$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203338373634.roa File: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (raw, json) Hash identifier: BX9QXEo5+DeT0FFJeJtGFqqCX7is6TLuP+owGzNXawI= Subject key identifier: 20:27:A9:9A:AC:3B:F4:65:6A:F1:13:34:BC:0E:BC:00:AE:84:C0:1C Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 3837FAE35BB5AF99D0DB341427982CC3E514381C Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203338373634.roa Signing time: Wed 20 Mar 2024 10:02:07 +0000 ROA not before: Wed 20 Mar 2024 09:57:07 +0000 ROA not after: Wed 19 Mar 2025 10:02:07 +0000 asID: 38764 IP address blocks: 120.29.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:37:fa:e3:5b:b5:af:99:d0:db:34:14:27:98:2c:c3:e5:14:38:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Mar 20 09:57:07 2024 GMT Not After : Mar 19 10:02:07 2025 GMT Subject: CN=2027A99AAC3BF4656AF11334BC0EBC00AE84C01C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:29:32:ad:3f:4b:38:b6:58:c4:4c:b5:7a: 96:52:4b:ea:16:fd:5a:b8:ef:e6:ee:81:d4:99:e8: 5d:e8:5d:70:43:84:86:a8:44:f7:50:1f:03:d7:de: e9:4a:94:76:ae:a7:86:1d:57:a4:86:01:83:29:66: af:d6:18:ef:3c:37:f0:ce:68:16:a0:1d:96:b4:48: 03:87:9e:68:68:52:55:41:54:61:78:e0:ea:44:9d: 05:f7:59:76:4d:d5:1e:36:cd:32:d5:a3:4a:66:46: fb:8c:3a:b2:03:e8:5a:5f:b2:7f:eb:3e:29:c7:0f: 0c:47:85:f2:f8:62:62:b5:cf:b1:bf:10:d1:28:e8: c2:a1:19:2f:8e:42:08:2a:40:70:54:cb:96:e4:94: 14:40:31:9f:e7:8a:86:db:9f:c6:1c:c4:62:8c:85: 8a:53:80:c8:69:d7:27:4e:42:bd:f4:66:8e:96:cd: c0:d9:77:9e:fc:1c:b3:82:31:0d:d2:65:74:ec:94: 73:bf:9a:29:27:0d:e9:23:44:b2:cc:4a:1a:23:31: 30:b0:e1:ee:89:77:8a:92:2f:64:db:93:0c:f9:7e: 0c:f6:08:84:e6:0a:81:5e:70:16:4b:89:58:29:52: 5c:53:ff:fd:31:e4:2b:2b:42:2d:f1:03:1c:e8:58: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:27:A9:9A:AC:3B:F4:65:6A:F1:13:34:BC:0E:BC:00:AE:84:C0:1C X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203338373634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.229.0/24 Signature Algorithm: sha256WithRSAEncryption 78:8a:9a:3b:06:22:8e:7c:3a:81:22:4b:46:b1:6c:2e:5f:a0: 76:c8:cc:66:fe:3a:9c:71:b2:e2:6e:18:b2:41:e8:a1:c9:61: d9:f6:d1:9c:4b:e8:e1:ec:77:85:87:a5:8b:1f:d8:47:db:55: 96:0b:9a:53:60:b4:1a:48:b8:30:47:03:07:e5:e3:81:1c:76: 5d:5f:6f:ae:0c:a3:2e:3a:41:b6:15:bc:5e:bb:91:25:e1:b0: 7b:66:ee:41:4a:ee:88:07:75:d6:ad:ca:a3:f7:2b:7a:25:ba: 12:d3:d3:2c:05:8e:a5:03:c5:9f:b9:97:6d:59:3f:c6:0b:e2: 14:b4:56:98:5b:e7:c2:d1:72:08:97:92:01:ee:38:c1:c7:5f: c7:bf:14:2b:03:97:57:8b:26:e4:31:e6:9c:fb:0d:0c:e9:4a: 48:47:0d:5c:84:de:87:37:4f:5c:5d:3c:3c:9f:2e:13:5b:d8: 70:39:98:2d:19:ca:fc:59:68:fc:7f:e4:09:d2:60:2a:cb:3f: 1a:f5:68:68:a1:b6:51:39:8f:5a:15:25:3c:d3:ee:b3:f9:37: 26:a8:85:cf:58:4d:32:43:fe:e5:ce:91:5c:6a:de:19:56:36: c8:ea:bf:14:34:01:23:cb:fd:05:ef:8b:db:12:d1:09:eb:5d: a2:fe:83:60 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUODf641u1r5nQ2zQUJ5gsw+UUOBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNDAzMjAwOTU3MDdaFw0yNTAzMTkxMDAyMDdaMDMxMTAvBgNV BAMTKDIwMjdBOTlBQUMzQkY0NjU2QUYxMTMzNEJDMEVCQzAwQUU4NEMwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gSkyrT9LOLZYxEy1epZSS+oW /Vq47+bugdSZ6F3oXXBDhIaoRPdQHwPX3ulKlHaup4YdV6SGAYMpZq/WGO88N/DO aBagHZa0SAOHnmhoUlVBVGF44OpEnQX3WXZN1R42zTLVo0pmRvuMOrID6Fpfsn/r PinHDwxHhfL4YmK1z7G/ENEo6MKhGS+OQggqQHBUy5bklBRAMZ/niobbn8YcxGKM hYpTgMhp1ydOQr30Zo6WzcDZd578HLOCMQ3SZXTslHO/miknDekjRLLMShojMTCw 4e6Jd4qSL2Tbkwz5fgz2CITmCoFecBZLiVgpUlxT//0x5CsrQi3xAxzoWJrTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUICepmqw79GVq8RM0vA68AK6EwBwwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2FkLWMzYjktNDVhMC1i ZWI2LWJjZTQ4ZTJiMjI3Mi8wLzMxMzIzMDJlMzIzOTJlMzIzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHgd5TANBgkqhkiG 9w0BAQsFAAOCAQEAeIqaOwYijnw6gSJLRrFsLl+gdsjMZv46nHGy4m4YskHooclh 2fbRnEvo4ex3hYelix/YR9tVlguaU2C0Gki4MEcDB+XjgRx2XV9vrgyjLjpBthW8 XruRJeGwe2buQUruiAd11q3Ko/creiW6EtPTLAWOpQPFn7mXbVk/xgviFLRWmFvn wtFyCJeSAe44wcdfx78UKwOXV4sm5DHmnPsNDOlKSEcNXITehzdPXF08PJ8uE1vY cDmYLRnK/Flo/H/kCdJgKss/GvVoaKG2UTmPWhUlPNPus/k3JqiFz1hNMkP+5c6R XGreGVY2yOq/FDQBI8v9Be+L2xLRCetdov6DYA== -----END CERTIFICATE-----Generated at Fri Jun 21 19:53:44 2024 by rpki-client on console-fra.rpki-client.org