$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/34332e3232352e3138342e302f32322d3234203d3e2039343232.roa File: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (raw, json) Hash identifier: UDms7HIaDGeGiYCJtIOU53UdSKHvDK+0OFralrpfjuY= Subject key identifier: 75:EA:69:78:3F:2A:58:8B:35:90:D2:7C:C2:18:81:46:82:E7:13:76 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 1A296BEED99075255984A786F94586AFBB27C8C4 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/34332e3232352e3138342e302f32322d3234203d3e2039343232.roa Signing time: Mon 01 Jul 2024 01:05:18 +0000 ROA not before: Mon 01 Jul 2024 01:00:18 +0000 ROA not after: Mon 30 Jun 2025 01:05:18 +0000 asID: 9422 IP address blocks: 43.225.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:29:6b:ee:d9:90:75:25:59:84:a7:86:f9:45:86:af:bb:27:c8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Jul 1 01:00:18 2024 GMT Not After : Jun 30 01:05:18 2025 GMT Subject: CN=75EA69783F2A588B3590D27CC218814682E71376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f2:31:a3:4e:79:44:8f:a3:38:f6:8b:27:73: 73:37:d0:a0:7b:64:25:60:3b:ef:0f:78:97:e1:97: 4e:2b:b7:bb:ed:85:ea:96:ae:7a:f1:1d:76:67:59: c6:46:75:17:d0:6a:16:8b:f6:14:37:f8:13:a2:b2: d6:20:ff:92:de:a3:98:8e:25:8f:dc:44:e8:16:b1: 12:4b:c2:78:b0:ca:02:94:cd:90:7c:14:d4:94:a5: 0e:bc:54:9d:cd:ad:ac:1e:cd:75:d9:77:e6:57:35: 9d:65:bf:74:e4:d7:b3:07:dd:72:66:c8:cf:d2:7b: f6:7e:8d:69:a5:67:31:4e:d4:27:3b:dd:96:32:b1: ef:54:70:31:b8:b1:ae:21:6b:fd:1c:30:d8:3b:60: c8:ec:49:f9:13:31:63:b8:84:71:51:8b:1a:c2:de: ea:bb:ce:36:5c:bf:48:0a:0c:f0:5c:90:48:19:cb: 9f:9f:a4:6e:c1:26:f1:79:9a:99:6a:a5:db:bf:b0: d9:8c:74:88:a8:16:23:2f:a2:3b:31:3e:e4:63:16: cc:13:4c:0c:9e:e6:03:97:bb:4b:de:49:a8:eb:e0: d8:ac:58:24:46:86:8b:d0:4c:ac:5c:64:b3:f3:7f: 66:c1:97:45:bd:fa:bc:14:30:7e:c1:99:85:4e:2d: c6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EA:69:78:3F:2A:58:8B:35:90:D2:7C:C2:18:81:46:82:E7:13:76 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/34332e3232352e3138342e302f32322d3234203d3e2039343232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.184.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:c7:fa:69:b9:92:b5:0b:33:8c:bd:7e:90:7c:5e:78:60:93: d3:1a:c1:8a:a5:4c:7c:ca:e4:24:f9:17:fa:66:62:9d:89:41: db:42:46:50:58:fa:6c:94:01:88:01:42:24:c9:86:13:53:0d: 69:e0:5b:00:b5:17:45:f8:f4:f1:86:cb:56:ca:8f:cb:a5:e4: ae:f3:29:a1:ac:2e:74:00:12:c9:6b:90:10:dc:74:c6:df:4d: 3b:d9:3d:b9:02:3d:9f:ec:75:a0:8c:ab:0b:d7:bc:37:3a:c6: f3:6a:4a:f5:65:92:67:f3:e4:7a:03:58:e4:48:b7:08:76:e0: 86:08:fd:46:ba:7a:a6:90:a7:a4:5c:5a:a0:f9:ab:0b:a6:80: 88:75:38:9f:f2:0e:c6:40:8c:24:15:93:0a:ae:4e:ae:5c:e8: b0:85:20:ce:9e:39:c6:9c:6a:99:5c:2c:4a:ff:7d:c1:28:fc: 2f:24:ab:93:06:35:78:00:c3:f4:34:ea:4d:ab:51:81:76:35: 96:fa:53:f0:bb:da:cb:f2:e6:92:d6:e6:f6:eb:3d:ac:0d:cf: 7c:fe:49:a3:a2:dd:bd:75:30:22:c8:cf:12:04:77:32:41:86: 84:42:11:bc:50:75:4a:ea:c0:fc:7f:6e:33:60:dc:d7:85:20: 83:f1:c9:9f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUGilr7tmQdSVZhKeG+UWGr7snyMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNDA3MDEwMTAwMThaFw0yNTA2MzAwMTA1MThaMDMxMTAvBgNV BAMTKDc1RUE2OTc4M0YyQTU4OEIzNTkwRDI3Q0MyMTg4MTQ2ODJFNzEzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn8jGjTnlEj6M49osnc3M30KB7 ZCVgO+8PeJfhl04rt7vtheqWrnrxHXZnWcZGdRfQahaL9hQ3+BOistYg/5Leo5iO JY/cROgWsRJLwniwygKUzZB8FNSUpQ68VJ3NrawezXXZd+ZXNZ1lv3Tk17MH3XJm yM/Se/Z+jWmlZzFO1Cc73ZYyse9UcDG4sa4ha/0cMNg7YMjsSfkTMWO4hHFRixrC 3uq7zjZcv0gKDPBckEgZy5+fpG7BJvF5mplqpdu/sNmMdIioFiMvojsxPuRjFswT TAye5gOXu0veSajr4NisWCRGhovQTKxcZLPzf2bBl0W9+rwUMH7BmYVOLcYrAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUdeppeD8qWIs1kNJ8whiBRoLnE3YwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4N2Q3OWJhLWZiNTUtNDlhNS05 NjdiLTFlZGM3NDlkMDEyOC8wLzM0MzMyZTMyMzIzNTJlMzEzODM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzkzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr4bgwDQYJKoZIhvcN AQELBQADggEBAGrH+mm5krULM4y9fpB8Xnhgk9MawYqlTHzK5CT5F/pmYp2JQdtC RlBY+myUAYgBQiTJhhNTDWngWwC1F0X49PGGy1bKj8ul5K7zKaGsLnQAEslrkBDc dMbfTTvZPbkCPZ/sdaCMqwvXvDc6xvNqSvVlkmfz5HoDWORItwh24IYI/Ua6eqaQ p6RcWqD5qwumgIh1OJ/yDsZAjCQVkwquTq5c6LCFIM6eOcacaplcLEr/fcEo/C8k q5MGNXgAw/Q06k2rUYF2NZb6U/C72svy5pLW5vbrPawNz3z+SaOi3b11MCLIzxIE dzJBhoRCEbxQdUrqwPx/bjNg3NeFIIPxyZ8= -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org