$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136332e302f32342d3234203d3e203137373639.roa File: 3230322e35352e3136332e302f32342d3234203d3e203137373639.roa (raw, json) Hash identifier: 8mQvVYsNu1MgIuS85Ekeeuz1vVHgVHOVsmhN5uaPP2Q= Subject key identifier: 9F:7D:76:A0:4B:46:25:F8:C6:70:EF:E3:13:A0:0D:46:07:10:9C:72 Certificate issuer: /CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Certificate serial: 0210FA1D3B406DA3879924B4A7183A6EEB55396A Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136332e302f32342d3234203d3e203137373639.roa Signing time: Fri 27 Sep 2024 05:00:02 +0000 ROA not before: Fri 27 Sep 2024 04:55:02 +0000 ROA not after: Fri 26 Sep 2025 05:00:02 +0000 asID: 17769 IP address blocks: 202.55.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:10:fa:1d:3b:40:6d:a3:87:99:24:b4:a7:18:3a:6e:eb:55:39:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Validity Not Before: Sep 27 04:55:02 2024 GMT Not After : Sep 26 05:00:02 2025 GMT Subject: CN=9F7D76A04B4625F8C670EFE313A00D4607109C72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:88:05:a7:fa:da:1f:d1:b6:40:e1:84:b5: 4c:26:30:90:3d:2f:59:90:64:ea:98:5b:ca:1b:ac: 6d:9a:34:2a:cb:c8:6c:7d:ed:17:41:8a:2b:ea:7e: d2:2c:73:45:40:cd:41:13:e9:3c:6d:32:be:3c:4f: 38:50:8d:7b:5d:e1:b6:72:b6:06:70:53:b6:d5:34: f0:95:83:eb:bb:5b:e5:81:48:cf:50:62:7a:92:36: 89:bd:a9:29:36:64:f8:ea:51:23:70:d5:0a:6a:c5: 4c:9b:2c:52:22:15:be:b5:40:73:5a:dd:e9:1f:b7: f4:55:40:1f:a5:0b:eb:78:f2:24:ab:21:a5:2c:eb: 8b:f7:82:ad:8c:e7:16:3d:06:d5:19:8d:92:e0:76: 11:b8:ed:84:04:79:e6:07:8d:50:e4:99:70:83:ff: 24:04:8e:e0:64:23:63:b6:8d:ab:32:16:85:d4:e0: 15:cf:97:77:1f:7e:69:14:75:bc:c7:60:50:57:70: 3c:cc:9b:72:48:d9:7f:7b:08:cd:a8:15:15:27:d6: 34:ba:a8:80:be:0c:54:56:c3:f0:01:39:d2:20:56: 68:8b:3a:7c:33:ff:b5:30:94:b0:6a:52:53:a0:5b: 09:33:a5:c5:65:68:77:66:58:10:be:9e:d4:4e:13: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7D:76:A0:4B:46:25:F8:C6:70:EF:E3:13:A0:0D:46:07:10:9C:72 X509v3 Authority Key Identifier: keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136332e302f32342d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.55.163.0/24 Signature Algorithm: sha256WithRSAEncryption 91:e7:77:dc:b7:47:3c:67:d4:a5:7d:92:17:11:ae:e7:c1:f5: 00:6b:b1:79:71:00:f4:a5:23:1d:85:5d:ba:e1:ce:de:6e:dc: 8e:59:4f:8e:6d:8d:2b:3a:2c:01:3a:30:c9:cd:cb:58:de:e6: 