$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa File: 3230322e31302e34342e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: a2TdrZVsplTkN2su5mK7vSsG8btcKvmGJ67XePuGDr0= Subject key identifier: 67:6E:BF:59:AD:36:B5:49:9C:9A:9D:2A:37:03:F1:D4:B2:01:11:F9 Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 27DBF5691E9653070A93DA8C180A9C1B9BDEE942 Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa Signing time: Thu 11 Apr 2024 10:02:02 +0000 ROA not before: Thu 11 Apr 2024 09:57:02 +0000 ROA not after: Thu 10 Apr 2025 10:02:02 +0000 asID: 58487 IP address blocks: 202.10.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:db:f5:69:1e:96:53:07:0a:93:da:8c:18:0a:9c:1b:9b:de:e9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Apr 11 09:57:02 2024 GMT Not After : Apr 10 10:02:02 2025 GMT Subject: CN=676EBF59AD36B5499C9A9D2A3703F1D4B20111F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:ed:57:38:6a:47:7d:01:26:79:3f:81:09: fc:59:77:b7:29:7e:7d:9f:12:4b:b9:f4:95:95:44: 37:c2:05:0d:0a:7d:01:49:8d:ad:09:5c:ce:79:66: 7a:a4:ae:10:80:b8:17:31:87:f0:de:2d:39:2a:14: ca:33:1c:2e:70:fa:59:96:2d:5b:23:ef:88:43:d4: 2a:a3:29:57:bb:54:38:6b:ab:d7:81:f9:cc:cd:37: cd:c1:9a:75:cf:55:80:b0:86:10:a0:88:37:a0:20: 09:73:9a:e9:9d:1f:e0:6e:cd:4c:61:7a:26:9e:9b: 9d:6b:26:dc:52:b7:40:f8:ce:4a:09:36:29:5c:db: 61:64:b3:67:4d:b0:b3:6c:44:0a:f1:4e:f1:b6:cb: c1:59:7c:16:e9:bc:44:91:37:9b:07:f7:84:08:d6: 67:5f:d3:75:72:4a:46:71:d2:b9:68:12:5d:64:19: 59:b7:94:83:7f:11:7b:8b:86:e0:5e:55:af:8d:a7: 3f:14:ab:54:57:b5:5d:7d:24:53:e1:b5:b8:74:75: 53:d0:11:06:e3:62:f9:cd:ad:1e:60:b0:f0:c9:bd: a1:82:20:90:00:29:ad:35:5d:2d:0a:e5:ad:6b:ae: 7f:fc:8f:58:5d:a7:24:39:24:7d:37:27:3b:c5:c4: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6E:BF:59:AD:36:B5:49:9C:9A:9D:2A:37:03:F1:D4:B2:01:11:F9 X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.44.0/24 Signature Algorithm: sha256WithRSAEncryption a8:c2:dd:8a:97:d8:19:c1:5e:10:3a:c7:34:0f:9e:41:f5:73: 3b:e4:22:53:a6:56:a7:76:10:41:2f:a9:03:45:7c:84:f2:f5: 52:fe:86:1a:85:87:e2:54:cc:c0:61:ac:95:26:35:09:b1:c2: f6:01:df:3b:bd:95:a9:94:27:00:11:b1:a2:ad:5b:c0:a0:66: dd:a9:c4:3e:bb:ad:f0:01:af:e9:7b:5a:fa:73:ef:c9:d2:4b: c7:cd:2e:a7:1b:4b:52:a3:a1:02:0c:4f:a6:49:f3:32:de:53: 47:9d:43:5a:98:00:ac:2b:39:da:55:da:5e:2b:12:87:f4:9c: 4b:90:73:27:13:d0:5e:aa:02:42:e1:c8:ae:4a:3f:4f:ad:39: 4c:ad:50:14:24:5e:d7:5e:52:e9:74:5e:a2:dd:74:0d:3f:81: 29:d1:7d:57:c1:a8:95:ab:cb:87:2f:24:9c:dc:19:3f:ce:bf: 63:4c:63:24:b2:23:36:2c:b8:16:35:f7:e8:6b:f4:fb:84:58: 7c:b9:ed:62:86:1f:7c:ac:6a:e9:e6:ce:5c:29:4e:84:50:9c: ab:f5:fe:ab:b2:3a:d3:81:41:44:c2:cb:cc:b2:a0:fb:ab:60: 20:e1:73:c7:23:41:49:bc:bc:9d:4a:a7:ce:47:fa:17:9a:9c: 8e:36:5b:8a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJ9v1aR6WUwcKk9qMGAqcG5ve6UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNDA0MTEwOTU3MDJaFw0yNTA0MTAxMDAyMDJaMDMxMTAvBgNV BAMTKDY3NkVCRjU5QUQzNkI1NDk5QzlBOUQyQTM3MDNGMUQ0QjIwMTExRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8e1XOGpHfQEmeT+BCfxZd7cp fn2fEku59JWVRDfCBQ0KfQFJja0JXM55ZnqkrhCAuBcxh/DeLTkqFMozHC5w+lmW LVsj74hD1CqjKVe7VDhrq9eB+czNN83BmnXPVYCwhhCgiDegIAlzmumdH+BuzUxh eiaem51rJtxSt0D4zkoJNilc22Fks2dNsLNsRArxTvG2y8FZfBbpvESRN5sH94QI 1mdf03VySkZx0rloEl1kGVm3lIN/EXuLhuBeVa+Npz8Uq1RXtV19JFPhtbh0dVPQ EQbjYvnNrR5gsPDJvaGCIJAAKa01XS0K5a1rrn/8j1hdpyQ5JH03JzvFxOf7AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUZ26/Wa02tUmcmp0qNwPx1LIBEfkwHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiwwDQYJKoZIhvcN AQELBQADggEBAKjC3YqX2BnBXhA6xzQPnkH1czvkIlOmVqd2EEEvqQNFfITy9VL+ hhqFh+JUzMBhrJUmNQmxwvYB3zu9lamUJwARsaKtW8CgZt2pxD67rfABr+l7Wvpz 78nSS8fNLqcbS1KjoQIMT6ZJ8zLeU0edQ1qYAKwrOdpV2l4rEof0nEuQcycT0F6q AkLhyK5KP0+tOUytUBQkXtdeUul0XqLddA0/gSnRfVfBqJWry4cvJJzcGT/Ov2NM YySyIzYsuBY19+hr9PuEWHy57WKGH3ysaunmzlwpToRQnKv1/quyOtOBQUTCy8yy oPurYCDhc8cjQUm8vJ1Kp85H+heanI42W4o= -----END CERTIFICATE-----Generated at Sat May 4 11:06:15 2024 by rpki-client on console-fra.rpki-client.org