$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa File: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (raw, json) Hash identifier: JOYeyaEFOhJ64FjhlHl91Nb9dqegO9BUrkdFkwuvAtI= Subject key identifier: E1:1B:30:E6:B1:FE:09:D8:25:56:55:9F:1C:04:24:2C:FA:68:EA:C1 Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 5BBAFD692B421E73AF92BD9EB01FA89A11EDB4E5 Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa Signing time: Sun 16 Jun 2024 04:00:00 +0000 ROA not before: Sun 16 Jun 2024 03:55:00 +0000 ROA not after: Sun 15 Jun 2025 04:00:00 +0000 asID: 24528 IP address blocks: 202.91.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ba:fd:69:2b:42:1e:73:af:92:bd:9e:b0:1f:a8:9a:11:ed:b4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Jun 16 03:55:00 2024 GMT Not After : Jun 15 04:00:00 2025 GMT Subject: CN=E11B30E6B1FE09D82556559F1C04242CFA68EAC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:02:dc:79:e7:a9:0d:94:a1:5e:e5:0c:25: 63:cd:20:ce:f8:cf:3c:b2:95:dd:0b:2a:34:57:80: ae:a4:21:42:ee:80:6a:52:4b:6e:4d:15:04:58:34: c6:4b:49:69:05:7c:8e:c3:c6:71:10:7b:cc:3d:4c: 3a:3c:cc:8b:9a:4d:13:87:93:91:64:ec:04:69:2e: 56:c5:d9:8d:34:ec:46:dd:02:3f:b4:46:56:b3:ee: 2a:ac:0f:15:0c:14:c9:9e:f2:bf:41:1d:85:a5:38: 79:b5:e3:fb:30:5d:ea:0e:7d:fa:3c:fa:d9:cc:f8: 21:3f:4e:f5:26:24:52:3c:f6:e9:09:96:44:5c:0b: 4d:01:e6:5d:54:bc:06:ea:c5:fa:d2:f0:18:19:a3: 5a:24:31:47:a4:1e:b2:e5:a8:c1:70:b6:71:36:90: 63:56:ad:cc:22:73:32:d6:8c:9a:63:b9:a2:15:b2: 7d:49:e3:83:10:cd:48:a3:28:4f:5b:6f:05:65:4a: d1:cf:62:5c:49:17:61:af:03:cc:20:ec:ce:dc:72: d8:db:86:2d:0d:72:40:86:d2:c0:53:01:23:d8:9c: bd:92:26:ef:4c:62:d2:70:9e:a6:20:ee:7b:52:65: fc:fd:3d:18:4a:29:f9:88:87:37:dd:c4:3c:ea:b9: 03:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1B:30:E6:B1:FE:09:D8:25:56:55:9F:1C:04:24:2C:FA:68:EA:C1 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.91.27.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:b1:95:f7:e6:54:9f:2d:05:9e:fb:f6:c2:85:79:2c:ad:a7: 02:71:ca:69:c2:d4:f8:01:28:94:cc:6c:b3:14:88:3f:27:f9: 3b:74:57:fd:99:c8:57:95:44:93:bf:db:d2:13:b7:f0:dd:6d: 5b:2e:a9:8a:bc:65:89:59:80:76:67:3d:71:60:28:83:81:0c: ed:37:0e:96:16:7c:89:2f:3b:ce:52:2d:19:b8:d3:42:b9:77: fb:25:b3:df:7c:3d:8a:66:12:51:e8:9e:6b:2b:be:fb:9a:73: 0a:4d:4f:74:5d:d3:c3:f7:63:03:fb:06:0d:fa:45:0f:38:c6: be:44:01:ea:8f:56:3d:8e:b3:00:53:d4:a2:1a:42:24:69:50: 4c:4c:c2:3b:8d:74:12:59:a0:dc:eb:e1:83:dd:6b:90:a3:48: 8e:80:14:d9:ef:82:36:1d:62:81:d0:01:5c:d2:7d:1f:8d:03: cf:8e:32:9d:10:9e:ad:5b:17:0e:2d:3b:16:59:24:f3:57:60: 17:c9:84:fd:b2:18:50:2a:ab:3e:82:66:1d:3a:a3:6f:bb:57: 80:ad:14:c5:20:d9:df:d4:a8:05:db:3a:04:12:c1:a8:f3:0c: c0:e5:70:61:89:d0:22:1c:4e:5f:15:05:b5:e3:01:ff:4c:ee: 4b:ef:f0:a3 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUW7r9aStCHnOvkr2esB+omhHttOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNDA2MTYwMzU1MDBaFw0yNTA2MTUwNDAwMDBaMDMxMTAvBgNV BAMTKEUxMUIzMEU2QjFGRTA5RDgyNTU2NTU5RjFDMDQyNDJDRkE2OEVBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfALceeepDZShXuUMJWPNIM74 zzyyld0LKjRXgK6kIULugGpSS25NFQRYNMZLSWkFfI7DxnEQe8w9TDo8zIuaTROH k5Fk7ARpLlbF2Y007EbdAj+0Rlaz7iqsDxUMFMme8r9BHYWlOHm14/swXeoOffo8 +tnM+CE/TvUmJFI89ukJlkRcC00B5l1UvAbqxfrS8BgZo1okMUekHrLlqMFwtnE2 kGNWrcwiczLWjJpjuaIVsn1J44MQzUijKE9bbwVlStHPYlxJF2GvA8wg7M7cctjb hi0NckCG0sBTASPYnL2SJu9MYtJwnqYg7ntSZfz9PRhKKfmIhzfdxDzquQMDAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU4Rsw5rH+CdglVlWfHAQkLPpo6sEwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMyMzAzMjJlMzkzMTJlMzIzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzQzNTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKWxswDQYJKoZIhvcN AQELBQADggEBAJ6xlffmVJ8tBZ779sKFeSytpwJxymnC1PgBKJTMbLMUiD8n+Tt0 V/2ZyFeVRJO/29ITt/DdbVsuqYq8ZYlZgHZnPXFgKIOBDO03DpYWfIkvO85SLRm4 00K5d/sls998PYpmElHonmsrvvuacwpNT3Rd08P3YwP7Bg36RQ84xr5EAeqPVj2O swBT1KIaQiRpUExMwjuNdBJZoNzr4YPda5CjSI6AFNnvgjYdYoHQAVzSfR+NA8+O Mp0Qnq1bFw4tOxZZJPNXYBfJhP2yGFAqqz6CZh06o2+7V4CtFMUg2d/UqAXbOgQS wajzDMDlcGGJ0CIcTl8VBbXjAf9M7kvv8KM= -----END CERTIFICATE-----Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org