$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136372e302f32342d3234203d3e203137373639.roa File: 3230322e35352e3136372e302f32342d3234203d3e203137373639.roa (raw, json) Hash identifier: 81RZ2WuSRSNrswgyRZXjYvG3Ysm+qlLZYds2FFDcp40= Subject key identifier: AC:4D:69:A7:94:F2:22:B2:6B:1A:4C:4B:99:4B:93:83:E4:DA:9E:00 Certificate issuer: /CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Certificate serial: 6CC735D2619BFAA7D1C4F2B7E1C6B7CE039A43F0 Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136372e302f32342d3234203d3e203137373639.roa Signing time: Fri 27 Sep 2024 06:01:27 +0000 ROA not before: Fri 27 Sep 2024 05:56:27 +0000 ROA not after: Fri 26 Sep 2025 06:01:27 +0000 asID: 17769 IP address blocks: 202.55.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c7:35:d2:61:9b:fa:a7:d1:c4:f2:b7:e1:c6:b7:ce:03:9a:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Validity Not Before: Sep 27 05:56:27 2024 GMT Not After : Sep 26 06:01:27 2025 GMT Subject: CN=AC4D69A794F222B26B1A4C4B994B9383E4DA9E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:ee:cb:58:f9:d4:80:a6:72:00:af:7c:26: f9:62:2f:56:df:c1:fc:87:f8:99:30:3b:c9:e5:db: 9b:8f:4f:0d:13:91:2e:bf:6d:71:7a:92:2a:2c:32: 2a:f2:fd:3e:37:af:a8:f4:1d:06:48:5f:51:b2:4e: 47:11:89:01:8b:40:90:9c:73:31:5e:dc:fa:f2:8e: 11:bd:4b:01:b8:3e:99:d1:6e:b9:79:c4:84:b7:1e: 0c:49:97:5f:0f:09:ab:f9:1f:64:26:d1:6e:16:7b: af:ba:07:c2:fc:4a:35:58:a2:bc:0c:82:6a:27:1d: b4:e9:9e:5b:8d:be:1b:4b:cb:cb:13:47:c7:3a:8a: 02:62:57:23:d2:ee:dd:b6:1f:91:38:68:49:a3:2b: 9a:fc:43:50:f5:74:a8:99:25:00:36:92:c0:be:45: 59:02:b7:cf:e3:ad:ab:c1:47:f3:a2:c0:7a:87:50: f9:1a:f5:bb:b0:51:66:70:e4:68:de:a6:0f:1c:ae: a9:51:28:d8:96:72:0b:18:61:9f:7b:db:6a:df:52: e2:01:69:13:20:b9:f2:53:71:28:f8:fd:2d:fb:fe: a9:e8:bf:cd:c7:80:d5:12:19:e9:a2:f2:fb:cd:d4: 72:eb:f4:e2:5c:a2:9f:67:d8:5e:af:fd:13:7a:bd: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4D:69:A7:94:F2:22:B2:6B:1A:4C:4B:99:4B:93:83:E4:DA:9E:00 X509v3 Authority Key Identifier: keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136372e302f32342d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.55.167.