$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138392e302f32342d3234203d3e203435333035.roa File: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: viE08DL5fFk1bogLaoHfmzCByxNbHXkxctzPEjnVqjA= Subject key identifier: 01:EE:B4:BD:38:8D:B6:B8:75:C9:D0:A3:3F:15:7E:4D:F7:4C:8E:CC Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 484A0FBDAF6CC036A3398C4308D3807041CD92CC Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138392e302f32342d3234203d3e203435333035.roa Signing time: Wed 09 Oct 2024 16:40:16 +0000 ROA not before: Wed 09 Oct 2024 16:35:16 +0000 ROA not after: Wed 08 Oct 2025 16:40:16 +0000 asID: 45305 IP address blocks: 202.47.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4a:0f:bd:af:6c:c0:36:a3:39:8c:43:08:d3:80:70:41:cd:92:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Oct 9 16:35:16 2024 GMT Not After : Oct 8 16:40:16 2025 GMT Subject: CN=01EEB4BD388DB6B875C9D0A33F157E4DF74C8ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:6d:fe:73:61:34:50:50:1e:17:c1:11:01: 97:fb:f5:7c:31:ac:d7:89:95:a5:cb:cd:08:b5:0f: f4:d0:66:ac:0f:3d:e4:b8:db:53:a4:42:31:3b:66: d2:77:a9:88:10:76:1c:88:73:f1:8a:b3:35:d3:90: 71:c2:95:a2:4c:b3:6a:56:0a:b9:95:79:a0:d0:05: 4f:bb:19:ad:44:bd:ee:a6:8e:fc:b3:c4:e2:99:eb: 02:09:bc:60:6f:60:c3:5b:78:47:9c:d7:0a:5f:f9: fc:ce:22:7b:8b:ff:4f:be:15:5c:c6:c9:ff:cb:77: 03:9f:e5:1d:89:b1:68:10:9f:3a:e0:92:48:f5:52: 0f:fd:27:13:65:e7:8d:e5:6e:2d:4a:54:e7:3f:bd: 89:fe:78:ce:7e:88:0b:c7:de:d6:5a:68:85:84:a2: 92:5d:77:88:cf:2a:ff:1e:b8:46:ea:04:38:8b:24: 08:d7:79:af:31:0f:70:23:d1:f6:a3:d8:77:ed:2d: 2a:b3:88:69:db:9a:06:2b:a5:4d:69:31:fe:2a:85: a5:6e:76:4e:0d:1b:39:e1:db:80:e0:29:bf:23:41: ed:5f:30:31:79:a5:e0:50:71:fc:84:3d:78:31:08: db:b8:25:e2:3f:03:41:42:13:01:73:ff:7a:c4:7b: e9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:B4:BD:38:8D:B6:B8:75:C9:D0:A3:3F:15:7E:4D:F7:4C:8E:CC X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138392e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.189.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:33:7a:ed:d4:b5:0b:73:67:fe:9d:7e:74:d2:8c:22:62:d7: e5:44:49:d8:33:cf:5e:8a:5a:d5:ce:99:f7:3b:3d:d9:08:a9: 68:11:52:b9:ea:65:af:50:6b:89:21:cf:6f:8e:9a:62:65:88: 75:fc:4b:63:1a:34:f8:6a:d9:6b:49:dc:b3:81:cd:fe:03:7e: 00:78:11:3b:5e:68:8f:71:12:e2:6f:f0:06:dd:d3:49:1c:bd: 43:7f:5a:9e:a0:6d:e6:fc:0b:c8:49:bf:e3:67:55:76:8f:5d: 50:5c:64:db:d5:df:ec:47:77:52:ed:6a:d6:28:7c:e8:df:a2: cf:cf:2b:04:44:94:d1:0a:93:f0:ee:7f:b2:64:9c:6e:4e:6c: 38:57:a3:5b:84:8b:b4:3d:7a:c3:f7:df:ba:a0:73:55:c3:f3: ef:ea:b9:0b:49:53:21:dc:ca:20:53:7d:96:0a:94:55:b2:f2: 33:44:77:8e:2e:bd:19:be:0d:2f:11:4c:1a:9b:85:18:f3:10: 7e:c1:b4:2a:52:6b:82:36:49:40:8e:a5:86:8d:49:d0:2f:9b: 24:25:a4:86:87:ac:73:bb:b9:a2:0c:23:27:31:3d:30:08:46: 3c:d9:dc:9c:94:08:79:5d:01:b1:56:b8:52:96:c4:dc:1e:3f: 6a:b3:b1:0b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSEoPva9swDajOYxDCNOAcEHNkswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNDEwMDkxNjM1MTZaFw0yNTEwMDgxNjQwMTZaMDMxMTAvBgNV BAMTKDAxRUVCNEJEMzg4REI2Qjg3NUM5RDBBMzNGMTU3RTRERjc0QzhFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAW3+c2E0UFAeF8ERAZf79Xwx rNeJlaXLzQi1D/TQZqwPPeS421OkQjE7ZtJ3qYgQdhyIc/GKszXTkHHClaJMs2pW CrmVeaDQBU+7Ga1Eve6mjvyzxOKZ6wIJvGBvYMNbeEec1wpf+fzOInuL/0++FVzG yf/LdwOf5R2JsWgQnzrgkkj1Ug/9JxNl543lbi1KVOc/vYn+eM5+iAvH3tZaaIWE opJdd4jPKv8euEbqBDiLJAjXea8xD3Aj0faj2HftLSqziGnbmgYrpU1pMf4qhaVu dk4NGznh24DgKb8jQe1fMDF5peBQcfyEPXgxCNu4JeI/A0FCEwFz/3rEe+nvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAe60vTiNtrh1ydCjPxV+TfdMjswwHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlZTk0MDE0LTg3ZmEtNGJjMi1i MWM2LTdmZDJhODk0NzZmMy8wLzMyMzAzMjJlMzQzNzJlMzEzODM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMovvTANBgkqhkiG 9w0BAQsFAAOCAQEASjN67dS1C3Nn/p1+dNKMImLX5URJ2DPPXopa1c6Z9zs92Qip aBFSueplr1BriSHPb46aYmWIdfxLYxo0+GrZa0ncs4HN/gN+AHgRO15oj3ES4m/w Bt3TSRy9Q39anqBt5vwLyEm/42dVdo9dUFxk29Xf7Ed3Uu1q1ih86N+iz88rBESU 0QqT8O5/smScbk5sOFejW4SLtD16w/ffuqBzVcPz7+q5C0lTIdzKIFN9lgqUVbLy M0R3ji69Gb4NLxFMGpuFGPMQfsG0KlJrgjZJQI6lho1J0C+bJCWkhoesc7u5ogwj JzE9MAhGPNncnJQIeV0BsVa4UpbE3B4/arOxCw== -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org