$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/34332e3235322e37322e302f32322d3234203d3e203338373538.roa File: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (raw, json) Hash identifier: ZwR9FjboZAZDVU/wKbYd21qYjHtnOrshCk3dUigmn3Y= Subject key identifier: B2:DF:08:D3:7C:75:03:7B:BF:AE:98:9A:52:E2:87:BC:56:5B:EB:14 Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Certificate serial: 7D596DF0DEAD414521924EB854D6D9AB9BD887E3 Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/34332e3235322e37322e302f32322d3234203d3e203338373538.roa Signing time: Mon 01 Jul 2024 00:02:12 +0000 ROA not before: Sun 30 Jun 2024 23:57:12 +0000 ROA not after: Mon 30 Jun 2025 00:02:12 +0000 asID: 38758 IP address blocks: 43.252.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 04:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:59:6d:f0:de:ad:41:45:21:92:4e:b8:54:d6:d9:ab:9b:d8:87:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Validity Not Before: Jun 30 23:57:12 2024 GMT Not After : Jun 30 00:02:12 2025 GMT Subject: CN=B2DF08D37C75037BBFAE989A52E287BC565BEB14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a3:a6:34:42:d1:e5:3f:0a:c2:c8:40:30:35: da:56:70:b9:2f:45:c4:61:08:fc:d8:a6:f2:9d:b8: 86:13:00:6b:d1:22:39:f3:eb:b8:e0:38:a6:ee:11: df:09:f3:42:dc:0e:a7:89:b1:5a:fd:2d:5b:17:5d: 6c:6a:05:3f:79:21:0e:a6:fc:c5:a7:db:b3:77:c5: 79:25:72:7e:7f:2d:46:3d:eb:9b:d8:41:16:dd:d7: 14:33:03:d6:ee:f3:44:76:2a:46:cb:62:24:93:2b: a8:0f:d6:e2:35:af:fb:e9:75:57:90:9a:06:2b:71: 7e:d2:ae:40:f1:82:cc:41:e1:e7:f7:0c:a5:a8:cd: b5:4d:dd:4d:8d:c8:8a:a8:f0:90:fe:fa:21:d7:6b: 77:6c:ab:73:0d:a1:ed:1a:6d:46:5d:7f:10:47:2b: bb:f9:21:28:02:5c:2e:4a:53:67:bf:c7:ea:3b:78: 26:77:8b:f9:71:92:ee:67:bf:d2:a0:71:a1:80:2e: a2:d8:60:96:40:07:b8:54:89:a2:ac:ef:5c:ed:85: bd:05:62:0c:57:ef:59:38:5e:50:e5:f5:bd:7e:6c: ca:d7:5b:cb:e2:8c:6f:09:af:08:d9:e2:0c:77:86: 2d:4b:5e:52:af:cd:fc:03:0a:04:a4:22:0c:9c:94: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DF:08:D3:7C:75:03:7B:BF:AE:98:9A:52:E2:87:BC:56:5B:EB:14 X509v3 Authority Key Identifier: keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/34332e3235322e37322e302f32322d3234203d3e203338373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.72.0/22 Signature Algorithm: sha256WithRSAEncryption 00:44:17:f4:32:09:fa:a4:bf:b1:b3:c3:f5:72:65:64:ac:ce: f4:42:5d:5b:b3:64:26:c9:43:0d:1c:0e:8c:a8:c3:f0:50:53: f3:57:ee:0d:43:46:b6:63:e9:d0:cf:f6:90:5b:03:a4:b4:b0: 29:14:c2:10:7c:0f:9d:c6:70:96:aa:3c:81:ae:e6:2e:ce:a8: 5f:7a:08:67:ac:44:49:29:82:9b:2d:97:3d:51:41:9c:dc:b7: 39:af:5b:6f:d0:78:a3:8c:d8:49:d3:b0:dc:4d:2b:cf:a1:87: e5:fa:34:6f:99:b2:2b:a3:06:f6:ac:d0:e3:95:b2:8b:8b:8b: b5:bd:86:a1:bd:1b:cd:2c:66:e0:12:6e:c2:f5:dd:5a:ed:88: 2d:b6:5c:ed:d4:40:ae:14:fe:67:4b:8c:df:b8:4d:7c:e1:24: 87:5e:22:7d:1a:be:7e:6e:74:51:9e:1f:d1:3a:91:c7:e5:f1: 52:32:d9:15:14:de:0c:a2:d8:3a:f5:55:f8:79:27:93:10:cc: 8f:3f:b3:15:80:19:94:ec:98:b0:9c:f8:1f:a0:f8:69:b4:0e: 46:98:e7:ba:ff:bd:de:f6:a3:ce:88:52:27:f0:e6:0d:d4:f5: 42:c0:97:6d:11:8e:7e:0c:bc:23:f4:0d:3e:bd:a0:84:b6:41: 23:76:2d:fa -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUfVlt8N6tQUUhkk64VNbZq5vYh+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1 NTQ5ODZGNDAeFw0yNDA2MzAyMzU3MTJaFw0yNTA2MzAwMDAyMTJaMDMxMTAvBgNV BAMTKEIyREYwOEQzN0M3NTAzN0JCRkFFOTg5QTUyRTI4N0JDNTY1QkVCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDso6Y0QtHlPwrCyEAwNdpWcLkv RcRhCPzYpvKduIYTAGvRIjnz67jgOKbuEd8J80LcDqeJsVr9LVsXXWxqBT95IQ6m /MWn27N3xXklcn5/LUY965vYQRbd1xQzA9bu80R2KkbLYiSTK6gP1uI1r/vpdVeQ mgYrcX7SrkDxgsxB4ef3DKWozbVN3U2NyIqo8JD++iHXa3dsq3MNoe0abUZdfxBH K7v5ISgCXC5KU2e/x+o7eCZ3i/lxku5nv9KgcaGALqLYYJZAB7hUiaKs71zthb0F YgxX71k4XlDl9b1+bMrXW8vijG8JrwjZ4gx3hi1LXlKvzfwDCgSkIgyclBuTAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUst8I03x1A3u/rpiaUuKHvFZb6xQwHwYDVR0j BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5 ODZGNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05 M2U1LTUyMmVlNTQwMThkNi8wLzM0MzMyZTMyMzUzMjJlMzczMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMzMzgzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr/EgwDQYJKoZIhvcN AQELBQADggEBAABEF/QyCfqkv7Gzw/VyZWSszvRCXVuzZCbJQw0cDoyow/BQU/NX 7g1DRrZj6dDP9pBbA6S0sCkUwhB8D53GcJaqPIGu5i7OqF96CGesREkpgpstlz1R QZzctzmvW2/QeKOM2EnTsNxNK8+hh+X6NG+ZsiujBvas0OOVsouLi7W9hqG9G80s ZuASbsL13VrtiC22XO3UQK4U/mdLjN+4TXzhJIdeIn0avn5udFGeH9E6kcfl8VIy 2RUU3gyi2Dr1Vfh5J5MQzI8/sxWAGZTsmLCc+B+g+Gm0DkaY57r/vd72o86IUifw 5g3U9ULAl20Rjn4MvCP0DT69oIS2QSN2Lfo= -----END CERTIFICATE-----Generated at Sat Nov 23 05:00:43 2024 by rpki-client on console-fra.rpki-client.org