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:17:c3:8c:c2:f4:9b:e2:38:3c:ec:72:fd:0b:52:1a:e4:56: c9:6d:0d:e0:26:89:bc:e4:fd:7b:61:8b:55:de:0d:01:8a:48: f6:d1:ce:b1:61:d2:56:e3:2d:21:cb:3b:ba:2a:c6:65:1d:e9: 6a:09:7b:99:8b:1b:4b:64:5e:80:af:99:5a:85:02:36:9e:e6: ac:47:17:36:28:71:4f:23:27:a1:b5:b3:47:ac:a5:64:b6:6c: b2:e7:30:89:4a:fe:53:38:33:66:42:21:db:73:ae:b3:af:1c: 70:60:92:74:5e:58:17:68:9b:28:95:40:a6:d9:96:79:c0:f1: 1e:84:6f:13:79:b3:2f:fe:22:9e:1a:c4:8a:eb:a5:4a:e0:bf: 79:d1:c4:d2:94:99:4e:cf:4e:5d:a2:12:a2:84:95:32:5e:4e: 65:b9:c9:4a:57:0b:57:d4:82:1b:17:4e:fd:e9:2b:c8:ac:07: 0b:a3:18:9b:ba:3c:76:7c:ce:bc:d0:64:eb:20:3c:a5:82:a0: 85:16:75:d4:f4:e7:49:aa:b4:5f:78:07:08:ed:ae:13:14:79: 88:44:f7:3e:38:97:76:3c:34:3d:40:61:84:10:1f:16:8a:40: 2c:23:51:4e:50:3b:6a:8c:a8:f0:ec:f7:3f:08:23:50:3b:03: 24:d0:7e:1b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbMc10mGb+qfRxPK34ca3zgOaQ/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MTE2NkQ0OTUzOTY0OTA2M0FGOEY0OTNGNTFDQjFB Q0UwQUIwOTAeFw0yNDA5MjcwNTU2MjdaFw0yNTA5MjYwNjAxMjdaMDMxMTAvBgNV BAMTKEFDNEQ2OUE3OTRGMjIyQjI2QjFBNEM0Qjk5NEI5MzgzRTREQTlFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRO7LWPnUgKZyAK98JvliL1bf wfyH+JkwO8nl25uPTw0TkS6/bXF6kiosMiry/T43r6j0HQZIX1GyTkcRiQGLQJCc czFe3PryjhG9SwG4PpnRbrl5xIS3HgxJl18PCav5H2Qm0W4We6+6B8L8SjVYorwM gmonHbTpnluNvhtLy8sTR8c6igJiVyPS7t22H5E4aEmjK5r8Q1D1dKiZJQA2ksC+ RVkCt8/jravBR/OiwHqHUPka9buwUWZw5Gjepg8crqlRKNiWcgsYYZ9722rfUuIB aRMgufJTcSj4/S37/qnov83HgNUSGemi8vvN1HLr9OJcop9n2F6v/RN6vVRtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUrE1pp5TyIrJrGkxLmUuTg+TangAwHwYDVR0j BBgwFoAUxFEWbUlTlkkGOvj0k/UcsazgqwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzBkYzE0MC02Y2Q0LTRhNTktYjI1Yy0zYTE0MTg1MWM5ZWMvMC9DNDUxMTY2RDQ5 NTM5NjQ5MDYzQUY4RjQ5M0Y1MUNCMUFDRTBBQjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1MTE2NkQ0OTUzOTY0OTA2M0FGOEY0OTNGNTFDQjFBQ0Uw QUIwOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzMGRjMTQwLTZjZDQtNGE1OS1i MjVjLTNhMTQxODUxYzllYy8wLzMyMzAzMjJlMzUzNTJlMzEzNjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo3pzANBgkqhkiG 9w0BAQsFAAOCAQEAPxfDjML0m+I4POxy/QtSGuRWyW0N4CaJvOT9e2GLVd4NAYpI 9tHOsWHSVuMtIcs7uirGZR3pagl7mYsbS2RegK+ZWoUCNp7mrEcXNihxTyMnobWz R6ylZLZssucwiUr+UzgzZkIh23Ous68ccGCSdF5YF2ibKJVAptmWecDxHoRvE3mz L/4inhrEiuulSuC/edHE0pSZTs9OXaISooSVMl5OZbnJSlcLV9SCGxdO/ekryKwH C6MYm7o8dnzOvNBk6yA8pYKghRZ11PTnSaq0X3gHCO2uExR5iET3PjiXdjw0PUBh hBAfFopALCNRTlA7aoyo8Oz3PwgjUDsDJNB+Gw== -----END CERTIFICATE-----Generated at Thu Nov 21 01:24:16 2024 by rpki-client on console-ams.rpki-client.org