$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa File: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (raw, json) Hash identifier: wQmGKqaa+YSiRmaLGWEMq8mJpTHj8TfVNhWMDunfL+s= Subject key identifier: 8D:0A:D7:2F:10:0A:A8:C6:1D:71:45:D0:E7:14:D1:DF:3E:E7:39:BD Certificate issuer: /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Certificate serial: 3299621979789A96ED30E9C9882D4063E5168F68 Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa Signing time: Sun 25 Aug 2024 05:00:02 +0000 ROA not before: Sun 25 Aug 2024 04:55:02 +0000 ROA not after: Sun 24 Aug 2025 05:00:02 +0000 asID: 58474 IP address blocks: 43.248.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:99:62:19:79:78:9a:96:ed:30:e9:c9:88:2d:40:63:e5:16:8f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Validity Not Before: Aug 25 04:55:02 2024 GMT Not After : Aug 24 05:00:02 2025 GMT Subject: CN=8D0AD72F100AA8C61D7145D0E714D1DF3EE739BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:8a:e3:2c:45:f0:db:19:0c:81:a5:f7:bf: 17:8a:99:f5:ea:ea:d9:dc:74:0f:4e:dc:42:05:e4: a9:65:b0:b1:78:c8:4f:b2:b8:62:d6:d9:7d:a1:20: 00:c8:04:32:e7:96:ef:42:6e:c2:02:01:95:43:9e: 17:bc:bc:27:7a:af:f5:06:0a:86:9f:03:84:79:a2: 08:e3:ac:67:9d:d3:02:94:fe:82:6e:65:7c:b1:5f: 6c:36:13:d4:25:c1:27:6c:6d:12:28:5b:e5:69:3b: 5f:49:22:69:aa:7d:48:82:32:a6:8c:32:7a:b2:49: 3b:e4:f3:27:b8:62:02:17:65:12:07:74:36:55:1a: f5:56:1d:ea:7f:fb:67:7d:f1:39:96:59:99:4f:d0: a1:45:6c:9e:62:d9:ae:dd:e7:7b:0a:a1:a7:43:38: af:62:40:7c:f1:29:71:45:38:40:23:ec:78:ba:2b: 08:86:52:32:32:4b:c3:f0:bd:81:4a:29:d6:ba:8c: ba:33:3b:6d:31:c6:e5:b0:1a:c7:74:30:aa:e4:cc: 62:77:bd:4c:a3:37:65:68:69:e8:e5:e2:2f:fb:98: c8:34:03:f3:c2:83:32:d2:a5:6f:39:d4:f2:31:3e: f5:f7:8c:93:2e:02:64:72:06:e9:3a:1b:68:43:ef: b8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0A:D7:2F:10:0A:A8:C6:1D:71:45:D0:E7:14:D1:DF:3E:E7:39:BD X509v3 Authority Key Identifier: keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.214.0/24 Signature Algorithm: sha256WithRSAEncryption 73:03:74:f4:23:1a:34:9e:de:1f:73:8d:22:7d:74:e5:f4:3b: 91:ab:ee:6e:0c:21:d7:74:21:a4:c0:54:b9:0c:d3:aa:9f:37: 79:d1:18:15:bc:cb:3f:bf:d1:ba:f3:03:22:0d:fb:98:44:dd: da:c6:20:93:43:56:79:21:82:c1:64:13:fb:d7:67:55:3a:a6: 13:9c:9d:00:9e:37:15:c4:de:b1:80:bd:bc:6e:0e:ed:2f:f4: 70:a3:ad:01:9c:37:e5:f0:ec:96:5c:ec:84:7b:ab:d3:6e:52: f6:f8:8e:26:c1:3d:83:1d:12:63:a3:e4:9b:77:65:cc:e7:cd: 56:14:bf:af:80:62:b8:48:4c:16:93:2b:7f:f5:7d:ec:cd:86: f9:a4:e7:de:a8:aa:76:ce:a5:33:51:1f:ac:61:e1:3d:d3:4d: f8:9c:73:6f:fa:3e:99:34:a1:6a:a0:95:35:97:78:1b:53:1f: 57:68:76:b0:51:4f:79:5f:82:ce:e9:0e:5d:cc:e9:4a:38:fa: 92:c1:46:8d:cf:26:2b:94:8b:61:21:88:86:c6:a0:5f:78:5b: 3a:71:cd:61:92:34:26:6f:0d:41:8f:a3:88:44:f1:03:f5:3b: e6:60:f5:94:30:a1:38:72:e3:87:80:ea:56:6f:ef:79:29:1f: 59:fc:d6:3d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMpliGXl4mpbtMOnJiC1AY+UWj2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQz REEyRjA5ODAeFw0yNDA4MjUwNDU1MDJaFw0yNTA4MjQwNTAwMDJaMDMxMTAvBgNV BAMTKDhEMEFENzJGMTAwQUE4QzYxRDcxNDVEMEU3MTREMURGM0VFNzM5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cIrjLEXw2xkMgaX3vxeKmfXq 6tncdA9O3EIF5KllsLF4yE+yuGLW2X2hIADIBDLnlu9CbsICAZVDnhe8vCd6r/UG CoafA4R5ogjjrGed0wKU/oJuZXyxX2w2E9QlwSdsbRIoW+VpO19JImmqfUiCMqaM MnqySTvk8ye4YgIXZRIHdDZVGvVWHep/+2d98TmWWZlP0KFFbJ5i2a7d53sKoadD OK9iQHzxKXFFOEAj7Hi6KwiGUjIyS8PwvYFKKda6jLozO20xxuWwGsd0MKrkzGJ3 vUyjN2Voaejl4i/7mMg0A/PCgzLSpW851PIxPvX3jJMuAmRyBuk6G2hD77g5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjQrXLxAKqMYdcUXQ5xTR3z7nOb0wHwYDVR0j BBgwFoAUlfxgcqSmkKYaC18Us2iCtD2i8JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzA1MTc3YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC85NUZDNjA3MkE0 QTY5MEE2MUEwQjVGMTRCMzY4ODJCNDNEQTJGMDk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQzREEy RjA5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i M2ZmLTcwYzE0NGVkZmVjZS8wLzM0MzMyZTMyMzQzODJlMzIzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv41jANBgkqhkiG 9w0BAQsFAAOCAQEAcwN09CMaNJ7eH3ONIn105fQ7kavubgwh13QhpMBUuQzTqp83 edEYFbzLP7/RuvMDIg37mETd2sYgk0NWeSGCwWQT+9dnVTqmE5ydAJ43FcTesYC9 vG4O7S/0cKOtAZw35fDsllzshHur025S9viOJsE9gx0SY6Pkm3dlzOfNVhS/r4Bi uEhMFpMrf/V97M2G+aTn3qiqds6lM1EfrGHhPdNN+Jxzb/o+mTShaqCVNZd4G1Mf V2h2sFFPeV+CzukOXczpSjj6ksFGjc8mK5SLYSGIhsagX3hbOnHNYZI0Jm8NQY+j iETxA/U75mD1lDChOHLjh4DqVm/veSkfWfzWPQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org