$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133312e302f32342d3234203d3e2034333832.roa File: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (raw, json) Hash identifier: jN3kG+rl4wLpy4q57ZRbTY93zXu5+vZBbSPdfoMFQTQ= Subject key identifier: FC:98:70:8C:AF:CA:44:B4:1E:86:A5:E2:3D:56:1A:54:2C:EE:8B:DE Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 3790FBCBF20763929DD7D18E03B37E64D3FE3AC4 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133312e302f32342d3234203d3e2034333832.roa Signing time: Wed 21 Aug 2024 13:00:01 +0000 ROA not before: Wed 21 Aug 2024 12:55:01 +0000 ROA not after: Wed 20 Aug 2025 13:00:01 +0000 asID: 4382 IP address blocks: 202.93.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:90:fb:cb:f2:07:63:92:9d:d7:d1:8e:03:b3:7e:64:d3:fe:3a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Aug 21 12:55:01 2024 GMT Not After : Aug 20 13:00:01 2025 GMT Subject: CN=FC98708CAFCA44B41E86A5E23D561A542CEE8BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:14:74:e6:2d:13:f6:74:7a:26:49:71:06:c6: 50:04:c7:04:b6:b6:b2:c6:d0:dd:21:9e:1f:b5:e5: 0d:5f:f9:5f:9c:c6:12:a3:a5:3a:84:45:5e:64:02: c0:5b:cf:76:5e:09:60:46:e1:21:43:41:83:8d:29: d5:47:77:7f:4f:08:52:35:36:dd:aa:ca:37:1b:21: 58:95:53:b7:b4:35:b6:14:bb:4d:c1:a8:3b:1f:99: 3b:c3:80:a5:be:63:45:d7:a5:df:78:d4:ab:4e:22: 33:24:6f:56:2f:7d:a0:74:f6:30:22:36:36:3d:b1: 19:01:8d:24:fe:d5:5c:58:7f:ff:f5:3d:8a:62:8c: f6:00:7e:09:48:b5:49:e9:7c:b7:82:d2:61:ef:9e: be:0f:94:be:67:40:d6:bd:9f:dd:02:5b:d0:de:39: a5:85:76:93:2f:13:5f:35:f6:f3:0a:8f:7b:46:15: d1:ab:52:a9:0d:89:77:70:fd:b3:15:ef:59:1e:92: 62:34:cb:8c:65:d0:74:35:99:66:ba:3f:3c:58:f0: ae:cc:a2:94:f0:06:2f:d2:27:46:01:68:a5:3e:bb: 5b:99:b6:da:6c:e6:34:03:9a:b1:4c:e3:7b:f9:63: d4:31:03:67:49:4c:30:c3:de:08:17:f2:6e:fc:ad: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:98:70:8C:AF:CA:44:B4:1E:86:A5:E2:3D:56:1A:54:2C:EE:8B:DE X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133312e302f32342d3234203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.131.0/24 Signature Algorithm: sha256WithRSAEncryption 50:24:ee:ea:61:86:17:82:e9:76:e3:31:88:e7:cf:6b:48:91: 69:06:d0:37:b2:5a:97:04:ea:c2:e9:22:74:62:92:82:83:20: 7e:91:ad:f8:ac:6b:00:a3:fb:8c:64:33:e9:ef:50:50:ad:76: 08:da:2f:2d:da:35:5e:cd:ab:9b:b9:86:3b:f9:95:5b:29:7e: 24:2d:50:c6:9c:00:e4:00:72:00:15:51:74:9c:b7:90:b9:7a: 1e:48:08:a5:20:5a:e4:83:92:b8:22:5f:13:9a:24:cc:13:fb: a0:31:be:ba:1d:f8:35:d7:27:c9:00:6f:73:58:92:28:29:c1: 4d:10:22:56:28:82:31:79:8c:c1:b0:85:d0:b9:e7:dc:6b:c0: 64:e7:be:8a:f2:34:63:de:3b:88:f8:9c:41:72:69:9a:2d:94: 34:b8:36:30:af:b3:67:66:c0:01:d8:45:fb:f9:7e:1c:34:a6: 40:ad:a0:33:72:cf:f9:c9:b1:b4:a9:b4:cb:f5:83:44:3c:38: e7:3d:38:0b:88:93:d5:4a:f0:65:dd:d7:a6:d8:a0:b5:85:c3: 74:38:99:75:81:12:47:57:9e:a7:86:47:b2:8b:02:be:1c:f0: 46:d5:5a:95:6d:5d:ed:7e:ed:04:47:ef:8f:90:6e:d3:00:bc: bb:78:97:e8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUN5D7y/IHY5Kd19GOA7N+ZNP+OsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNDA4MjExMjU1MDFaFw0yNTA4MjAxMzAwMDFaMDMxMTAvBgNV BAMTKEZDOTg3MDhDQUZDQTQ0QjQxRTg2QTVFMjNENTYxQTU0MkNFRThCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiFHTmLRP2dHomSXEGxlAExwS2 trLG0N0hnh+15Q1f+V+cxhKjpTqERV5kAsBbz3ZeCWBG4SFDQYONKdVHd39PCFI1 Nt2qyjcbIViVU7e0NbYUu03BqDsfmTvDgKW+Y0XXpd941KtOIjMkb1YvfaB09jAi NjY9sRkBjST+1VxYf//1PYpijPYAfglItUnpfLeC0mHvnr4PlL5nQNa9n90CW9De OaWFdpMvE1819vMKj3tGFdGrUqkNiXdw/bMV71kekmI0y4xl0HQ1mWa6PzxY8K7M opTwBi/SJ0YBaKU+u1uZttps5jQDmrFM43v5Y9QxA2dJTDDD3ggX8m78reedAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU/JhwjK/KRLQehqXiPVYaVCzui94wHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYMwDQYJKoZIhvcN AQELBQADggEBAFAk7uphhheC6XbjMYjnz2tIkWkG0DeyWpcE6sLpInRikoKDIH6R rfisawCj+4xkM+nvUFCtdgjaLy3aNV7Nq5u5hjv5lVspfiQtUMacAOQAcgAVUXSc t5C5eh5ICKUgWuSDkrgiXxOaJMwT+6Axvrod+DXXJ8kAb3NYkigpwU0QIlYogjF5 jMGwhdC559xrwGTnvoryNGPeO4j4nEFyaZotlDS4NjCvs2dmwAHYRfv5fhw0pkCt oDNyz/nJsbSptMv1g0Q8OOc9OAuIk9VK8GXd16bYoLWFw3Q4mXWBEkdXnqeGR7KL Ar4c8EbVWpVtXe1+7QRH74+QbtMAvLt4l+g= -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org