$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3139322e302f32312d3234203d3e203233363739.roa File: 3230322e3136322e3139322e302f32312d3234203d3e203233363739.roa (raw, json) Hash identifier: ZBrXKoV3PwDLYU+Y1U1a6xXeDobsncJa17lUOF4JM3Y= Subject key identifier: BE:41:D4:EF:43:70:E2:1F:E8:9C:74:1A:1C:24:19:B9:A9:6A:1F:2F Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 22B2CF51235B0535EA156FCCD935E484704F7898 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3139322e302f32312d3234203d3e203233363739.roa Signing time: Fri 09 Aug 2024 06:00:47 +0000 ROA not before: Fri 09 Aug 2024 05:55:47 +0000 ROA not after: Fri 08 Aug 2025 06:00:47 +0000 asID: 23679 IP address blocks: 202.162.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b2:cf:51:23:5b:05:35:ea:15:6f:cc:d9:35:e4:84:70:4f:78:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Aug 9 05:55:47 2024 GMT Not After : Aug 8 06:00:47 2025 GMT Subject: CN=BE41D4EF4370E21FE89C741A1C2419B9A96A1F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:f8:b8:d4:0a:6a:27:2d:f3:8b:1c:f2:67: b9:d3:6e:bc:30:2d:3d:c2:67:11:52:37:7e:60:59: f9:40:ad:cd:06:3a:44:26:be:ce:ca:53:d9:8c:b5: d4:4a:bc:65:bf:f9:ef:7e:0d:46:30:68:83:e1:27: 8c:32:89:57:0e:55:58:0b:b8:71:33:b9:de:3f:4e: 3f:bc:df:7a:d1:98:e1:47:bb:32:15:a4:19:e8:dd: d0:d5:f2:d4:c7:9d:31:3e:3c:d9:d9:27:1e:1f:33: 2e:4c:dd:1a:fa:e9:39:57:a0:29:3a:da:59:e5:e4: 04:cd:d3:56:72:01:fa:c8:34:f1:03:28:c8:53:ac: ef:22:70:6a:1c:52:91:e0:3d:50:19:fb:ce:0f:82: c4:70:19:18:29:5c:ff:b1:a7:a8:1a:bc:92:be:60: 49:f6:4a:74:c1:66:cd:a6:03:b6:11:86:24:d5:72: 04:81:a9:e5:f0:89:39:d6:1f:b8:22:75:aa:b7:76: b2:6c:5e:44:ee:9f:ec:0d:d9:ef:26:00:51:00:8d: e6:d0:d1:83:14:69:ea:ec:a6:0c:75:22:b3:3c:f0: e2:0d:54:c8:1e:c5:19:b0:e6:2c:ab:31:95:87:49: a4:9a:83:48:d3:f7:f8:b3:4e:25:29:d1:e8:62:98: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:41:D4:EF:43:70:E2:1F:E8:9C:74:1A:1C:24:19:B9:A9:6A:1F:2F X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3139322e302f32312d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.162.192.0/21 Signature Algorithm: sha256WithRSAEncryption 47:9a:e4:d1:fa:c2:a6:d7:9d:ca:cf:f8:5f:d0:c3:2f:84:be: 46:8f:72:51:f1:83:20:63:6d:41:6d:c3:2b:48:07:b0:b8:52: a6:bf:10:2c:44:b2:98:1f:11:1f:b9:50:e6:d7:c7:62:28:0e: f4:20:f0:a3:d2:04:bd:ff:7d:c4:92:0e:41:9f:14:38:5c:6a: 66:6b:c6:7e:bd:89:3d:2c:34:c4:34:c7:36:dc:7e:c5:bb:c3: 5f:5c:17:74:bd:94:d8:2b:3a:8a:b0:1b:59:d6:61:b0:b1:95: 98:86:85:e6:28:2c:ea:88:cd:81:4f:1d:ed:6a:b7:74:3f:4b: 01:33:06:dc:f5:d9:f6:bc:0c:72:ee:86:d9:4f:77:2a:ba:11: 64:25:3d:44:7d:6c:0d:cd:e1:7a:9f:5e:33:5a:c4:df:26:a2: 37:1f:36:a4:49:85:87:b6:07:59:0e:de:89:77:5c:0a:5b:40: 26:0b:3f:8a:2a:21:d3:56:67:63:38:a4:2b:c2:49:3a:63:4a: fc:ad:8e:1b:d1:4c:6e:7c:7a:79:0d:cd:39:b0:cc:3a:40:f9: 38:d7:d5:40:4a:c9:ef:5d:16:5a:79:2b:6d:22:14:b1:e4:a2: 21:26:67:8e:49:c6:39:07:76:cc:ea:9e:6e:10:57:99:85:ee: 2e:a6:37:aa -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIrLPUSNbBTXqFW/M2TXkhHBPeJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNDA4MDkwNTU1NDdaFw0yNTA4MDgwNjAwNDdaMDMxMTAvBgNV BAMTKEJFNDFENEVGNDM3MEUyMUZFODlDNzQxQTFDMjQxOUI5QTk2QTFGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVPi41ApqJy3zixzyZ7nTbrww LT3CZxFSN35gWflArc0GOkQmvs7KU9mMtdRKvGW/+e9+DUYwaIPhJ4wyiVcOVVgL uHEzud4/Tj+833rRmOFHuzIVpBno3dDV8tTHnTE+PNnZJx4fMy5M3Rr66TlXoCk6 2lnl5ATN01ZyAfrINPEDKMhTrO8icGocUpHgPVAZ+84PgsRwGRgpXP+xp6gavJK+ YEn2SnTBZs2mA7YRhiTVcgSBqeXwiTnWH7gidaq3drJsXkTun+wN2e8mAFEAjebQ 0YMUaerspgx1IrM88OINVMgexRmw5iyrMZWHSaSag0jT9/izTiUp0ehimF5rAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUvkHU70Nw4h/onHQaHCQZualqHy8wHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzAzMjJlMzEzNjMyMmUzMTM5MzIyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyqLAMA0GCSqG SIb3DQEBCwUAA4IBAQBHmuTR+sKm153Kz/hf0MMvhL5Gj3JR8YMgY21BbcMrSAew uFKmvxAsRLKYHxEfuVDm18diKA70IPCj0gS9/33Ekg5BnxQ4XGpma8Z+vYk9LDTE NMc23H7Fu8NfXBd0vZTYKzqKsBtZ1mGwsZWYhoXmKCzqiM2BTx3tard0P0sBMwbc 9dn2vAxy7obZT3cquhFkJT1EfWwNzeF6n14zWsTfJqI3HzakSYWHtgdZDt6Jd1wK W0AmCz+KKiHTVmdjOKQrwkk6Y0r8rY4b0UxufHp5Dc05sMw6QPk419VASsnvXRZa eSttIhSx5KIhJmeOScY5B3bM6p5uEFeZhe4upjeq -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org