$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa File: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (raw, json) Hash identifier: oqv+MiKAwkTGiNOSa3FKWv6BqNY8kUkfk9xzBvpieFg= Subject key identifier: 2C:1C:50:D4:D9:79:26:6D:CE:3C:3C:34:2C:95:6B:40:06:B3:90:5B Certificate issuer: /CN=25D788BD2A450C01354B9AB70826895FDFF56208 Certificate serial: 23EAE164120E73F47A1C44A08E5B69A2635056B7 Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa Signing time: Thu 29 Jun 2023 08:00:15 +0000 ROA not before: Thu 29 Jun 2023 07:55:15 +0000 ROA not after: Thu 27 Jun 2024 08:00:15 +0000 asID: 136825 IP address blocks: 123.253.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ea:e1:64:12:0e:73:f4:7a:1c:44:a0:8e:5b:69:a2:63:50:56:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208 Validity Not Before: Jun 29 07:55:15 2023 GMT Not After : Jun 27 08:00:15 2024 GMT Subject: CN=2C1C50D4D979266DCE3C3C342C956B4006B3905B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:79:4d:9d:ae:7b:c2:c8:35:c7:d0:53:32: cc:bf:d0:70:25:38:07:ea:78:97:2b:9f:ed:89:7c: 75:22:7f:10:1c:20:ce:46:a1:84:d4:4b:6a:a9:9e: ef:72:3d:fa:0d:1e:6c:cd:75:d5:d8:8f:18:44:43: 10:c9:3c:72:62:48:e7:9f:87:35:3e:46:62:cd:5b: 3c:ad:87:47:0d:25:c7:a5:e2:87:2e:19:d4:bd:08: b7:d3:1e:d8:a0:bf:62:f5:c1:b8:dd:51:32:eb:de: 27:80:fa:75:4a:9c:7f:1f:d2:bf:27:ac:08:54:98: 8b:84:a0:5a:65:8a:5f:f3:42:06:6d:e4:bb:c7:f4: 39:57:37:11:f9:ab:42:13:1d:55:37:87:9d:be:d9: 41:9c:2a:ec:05:7d:62:b5:08:56:55:bf:de:9b:d4: 93:f1:58:8a:44:7c:ce:fe:b7:64:9a:3b:22:88:4a: b7:6f:d3:a2:5c:ba:ab:44:bb:83:19:d4:f4:b1:c2: 9d:f5:ea:46:46:86:a9:1e:c4:dc:d8:a2:66:b2:4f: 5b:2f:e0:42:a0:11:5f:08:36:7c:91:10:21:be:3e: ce:b8:5d:4a:96:62:ee:45:7f:1b:cb:af:c9:00:a1: a3:1b:ab:9f:24:84:59:c0:a6:ed:b7:2a:d5:b0:44: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1C:50:D4:D9:79:26:6D:CE:3C:3C:34:2C:95:6B:40:06:B3:90:5B X509v3 Authority Key Identifier: keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.248.0/23 Signature Algorithm: sha256WithRSAEncryption d1:2e:62:30:0a:d0:57:98:d9:de:ea:3f:51:f1:a5:74:97:08: 79:44:f9:20:51:2f:4b:4d:d4:f6:8e:f2:1a:09:8a:13:24:36: 12:74:9c:1b:25:28:c7:a9:35:6e:1f:23:8f:d3:51:18:4f:85: 89:34:9d:10:24:cb:8e:27:1b:6c:58:5c:af:d4:c4:13:71:e2: 0b:92:b9:d5:6f:bb:cb:fa:aa:ab:fd:37:ba:8f:f0:e8:ef:34: 51:80:e9:e0:ab:a1:ea:b4:b3:1e:3d:5e:b3:25:9f:bf:43:0a: 4f:87:54:ba:59:41:b8:cc:3f:0a:5c:6d:4a:f8:ee:53:63:ab: 44:20:94:ff:b6:74:d5:f3:62:26:d7:dc:03:6f:27:b9:18:b2: 12:b5:fe:72:a5:b5:e8:20:1b:13:21:1f:c4:75:80:73:a6:90: 1e:e2:bc:e7:2c:8e:72:72:00:d5:ad:8c:9e:91:f9:55:73:87: 5b:3f:86:00:68:c5:0b:97:7a:9d:80:a5:b7:a7:3a:22:b0:68: d2:60:a2:ae:17:95:6f:a3:87:33:5f:9d:05:23:a5:dd:3f:53: 46:8d:1f:29:06:b8:d7:00:5c:f0:91:78:6d:a6:85:ce:cd:f9: e5:22:ac:05:6a:01:95:d8:5e:da:98:fd:fa:bc:55:5c:d1:71: bd:e3:4c:16 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUI+rhZBIOc/R6HESgjltpomNQVrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZE RkY1NjIwODAeFw0yMzA2MjkwNzU1MTVaFw0yNDA2MjcwODAwMTVaMDMxMTAvBgNV BAMTKDJDMUM1MEQ0RDk3OTI2NkRDRTNDM0MzNDJDOTU2QjQwMDZCMzkwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pnlNna57wsg1x9BTMsy/0HAl OAfqeJcrn+2JfHUifxAcIM5GoYTUS2qpnu9yPfoNHmzNddXYjxhEQxDJPHJiSOef hzU+RmLNWzyth0cNJcel4ocuGdS9CLfTHtigv2L1wbjdUTLr3ieA+nVKnH8f0r8n rAhUmIuEoFplil/zQgZt5LvH9DlXNxH5q0ITHVU3h52+2UGcKuwFfWK1CFZVv96b 1JPxWIpEfM7+t2SaOyKISrdv06JcuqtEu4MZ1PSxwp316kZGhqkexNzYomayT1sv 4EKgEV8INnyRECG+Ps64XUqWYu5FfxvLr8kAoaMbq58khFnApu23KtWwRG91AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQULBxQ1Nl5Jm3OPDw0LJVrQAazkFswHwYDVR0j BBgwFoAUJdeIvSpFDAE1S5q3CCaJX9/1YggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmE3NjY1YS1iNTBiLTRhNDUtYThmOS0wZDY5YmQ3ZDc0M2QvMC8yNUQ3ODhCRDJB NDUwQzAxMzU0QjlBQjcwODI2ODk1RkRGRjU2MjA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZERkY1 NjIwOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2YTc2NjVhLWI1MGItNGE0NS1h OGY5LTBkNjliZDdkNzQzZC8wLzMxMzIzMzJlMzIzNTMzMmUzMjM0MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzODMyMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7/fgwDQYJ KoZIhvcNAQELBQADggEBANEuYjAK0FeY2d7qP1HxpXSXCHlE+SBRL0tN1PaO8hoJ ihMkNhJ0nBslKMepNW4fI4/TURhPhYk0nRAky44nG2xYXK/UxBNx4guSudVvu8v6 qqv9N7qP8OjvNFGA6eCroeq0sx49XrMln79DCk+HVLpZQbjMPwpcbUr47lNjq0Qg lP+2dNXzYibX3ANvJ7kYshK1/nKlteggGxMhH8R1gHOmkB7ivOcsjnJyANWtjJ6R +VVzh1s/hgBoxQuXep2ApbenOiKwaNJgoq4XlW+jhzNfnQUjpd0/U0aNHykGuNcA XPCReG2mhc7N+eUirAVqAZXYXtqY/fq8VVzRcb3jTBY= -----END CERTIFICATE-----Generated at Sun May 5 15:13:44 2024 by rpki-client on console-fra.rpki-client.org