$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa File: 3230322e31302e34352e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: esVyrU535rmhYhnc7b4ddPvC1VCQH+vZ4Tj5OxpVk38= Subject key identifier: 06:C0:7D:E4:68:00:DA:3A:8A:B0:06:45:88:7F:BC:C9:E9:AA:83:BE Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 2C653F003403352F4E91678EC5D076E65B8DD113 Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa Signing time: Thu 11 Apr 2024 10:02:03 +0000 ROA not before: Thu 11 Apr 2024 09:57:03 +0000 ROA not after: Thu 10 Apr 2025 10:02:03 +0000 asID: 58487 IP address blocks: 202.10.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:65:3f:00:34:03:35:2f:4e:91:67:8e:c5:d0:76:e6:5b:8d:d1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Apr 11 09:57:03 2024 GMT Not After : Apr 10 10:02:03 2025 GMT Subject: CN=06C07DE46800DA3A8AB00645887FBCC9E9AA83BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:33:21:77:2b:f3:77:f0:e8:bc:c5:eb:27: 3a:0f:a1:94:0c:68:23:71:f1:27:af:8e:81:8c:20: 51:04:97:6c:c4:06:ef:9e:9e:8a:6b:93:49:92:c3: ec:34:cf:1a:ab:8c:44:c9:86:e9:43:d9:9b:e2:ee: e9:8c:9b:3b:15:23:63:fe:3b:c9:bb:35:0e:ff:1c: 7e:f4:87:c5:ef:5d:d6:b5:d6:44:6f:ce:51:66:4d: ca:01:a5:af:c0:0f:e1:64:96:a9:e6:61:7f:c2:08: 1e:94:7b:45:6a:52:32:cb:9d:8d:85:12:6a:f3:a5: 54:ff:87:21:18:94:75:da:d9:ee:ce:8c:85:f6:6b: 75:61:53:3b:b4:67:2e:61:2d:c6:0c:0e:b4:95:76: f5:63:69:4f:3a:48:52:54:29:e8:e7:c9:0a:3f:a6: 40:32:8f:61:c0:46:d7:b0:1c:8d:fd:60:5a:25:23: 29:56:9e:8c:4e:fa:a7:35:e7:36:53:f9:6a:35:f6: 15:55:3d:d0:7c:12:59:e5:82:a2:bf:26:04:bd:be: c2:e8:4e:cd:4a:5e:c4:52:99:b0:64:02:79:eb:da: 4d:94:fc:83:90:14:fe:86:b0:ca:13:af:94:fc:c8: f9:c5:02:c2:ff:e0:be:97:16:6f:99:67:a7:52:43: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C0:7D:E4:68:00:DA:3A:8A:B0:06:45:88:7F:BC:C9:E9:AA:83:BE X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.45.0/24 Signature Algorithm: sha256WithRSAEncryption 77:49:80:41:c7:73:a2:3c:27:41:15:ac:a6:d1:b3:5e:2a:10: 55:33:bb:6d:64:a5:2b:32:db:c6:9f:2c:ec:ed:5c:60:96:f2: 75:f1:7a:5a:bd:b1:8f:b7:25:11:b5:c4:d9:c6:d4:0f:04:b4: 2a:68:56:ee:37:21:cd:b6:ca:65:be:b2:5e:13:d0:6c:45:0d: bc:74:d0:75:9d:c8:f6:43:b1:e7:09:6d:3a:19:64:0f:98:9f: 40:3a:6a:1d:b5:0b:fe:b6:36:af:a5:1c:2a:45:57:cf:60:50: e1:41:d6:20:21:da:98:d6:0d:c6:69:76:4e:50:ef:8c:d8:dd: a0:b8:a5:0a:56:d9:3d:87:40:d0:43:21:2e:cf:20:81:5c:8a: e7:ea:ea:5a:5d:5a:b8:00:2a:77:57:87:ab:fb:99:dc:33:4a: 40:7e:8b:1f:d2:b8:1d:8e:6e:8b:78:b8:03:79:9a:8d:6a:4e: da:32:13:2b:48:62:24:de:72:38:4a:b7:97:50:95:3c:fc:7f: ba:14:65:63:bc:18:37:0e:d0:7a:4b:60:74:df:20:3b:d9:54: 03:a7:35:01:56:7b:f4:3b:c7:00:ee:a3:4e:57:8b:c5:c9:f2: 98:b0:c2:e5:bd:e2:e3:48:90:7a:ca:87:26:17:f9:d2:8a:f1: 25:8a:2d:ed -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULGU/ADQDNS9OkWeOxdB25luN0RMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNDA0MTEwOTU3MDNaFw0yNTA0MTAxMDAyMDNaMDMxMTAvBgNV BAMTKDA2QzA3REU0NjgwMERBM0E4QUIwMDY0NTg4N0ZCQ0M5RTlBQTgzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzljMhdyvzd/DovMXrJzoPoZQM aCNx8SevjoGMIFEEl2zEBu+enoprk0mSw+w0zxqrjETJhulD2Zvi7umMmzsVI2P+ O8m7NQ7/HH70h8XvXda11kRvzlFmTcoBpa/AD+FklqnmYX/CCB6Ue0VqUjLLnY2F EmrzpVT/hyEYlHXa2e7OjIX2a3VhUzu0Zy5hLcYMDrSVdvVjaU86SFJUKejnyQo/ pkAyj2HARtewHI39YFolIylWnoxO+qc15zZT+Wo19hVVPdB8ElnlgqK/JgS9vsLo Ts1KXsRSmbBkAnnr2k2U/IOQFP6GsMoTr5T8yPnFAsL/4L6XFm+ZZ6dSQ6TTAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUBsB95GgA2jqKsAZFiH+8yemqg74wHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCi0wDQYJKoZIhvcN AQELBQADggEBAHdJgEHHc6I8J0EVrKbRs14qEFUzu21kpSsy28afLOztXGCW8nXx elq9sY+3JRG1xNnG1A8EtCpoVu43Ic22ymW+sl4T0GxFDbx00HWdyPZDsecJbToZ ZA+Yn0A6ah21C/62Nq+lHCpFV89gUOFB1iAh2pjWDcZpdk5Q74zY3aC4pQpW2T2H QNBDIS7PIIFciufq6lpdWrgAKndXh6v7mdwzSkB+ix/SuB2Obot4uAN5mo1qTtoy EytIYiTecjhKt5dQlTz8f7oUZWO8GDcO0HpLYHTfIDvZVAOnNQFWe/Q7xwDuo05X i8XJ8piwwuW94uNIkHrKhyYX+dKK8SWKLe0= -----END CERTIFICATE-----Generated at Sat May 4 11:06:15 2024 by rpki-client on console-fra.rpki-client.org