$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133322e302f32342d3234203d3e2034333832.roa File: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (raw, json) Hash identifier: EDt2aPDzQFEG5KclRhLjIsIWiGlwsRkkJBmyyV8BkKI= Subject key identifier: D1:E4:F3:22:A6:A5:28:74:F4:C6:38:BF:A1:2C:7E:1D:45:60:8D:7A Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 10AD04B89B7040E2EF9A7C701C8E9120B5C3D0A4 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133322e302f32342d3234203d3e2034333832.roa Signing time: Wed 21 Aug 2024 14:01:41 +0000 ROA not before: Wed 21 Aug 2024 13:56:41 +0000 ROA not after: Wed 20 Aug 2025 14:01:41 +0000 asID: 4382 IP address blocks: 202.93.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ad:04:b8:9b:70:40:e2:ef:9a:7c:70:1c:8e:91:20:b5:c3:d0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Aug 21 13:56:41 2024 GMT Not After : Aug 20 14:01:41 2025 GMT Subject: CN=D1E4F322A6A52874F4C638BFA12C7E1D45608D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:c4:44:60:dc:68:6a:82:ce:49:90:19:90: 2c:da:73:be:e5:e3:8d:e0:76:5b:a4:fe:34:19:28: d1:97:17:c2:4d:9e:da:37:c0:83:62:b9:c6:86:c3: f1:47:49:53:4d:dc:f5:23:50:e5:e5:a3:4f:3c:bb: bc:a8:c9:56:ef:d2:57:16:46:19:38:19:9b:50:eb: 20:aa:2d:f5:0e:35:33:3f:0a:0f:f3:eb:33:7a:c2: cd:f6:7e:95:80:2d:6d:a6:46:ba:a5:b9:f5:c3:40: 37:fb:fa:ab:68:17:d9:e7:20:73:3b:f3:fa:7b:45: be:83:77:0f:9f:2d:0b:04:80:6e:fd:7a:59:1a:54: 2a:2a:c0:ad:4f:0a:f5:81:75:66:f4:d0:54:79:3a: 3b:f6:8f:cd:50:32:56:f3:46:25:00:21:e2:c0:24: df:63:5d:28:72:77:6b:8d:65:d9:87:7f:15:af:c4: 65:c2:ed:29:f0:66:32:25:06:cf:11:dc:c2:4f:b8: 75:25:ec:d0:6c:cd:9d:64:90:79:48:33:64:e4:24: 23:55:ae:e9:fb:5b:1f:03:b2:b2:44:fd:dc:c5:e7: bb:71:a4:b0:9e:73:ab:8e:4d:6d:a2:0b:25:52:7a: f5:e8:7e:ca:7f:6c:f3:3e:e7:61:5c:4d:8f:f1:6d: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E4:F3:22:A6:A5:28:74:F4:C6:38:BF:A1:2C:7E:1D:45:60:8D:7A X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133322e302f32342d3234203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.132.0/24 Signature Algorithm: sha256WithRSAEncryption 20:15:85:53:7e:67:c0:da:82:81:b7:ee:a1:ae:d8:04:12:94: 84:22:98:f0:ea:95:a1:ec:9e:f3:89:8c:fe:9c:b1:0a:52:95: 31:7d:48:e3:1f:4d:44:94:6f:fd:83:fc:48:c2:29:7b:a6:12: ce:1e:a0:a1:47:a1:a7:b6:ec:7d:60:a7:b6:a3:28:37:bc:e1: 98:7a:84:16:6b:19:be:48:08:3c:14:2a:af:2e:ad:8e:13:27: c6:3f:ca:dc:c9:6f:ef:71:d3:e9:ed:3a:43:3f:d9:65:dd:bd: 6d:4e:72:0b:69:39:7d:3d:75:64:d9:d4:61:99:f8:0d:87:4f: cf:3e:91:c5:cd:a2:11:00:4b:d1:ab:3f:20:c0:aa:5f:7c:8a: 60:e9:b3:89:a0:1f:32:67:c3:a9:43:0c:cf:70:f7:57:85:a2: 92:d1:71:88:14:cd:b2:17:0b:c2:1a:0e:2f:be:70:d0:d1:de: 4f:1d:0d:75:47:ff:b8:48:6d:bc:e1:b3:7b:fc:7b:e4:40:60: 68:c9:f9:93:5f:39:77:95:be:4d:63:22:1d:a0:63:4e:4a:0c: a4:82:5e:e6:d1:ec:bd:1c:1c:e7:ae:b9:b2:c4:4b:07:0e:eb: ac:94:0e:f6:e2:e2:47:42:d0:f0:7a:c4:a2:cc:a6:6f:16:11: db:0c:b0:dc -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUEK0EuJtwQOLvmnxwHI6RILXD0KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNDA4MjExMzU2NDFaFw0yNTA4MjAxNDAxNDFaMDMxMTAvBgNV BAMTKEQxRTRGMzIyQTZBNTI4NzRGNEM2MzhCRkExMkM3RTFENDU2MDhEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdcREYNxoaoLOSZAZkCzac77l 443gdluk/jQZKNGXF8JNnto3wINiucaGw/FHSVNN3PUjUOXlo088u7yoyVbv0lcW Rhk4GZtQ6yCqLfUONTM/Cg/z6zN6ws32fpWALW2mRrqlufXDQDf7+qtoF9nnIHM7 8/p7Rb6Ddw+fLQsEgG79elkaVCoqwK1PCvWBdWb00FR5Ojv2j81QMlbzRiUAIeLA JN9jXShyd2uNZdmHfxWvxGXC7SnwZjIlBs8R3MJPuHUl7NBszZ1kkHlIM2TkJCNV run7Wx8DsrJE/dzF57txpLCec6uOTW2iCyVSevXofsp/bPM+52FcTY/xbUZLAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU0eTzIqalKHT0xji/oSx+HUVgjXowHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYQwDQYJKoZIhvcN AQELBQADggEBACAVhVN+Z8DagoG37qGu2AQSlIQimPDqlaHsnvOJjP6csQpSlTF9 SOMfTUSUb/2D/EjCKXumEs4eoKFHoae27H1gp7ajKDe84Zh6hBZrGb5ICDwUKq8u rY4TJ8Y/ytzJb+9x0+ntOkM/2WXdvW1OcgtpOX09dWTZ1GGZ+A2HT88+kcXNohEA S9GrPyDAql98imDps4mgHzJnw6lDDM9w91eFopLRcYgUzbIXC8IaDi++cNDR3k8d DXVH/7hIbbzhs3v8e+RAYGjJ+ZNfOXeVvk1jIh2gY05KDKSCXubR7L0cHOeuubLE SwcO66yUDvbi4kdC0PB6xKLMpm8WEdsMsNw= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org