$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138382e302f32342d3234203d3e203435333035.roa File: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: ftA4o32NvXoboDnZK2labLq7FU+esbWgoj7179Wmb94= Subject key identifier: 35:90:34:E6:20:A6:60:CE:3E:2B:18:E0:A1:C6:CA:B5:DC:7C:E0:35 Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 6E359D1D0019C3754201648E3CDE2FFAF9BDC334 Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138382e302f32342d3234203d3e203435333035.roa Signing time: Wed 09 Oct 2024 16:40:02 +0000 ROA not before: Wed 09 Oct 2024 16:35:02 +0000 ROA not after: Wed 08 Oct 2025 16:40:02 +0000 asID: 45305 IP address blocks: 202.47.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:35:9d:1d:00:19:c3:75:42:01:64:8e:3c:de:2f:fa:f9:bd:c3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Oct 9 16:35:02 2024 GMT Not After : Oct 8 16:40:02 2025 GMT Subject: CN=359034E620A660CE3E2B18E0A1C6CAB5DC7CE035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:2b:90:41:49:f6:19:05:18:61:f0:94:c7: 98:2c:9b:ef:b8:f4:5a:1f:57:cf:66:27:cd:09:8f: 29:55:f4:c6:26:8f:5a:e5:94:9c:79:05:4d:1d:26: fc:d8:e0:10:cb:51:4b:26:d1:2d:55:59:1a:8a:bb: 02:13:65:7d:fb:f0:74:dd:6f:e1:c4:18:44:3a:68: 83:0a:87:ac:e7:4f:11:64:7e:dd:80:d7:a3:66:02: fd:6f:d4:59:d9:4c:4b:59:ce:7a:8c:05:02:eb:05: 7c:fb:d6:fe:50:41:27:da:b1:dd:ef:7e:0e:aa:43: 27:c2:b2:68:c2:87:8f:29:0a:aa:ab:94:c7:fd:aa: 91:c5:f2:a9:24:0b:47:c8:67:88:2b:4f:f5:53:54: 12:08:37:ee:8b:72:0f:8b:65:0b:e2:b8:7c:cb:f4: 02:1a:81:1f:b6:5e:fd:69:88:29:dc:94:45:8f:1a: 20:f3:a6:e3:7b:4d:2d:6a:fd:e9:07:7c:61:6c:b2: 0c:b2:1a:0e:22:45:6a:76:c6:94:9a:08:a3:a8:ba: 93:d2:7e:c2:a2:92:36:27:28:6e:ec:e8:7b:ea:66: 56:b6:ff:b4:fa:c6:34:80:01:36:37:b4:a8:34:43: 36:7a:b0:ac:4c:97:98:eb:22:82:e4:01:e9:2c:9d: 5f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:90:34:E6:20:A6:60:CE:3E:2B:18:E0:A1:C6:CA:B5:DC:7C:E0:35 X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138382e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.188.0/24 Signature Algorithm: sha256WithRSAEncryption 16:e5:0b:a2:38:57:2e:48:a7:07:56:ff:92:fb:8b:68:46:3c: 21:c9:44:4f:e9:b6:81:63:91:67:74:09:40:ba:cb:11:3d:b6: c4:0e:89:eb:1d:12:11:8d:b8:5d:7f:56:48:0d:ad:a1:4d:05: 3d:9f:50:4b:47:bd:ee:72:c0:31:59:a9:4a:10:03:1c:42:ee: 21:87:6f:1e:80:b0:8e:d3:a7:c8:76:14:7d:2f:c9:c0:1e:25: 25:d5:54:56:53:03:46:29:b9:0f:70:d1:f5:73:a7:e2:7d:be: 30:7b:ae:5f:3b:0f:ec:4b:a8:46:6f:ee:71:bf:23:b7:02:43: bf:79:d3:b5:9c:ac:02:11:5c:4b:6a:f5:1a:54:16:87:1c:ae: 98:2c:14:31:89:29:01:13:14:06:51:c5:4d:02:d9:0b:62:50: 85:ad:33:46:e0:af:97:32:40:85:fa:9b:dd:19:25:56:ca:eb: da:e1:4d:34:43:9e:26:75:a1:ab:fe:9c:70:69:be:43:48:10: 5c:09:a0:45:07:50:97:6b:9a:4f:7a:b9:b4:e6:d6:e5:8f:02: 79:31:1d:fa:ff:bb:af:fc:60:18:e3:7e:b5:e5:a1:90:82:54: 2e:c1:82:4a:af:7f:a3:51:59:ca:ba:ac:eb:c6:1f:49:23:55: 94:1d:61:49 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbjWdHQAZw3VCAWSOPN4v+vm9wzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNDEwMDkxNjM1MDJaFw0yNTEwMDgxNjQwMDJaMDMxMTAvBgNV BAMTKDM1OTAzNEU2MjBBNjYwQ0UzRTJCMThFMEExQzZDQUI1REM3Q0UwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcciuQQUn2GQUYYfCUx5gsm++4 9FofV89mJ80JjylV9MYmj1rllJx5BU0dJvzY4BDLUUsm0S1VWRqKuwITZX378HTd b+HEGEQ6aIMKh6znTxFkft2A16NmAv1v1FnZTEtZznqMBQLrBXz71v5QQSfasd3v fg6qQyfCsmjCh48pCqqrlMf9qpHF8qkkC0fIZ4grT/VTVBIIN+6Lcg+LZQviuHzL 9AIagR+2Xv1piCnclEWPGiDzpuN7TS1q/ekHfGFssgyyGg4iRWp2xpSaCKOoupPS fsKikjYnKG7s6HvqZla2/7T6xjSAATY3tKg0QzZ6sKxMl5jrIoLkAeksnV8PAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUNZA05iCmYM4+KxjgocbKtdx84DUwHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlZTk0MDE0LTg3ZmEtNGJjMi1i MWM2LTdmZDJhODk0NzZmMy8wLzMyMzAzMjJlMzQzNzJlMzEzODM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMovvDANBgkqhkiG 9w0BAQsFAAOCAQEAFuULojhXLkinB1b/kvuLaEY8IclET+m2gWORZ3QJQLrLET22 xA6J6x0SEY24XX9WSA2toU0FPZ9QS0e97nLAMVmpShADHELuIYdvHoCwjtOnyHYU fS/JwB4lJdVUVlMDRim5D3DR9XOn4n2+MHuuXzsP7EuoRm/ucb8jtwJDv3nTtZys AhFcS2r1GlQWhxyumCwUMYkpARMUBlHFTQLZC2JQha0zRuCvlzJAhfqb3RklVsrr 2uFNNEOeJnWhq/6ccGm+Q0gQXAmgRQdQl2uaT3q5tObW5Y8CeTEd+v+7r/xgGON+ teWhkIJULsGCSq9/o1FZyrqs68YfSSNVlB1hSQ== -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org