$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32342d3234203d3e203234353238.roa File: 3230322e39312e33302e302f32342d3234203d3e203234353238.roa (raw, json) Hash identifier: XOJX4KCkQu5IrooRwgxTDccEtscZEDwf39FMK440o4I= Subject key identifier: 5B:66:5E:48:8F:9F:7A:32:F9:54:6D:DA:4A:1E:5E:3E:9D:FD:84:67 Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 4FCEBCC5391E9FD7BDCBE51B6221C80EA2F2F0DE Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32342d3234203d3e203234353238.roa Signing time: Sun 16 Jun 2024 05:00:00 +0000 ROA not before: Sun 16 Jun 2024 04:55:00 +0000 ROA not after: Sun 15 Jun 2025 05:00:00 +0000 asID: 24528 IP address blocks: 202.91.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ce:bc:c5:39:1e:9f:d7:bd:cb:e5:1b:62:21:c8:0e:a2:f2:f0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Jun 16 04:55:00 2024 GMT Not After : Jun 15 05:00:00 2025 GMT Subject: CN=5B665E488F9F7A32F9546DDA4A1E5E3E9DFD8467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:99:f6:ba:b8:36:02:1d:30:81:74:64:33: 86:d8:f7:fd:46:5f:1c:6b:85:a9:1d:12:b5:c9:f0: bc:67:b7:9c:44:d1:87:be:f3:be:ff:19:b2:5b:48: 16:9e:a4:bd:1a:46:51:1a:6b:42:2c:57:6d:74:0f: a2:8c:af:fd:f1:c9:06:1d:d3:a0:90:a1:bc:19:03: a8:78:8f:9d:bb:66:78:9c:3f:ec:87:54:d0:8b:dd: 1a:ee:80:f0:74:d2:31:81:63:fd:78:26:e0:59:5f: ba:06:88:6d:c8:6d:1d:1e:55:e1:08:b6:4e:29:c5: 6c:8a:22:4e:89:7e:e6:ad:2c:9a:26:c9:60:85:2c: 68:04:90:8d:48:bd:a8:e9:eb:84:c1:ee:27:f1:18: 76:5b:4d:3f:c5:e0:8b:6b:92:cc:e5:6d:f9:4d:03: 84:ac:9d:67:90:92:bf:10:66:55:bc:10:05:96:80: 57:2b:94:37:7c:5f:55:b9:83:ab:72:20:4a:fa:35: 6b:74:23:22:37:d0:22:aa:1c:b2:c4:58:d0:e0:6e: 95:15:40:dc:de:b0:ef:e9:b1:b9:da:f7:c1:1d:98: 56:01:a4:b7:24:bc:83:cb:4c:56:1f:0c:08:12:0a: 54:95:f5:26:4c:51:e6:bf:e5:e9:53:5c:aa:75:aa: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:66:5E:48:8F:9F:7A:32:F9:54:6D:DA:4A:1E:5E:3E:9D:FD:84:67 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32342d3234203d3e203234353238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.91.30.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:5f:e5:6b:98:7d:cf:f4:f4:e4:48:4f:bf:65:4b:9f:0d:dc: 89:b1:dc:4f:6b:d7:93:79:03:fe:b9:04:8d:93:8f:b0:79:20: 6d:03:51:e2:d9:67:b9:08:00:26:26:9b:9e:cf:23:99:77:27: e1:c0:d5:c8:e4:b8:05:a8:fb:cf:77:02:6e:3d:73:a3:ce:90: 6d:0d:95:93:fe:dc:48:8a:ba:0c:1b:ca:1a:bb:eb:ae:35:96: b7:ee:b1:58:a6:11:3b:91:01:49:9c:03:04:ae:de:35:ef:3f: 50:8f:a5:8f:c6:12:21:10:4d:fb:e5:4a:2a:1b:a0:4c:a8:ac: 8a:28:74:fa:9d:50:0d:0d:0a:1e:82:2a:38:a4:a4:48:ac:07: ce:d8:b4:8f:c0:01:26:5b:65:25:ad:b0:93:31:b2:74:ec:90: 17:57:fd:70:dc:ff:cf:8c:70:83:d7:fe:47:28:63:a6:2f:9c: 57:e5:65:df:36:4d:cc:bc:48:1f:34:33:93:cc:be:46:29:27: 63:af:92:5f:5f:03:6b:42:48:c5:47:20:fb:d6:47:f8:8b:fc: 4c:fc:0a:e4:ed:c8:46:68:6f:b4:d2:5a:bd:60:03:ce:71:20: a1:b7:8b:34:ba:f4:a8:27:8b:59:18:09:c5:97:77:dd:40:e7: 7b:70:9c:ae -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUT868xTken9e9y+UbYiHIDqLy8N4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNDA2MTYwNDU1MDBaFw0yNTA2MTUwNTAwMDBaMDMxMTAvBgNV BAMTKDVCNjY1RTQ4OEY5RjdBMzJGOTU0NkREQTRBMUU1RTNFOURGRDg0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNJn2urg2Ah0wgXRkM4bY9/1G XxxrhakdErXJ8Lxnt5xE0Ye+877/GbJbSBaepL0aRlEaa0IsV210D6KMr/3xyQYd 06CQobwZA6h4j527ZnicP+yHVNCL3RrugPB00jGBY/14JuBZX7oGiG3IbR0eVeEI tk4pxWyKIk6JfuatLJomyWCFLGgEkI1Ivajp64TB7ifxGHZbTT/F4ItrkszlbflN A4SsnWeQkr8QZlW8EAWWgFcrlDd8X1W5g6tyIEr6NWt0IyI30CKqHLLEWNDgbpUV QNzesO/psbna98EdmFYBpLckvIPLTFYfDAgSClSV9SZMUea/5elTXKp1qk2/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUW2ZeSI+fejL5VG3aSh5ePp39hGcwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMyMzAzMjJlMzkzMTJlMzMzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzQzNTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKWx4wDQYJKoZIhvcN AQELBQADggEBAG9f5WuYfc/09ORIT79lS58N3Imx3E9r15N5A/65BI2Tj7B5IG0D UeLZZ7kIACYmm57PI5l3J+HA1cjkuAWo+893Am49c6POkG0NlZP+3EiKugwbyhq7 6641lrfusVimETuRAUmcAwSu3jXvP1CPpY/GEiEQTfvlSioboEyorIoodPqdUA0N Ch6CKjikpEisB87YtI/AASZbZSWtsJMxsnTskBdX/XDc/8+McIPX/kcoY6YvnFfl Zd82Tcy8SB80M5PMvkYpJ2Ovkl9fA2tCSMVHIPvWR/iL/Ez8CuTtyEZob7TSWr1g A85xIKG3izS69Kgni1kYCcWXd91A53twnK4= -----END CERTIFICATE-----Generated at Thu Nov 21 01:24:16 2024 by rpki-client on console-ams.rpki-client.org