$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa File: 3230322e31302e33392e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: n84+FihYleQMfQDJ1IrxWTQnkNtDMEW/JQDTtsl5Kt4= Subject key identifier: 8C:ED:71:5D:CB:2A:03:E3:9B:AB:E9:F2:16:5D:5B:20:B1:1C:55:7D Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 1039DF5FE20CAA18B9979166C71CDD36723658E5 Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa Signing time: Thu 11 Apr 2024 10:02:02 +0000 ROA not before: Thu 11 Apr 2024 09:57:02 +0000 ROA not after: Thu 10 Apr 2025 10:02:02 +0000 asID: 58487 IP address blocks: 202.10.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:39:df:5f:e2:0c:aa:18:b9:97:91:66:c7:1c:dd:36:72:36:58:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Apr 11 09:57:02 2024 GMT Not After : Apr 10 10:02:02 2025 GMT Subject: CN=8CED715DCB2A03E39BABE9F2165D5B20B11C557D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:56:54:93:20:97:a5:d1:ba:47:e8:d6:84:f2: 0b:87:62:1e:1f:ad:17:ff:82:45:8d:5c:3f:74:79: ed:9d:71:e5:42:87:05:a6:dc:ac:d4:c6:82:cf:2c: 39:6a:15:28:60:8f:56:24:0d:40:1f:3e:38:f4:55: bc:04:9a:48:ca:c8:72:74:43:ed:0e:ce:d0:63:a3: a3:4d:90:f6:1b:f5:68:94:93:92:a0:e0:89:b2:42: fe:e7:ae:56:32:3e:76:d5:f4:02:05:70:d0:75:53: 03:e3:51:91:fc:7d:dd:18:22:5c:ae:34:cf:a6:66: 2c:20:10:83:82:c0:31:f0:92:d9:d3:4c:cc:7d:21: 5d:3c:2c:b2:a4:d9:9c:27:a1:21:0a:37:22:ed:46: d2:cf:d2:4d:cf:6a:0f:1a:50:6c:67:e9:08:4f:f5: 80:e9:51:5e:c7:c1:87:75:0d:35:71:ba:e4:71:03: 6a:63:22:39:a3:62:97:13:17:1d:74:96:a0:d3:b7: 3b:bb:be:17:a5:e8:a4:c3:c5:98:07:0a:42:59:7d: f4:78:88:ad:81:47:5a:17:c4:2f:78:05:c5:c7:79: 77:ca:cd:be:0b:27:1b:41:4c:9e:62:5b:78:5e:4c: e7:aa:16:92:58:b1:4d:f9:44:d6:8c:81:bb:04:6e: 35:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:ED:71:5D:CB:2A:03:E3:9B:AB:E9:F2:16:5D:5B:20:B1:1C:55:7D X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.39.0/24 Signature Algorithm: sha256WithRSAEncryption 61:1e:d5:ca:d9:32:02:4b:e7:b3:a5:d5:5a:74:65:7e:c6:af: ce:0b:c9:fe:38:7c:a5:d0:64:db:5f:d4:f1:c6:73:77:33:8e: 70:c7:2d:99:bf:19:77:3e:5f:45:7e:ce:dd:84:22:45:68:8e: 47:ca:cc:ed:a4:d1:ad:2e:54:f7:52:0c:e5:0d:89:28:15:62: c5:5a:c7:54:f1:63:22:b1:da:80:e8:40:99:8e:82:f2:95:97: 56:81:16:8f:e9:5a:57:d9:f2:13:57:94:dd:0e:a3:01:ee:56: 29:9d:6c:cb:59:35:a2:2e:43:0a:3f:08:c3:b9:12:1a:b2:88: 1d:31:25:e7:21:73:54:c7:0a:58:95:05:12:c7:b2:9a:99:60: 67:03:ef:24:1f:af:12:0b:a4:d8:17:94:4d:0c:fc:78:0f:95: 73:96:59:cd:1b:7e:48:5b:18:aa:d7:ad:85:5b:15:95:dd:3b: 7b:8d:60:da:da:1a:fa:69:44:12:72:70:89:27:42:01:ff:ad: 87:ef:dc:6a:2b:a8:1e:8c:c2:01:b6:73:2a:eb:f0:ca:99:38: 82:60:ca:29:1f:eb:fc:d9:f8:d4:89:ee:61:3a:bc:5e:f6:8b: ed:4e:cc:46:87:46:1f:8b:60:18:2d:01:6b:17:a1:ee:ba:31: 64:79:7d:20 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUEDnfX+IMqhi5l5FmxxzdNnI2WOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNDA0MTEwOTU3MDJaFw0yNTA0MTAxMDAyMDJaMDMxMTAvBgNV BAMTKDhDRUQ3MTVEQ0IyQTAzRTM5QkFCRTlGMjE2NUQ1QjIwQjExQzU1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlVlSTIJel0bpH6NaE8guHYh4f rRf/gkWNXD90ee2dceVChwWm3KzUxoLPLDlqFShgj1YkDUAfPjj0VbwEmkjKyHJ0 Q+0OztBjo6NNkPYb9WiUk5Kg4ImyQv7nrlYyPnbV9AIFcNB1UwPjUZH8fd0YIlyu NM+mZiwgEIOCwDHwktnTTMx9IV08LLKk2ZwnoSEKNyLtRtLP0k3Pag8aUGxn6QhP 9YDpUV7HwYd1DTVxuuRxA2pjIjmjYpcTFx10lqDTtzu7vhel6KTDxZgHCkJZffR4 iK2BR1oXxC94BcXHeXfKzb4LJxtBTJ5iW3heTOeqFpJYsU35RNaMgbsEbjX3AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUjO1xXcsqA+Obq+nyFl1bILEcVX0wHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCicwDQYJKoZIhvcN AQELBQADggEBAGEe1crZMgJL57Ol1Vp0ZX7Gr84Lyf44fKXQZNtf1PHGc3czjnDH LZm/GXc+X0V+zt2EIkVojkfKzO2k0a0uVPdSDOUNiSgVYsVax1TxYyKx2oDoQJmO gvKVl1aBFo/pWlfZ8hNXlN0OowHuVimdbMtZNaIuQwo/CMO5EhqyiB0xJechc1TH CliVBRLHspqZYGcD7yQfrxILpNgXlE0M/HgPlXOWWc0bfkhbGKrXrYVbFZXdO3uN YNraGvppRBJycIknQgH/rYfv3GorqB6MwgG2cyrr8MqZOIJgyikf6/zZ+NSJ7mE6 vF72i+1OzEaHRh+LYBgtAWsXoe66MWR5fSA= -----END CERTIFICATE-----Generated at Sat May 4 11:06:15 2024 by rpki-client on console-fra.rpki-client.org