$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3137342e302f32342d3234203d3e203137373639.roa File: 3230322e35352e3137342e302f32342d3234203d3e203137373639.roa (raw, json) Hash identifier: m6SrOqylRuRjegQ1+oJr2YdMScnDfeoD54okrZlVf1s= Subject key identifier: 99:9A:E5:20:2C:68:F6:97:DB:BE:D6:71:F9:37:C6:B4:74:E4:49:60 Certificate issuer: /CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Certificate serial: 61C04104D4796DA6A67BF05A3540D1E0768FE541 Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3137342e302f32342d3234203d3e203137373639.roa Signing time: Fri 27 Oct 2023 05:00:02 +0000 ROA not before: Fri 27 Oct 2023 04:55:02 +0000 ROA not after: Fri 25 Oct 2024 05:00:02 +0000 asID: 17769 IP address blocks: 202.55.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 13:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c0:41:04:d4:79:6d:a6:a6:7b:f0:5a:35:40:d1:e0:76:8f:e5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Validity Not Before: Oct 27 04:55:02 2023 GMT Not After : Oct 25 05:00:02 2024 GMT Subject: CN=999AE5202C68F697DBBED671F937C6B474E44960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:5c:31:dc:71:fe:91:5c:7f:ab:95:e1:b3: 27:8f:cf:7b:9b:2b:6c:29:bd:aa:92:68:b8:e2:d4: 8b:40:ed:d0:67:f5:84:c8:08:5a:67:81:58:72:69: 33:4d:3f:ff:25:c9:0a:52:11:f7:b0:91:69:e1:55: 54:f6:2e:79:9d:64:09:99:72:82:d8:06:d4:7c:9a: 88:8c:b9:9b:96:68:76:70:87:9d:6d:68:d5:6a:7c: a6:e7:86:77:b8:75:4c:67:1a:65:23:b8:aa:48:76: e7:bf:95:34:eb:34:fc:f2:69:a0:df:70:12:75:b7: c4:62:db:0d:c8:69:d4:f2:84:89:72:dd:48:ba:a2: 48:d1:05:e6:de:1f:9f:21:38:7f:83:e6:b4:79:9d: 14:a6:31:76:ac:71:4a:5f:0e:07:fc:98:cf:af:b8: b0:66:83:3c:30:64:e0:b6:87:24:2e:86:28:20:ab: 03:b6:19:fc:6e:c9:b4:89:11:dc:72:06:13:75:39: 12:f3:b4:35:2f:8d:db:f7:31:7d:a0:ae:38:23:9a: d7:7c:ef:44:ae:69:48:e1:0a:4e:4a:6e:de:87:48: 98:90:e9:f9:22:11:e0:c1:12:f9:a1:56:3f:6a:36: a9:df:89:89:30:24:bb:1b:2e:f8:8f:ad:94:b1:fa: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9A:E5:20:2C:68:F6:97:DB:BE:D6:71:F9:37:C6:B4:74:E4:49:60 X509v3 Authority Key Identifier: keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3137342e302f32342d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.55.174.0/24 Signature Algorithm: sha256WithRSAEncryption 18:30:5c:e3:e6:fd:9d:7e:07:49:73:45:64:bd:80:eb:3b:01: 57:d5:61:ea:16:73:f6:4a:75:cf:b4:f3:24:c5:47:ab:36:2e: 01:0a:83:dd:93:b6:c5:a2:7f:97:42:3a:2b:06:21:0b:dc:98: 