$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa File: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (raw, json) Hash identifier: bqpmmj2kEuY6cFrK71A1veVcijDgPBMsW4rPcrwhVQ8= Subject key identifier: 98:23:F6:B4:01:68:ED:65:E4:95:24:AD:80:A6:65:6A:99:B6:EC:A5 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 59FFA983FA0B8E4C56F4B0001112045842EC7EFF Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa Signing time: Wed 06 Nov 2024 02:00:02 +0000 ROA not before: Wed 06 Nov 2024 01:55:02 +0000 ROA not after: Wed 05 Nov 2025 02:00:02 +0000 asID: 141892 IP address blocks: 202.73.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ff:a9:83:fa:0b:8e:4c:56:f4:b0:00:11:12:04:58:42:ec:7e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Nov 6 01:55:02 2024 GMT Not After : Nov 5 02:00:02 2025 GMT Subject: CN=9823F6B40168ED65E49524AD80A6656A99B6ECA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2a:d8:e3:d8:89:92:03:66:81:82:66:77:41: 12:c5:f5:a4:a5:b3:7b:c7:b0:df:00:d1:a4:46:99: dd:6d:36:86:90:92:a9:1b:73:3d:2e:35:85:3b:d3: b0:e8:10:df:2e:8d:df:0d:f0:d7:b5:67:bf:94:b9: 79:72:a6:14:ca:0c:63:e2:9d:d3:ba:da:92:d3:84: 85:b1:d1:c6:ef:46:b9:4e:50:c8:6f:36:1d:5d:7d: 4b:76:f0:39:99:0c:d3:3f:31:99:54:c8:30:08:27: f2:3d:30:b4:32:99:2d:03:1f:7e:9d:07:40:7f:50: b5:7c:44:b1:50:d4:70:17:eb:dd:7b:cd:ab:4b:9a: d6:1f:83:f0:86:d1:5b:4e:dd:f1:c0:c9:86:68:15: d2:0f:5f:c0:64:15:e1:d5:39:75:73:c1:01:1c:5f: 6b:9f:24:0a:9c:c9:80:9f:e2:1a:c1:75:1e:e6:b3: 4a:2d:d5:6e:34:a8:63:24:a5:ce:9e:19:eb:9b:0c: e4:2a:23:6e:42:d9:8c:e3:11:b1:11:d5:89:0c:fc: 04:2b:d5:d8:21:bf:2a:bf:34:1c:ed:70:cb:4e:a4: f1:9d:5d:a5:9e:d2:9b:2d:a0:56:ea:19:9c:35:84: 3e:2a:46:2e:86:37:8b:ba:df:16:00:7a:c3:d0:76: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:23:F6:B4:01:68:ED:65:E4:95:24:AD:80:A6:65:6A:99:B6:EC:A5 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.73.25.0/24 Signature Algorithm: sha256WithRSAEncryption d4:0a:69:8d:fb:e4:ed:15:30:47:5a:5f:cb:0a:9a:ac:b9:de: 13:01:0d:80:ab:31:49:24:a3:ac:9b:a3:da:4c:a9:bc:fa:1f: a9:b1:09:97:2a:02:cc:e5:b3:c4:5e:d3:90:61:e5:f3:84:3c: 10:01:a5:be:b4:a1:f5:0f:36:de:e4:b7:3a:6a:b4:2a:17:cd: 46:b5:38:bd:ba:a6:9d:13:59:d9:fb:38:0c:d2:bb:0c:bc:72: 3d:34:16:b8:95:8c:7c:28:30:95:89:eb:fb:d8:8a:b9:2c:8c: e8:52:93:86:eb:0b:db:20:45:15:e0:8f:0d:c7:6c:9d:45:46: fb:a3:df:ca:60:7f:10:3d:a4:46:f1:2a:9e:b3:9a:7f:7d:77: 7c:f9:2a:23:28:99:ac:0e:66:b6:18:d4:83:42:34:e4:22:3d: d1:fd:50:9c:e7:99:af:b0:0c:73:fb:91:ca:73:63:63:88:e3: 48:77:41:50:e7:21:d8:25:2c:62:80:b8:61:88:a2:68:0c:b0: cc:1d:bb:98:42:28:b7:ef:43:26:a2:9b:df:34:47:7e:d1:1a: b4:a9:68:f7:1b:cb:5c:e9:05:79:43:c8:36:b4:fa:f6:20:c8: 88:db:b1:7a:4f:76:5f:35:63:50:8d:52:99:27:ea:98:01:ef: f6:35:f3:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWf+pg/oLjkxW9LAAERIEWELsfv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDExMDYwMTU1MDJaFw0yNTExMDUwMjAwMDJaMDMxMTAvBgNV BAMTKDk4MjNGNkI0MDE2OEVENjVFNDk1MjRBRDgwQTY2NTZBOTlCNkVDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtKtjj2ImSA2aBgmZ3QRLF9aSl s3vHsN8A0aRGmd1tNoaQkqkbcz0uNYU707DoEN8ujd8N8Ne1Z7+UuXlyphTKDGPi ndO62pLThIWx0cbvRrlOUMhvNh1dfUt28DmZDNM/MZlUyDAIJ/I9MLQymS0DH36d B0B/ULV8RLFQ1HAX6917zatLmtYfg/CG0VtO3fHAyYZoFdIPX8BkFeHVOXVzwQEc X2ufJAqcyYCf4hrBdR7ms0ot1W40qGMkpc6eGeubDOQqI25C2YzjEbER1YkM/AQr 1dghvyq/NBztcMtOpPGdXaWe0pstoFbqGZw1hD4qRi6GN4u63xYAesPQdmW5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUmCP2tAFo7WXklSStgKZlapm27KUwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzAzMjJlMzczMzJlMzIzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpJGTANBgkqhkiG 9w0BAQsFAAOCAQEA1Appjfvk7RUwR1pfywqarLneEwENgKsxSSSjrJuj2kypvPof qbEJlyoCzOWzxF7TkGHl84Q8EAGlvrSh9Q823uS3Omq0KhfNRrU4vbqmnRNZ2fs4 DNK7DLxyPTQWuJWMfCgwlYnr+9iKuSyM6FKThusL2yBFFeCPDcdsnUVG+6PfymB/ ED2kRvEqnrOaf313fPkqIyiZrA5mthjUg0I05CI90f1QnOeZr7AMc/uRynNjY4jj SHdBUOch2CUsYoC4YYiiaAywzB27mEIot+9DJqKb3zRHftEatKlo9xvLXOkFeUPI NrT69iDIiNuxek92XzVjUI1SmSfqmAHv9jXzqg== -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org