4e:4b:df:f5:59:fa:be:bb:93:e5:03:65:4a:05:fc:92:32:ae: bf:1d:88:79:22:18:6f:ec:d6:8e:7d:80:de:62:fc:68:b3:e2: 3c:05:68:df:ae:d1:a9:ad:00:3d:74:81:b4:b4:5f:b5:ed:6b: 5f:58:a0:4f:ee:85:3c:a8:49:01:2e:29:8c:cd:45:9c:df:61: a1:0d:42:3f:60:4e:57:67:c5:8e:ea:2f:a7:62:72:19:1d:f5: 10:20:a1:f0:14:3a:96:67:ca:35:ee:94:d5:39:5e:04:9f:19: 77:63:da:53:ec:91:c3:88:2f:d6:b9:72:a8:f5:60:74:00:c4: 22:e9:88:79:18:e9:45:96:1b:fb:04:c4:08:e6:35:5f:95:91: 07:23:7b:a4:55:1d:65:1b:66:2b:0e:51:57:c4:e2:07:10:a3: 5e:af:30:a3:44:bf:36:a8:bd:dc:4b:01:fb:6b:8d:c6:74:61: 72:24:88:b6:35:1b:92:d7:1e:9f:ac:22:40:d3:fe:45:d3:b7: 04:46:d3:3e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAhD6HTtAbaOHmSS0pxg6butVOWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MTE2NkQ0OTUzOTY0OTA2M0FGOEY0OTNGNTFDQjFB Q0UwQUIwOTAeFw0yNDA5MjcwNDU1MDJaFw0yNTA5MjYwNTAwMDJaMDMxMTAvBgNV BAMTKDlGN0Q3NkEwNEI0NjI1RjhDNjcwRUZFMzEzQTAwRDQ2MDcxMDlDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoLYgFp/raH9G2QOGEtUwmMJA9 L1mQZOqYW8obrG2aNCrLyGx97RdBiivqftIsc0VAzUET6TxtMr48TzhQjXtd4bZy tgZwU7bVNPCVg+u7W+WBSM9QYnqSNom9qSk2ZPjqUSNw1QpqxUybLFIiFb61QHNa 3ekft/RVQB+lC+t48iSrIaUs64v3gq2M5xY9BtUZjZLgdhG47YQEeeYHjVDkmXCD /yQEjuBkI2O2jasyFoXU4BXPl3cffmkUdbzHYFBXcDzMm3JI2X97CM2oFRUn1jS6 qIC+DFRWw/ABOdIgVmiLOnwz/7UwlLBqUlOgWwkzpcVlaHdmWBC+ntROEytlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUn312oEtGJfjGcO/jE6ANRgcQnHIwHwYDVR0j BBgwFoAUxFEWbUlTlkkGOvj0k/UcsazgqwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzBkYzE0MC02Y2Q0LTRhNTktYjI1Yy0zYTE0MTg1MWM5ZWMvMC9DNDUxMTY2RDQ5 NTM5NjQ5MDYzQUY4RjQ5M0Y1MUNCMUFDRTBBQjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1MTE2NkQ0OTUzOTY0OTA2M0FGOEY0OTNGNTFDQjFBQ0Uw QUIwOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzMGRjMTQwLTZjZDQtNGE1OS1i MjVjLTNhMTQxODUxYzllYy8wLzMyMzAzMjJlMzUzNTJlMzEzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo3ozANBgkqhkiG 9w0BAQsFAAOCAQEAked33LdHPGfUpX2SFxGu58H1AGuxeXEA9KUjHYVduuHO3m7c jllPjm2NKzosATowyc3LWN7mTkvf9Vn6vruT5QNlSgX8kjKuvx2IeSIYb+zWjn2A 3mL8aLPiPAVo367Rqa0APXSBtLRfte1rX1igT+6FPKhJAS4pjM1FnN9hoQ1CP2BO V2fFjuovp2JyGR31ECCh8BQ6lmfKNe6U1TleBJ8Zd2PaU+yRw4gv1rlyqPVgdADE IumIeRjpRZYb+wTECOY1X5WRByN7pFUdZRtmKw5RV8TiBxCjXq8wo0S/Nqi93EsB +2uNxnRhciSItjUbktcen6wiQNP+RdO3BEbTPg== -----END CERTIFICATE-----Generated at Thu Nov 21 01:24:16 2024 by rpki-client on console-ams.rpki-client.org