$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/3230322e35312e3232342e302f32302d3234203d3e203338313434.roa File: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (raw, json) Hash identifier: aWbYXoX9asbKX8LtSjMx/jUwcU2UCkmj/h5lE8zqnhk= Subject key identifier: BD:C3:A5:1A:22:77:00:2B:AF:5A:69:3E:CC:E8:A6:B5:D5:D5:AA:0C Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 4511D08F9DD0D38444FC056ECF8004AE60ABD6D5 Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/3230322e35312e3232342e302f32302d3234203d3e203338313434.roa Signing time: Mon 01 Jul 2024 01:05:28 +0000 ROA not before: Mon 01 Jul 2024 01:00:28 +0000 ROA not after: Mon 30 Jun 2025 01:05:28 +0000 asID: 38144 IP address blocks: 202.51.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:11:d0:8f:9d:d0:d3:84:44:fc:05:6e:cf:80:04:ae:60:ab:d6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Jul 1 01:00:28 2024 GMT Not After : Jun 30 01:05:28 2025 GMT Subject: CN=BDC3A51A2277002BAF5A693ECCE8A6B5D5D5AA0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:35:a1:d9:ab:c9:61:31:55:24:8e:40:73: ff:b7:a7:55:f4:0f:ef:ef:14:72:1e:99:5b:9b:54: 79:86:c1:43:df:8f:7e:95:07:c4:b8:ee:d1:04:a4: 39:ae:e2:61:ef:71:d9:23:cf:c8:cb:0e:af:07:bd: f3:2b:3f:51:0b:14:6c:13:ef:16:20:6c:b6:73:6a: d8:b3:37:55:54:1a:64:90:8f:82:74:95:9f:ad:f1: 84:80:51:e4:9b:86:57:36:b3:b4:31:52:38:35:5e: 3c:6b:2e:c5:98:c2:fc:09:61:99:11:14:b7:41:c4: 0d:3b:d4:b1:15:63:21:a6:f6:2a:f7:a0:5b:18:f3: ba:dc:41:24:c6:97:64:3a:62:b9:dd:e6:b1:43:89: fb:e8:22:a5:38:5d:9d:df:2c:26:66:44:50:05:bc: 4b:a5:3e:d7:61:6c:e0:b6:14:d6:c2:89:39:96:7d: 71:9c:d2:10:aa:cf:c8:90:b2:23:9b:80:31:f5:1f: de:95:86:4c:95:2b:7f:e9:e3:0c:7d:fd:cd:7c:7c: a0:53:65:63:a3:37:73:51:fe:21:0b:ee:42:1d:4e: a5:17:10:e2:97:0b:b8:b7:4f:f5:3c:f4:63:59:a6: 5c:77:90:ff:ee:18:b9:55:17:09:8f:7a:a0:70:28: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C3:A5:1A:22:77:00:2B:AF:5A:69:3E:CC:E8:A6:B5:D5:D5:AA:0C X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/3230322e35312e3232342e302f32302d3234203d3e203338313434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.224.0/20 Signature Algorithm: sha256WithRSAEncryption 50:df:1f:9b:f2:12:4b:92:26:ab:24:9b:b1:26:ae:28:4f:9e: ca:2c:34:78:85:c7:f3:40:fd:5c:77:c4:f3:a9:76:7e:74:e1: 69:71:c6:26:f0:fe:fb:05:08:3b:e2:4e:ce:72:23:18:81:9a: 8f:26:18:0c:52:dd:61:c0:ff:fe:f6:82:7f:78:72:1c:bc:2e: 55:be:9c:b9:e3:b5:91:89:9f:bb:c9:18:7a:14:3e:1b:b1:f9: 2c:03:89:51:92:aa:ab:84:93:e0:82:0c:84:fb:39:95:e9:02: 85:77:f1:1e:73:13:dc:9d:f0:73:b6:26:f3:fe:26:dc:f9:cc: 7d:a6:21:1a:9b:c0:af:75:f6:ee:c7:01:43:39:59:e7:61:dd: 11:4e:d4:7f:dc:94:cd:97:f6:c4:87:c4:19:7c:95:b9:e5:90: 36:60:28:39:f9:c7:62:b9:aa:ec:b3:0a:56:ae:81:0f:31:f9: f1:72:ca:fd:80:73:26:f2:f0:7c:8e:f8:5e:e7:05:ef:8c:a4: d7:df:ca:e0:f4:36:56:37:e8:61:a1:7b:d3:e0:b1:0a:6f:d2: f6:90:b5:6d:1c:ef:ef:67:ac:94:0a:90:02:92:ac:51:13:24: 97:95:5a:90:12:b3:0f:d7:7d:c9:8f:bc:ce:d7:83:64:8d:8d: 0c:40:af:62 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURRHQj53Q04RE/AVuz4AErmCr1tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNDA3MDEwMTAwMjhaFw0yNTA2MzAwMTA1MjhaMDMxMTAvBgNV BAMTKEJEQzNBNTFBMjI3NzAwMkJBRjVBNjkzRUNDRThBNkI1RDVENUFBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpDWh2avJYTFVJI5Ac/+3p1X0 D+/vFHIemVubVHmGwUPfj36VB8S47tEEpDmu4mHvcdkjz8jLDq8HvfMrP1ELFGwT 7xYgbLZzatizN1VUGmSQj4J0lZ+t8YSAUeSbhlc2s7QxUjg1XjxrLsWYwvwJYZkR FLdBxA071LEVYyGm9ir3oFsY87rcQSTGl2Q6Yrnd5rFDifvoIqU4XZ3fLCZmRFAF vEulPtdhbOC2FNbCiTmWfXGc0hCqz8iQsiObgDH1H96VhkyVK3/p4wx9/c18fKBT ZWOjN3NR/iEL7kIdTqUXEOKXC7i3T/U89GNZplx3kP/uGLlVFwmPeqBwKDA9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUvcOlGiJ3ACuvWmk+zOimtdXVqgwwHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjZDc1MzZkLTllMTAtNGQ0OS1i NmNhLTA0MWNjOWE1OTE0ZS8wLzMyMzAzMjJlMzUzMTJlMzIzMjM0MmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMoz4DANBgkqhkiG 9w0BAQsFAAOCAQEAUN8fm/ISS5ImqySbsSauKE+eyiw0eIXH80D9XHfE86l2fnTh aXHGJvD++wUIO+JOznIjGIGajyYYDFLdYcD//vaCf3hyHLwuVb6cueO1kYmfu8kY ehQ+G7H5LAOJUZKqq4ST4IIMhPs5lekChXfxHnMT3J3wc7Ym8/4m3PnMfaYhGpvA r3X27scBQzlZ52HdEU7Uf9yUzZf2xIfEGXyVueWQNmAoOfnHYrmq7LMKVq6BDzH5 8XLK/YBzJvLwfI74XucF74yk19/K4PQ2VjfoYaF70+CxCm/S9pC1bRzv72eslAqQ ApKsURMkl5VakBKzD9d9yY+8zteDZI2NDECvYg== -----END CERTIFICATE-----Generated at Mon Nov 25 10:55:38 2024 by rpki-client on console-ams.rpki-client.org