$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa File: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (raw, json) Hash identifier: Gtp/+K549azB+5pUUWPxLkTWkLDGicnzvBzvU09wiAY= Subject key identifier: 98:F8:B7:72:2E:46:DB:4B:FE:B5:ED:43:39:A1:30:2F:DF:FF:01:B6 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 3DB6124090BE8AA75D12658A678DE1E444BA79F0 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa Signing time: Fri 06 Dec 2024 10:00:59 +0000 ROA not before: Fri 06 Dec 2024 09:55:59 +0000 ROA not after: Fri 05 Dec 2025 10:00:59 +0000 asID: 138886 IP address blocks: 210.87.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 09:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b6:12:40:90:be:8a:a7:5d:12:65:8a:67:8d:e1:e4:44:ba:79:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Dec 6 09:55:59 2024 GMT Not After : Dec 5 10:00:59 2025 GMT Subject: CN=98F8B7722E46DB4BFEB5ED4339A1302FDFFF01B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:ca:b1:d3:59:00:ac:24:98:da:3c:e0:db: 93:5b:0c:25:47:e0:9f:63:d6:6e:25:7a:be:7c:bd: 97:f9:83:db:45:71:0a:f3:d5:28:01:c1:af:27:4e: 2f:6c:6d:ac:37:4a:85:92:4c:ea:73:44:26:8e:56: 0e:c8:a3:12:aa:f9:f8:f6:67:d0:d1:ee:33:c8:41: cd:ef:f2:ef:b9:8f:1b:e6:04:1b:16:7d:af:58:8c: 18:f0:d2:2b:77:ee:60:b4:cc:e0:c1:22:e6:d9:2b: b9:99:34:df:84:f4:2f:f0:bf:34:b7:16:21:b5:86: 5e:a9:19:dc:53:c9:17:6d:0f:08:4d:28:68:b4:cf: 0b:6c:c6:fd:37:d7:d7:ff:69:d7:87:51:ab:e3:cf: ac:f9:29:ce:20:57:0f:c9:2e:cb:e9:77:db:37:93: 63:e5:04:91:4b:d8:14:44:2c:90:a2:ef:51:09:a9: b2:f9:4f:2d:ed:2f:1b:72:f0:97:d4:7a:bd:4b:39: 1a:f1:61:e8:37:dc:5c:e5:aa:a4:f1:24:4d:84:4b: 6c:d0:eb:e7:af:3d:e4:84:c4:ed:52:2d:c8:fd:3b: fc:df:3a:f8:1a:f8:db:6f:27:2d:ed:3f:56:2c:7a: b4:8f:fa:12:cd:aa:ea:20:b9:92:31:d8:06:33:cf: 76:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F8:B7:72:2E:46:DB:4B:FE:B5:ED:43:39:A1:30:2F:DF:FF:01:B6 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.118.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:d3:93:9b:6d:6f:73:c5:58:c0:59:11:a2:4b:37:36:7b:e4: 35:30:e9:27:4d:a8:e6:93:e7:c1:1c:78:f3:d8:93:ce:3d:f7: d0:95:4a:48:4a:f9:37:bc:3c:91:e4:41:89:2f:5f:13:bd:ad: 00:9c:0c:3b:66:09:4b:f6:c9:67:e3:c0:2b:1d:3c:02:40:ec: 00:af:97:7f:d3:d2:ea:6c:33:e6:ad:3a:be:ff:bf:27:8c:a5: 76:65:0e:4b:93:f1:12:56:be:c2:ea:87:ff:6b:59:82:01:19: 99:03:d8:dd:b3:ad:4a:52:97:ed:87:2a:8e:3a:6a:ee:a0:d2: f0:42:02:a2:d2:65:50:b3:71:e1:c1:38:b3:df:33:07:ac:1b: f6:c4:e0:10:ed:42:85:cf:61:c5:c7:20:67:f0:53:80:54:a6: c1:f5:73:80:ac:87:96:bd:d9:89:6e:1d:0e:f2:97:cf:bc:fc: 0e:a7:1b:9a:7a:03:b3:47:a0:ff:50:2b:5c:6c:f1:9b:84:46: f7:ba:53:2c:40:0d:91:3d:61:bf:64:f5:c6:cd:3e:36:1c:a3: 87:be:0e:e2:54:70:e0:23:d3:2d:2a:04:c5:c6:8b:8a:f8:88: 96:d5:f1:b5:55:33:6b:a9:3f:27:c9:57:9b:ba:df:85:f7:91: 48:ee:0c:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPbYSQJC+iqddEmWKZ43h5ES6efAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNDEyMDYwOTU1NTlaFw0yNTEyMDUxMDAwNTlaMDMxMTAvBgNV BAMTKDk4RjhCNzcyMkU0NkRCNEJGRUI1RUQ0MzM5QTEzMDJGREZGRjAxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOMqx01kArCSY2jzg25NbDCVH 4J9j1m4ler58vZf5g9tFcQrz1SgBwa8nTi9sbaw3SoWSTOpzRCaOVg7IoxKq+fj2 Z9DR7jPIQc3v8u+5jxvmBBsWfa9YjBjw0it37mC0zODBIubZK7mZNN+E9C/wvzS3 FiG1hl6pGdxTyRdtDwhNKGi0zwtsxv0319f/adeHUavjz6z5Kc4gVw/JLsvpd9s3 k2PlBJFL2BRELJCi71EJqbL5Ty3tLxty8JfUer1LORrxYeg33FzlqqTxJE2ES2zQ 6+evPeSExO1SLcj9O/zfOvga+NtvJy3tP1YserSP+hLNquoguZIx2AYzz3YVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmPi3ci5G20v+te1DOaEwL9//AbYwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyYWVjN2M2LTJiODMtNGNmMC04 Y2Q5LTUzNGNlNzdmZjRiMC8wLzMyMzEzMDJlMzgzNzJlMzEzMTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ld2MA0GCSqG SIb3DQEBCwUAA4IBAQCa05ObbW9zxVjAWRGiSzc2e+Q1MOknTajmk+fBHHjz2JPO PffQlUpISvk3vDyR5EGJL18Tva0AnAw7ZglL9sln48ArHTwCQOwAr5d/09LqbDPm rTq+/78njKV2ZQ5Lk/ESVr7C6of/a1mCARmZA9jds61KUpfthyqOOmruoNLwQgKi 0mVQs3HhwTiz3zMHrBv2xOAQ7UKFz2HFxyBn8FOAVKbB9XOArIeWvdmJbh0O8pfP vPwOpxuaegOzR6D/UCtcbPGbhEb3ulMsQA2RPWG/ZPXGzT42HKOHvg7iVHDgI9Mt KgTFxouK+IiW1fG1VTNrqT8nyVebut+F95FI7gwS -----END CERTIFICATE-----Generated at Sun Apr 6 11:00:16 2025 by rpki-client