$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31302e302f32342d3234203d3e203338313530.roa File: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: m0VT3dinUs8ceKgItEEXwZ92b+KRZavB7qYQmOjNdhc= Subject key identifier: 57:49:6B:E2:D1:EC:AB:E0:28:ED:70:A9:00:05:1C:A6:8D:6A:5C:48 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 6F24BE64B6C0969170E4A7A9AABC23C39CE8A4D5 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31302e302f32342d3234203d3e203338313530.roa Signing time: Mon 31 Jul 2023 00:05:05 +0000 ROA not before: Mon 31 Jul 2023 00:00:05 +0000 ROA not after: Mon 29 Jul 2024 00:05:05 +0000 asID: 38150 IP address blocks: 202.91.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 13:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:24:be:64:b6:c0:96:91:70:e4:a7:a9:aa:bc:23:c3:9c:e8:a4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jul 31 00:00:05 2023 GMT Not After : Jul 29 00:05:05 2024 GMT Subject: CN=57496BE2D1ECABE028ED70A900051CA68D6A5C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:30:1b:a8:4d:48:07:cc:51:46:7d:d4:3d: 77:ab:14:31:a8:66:8b:3e:7c:0e:9e:65:ac:d5:b7: 55:06:46:44:8a:72:24:8b:18:03:22:9d:bf:19:66: 74:16:4b:6a:96:0a:54:fe:3e:97:e0:7c:ab:56:df: d9:37:01:fe:e5:df:92:09:a2:45:51:bd:c1:a0:ec: 14:5c:03:da:13:74:6d:b2:d4:73:97:13:0d:d6:40: 84:df:89:2b:70:6d:28:14:43:c2:cb:79:78:8a:11: b7:76:56:2f:88:db:9d:1c:45:8a:85:ec:03:54:64: 29:72:bc:4d:4d:97:c7:17:c2:86:1d:7e:c7:89:8f: b0:ef:9c:9d:3d:6b:b4:55:2f:c0:6a:04:78:f6:6c: fe:44:1b:5f:68:7e:ef:42:01:cb:48:18:79:bf:59: 82:f9:d6:64:f7:44:a9:d8:d2:1f:76:5e:17:a9:a8: 71:0b:3c:9a:25:53:4e:e1:f0:e9:ce:1f:d6:3a:88: 2a:a6:89:4d:7e:8f:0f:90:73:66:a2:69:24:67:7b: 53:7b:97:5a:11:fe:36:88:a4:13:f1:f9:dd:64:26: 12:f7:a9:bc:b3:c6:88:7e:36:52:10:da:a8:7d:a6: 04:eb:cb:66:b8:8b:3a:b3:b2:44:a9:14:3a:82:16: f8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:49:6B:E2:D1:EC:AB:E0:28:ED:70:A9:00:05:1C:A6:8D:6A:5C:48 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31302e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.91.10.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:21:8f:ce:70:65:c5:28:3d:cc:e5:2d:ea:6a:c5:bc:3b:29: b4:10:e6:f8:a4:bd:17:55:f2:af:7a:72:ae:90:64:cd:8c:9c: fa:e7:44:18:b3:a9:8b:94:bc:23:b7:8f:01:26:e8:20:7c:88: 37:f4:45:1b:78:59:9b:be:38:24:15:ad:db:05:d1:2c:8e:34: 9f:fd:13:8b:d1:6c:81:7f:9b:14:06:0b:e3:2e:5a:a3:80:f4: 18:f6:b8:f1:c1:d7:88:de:92:95:04:18:e2:93:d1:55:e7:f5: 25:b4:90:e6:ba:d9:41:e9:1c:95:19:78:e5:1d:60:3c:39:f2: f1:fd:71:b5:78:05:b6:da:f6:dc:ca:18:13:37:f4:40:f4:f8: 74:a5:3b:02:2d:33:c0:6e:de:e2:a2:67:9b:ed:12:a3:63:ee: f5:7a:36:4d:65:54:71:8d:37:30:ea:c9:52:93:fd:8d:38:64: f6:59:73:f8:1f:2b:a8:a2:62:f1:98:10:1b:24:04:8e:a4:62: 09:7e:b6:42:52:41:ab:f3:45:45:fa:40:e5:4b:d1:4a:f8:45: f0:a1:e4:5c:bd:b6:5c:8a:65:db:3c:a0:61:21:8f:b1:6d:a6: cd:ae:3e:4d:35:e9:95:bf:91:72:c3:7e:d7:b9:b7:89:30:66: 2b:62:82:4d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUbyS+ZLbAlpFw5Kepqrwjw5zopNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yMzA3MzEwMDAwMDVaFw0yNDA3MjkwMDA1MDVaMDMxMTAvBgNV BAMTKDU3NDk2QkUyRDFFQ0FCRTAyOEVENzBBOTAwMDUxQ0E2OEQ2QTVDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yzAbqE1IB8xRRn3UPXerFDGo Zos+fA6eZazVt1UGRkSKciSLGAMinb8ZZnQWS2qWClT+PpfgfKtW39k3Af7l35IJ okVRvcGg7BRcA9oTdG2y1HOXEw3WQITfiStwbSgUQ8LLeXiKEbd2Vi+I250cRYqF 7ANUZClyvE1Nl8cXwoYdfseJj7DvnJ09a7RVL8BqBHj2bP5EG19ofu9CActIGHm/ WYL51mT3RKnY0h92XhepqHELPJolU07h8OnOH9Y6iCqmiU1+jw+Qc2aiaSRne1N7 l1oR/jaIpBPx+d1kJhL3qbyzxoh+NlIQ2qh9pgTry2a4izqzskSpFDqCFvjxAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUV0lr4tHsq+Ao7XCpAAUcpo1qXEgwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMyMzAzMjJlMzkzMTJlMzEzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKWwowDQYJKoZIhvcN AQELBQADggEBAGohj85wZcUoPczlLepqxbw7KbQQ5vikvRdV8q96cq6QZM2MnPrn RBizqYuUvCO3jwEm6CB8iDf0RRt4WZu+OCQVrdsF0SyONJ/9E4vRbIF/mxQGC+Mu WqOA9Bj2uPHB14jekpUEGOKT0VXn9SW0kOa62UHpHJUZeOUdYDw58vH9cbV4Bbba 9tzKGBM39ED0+HSlOwItM8Bu3uKiZ5vtEqNj7vV6Nk1lVHGNNzDqyVKT/Y04ZPZZ c/gfK6iiYvGYEBskBI6kYgl+tkJSQavzRUX6QOVL0Ur4RfCh5Fy9tlyKZds8oGEh j7Ftps2uPk016ZW/kXLDfte5t4kwZitigk0= -----END CERTIFICATE-----Generated at Thu May 2 11:32:08 2024 by rpki-client on console-fra.rpki-client.org