAKHodNEmGgLcYtDp3fWahmCBXfGL7F0cPq/iNICia+7vETveXx7+Fqpo 73X4DBIJbG5Nkp8yRLVF1HkIKllwCh4KNh+itZoMx/y6+Gr5tPXgUV/sDicy8QPB GYFI/qDCqZHP9br/8z6LF1pObF0f8GFMIugkkImZUHLtUfyaI5KD2CGl+gAU/Vne JPysD2wOq0WKHABTNV8a4aPBgoGDKOOPQZp6BZ8w5sbnrUHsLirPCJ78Ct8isLfE r5MKFNB6QKBnIJhedlTKdt4+tb9/2jzJzjPxa3Capk5LxPsr0vglsDxRFaqsogTT 8mBqN3xjs1VYaMaiKtnuNnNPVVw5NOA= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org