$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32332d3234203d3e203436303233.roa File: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (raw, json) Hash identifier: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY= Subject key identifier: B7:8E:97:D2:AB:48:9F:AF:E2:80:02:93:BF:E6:09:E3:D6:60:18:8B Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 0320B37F3F291CF76C0446C49A4C7BE030DDF26F Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32332d3234203d3e203436303233.roa Signing time: Tue 05 Nov 2024 11:59:04 +0000 ROA not before: Tue 05 Nov 2024 11:54:04 +0000 ROA not after: Tue 04 Nov 2025 11:59:04 +0000 asID: 46023 IP address blocks: 203.145.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:20:b3:7f:3f:29:1c:f7:6c:04:46:c4:9a:4c:7b:e0:30:dd:f2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Nov 5 11:54:04 2024 GMT Not After : Nov 4 11:59:04 2025 GMT Subject: CN=B78E97D2AB489FAFE2800293BFE609E3D660188B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:56:cd:fe:2e:54:6f:94:62:ec:3f:67:6e: 2b:4e:55:fd:53:84:e6:38:03:d0:46:f4:5a:e9:40: 1c:94:53:51:4a:af:a4:9d:96:0a:d7:ae:f6:d1:9a: 1b:c6:a0:96:bc:e4:09:d5:2b:3f:2e:c4:72:ed:3d: 52:81:2f:81:df:fb:41:ce:ef:22:ab:6d:e9:e3:dc: 7d:b5:44:61:2b:8c:3c:ea:f4:d9:08:67:f7:e0:e9: 94:a8:19:5d:21:0d:6c:79:db:88:0b:5f:c4:a3:8b: f8:6d:cd:b2:4d:a5:18:1e:36:e8:ec:1d:b0:87:13: 34:cb:5d:52:36:52:3c:3e:d7:57:5a:e1:b6:12:43: fc:d4:56:14:c4:4d:45:ce:be:3a:8e:20:8c:ea:21: 40:6b:ec:0b:60:80:22:cb:ae:2d:6a:9b:44:f4:b8: bd:a2:9e:74:3e:b9:6c:ed:e7:8b:1d:a1:cc:70:d0: fa:a1:18:f3:77:69:fe:e8:90:89:c9:70:7f:ef:81: 40:17:78:dd:27:bb:95:28:82:3b:34:93:84:fd:9b: 6a:73:bf:60:fc:d1:62:71:82:c3:a3:fc:0c:f7:ab: 87:9e:31:85:9a:e7:e8:8e:8d:77:bd:0d:a7:80:a6: 92:08:89:19:46:17:d2:08:df:12:4a:47:3f:b2:61: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8E:97:D2:AB:48:9F:AF:E2:80:02:93:BF:E6:09:E3:D6:60:18:8B X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32332d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.145.62.0/23 Signature Algorithm: sha256WithRSAEncryption c5:44:23:3d:61:9d:bc:44:cb:6e:03:5f:b5:d3:99:66:e2:57: 0a:72:f1:89:2c:15:f2:f0:f9:f2:ca:ab:32:71:99:b4:4c:2e: 9a:63:ab:34:70:dc:73:f9:77:2d:bd:84:63:f5:f8:c1:60:8b: 44:d8:f6:65:e0:4b:70:06:ac:0a:71:d3:f1:4a:74:f5:d0:c2: d4:fe:33:0f:1e:df:19:79:5e:15:aa:80:51:26:5f:15:29:c9: 95:db:57:40:2e:83:af:7f:22:08:36:e4:f1:75:55:93:55:e5: 4d:32:1f:1b:d3:68:1e:0c:0b:17:e6:1b:48:83:fb:d1:97:73: 92:d5:c1:2d:14:3c:bb:d0:47:69:8a:2b:82:91:f7:f3:75:3b: 5d:31:c2:9f:47:dd:da:bb:92:a2:54:e8:a4:b5:50:7c:79:b3: b8:bf:76:6f:6a:57:d8:92:16:6f:c5:3a:13:5a:76:90:5c:63: 5d:86:4c:27:2b:e0:00:1d:99:a8:f1:5a:8d:a4:f1:7d:fc:68: 55:55:fc:f9:1e:8e:25:2f:d6:1b:cf:be:5e:90:33:7c:33:c2: 21:53:7f:10:67:c1:c4:90:92:7b:c5:ef:02:bc:00:f4:05:8e: 58:5d:58:53:81:93:d2:0c:20:28:8e:2d:61:80:79:a4:e3:6d: a9:27:3e:a3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAyCzfz8pHPdsBEbEmkx74DDd8m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNDExMDUxMTU0MDRaFw0yNTExMDQxMTU5MDRaMDMxMTAvBgNV BAMTKEI3OEU5N0QyQUI0ODlGQUZFMjgwMDI5M0JGRTYwOUUzRDY2MDE4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXlbN/i5Ub5Ri7D9nbitOVf1T hOY4A9BG9FrpQByUU1FKr6SdlgrXrvbRmhvGoJa85AnVKz8uxHLtPVKBL4Hf+0HO 7yKrbenj3H21RGErjDzq9NkIZ/fg6ZSoGV0hDWx524gLX8Sji/htzbJNpRgeNujs HbCHEzTLXVI2Ujw+11da4bYSQ/zUVhTETUXOvjqOIIzqIUBr7AtggCLLri1qm0T0 uL2innQ+uWzt54sdocxw0PqhGPN3af7okInJcH/vgUAXeN0nu5Uogjs0k4T9m2pz v2D80WJxgsOj/Az3q4eeMYWa5+iOjXe9DaeAppIIiRlGF9II3xJKRz+yYRCrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUt46X0qtIn6/igAKTv+YJ49ZgGIswHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzZGRhOTIzLWVhMzYtNDU2Yi1i YWZlLTQwZTZiNjJmNTBjNS8wLzMyMzAzMzJlMzEzNDM1MmUzNjMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcuRPjANBgkqhkiG 9w0BAQsFAAOCAQEAxUQjPWGdvETLbgNftdOZZuJXCnLxiSwV8vD58sqrMnGZtEwu mmOrNHDcc/l3Lb2EY/X4wWCLRNj2ZeBLcAasCnHT8Up09dDC1P4zDx7fGXleFaqA USZfFSnJldtXQC6Dr38iCDbk8XVVk1XlTTIfG9NoHgwLF+YbSIP70ZdzktXBLRQ8 u9BHaYorgpH383U7XTHCn0fd2ruSolTopLVQfHmzuL92b2pX2JIWb8U6E1p2kFxj XYZMJyvgAB2ZqPFajaTxffxoVVX8+R6OJS/WG8++XpAzfDPCIVN/EGfBxJCSe8Xv ArwA9AWOWF1YU4GT0gwgKI4tYYB5pONtqSc+ow== -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org