51:aa:61:f8:80:ec:0e:59:0a:50:39:28:5f:99:8c:8d:f1:09: 42:b5:f0:8c:8e:ed:ca:85:ef:1b:26:40:f0:11:41:73:51:7f: 06:78:e6:17:ab:ec:a2:d3:9b:cf:85:33:b3:5e:d0:77:3b:89: 7d:5b:3c:fd:5c:52:50:e2:95:4f:9b:60:4b:95:2c:d8:93:03: 0b:32:8d:fb:3b:94:31:ef:92:26:86:0e:67:51:cf:27:96:f8: 92:8e:2a:45:ff:65:84:ca:f0:e7:11:e1:35:5e:24:5a:bb:38: 52:6d:c7:2c:28:ac:c2:25:36:ef:b8:37:cb:7d:50:79:c0:c7: 38:59:62:c3:e6:52:9b:2b:a4:fc:9d:f0:62:e4:59:13:7c:a2: 2f:48:a4:01:47:cf:7d:b2:2f:e6:ab:f7:59:72:75:25:f8:e2: cc:e5:62:04:52:19:22:6d:3d:86:c4:47:25:de:96:b4:a7:fd: a8:54:81:17:10:29:5d:f0:91:96:d9:c9:09:e8:0f:de:0b:17: 7e:c6:28:ed -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYcBBBNR5baame/BaNUDR4HaP5UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MTE2NkQ0OTUzOTY0OTA2M0FGOEY0OTNGNTFDQjFB Q0UwQUIwOTAeFw0yMzEwMjcwNDU1MDJaFw0yNDEwMjUwNTAwMDJaMDMxMTAvBgNV BAMTKDk5OUFFNTIwMkM2OEY2OTdEQkJFRDY3MUY5MzdDNkI0NzRFNDQ5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7s1wx3HH+kVx/q5XhsyePz3ub K2wpvaqSaLji1ItA7dBn9YTICFpngVhyaTNNP/8lyQpSEfewkWnhVVT2LnmdZAmZ coLYBtR8moiMuZuWaHZwh51taNVqfKbnhne4dUxnGmUjuKpIdue/lTTrNPzyaaDf cBJ1t8Ri2w3IadTyhIly3Ui6okjRBebeH58hOH+D5rR5nRSmMXascUpfDgf8mM+v uLBmgzwwZOC2hyQuhiggqwO2GfxuybSJEdxyBhN1ORLztDUvjdv3MX2grjgjmtd8 70SuaUjhCk5Kbt6HSJiQ6fkiEeDBEvmhVj9qNqnfiYkwJLsbLviPrZSx+vjnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUmZrlICxo9pfbvtZx+TfGtHTkSWAwHwYDVR0j BBgwFoAUxFEWbUlTlkkGOvj0k/UcsazgqwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzBkYzE0MC02Y2Q0LTRhNTktYjI1Yy0zYTE0MTg1MWM5ZWMvMC9DNDUxMTY2RDQ5 NTM5NjQ5MDYzQUY4RjQ5M0Y1MUNCMUFDRTBBQjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1MTE2NkQ0OTUzOTY0OTA2M0FGOEY0OTNGNTFDQjFBQ0Uw QUIwOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzMGRjMTQwLTZjZDQtNGE1OS1i MjVjLTNhMTQxODUxYzllYy8wLzMyMzAzMjJlMzUzNTJlMzEzNzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo3rjANBgkqhkiG 9w0BAQsFAAOCAQEAGDBc4+b9nX4HSXNFZL2A6zsBV9Vh6hZz9kp1z7TzJMVHqzYu AQqD3ZO2xaJ/l0I6KwYhC9yYUaph+IDsDlkKUDkoX5mMjfEJQrXwjI7tyoXvGyZA 8BFBc1F/BnjmF6vsotObz4Uzs17QdzuJfVs8/VxSUOKVT5tgS5Us2JMDCzKN+zuU Me+SJoYOZ1HPJ5b4ko4qRf9lhMrw5xHhNV4kWrs4Um3HLCiswiU277g3y31QecDH OFliw+ZSmyuk/J3wYuRZE3yiL0ikAUfPfbIv5qv3WXJ1JfjizOViBFIZIm09hsRH Jd6WtKf9qFSBFxApXfCRltnJCegP3gsXfsYo7Q== -----END CERTIFICATE-----Generated at Tue Apr 30 12:55:38 2024 by rpki-client on console-fra.rpki-client.org