$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132302e302f32342d3234203d3e203233393531.roa File: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (raw, json) Hash identifier: HAoFxdygcRJ4Y8uy9Ks9W9Gj/PwyoONosucd1x3NYoo= Subject key identifier: 10:D5:86:C5:48:D7:3A:C1:BE:90:9B:E4:E4:94:CC:D0:E9:94:10:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 502A635268F13A6DD3E1CA89B9BFADCAC585E41B Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132302e302f32342d3234203d3e203233393531.roa Signing time: Fri 02 Aug 2024 02:14:57 +0000 ROA not before: Fri 02 Aug 2024 02:09:57 +0000 ROA not after: Fri 01 Aug 2025 02:14:57 +0000 asID: 23951 IP address blocks: 202.65.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2a:63:52:68:f1:3a:6d:d3:e1:ca:89:b9:bf:ad:ca:c5:85:e4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Aug 2 02:09:57 2024 GMT Not After : Aug 1 02:14:57 2025 GMT Subject: CN=10D586C548D73AC1BE909BE4E494CCD0E994108F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:c8:1c:4b:5f:60:de:6f:f5:fc:1b:73:a5: 0e:eb:75:c1:6a:8d:59:96:1d:e0:b2:f8:f3:6d:33: 81:2c:a6:a2:a0:45:79:3e:73:ca:56:a7:44:1e:b4: 64:f8:ab:aa:c0:37:3d:a3:5e:79:c9:75:41:32:3c: b5:d0:db:90:f1:be:0a:b1:83:71:4f:95:24:42:35: 02:1b:d8:86:c2:49:87:d3:64:52:d5:dc:84:dd:bd: d2:40:3c:36:bb:9b:72:4c:ac:bb:80:e1:1c:05:7a: 0e:62:b2:eb:5e:da:77:23:78:07:46:35:4a:52:bd: b5:fe:a2:14:15:49:53:e4:d4:66:1a:53:46:a5:3a: 7a:40:e5:a0:7b:df:85:84:d2:18:f3:68:4d:98:1b: 85:f2:3e:0b:50:1d:a1:ba:ca:24:80:83:d4:d2:f7: 67:02:11:ee:f9:49:0b:5d:fb:7d:c2:d3:4c:60:2d: b6:31:dc:27:a8:13:d8:b1:12:f2:6a:bc:cf:f0:2b: 8e:ee:c5:70:eb:93:d4:27:90:5d:ae:55:db:9a:4f: 36:54:31:15:a8:34:51:bd:d4:a2:56:f8:aa:b5:be: 39:fd:6a:7f:18:37:90:fb:ba:f9:39:88:5b:d8:1c: d8:09:41:f1:1a:e8:68:71:33:5b:74:bb:42:de:f5: 49:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D5:86:C5:48:D7:3A:C1:BE:90:9B:E4:E4:94:CC:D0:E9:94:10:8F X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e36352e3132302e302f32342d3234203d3e203233393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.65.120.0/24 Signature Algorithm: sha256WithRSAEncryption ab:76:e4:e8:63:dc:3a:a7:57:07:a6:b8:26:d4:6e:6f:73:c1: f5:26:ca:d1:02:66:09:39:b0:92:95:fe:74:fb:50:e5:96:1e: a6:38:ba:6d:9b:bd:d8:c8:75:13:3f:18:d9:c1:2d:0e:a5:32: 29:09:db:a8:3c:64:92:76:92:21:aa:97:ef:0b:15:ae:35:3b: 76:78:ca:b7:79:3c:87:2c:f6:b4:04:57:5c:20:e1:75:4f:76: 68:8c:0f:32:d0:d7:49:1e:3c:4a:e7:71:df:14:32:1b:3f:ad: 70:21:1b:f5:6d:24:dc:13:3b:65:e7:1b:53:8b:74:d0:74:ff: 35:9f:55:20:f0:c0:fa:a8:58:ba:bc:40:c6:2d:07:30:34:0c: 88:29:62:9f:90:d0:d7:2b:ef:4b:1d:a5:0c:dd:30:93:e7:00: 6c:ed:09:0c:d4:5b:64:e3:d2:46:19:42:b3:95:ed:b9:e2:44: b1:ba:2e:94:0a:a5:43:6d:37:09:13:3d:bc:ff:91:12:48:92: 40:92:39:64:64:89:16:e1:ad:c3:88:d5:59:fd:d0:04:a1:ab: 0b:8c:a9:a3:db:34:a9:15:c3:18:cf:54:55:cc:d1:e0:95:ce: 7c:21:e6:54:00:8b:1d:05:2e:86:ff:be:e9:a6:8f:9e:c3:5a: 3e:37:72:cc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUCpjUmjxOm3T4cqJub+tysWF5BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNDA4MDIwMjA5NTdaFw0yNTA4MDEwMjE0NTdaMDMxMTAvBgNV BAMTKDEwRDU4NkM1NDhENzNBQzFCRTkwOUJFNEU0OTRDQ0QwRTk5NDEwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxMgcS19g3m/1/BtzpQ7rdcFq jVmWHeCy+PNtM4EspqKgRXk+c8pWp0QetGT4q6rANz2jXnnJdUEyPLXQ25Dxvgqx g3FPlSRCNQIb2IbCSYfTZFLV3ITdvdJAPDa7m3JMrLuA4RwFeg5isute2ncjeAdG NUpSvbX+ohQVSVPk1GYaU0alOnpA5aB734WE0hjzaE2YG4XyPgtQHaG6yiSAg9TS 92cCEe75SQtd+33C00xgLbYx3CeoE9ixEvJqvM/wK47uxXDrk9QnkF2uVduaTzZU MRWoNFG91KJW+Kq1vjn9an8YN5D7uvk5iFvYHNgJQfEa6GhxM1t0u0Le9UlLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUENWGxUjXOsG+kJvk5JTM0OmUEI8wHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlNmE3ZTQ2LWI2YWQtNGE3ZC1i OTMwLTFhYjBiZjAyZGQ1ZC8wLzMyMzAzMjJlMzYzNTJlMzEzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpBeDANBgkqhkiG 9w0BAQsFAAOCAQEAq3bk6GPcOqdXB6a4JtRub3PB9SbK0QJmCTmwkpX+dPtQ5ZYe pji6bZu92Mh1Ez8Y2cEtDqUyKQnbqDxkknaSIaqX7wsVrjU7dnjKt3k8hyz2tARX XCDhdU92aIwPMtDXSR48Sudx3xQyGz+tcCEb9W0k3BM7ZecbU4t00HT/NZ9VIPDA +qhYurxAxi0HMDQMiClin5DQ1yvvSx2lDN0wk+cAbO0JDNRbZOPSRhlCs5XtueJE sboulAqlQ203CRM9vP+REkiSQJI5ZGSJFuGtw4jVWf3QBKGrC4ypo9s0qRXDGM9U VczR4JXOfCHmVACLHQUuhv++6aaPnsNaPjdyzA== -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org