$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36362e302f32342d3234203d3e203233363739.roa File: 3131302e3233322e36362e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: C4Oe/yAiFVlX2I7GsH8Br0db0g97bVuJZJUbPw+JkSk= Subject key identifier: 32:A1:E9:54:B5:18:36:8A:53:AA:48:6D:FA:BD:FB:CC:8E:85:E3:AC Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 19DAC3DB1DBC8C837256B517FA63D49598DC9002 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36362e302f32342d3234203d3e203233363739.roa Signing time: Sat 10 Aug 2024 09:01:19 +0000 ROA not before: Sat 10 Aug 2024 08:56:19 +0000 ROA not after: Sat 09 Aug 2025 09:01:19 +0000 asID: 23679 IP address blocks: 110.232.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:da:c3:db:1d:bc:8c:83:72:56:b5:17:fa:63:d4:95:98:dc:90:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Aug 10 08:56:19 2024 GMT Not After : Aug 9 09:01:19 2025 GMT Subject: CN=32A1E954B518368A53AA486DFABDFBCC8E85E3AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ef:49:3a:9b:78:55:43:40:7d:a7:65:d4:0a: 24:fe:35:dd:bc:b2:56:57:53:a1:7e:ce:fb:77:3a: e6:b1:f7:b6:b4:6f:89:ec:16:9a:0b:e4:f0:de:77: 35:f4:02:a5:2a:78:7c:d5:39:05:1f:6b:8d:61:ab: ba:db:31:86:73:16:dd:88:74:8f:a6:2c:c9:f4:26: d3:4e:5d:bf:28:5d:4e:00:ef:69:18:a1:29:20:ed: 49:e7:64:4c:8f:da:3f:a3:c6:2c:de:fb:f3:8f:4b: 32:09:d7:ef:75:73:5c:3b:f5:1c:0a:79:1a:35:60: 08:34:3f:9a:84:a9:dd:79:28:6f:4a:52:a0:3c:0a: 26:e5:bc:ca:83:6a:ac:fe:07:bb:7c:72:e5:48:57: a5:b2:d8:1f:17:19:13:26:2f:4d:78:89:d6:c7:2c: cd:a6:76:ca:33:69:d3:da:1e:e8:10:76:15:c5:a7: 65:53:24:ff:89:3b:40:fe:f6:e5:62:75:ab:75:38: 63:36:e4:c7:b2:88:f8:d5:f5:8a:e5:e0:3e:c8:13: fa:de:96:f8:92:5d:4d:e8:20:19:17:a0:4b:d7:0e: 27:ca:6e:21:42:c0:2c:01:e8:ef:94:71:50:a7:46: fc:cf:a6:76:3f:3c:a3:17:b7:54:9f:11:fb:b2:fb: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A1:E9:54:B5:18:36:8A:53:AA:48:6D:FA:BD:FB:CC:8E:85:E3:AC X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36362e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.232.66.0/24 Signature Algorithm: sha256WithRSAEncryption d2:35:4d:4f:3d:2b:11:f1:57:1e:7d:d1:58:52:5d:e5:7c:51: 80:9e:aa:04:28:23:a6:3f:c9:05:e1:2f:1d:dd:49:6d:26:2b: 20:cf:1b:e4:db:36:24:9c:d4:82:13:05:7a:49:20:7e:75:85: 4f:74:67:46:90:da:93:d5:76:1c:a2:a7:7f:f8:9b:63:3f:7b: 9e:11:aa:aa:36:3c:0e:88:56:b4:12:dc:79:09:8c:9f:24:52: 84:be:20:da:fc:4b:49:6e:20:9f:e5:d8:3d:33:32:a5:f4:fd: f7:76:00:34:cd:5c:95:81:5a:ad:22:e9:02:09:0a:55:b3:ee: 7b:df:16:94:4c:fe:42:24:5f:59:5a:56:13:f5:2e:a9:78:93: c1:b1:91:9f:8c:78:40:21:3c:f7:22:6e:7c:52:51:4b:75:51: 8d:2a:68:5a:25:45:99:7b:a5:d0:a4:e0:48:cc:20:74:48:e7: 21:71:d2:61:7b:38:a1:9d:86:e5:5c:90:a5:ba:16:a4:d6:de: 89:88:df:51:b6:71:c0:d3:63:71:58:cc:b2:71:63:2b:9b:a9: da:53:6b:95:66:c9:c3:44:68:af:19:ed:b9:b9:ce:6d:4d:40: 55:00:05:da:f1:b6:ea:65:d5:4a:d0:53:98:5f:c1:b2:68:83: e4:bd:78:e3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGdrD2x28jINyVrUX+mPUlZjckAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNDA4MTAwODU2MTlaFw0yNTA4MDkwOTAxMTlaMDMxMTAvBgNV BAMTKDMyQTFFOTU0QjUxODM2OEE1M0FBNDg2REZBQkRGQkNDOEU4NUUzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb70k6m3hVQ0B9p2XUCiT+Nd28 slZXU6F+zvt3Ouax97a0b4nsFpoL5PDedzX0AqUqeHzVOQUfa41hq7rbMYZzFt2I dI+mLMn0JtNOXb8oXU4A72kYoSkg7UnnZEyP2j+jxize+/OPSzIJ1+91c1w79RwK eRo1YAg0P5qEqd15KG9KUqA8CiblvMqDaqz+B7t8cuVIV6Wy2B8XGRMmL014idbH LM2mdsozadPaHugQdhXFp2VTJP+JO0D+9uVidat1OGM25MeyiPjV9Yrl4D7IE/re lviSXU3oIBkXoEvXDifKbiFCwCwB6O+UcVCnRvzPpnY/PKMXt1SfEfuy+0QfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMqHpVLUYNopTqkht+r37zI6F46wwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzNjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG7oQjANBgkqhkiG 9w0BAQsFAAOCAQEA0jVNTz0rEfFXHn3RWFJd5XxRgJ6qBCgjpj/JBeEvHd1JbSYr IM8b5Ns2JJzUghMFekkgfnWFT3RnRpDak9V2HKKnf/ibYz97nhGqqjY8DohWtBLc eQmMnyRShL4g2vxLSW4gn+XYPTMypfT993YANM1clYFarSLpAgkKVbPue98WlEz+ QiRfWVpWE/UuqXiTwbGRn4x4QCE89yJufFJRS3VRjSpoWiVFmXul0KTgSMwgdEjn IXHSYXs4oZ2G5VyQpboWpNbeiYjfUbZxwNNjcVjMsnFjK5up2lNrlWbJw0Rorxnt ubnObU1AVQAF2vG26mXVStBTmF/BsmiD5L144w== -----END CERTIFICATE-----Generated at Mon Nov 25 23:58:44 2024 by rpki-client on console-fra.rpki-client.org