$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/34332e3235322e3130342e302f32322d3234203d3e203435333035.roa File: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (raw, json) Hash identifier: cAMxueznS/nh3h73C9cG6Tq/nGQZqb7kaIFcHdsdkqw= Subject key identifier: DE:DD:21:66:3A:CB:BD:7A:C9:07:B2:39:0C:D7:8B:40:63:C8:47:4A Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 269660D8BB6534271E4DDABD00036CA402276742 Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/34332e3235322e3130342e302f32322d3234203d3e203435333035.roa Signing time: Mon 01 Jul 2024 01:04:07 +0000 ROA not before: Mon 01 Jul 2024 00:59:07 +0000 ROA not after: Mon 30 Jun 2025 01:04:07 +0000 asID: 45305 IP address blocks: 43.252.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 21:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:96:60:d8:bb:65:34:27:1e:4d:da:bd:00:03:6c:a4:02:27:67:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: Jul 1 00:59:07 2024 GMT Not After : Jun 30 01:04:07 2025 GMT Subject: CN=DEDD21663ACBBD7AC907B2390CD78B4063C8474A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b4:16:db:9a:92:ba:2b:09:14:aa:5b:2a:d8: 8a:55:ab:6f:f7:3e:72:4c:fc:99:a0:90:a9:39:4b: b9:8f:da:19:fb:c2:af:3e:d9:dd:1f:3f:e2:fa:7f: 12:34:d2:83:7d:2b:c8:60:fc:4b:db:69:12:ed:75: 8a:b3:44:d0:9c:22:6b:ad:83:18:fd:53:4a:1c:ce: b4:47:e2:5a:0e:89:c0:70:2f:d9:4e:40:e6:c2:f1: 4f:68:b2:b9:dc:7f:c3:0f:25:bf:2f:d7:40:d2:5f: 2a:75:94:4d:4b:1b:d6:5c:aa:cf:6f:d8:d1:7a:91: 79:ee:d0:c1:d6:de:1d:26:b8:d1:1d:3a:35:3a:19: da:c4:a8:31:9f:cf:1b:5a:d9:ff:b9:ee:f8:cc:18: 88:34:5e:85:1c:44:33:71:ff:b7:41:cd:e3:ba:e5: 10:b3:bd:b1:c9:2a:48:6f:6e:25:99:bd:b2:7a:f2: ae:3b:a5:fc:52:f8:d1:17:ac:20:66:67:1f:b8:13: 24:77:03:b4:7d:16:ec:fb:c3:fc:88:7c:76:1b:f5: 35:ac:be:06:b1:e0:64:49:4e:19:fe:a6:31:df:f7: 02:f5:39:96:9f:31:bf:ab:27:2b:64:c4:c1:eb:9e: 4a:33:b6:46:eb:99:1e:cf:e1:d0:7d:16:59:5e:d4: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:21:66:3A:CB:BD:7A:C9:07:B2:39:0C:D7:8B:40:63:C8:47:4A X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/34332e3235322e3130342e302f32322d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.104.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:fe:e8:f4:7e:49:9e:20:f4:65:90:b1:2c:61:24:4f:d9:89: cd:2c:1c:f4:ed:85:55:47:c1:da:92:5d:12:ff:61:06:17:9d: 3a:1d:24:e9:e9:ff:de:92:50:fb:68:2e:15:a1:01:26:59:08: 1f:0d:c0:ff:32:bd:c4:48:13:21:b2:bd:2c:86:3e:58:93:bb: 3e:a8:00:e9:eb:86:e7:b1:0a:9a:aa:58:9d:24:c4:79:7f:c9: ea:67:56:32:f0:7a:b3:1c:65:ef:b8:17:59:f9:25:a3:e6:09: ba:b3:c5:e7:f9:9b:de:0d:0e:dc:b9:25:11:71:d3:89:83:91: 46:d2:a7:10:c6:dd:9c:2c:9c:0a:78:31:77:f9:f0:96:ca:4a: 09:63:89:0d:a3:da:53:36:44:74:bc:fa:f0:08:9a:1d:b0:be: 18:0b:4e:a1:40:b1:bd:95:f2:9f:79:bd:f6:f7:e5:c8:ee:d9: 5c:d3:3f:cc:3b:59:8f:47:ad:a0:8e:3e:cc:3e:80:c6:85:23: 7b:a6:bc:d3:3d:12:6b:24:ea:fc:f4:a9:ba:d1:b9:17:98:ff: 3e:77:89:54:15:12:26:83:0a:96:a4:c3:68:8f:d4:2a:7d:96: d9:d5:e0:6c:93:35:cf:3a:4c:c5:22:45:59:5f:29:6d:3a:e5: 33:4b:e1:5f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJpZg2LtlNCceTdq9AANspAInZ0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yNDA3MDEwMDU5MDdaFw0yNTA2MzAwMTA0MDdaMDMxMTAvBgNV BAMTKERFREQyMTY2M0FDQkJEN0FDOTA3QjIzOTBDRDc4QjQwNjNDODQ3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtBbbmpK6KwkUqlsq2IpVq2/3 PnJM/JmgkKk5S7mP2hn7wq8+2d0fP+L6fxI00oN9K8hg/EvbaRLtdYqzRNCcImut gxj9U0oczrRH4loOicBwL9lOQObC8U9osrncf8MPJb8v10DSXyp1lE1LG9Zcqs9v 2NF6kXnu0MHW3h0muNEdOjU6GdrEqDGfzxta2f+57vjMGIg0XoUcRDNx/7dBzeO6 5RCzvbHJKkhvbiWZvbJ68q47pfxS+NEXrCBmZx+4EyR3A7R9Fuz7w/yIfHYb9TWs vgax4GRJThn+pjHf9wL1OZafMb+rJytkxMHrnkoztkbrmR7P4dB9Flle1EUNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU3t0hZjrLvXrJB7I5DNeLQGPIR0owHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOTVjMTljLTMyNjItNDhjNy1h ZjAyLTM3YTgzNWQwYTc3OS8wLzM0MzMyZTMyMzUzMjJlMzEzMDM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv8aDANBgkqhkiG 9w0BAQsFAAOCAQEATf7o9H5JniD0ZZCxLGEkT9mJzSwc9O2FVUfB2pJdEv9hBhed Oh0k6en/3pJQ+2guFaEBJlkIHw3A/zK9xEgTIbK9LIY+WJO7PqgA6euG57EKmqpY nSTEeX/J6mdWMvB6sxxl77gXWfklo+YJurPF5/mb3g0O3LklEXHTiYORRtKnEMbd nCycCngxd/nwlspKCWOJDaPaUzZEdLz68AiaHbC+GAtOoUCxvZXyn3m99vflyO7Z XNM/zDtZj0etoI4+zD6AxoUje6a80z0SayTq/PSputG5F5j/PneJVBUSJoMKlqTD aI/UKn2W2dXgbJM1zzpMxSJFWV8pbTrlM0vhXw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:20 2024 by rpki-client on console-fra.rpki-client.org