$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138392e302f32342d3234203d3e20313339333831.roa File: 3230322e34372e3138392e302f32342d3234203d3e20313339333831.roa (raw, json) Hash identifier: L+5nKPIHtrqQU25zi6/ZfiLqBlQj18bLM6sqLz+nsS4= Subject key identifier: 71:D8:AA:FA:92:B7:9B:2F:F9:9A:49:33:DE:C5:AA:E1:BB:71:91:89 Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 7994C4D4DB3E63A9647DB8D215A32621D36FD0BC Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138392e302f32342d3234203d3e20313339333831.roa Signing time: Mon 11 Nov 2024 10:00:02 +0000 ROA not before: Mon 11 Nov 2024 09:55:02 +0000 ROA not after: Mon 10 Nov 2025 10:00:02 +0000 asID: 139381 IP address blocks: 202.47.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:94:c4:d4:db:3e:63:a9:64:7d:b8:d2:15:a3:26:21:d3:6f:d0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Nov 11 09:55:02 2024 GMT Not After : Nov 10 10:00:02 2025 GMT Subject: CN=71D8AAFA92B79B2FF99A4933DEC5AAE1BB719189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:88:6e:5f:70:fc:c4:d0:f4:7d:0f:de:f3: 4c:0a:41:90:51:0d:cd:4c:4b:ce:03:8d:ac:56:f1: 49:10:68:f6:c9:4b:1a:91:74:8f:17:71:af:28:44: 3d:19:4a:cc:51:08:77:7d:89:82:1b:e3:1a:a0:d9: 36:d5:aa:ca:56:92:78:ad:ed:f5:59:1a:f1:01:64: b1:9d:45:00:ab:85:08:38:52:c9:3e:7a:66:2f:9a: 80:5c:3a:06:02:ec:1e:41:12:dd:f4:38:f5:23:fe: 0b:7e:3f:25:9d:5e:41:b1:cb:dd:26:8c:ab:e7:12: 22:48:77:1d:21:05:46:0a:eb:11:e3:d3:35:aa:b4: a9:ba:1d:90:48:30:2a:1f:2c:a7:62:7c:87:37:7d: cd:12:c2:1b:85:d7:a8:99:53:9f:60:a4:62:f1:86: e9:7c:1c:a1:af:47:1c:b4:d0:68:47:e8:51:ab:c4: 4c:be:27:7c:d7:1f:67:46:0c:18:67:b4:17:cc:61: 68:22:8c:d9:7b:ac:08:c7:7f:57:c9:0a:c6:e4:f3: 7e:58:8c:0e:8f:a7:25:d8:9b:d1:52:6b:af:3c:49: 01:82:12:05:a9:1c:60:74:85:ce:a3:dd:ef:fb:4e: a5:ed:07:aa:34:89:a3:fb:c9:1e:21:0d:7c:44:0e: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D8:AA:FA:92:B7:9B:2F:F9:9A:49:33:DE:C5:AA:E1:BB:71:91:89 X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138392e302f32342d3234203d3e20313339333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.189.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:fd:c1:7e:6d:f0:02:02:87:54:7c:a4:19:c5:b6:45:f0:6a: b5:16:40:ed:51:58:22:7a:c5:63:41:d4:fb:81:47:24:15:86: 99:88:af:ae:7d:03:96:45:1e:38:46:f6:53:f8:6e:94:c8:33: c3:6d:1e:b9:dd:ae:39:f5:c9:74:41:54:1f:b1:53:02:bc:e8: 54:23:ae:a0:01:e7:94:8e:ed:61:66:17:32:1f:64:c8:6b:d4: 3d:bd:a4:e4:2c:cb:69:4f:28:32:58:0b:14:ab:4e:0b:c8:68: cf:9b:10:a9:ce:8b:f8:d6:25:cc:9c:97:da:14:02:6f:a8:6d: 9e:61:74:c4:c4:ad:79:7f:49:62:c5:3c:24:9f:8d:8f:2b:04: b0:9f:d3:d7:da:f2:e2:71:b1:97:cb:16:0f:ac:00:b7:5b:a1: ee:e2:8f:c9:bf:d5:0c:d6:64:63:26:b1:11:ac:ed:a4:5b:d9: b8:8d:4e:a7:1f:db:5a:60:95:f3:86:f9:60:53:2e:f6:de:37: e0:24:05:bc:f8:74:8d:b0:54:24:50:78:b5:7a:60:9e:4c:e6: d6:f7:3b:19:b6:b1:f8:56:19:e4:16:55:b4:9a:e9:cd:4e:3e: 94:be:fd:32:f3:43:12:cf:17:40:8d:6b:37:51:3e:9c:5e:b2: fa:45:86:b4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeZTE1Ns+Y6lkfbjSFaMmIdNv0LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNDExMTEwOTU1MDJaFw0yNTExMTAxMDAwMDJaMDMxMTAvBgNV BAMTKDcxRDhBQUZBOTJCNzlCMkZGOTlBNDkzM0RFQzVBQUUxQkI3MTkxODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvohuX3D8xND0fQ/e80wKQZBR Dc1MS84DjaxW8UkQaPbJSxqRdI8Xca8oRD0ZSsxRCHd9iYIb4xqg2TbVqspWknit 7fVZGvEBZLGdRQCrhQg4Usk+emYvmoBcOgYC7B5BEt30OPUj/gt+PyWdXkGxy90m jKvnEiJIdx0hBUYK6xHj0zWqtKm6HZBIMCofLKdifIc3fc0SwhuF16iZU59gpGLx hul8HKGvRxy00GhH6FGrxEy+J3zXH2dGDBhntBfMYWgijNl7rAjHf1fJCsbk835Y jA6PpyXYm9FSa688SQGCEgWpHGB0hc6j3e/7TqXtB6o0iaP7yR4hDXxEDkS/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcdiq+pK3my/5mkkz3sWq4btxkYkwHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlZTk0MDE0LTg3ZmEtNGJjMi1i MWM2LTdmZDJhODk0NzZmMy8wLzMyMzAzMjJlMzQzNzJlMzEzODM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyi+9MA0GCSqG SIb3DQEBCwUAA4IBAQCf/cF+bfACAodUfKQZxbZF8Gq1FkDtUVgiesVjQdT7gUck FYaZiK+ufQOWRR44RvZT+G6UyDPDbR653a459cl0QVQfsVMCvOhUI66gAeeUju1h ZhcyH2TIa9Q9vaTkLMtpTygyWAsUq04LyGjPmxCpzov41iXMnJfaFAJvqG2eYXTE xK15f0lixTwkn42PKwSwn9PX2vLicbGXyxYPrAC3W6Hu4o/Jv9UM1mRjJrERrO2k W9m4jU6nH9taYJXzhvlgUy723jfgJAW8+HSNsFQkUHi1emCeTObW9zsZtrH4Vhnk FlW0munNTj6Uvv0y80MSzxdAjWs3UT6cXrL6RYa0 -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org