$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa File: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (raw, json) Hash identifier: sVlYe4YwBTbjgpWjyM0IiuXuS9wKYuYxgEwsXXeb5wQ= Subject key identifier: 3E:FA:34:3B:39:97:4B:35:9A:04:0A:CC:D6:51:5C:52:F8:68:C2:AF Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 15A9AF727C392AC057257D30CCB697708904EB88 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa Signing time: Mon 01 Jul 2024 01:05:59 +0000 ROA not before: Mon 01 Jul 2024 01:00:59 +0000 ROA not after: Mon 30 Jun 2025 01:05:59 +0000 asID: 55701 IP address blocks: 43.252.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a9:af:72:7c:39:2a:c0:57:25:7d:30:cc:b6:97:70:89:04:eb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jul 1 01:00:59 2024 GMT Not After : Jun 30 01:05:59 2025 GMT Subject: CN=3EFA343B39974B359A040ACCD6515C52F868C2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:71:91:d5:cb:3e:56:b7:22:ed:63:67:e2: af:3d:64:09:77:32:04:86:fe:6a:89:3a:17:54:0b: 72:83:ef:46:11:a8:ec:c2:a6:7a:5e:6c:53:72:d3: a6:48:90:5e:c7:a7:e8:9f:2f:f6:ca:e8:69:a0:73: 1f:43:98:cc:f8:55:07:2e:8d:8e:2a:86:a9:d4:0f: 28:6e:52:1d:a7:f7:f7:2e:a8:46:94:ed:d9:2d:6f: df:d9:62:b3:34:84:51:29:0d:d4:46:00:b3:2f:1d: c8:ee:24:f7:83:fd:d4:39:cd:4a:c8:3a:ab:27:03: 62:21:4f:92:e0:7c:2e:07:80:30:0a:6a:e1:42:c4: ec:65:46:2f:87:1b:c0:b6:9e:23:24:49:64:5e:60: 29:12:1e:27:8e:68:39:61:9d:3d:77:ff:e2:32:e7: b4:eb:12:1e:ad:cf:1d:17:03:93:81:53:4f:1e:b0: 9b:8c:38:95:7c:ba:c0:15:d3:85:b8:53:8c:b7:c1: 86:b6:af:12:fa:aa:68:9e:66:8e:92:fa:19:36:f3: 47:c9:eb:73:5e:56:75:e7:25:cb:6e:b3:2b:68:f2: c6:91:35:1c:24:4b:55:56:94:5e:5e:de:9f:7f:76: c9:b2:3a:03:49:c0:f0:46:7d:12:63:af:ad:a1:20: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FA:34:3B:39:97:4B:35:9A:04:0A:CC:D6:51:5C:52:F8:68:C2:AF X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.236.0/23 Signature Algorithm: sha256WithRSAEncryption 67:a5:cb:3f:89:43:17:8d:d3:39:d8:12:ad:9f:2e:11:8b:ff: 89:b0:fb:7c:c1:5e:a6:2c:80:1f:8b:08:cc:4e:dd:0a:31:a0: fe:32:95:d7:4f:1b:63:58:86:76:11:23:40:e1:5a:1b:ee:7d: bc:e9:79:69:38:12:ad:e0:62:1e:a5:23:c2:74:57:a9:11:3d: 98:9b:04:f5:7a:6b:4f:cf:40:cc:10:9f:96:9e:70:64:c6:b8: 44:3f:cf:81:be:5e:e6:68:5b:58:e4:6a:c3:ab:2b:9a:c9:bd: d0:1b:1d:66:a8:c0:f8:7d:71:f2:2c:3b:3b:18:2f:b4:b8:7e: 4a:3c:34:bb:2e:75:bf:dd:6d:35:90:03:d6:09:0d:b4:e8:ce: 07:41:8b:6f:89:dd:fb:bb:27:2e:4c:84:bf:09:29:f6:21:fa: bf:39:02:03:39:ef:33:53:46:72:5b:8c:5b:ea:3d:1b:05:6e: 71:35:b7:68:25:62:1f:c5:64:57:0c:77:ab:68:93:44:a2:18: e6:80:4a:62:5f:ec:9f:28:2a:1e:be:12:39:d5:fb:ae:5f:01: 1c:4d:f3:a1:b2:f1:6d:94:7c:c3:1f:16:61:7f:1c:a7:5e:e1: 43:2c:4f:11:21:27:f8:2b:df:c5:18:97:d9:c3:69:bc:40:d5: 95:d8:e1:1c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFamvcnw5KsBXJX0wzLaXcIkE64gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA3MDEwMTAwNTlaFw0yNTA2MzAwMTA1NTlaMDMxMTAvBgNV BAMTKDNFRkEzNDNCMzk5NzRCMzU5QTA0MEFDQ0Q2NTE1QzUyRjg2OEMyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDip3GR1cs+Vrci7WNn4q89ZAl3 MgSG/mqJOhdUC3KD70YRqOzCpnpebFNy06ZIkF7Hp+ifL/bK6Gmgcx9DmMz4VQcu jY4qhqnUDyhuUh2n9/cuqEaU7dktb9/ZYrM0hFEpDdRGALMvHcjuJPeD/dQ5zUrI OqsnA2IhT5LgfC4HgDAKauFCxOxlRi+HG8C2niMkSWReYCkSHieOaDlhnT13/+Iy 57TrEh6tzx0XA5OBU08esJuMOJV8usAV04W4U4y3wYa2rxL6qmieZo6S+hk280fJ 63NeVnXnJctusyto8saRNRwkS1VWlF5e3p9/dsmyOgNJwPBGfRJjr62hIFqfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPvo0OzmXSzWaBArM1lFcUvhowq8wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzM0MzMyZTMyMzUzMjJlMzIzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASv87DANBgkqhkiG 9w0BAQsFAAOCAQEAZ6XLP4lDF43TOdgSrZ8uEYv/ibD7fMFepiyAH4sIzE7dCjGg /jKV108bY1iGdhEjQOFaG+59vOl5aTgSreBiHqUjwnRXqRE9mJsE9XprT89AzBCf lp5wZMa4RD/Pgb5e5mhbWORqw6srmsm90BsdZqjA+H1x8iw7OxgvtLh+Sjw0uy51 v91tNZAD1gkNtOjOB0GLb4nd+7snLkyEvwkp9iH6vzkCAznvM1NGcluMW+o9GwVu cTW3aCViH8VkVwx3q2iTRKIY5oBKYl/snygqHr4SOdX7rl8BHE3zobLxbZR8wx8W YX8cp17hQyxPESEn+CvfxRiX2cNpvEDVldjhHA== -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org