$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3230322e35362e3136342e302f32322d3234203d3e203435333035.roa File: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (raw, json) Hash identifier: dlsqZUGTjCRx+krpGNhgh3Umv+mTDrb/1GV2U8GokZ0= Subject key identifier: 0C:A2:10:A4:11:62:8F:3F:A9:69:8E:46:56:18:A4:AA:2A:FB:9E:DE Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 0193AA951546EAA628C7A21B3BC3FF75C3805591 Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3230322e35362e3136342e302f32322d3234203d3e203435333035.roa Signing time: Mon 01 Jul 2024 01:04:06 +0000 ROA not before: Mon 01 Jul 2024 00:59:06 +0000 ROA not after: Mon 30 Jun 2025 01:04:06 +0000 asID: 45305 IP address blocks: 202.56.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 21:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:aa:95:15:46:ea:a6:28:c7:a2:1b:3b:c3:ff:75:c3:80:55:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: Jul 1 00:59:06 2024 GMT Not After : Jun 30 01:04:06 2025 GMT Subject: CN=0CA210A411628F3FA9698E465618A4AA2AFB9EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:1e:d3:25:aa:a7:6e:a3:09:65:f7:40:14: 99:da:47:a9:e2:18:69:26:5f:0b:b1:51:3a:3c:37: af:05:76:6d:13:71:ee:4a:bd:45:f6:5e:77:75:bd: d4:05:ff:47:51:ce:e4:7f:0e:35:12:68:69:ab:aa: 89:47:ec:5d:aa:4c:f1:19:fe:fd:84:94:bb:82:00: 68:85:bc:0f:51:ad:0d:1b:f4:27:d4:36:8a:a3:d3: 40:45:5c:30:69:42:84:5d:77:7b:01:bb:7c:87:7f: 83:bb:aa:5e:33:f6:63:01:98:58:f8:a2:c0:f9:82: c7:fd:d2:14:52:6d:e7:1e:8d:3f:e8:20:b6:30:a8: cd:4a:b3:23:82:fd:ed:15:f7:80:eb:5d:d9:da:1b: 42:02:d1:a3:3f:17:d5:0b:79:8d:7f:7a:98:0e:d0: 3b:be:bd:c1:16:29:97:17:70:e4:f5:27:83:ec:96: d9:ab:8c:69:22:c6:3a:3b:04:60:cf:79:d7:64:65: ef:bb:a9:9e:24:18:c6:c2:0a:31:2d:a2:df:2e:a6: 7c:e6:b8:92:22:2c:0c:28:d9:d0:1e:2c:5d:79:69: fb:29:12:c5:f7:08:82:fd:b9:65:5d:83:09:ac:57: e2:34:3e:52:65:19:35:91:a7:97:d0:fc:38:87:2f: c1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A2:10:A4:11:62:8F:3F:A9:69:8E:46:56:18:A4:AA:2A:FB:9E:DE X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3230322e35362e3136342e302f32322d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.56.164.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:fb:6a:a6:c9:87:18:cd:2c:c9:b4:64:95:b6:c0:c4:fa:c2: 2a:4e:40:77:ba:b1:17:b4:c3:d2:80:77:7d:29:d0:7a:3c:27: 93:93:d9:d3:e9:d2:44:bb:f2:5b:66:b7:72:3d:47:92:b2:20: a8:53:8d:9b:3b:3c:6c:7b:e2:a7:fe:73:b3:7a:32:ae:6f:9c: d2:7a:a4:a0:9f:4e:f6:b5:b1:12:7f:67:d1:e7:ec:c3:78:82: 7d:6e:c8:f9:30:3a:aa:5f:43:50:fc:f8:08:4f:a8:5a:0e:03: 5d:0e:53:a6:25:0b:a3:e8:7f:6e:bd:c8:3c:fe:49:ee:c3:03: d1:4f:8e:b4:d3:19:b1:96:ee:1f:26:55:af:56:f3:ec:a9:71: ee:23:c3:4e:1d:e8:a5:d9:07:74:4e:09:90:21:97:9c:3d:e5: ea:a4:e2:8d:bc:79:76:86:52:7a:38:cb:91:49:58:2b:e8:e6: 28:ad:12:9b:3b:01:62:1f:18:67:4c:5c:b0:22:1a:1a:4a:ed: 29:5d:33:6d:4f:a7:37:06:ed:f1:5b:43:c1:f1:21:a5:b8:73: 7d:cb:ed:19:95:cb:c7:1e:73:b6:f7:b1:6d:2c:50:9f:2c:2b: f3:37:b7:77:90:01:11:bb:3e:8e:ab:08:c7:d8:2a:a8:6c:6f: 8f:08:96:a9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAZOqlRVG6qYox6IbO8P/dcOAVZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yNDA3MDEwMDU5MDZaFw0yNTA2MzAwMTA0MDZaMDMxMTAvBgNV BAMTKDBDQTIxMEE0MTE2MjhGM0ZBOTY5OEU0NjU2MThBNEFBMkFGQjlFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdfR7TJaqnbqMJZfdAFJnaR6ni GGkmXwuxUTo8N68Fdm0Tce5KvUX2Xnd1vdQF/0dRzuR/DjUSaGmrqolH7F2qTPEZ /v2ElLuCAGiFvA9RrQ0b9CfUNoqj00BFXDBpQoRdd3sBu3yHf4O7ql4z9mMBmFj4 osD5gsf90hRSbecejT/oILYwqM1KsyOC/e0V94DrXdnaG0IC0aM/F9ULeY1/epgO 0Du+vcEWKZcXcOT1J4PsltmrjGkixjo7BGDPeddkZe+7qZ4kGMbCCjEtot8upnzm uJIiLAwo2dAeLF15afspEsX3CIL9uWVdgwmsV+I0PlJlGTWRp5fQ/DiHL8FrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDKIQpBFijz+paY5GVhikqir7nt4wHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOTVjMTljLTMyNjItNDhjNy1h ZjAyLTM3YTgzNWQwYTc3OS8wLzMyMzAzMjJlMzUzNjJlMzEzNjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAso4pDANBgkqhkiG 9w0BAQsFAAOCAQEAa/tqpsmHGM0sybRklbbAxPrCKk5Ad7qxF7TD0oB3fSnQejwn k5PZ0+nSRLvyW2a3cj1HkrIgqFONmzs8bHvip/5zs3oyrm+c0nqkoJ9O9rWxEn9n 0efsw3iCfW7I+TA6ql9DUPz4CE+oWg4DXQ5TpiULo+h/br3IPP5J7sMD0U+OtNMZ sZbuHyZVr1bz7Klx7iPDTh3opdkHdE4JkCGXnD3l6qTijbx5doZSejjLkUlYK+jm KK0SmzsBYh8YZ0xcsCIaGkrtKV0zbU+nNwbt8VtDwfEhpbhzfcvtGZXLxx5ztvex bSxQnywr8ze3d5ABEbs+jqsIx9gqqGxvjwiWqQ== -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:20 2024 by rpki-client on console-fra.rpki-client.org