$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa File: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (raw, json) Hash identifier: pdookKLKBtLoDCva66o7DDtyvwgfA1hrwrmWSeoqnqY= Subject key identifier: 4F:2D:84:67:22:E4:78:44:CD:65:DB:9E:CB:BB:A3:EA:B4:D9:0E:7A Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 392C3CFF6DD8875CE4EBADF6CCBE78751046F075 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa Signing time: Sun 18 Aug 2024 10:00:00 +0000 ROA not before: Sun 18 Aug 2024 09:55:00 +0000 ROA not after: Sun 17 Aug 2025 10:00:00 +0000 asID: 138823 IP address blocks: 203.161.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2c:3c:ff:6d:d8:87:5c:e4:eb:ad:f6:cc:be:78:75:10:46:f0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Aug 18 09:55:00 2024 GMT Not After : Aug 17 10:00:00 2025 GMT Subject: CN=4F2D846722E47844CD65DB9ECBBBA3EAB4D90E7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:ca:46:4e:2d:0f:81:e7:48:ec:cb:11:15: 72:ca:3c:2d:85:af:2a:b1:ee:3f:87:ab:54:5a:c6: 3a:3b:44:ee:9f:80:46:4f:b1:ec:69:15:42:c8:ff: 42:c7:34:19:f0:2f:09:8b:50:a5:dd:7a:82:d6:73: ca:46:46:c8:42:f3:5c:d0:13:65:46:38:41:a6:5e: 21:a7:5b:3d:26:2b:84:6d:a8:67:05:79:9c:f6:98: 11:43:f2:0c:f3:6b:a0:b8:06:24:6c:c2:9d:d3:82: 5f:c5:3d:65:df:c4:31:5d:a4:91:dc:4a:44:f0:e6: 7e:a6:0f:0a:2b:51:e5:91:d1:eb:55:11:dd:c8:81: ca:7c:eb:0b:33:89:dc:8c:c4:44:c8:01:7a:91:7e: 76:07:c1:a1:11:5a:42:1d:dd:19:07:c9:d0:a9:b3: cd:3b:6e:75:45:b3:e4:2e:49:dc:16:3a:1f:34:bd: 26:83:38:42:82:cb:68:a6:66:34:ae:f2:dc:9b:ad: 7b:61:a3:d3:0f:38:61:55:1e:33:c1:54:41:e5:72: 4f:64:4b:ba:24:68:9b:77:09:97:da:87:9e:1b:72: b7:6b:8b:3f:fa:70:e3:a0:12:93:ea:c9:d2:02:e6: dd:c1:9c:2d:af:d3:34:3f:b9:a8:d4:67:b1:9f:1a: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2D:84:67:22:E4:78:44:CD:65:DB:9E:CB:BB:A3:EA:B4:D9:0E:7A X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.24.0/21 Signature Algorithm: sha256WithRSAEncryption c6:eb:a0:51:6e:fb:6d:4b:7f:1f:6e:22:15:92:60:a9:cf:fd: 66:ce:4b:1b:4d:01:5c:36:58:20:29:ad:48:58:66:70:6c:b9: 3f:95:e7:33:43:e4:bb:76:bd:47:9a:6a:66:5c:e5:31:07:ec: 2d:e8:99:36:3f:6d:83:98:3b:5b:90:cb:80:47:0e:f5:22:10: de:75:ce:d0:ed:79:e4:f3:66:40:a1:85:00:0d:47:99:2c:b0: 0e:11:3b:fb:d7:a3:33:be:7f:6a:98:2f:f4:de:f8:f6:d5:30: 9a:3f:62:30:24:11:d2:d5:64:41:6a:ab:86:66:41:cd:56:93: a7:b1:4d:02:ec:13:34:14:b0:e5:93:ec:48:fb:6c:15:cb:a9: 6d:07:59:7a:fb:d4:cf:0b:9a:24:a9:1d:2e:cf:a3:71:d2:b7: 1b:f0:17:6b:8a:0e:6f:38:43:4a:0c:7a:cc:6e:11:37:92:2e: da:31:e3:62:a0:4f:d5:35:47:39:c5:af:a4:73:c2:f6:ec:18: 81:85:93:e6:98:39:dc:2f:eb:80:c6:3f:ad:4a:8d:fc:21:55: d6:ca:05:32:50:5a:58:be:ed:3e:b5:eb:43:9b:09:bf:33:6d: 09:91:55:29:87:46:e9:7e:ba:00:c1:3e:86:ad:9a:52:0b:24: 3e:27:d4:9d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOSw8/23Yh1zk6632zL54dRBG8HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNDA4MTgwOTU1MDBaFw0yNTA4MTcxMDAwMDBaMDMxMTAvBgNV BAMTKDRGMkQ4NDY3MjJFNDc4NDRDRDY1REI5RUNCQkJBM0VBQjREOTBFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrspGTi0PgedI7MsRFXLKPC2F ryqx7j+Hq1Raxjo7RO6fgEZPsexpFULI/0LHNBnwLwmLUKXdeoLWc8pGRshC81zQ E2VGOEGmXiGnWz0mK4RtqGcFeZz2mBFD8gzza6C4BiRswp3Tgl/FPWXfxDFdpJHc SkTw5n6mDworUeWR0etVEd3Igcp86wszidyMxETIAXqRfnYHwaERWkId3RkHydCp s807bnVFs+QuSdwWOh80vSaDOEKCy2imZjSu8tybrXtho9MPOGFVHjPBVEHlck9k S7okaJt3CZfah54bcrdriz/6cOOgEpPqydIC5t3BnC2v0zQ/uajUZ7GfGh3ZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTy2EZyLkeETNZduey7uj6rTZDnowHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyMTU4YWVjLTUyODEtNDJlNi05 NzliLWZjYTYxZDQ3Yzg0NS8wLzMyMzAzMzJlMzEzNjMxMmUzMjM0MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDy6EYMA0GCSqG SIb3DQEBCwUAA4IBAQDG66BRbvttS38fbiIVkmCpz/1mzksbTQFcNlggKa1IWGZw bLk/leczQ+S7dr1HmmpmXOUxB+wt6Jk2P22DmDtbkMuARw71IhDedc7Q7Xnk82ZA oYUADUeZLLAOETv716Mzvn9qmC/03vj21TCaP2IwJBHS1WRBaquGZkHNVpOnsU0C 7BM0FLDlk+xI+2wVy6ltB1l6+9TPC5okqR0uz6Nx0rcb8Bdrig5vOENKDHrMbhE3 ki7aMeNioE/VNUc5xa+kc8L27BiBhZPmmDncL+uAxj+tSo38IVXWygUyUFpYvu0+ tetDmwm/M20JkVUph0bpfroAwT6GrZpSCyQ+J9Sd -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org