$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa File: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (raw, json) Hash identifier: qY/yuZGDhvvAK/RtJftgjGfm17i7p9Xys3XHDkRcIf0= Subject key identifier: DC:2F:2D:EE:9A:25:F7:5B:D8:39:B0:56:B3:35:5E:04:AA:B9:D1:D1 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 3BED0BC57E7839B8AC5A863A9DBEC3C1C1B2A83F Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa Signing time: Sun 03 Mar 2024 06:58:34 +0000 ROA not before: Sun 03 Mar 2024 06:53:34 +0000 ROA not after: Sun 02 Mar 2025 06:58:34 +0000 asID: 142375 IP address blocks: 203.145.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 00:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ed:0b:c5:7e:78:39:b8:ac:5a:86:3a:9d:be:c3:c1:c1:b2:a8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Mar 3 06:53:34 2024 GMT Not After : Mar 2 06:58:34 2025 GMT Subject: CN=DC2F2DEE9A25F75BD839B056B3355E04AAB9D1D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:24:17:c7:08:79:5b:e1:51:b1:88:e8:ea:00: 3d:86:2f:75:c9:2d:28:e8:39:a1:eb:9f:c9:81:d5: 86:8c:d4:8f:d1:e1:20:03:83:6a:fb:f8:77:8a:a1: df:fd:ac:eb:30:88:92:0c:51:88:1c:fb:14:ec:b3: 6f:06:4c:50:df:51:d0:93:fc:0c:a3:a7:8e:de:68: 4b:3a:12:93:d1:20:f6:5e:8f:cd:9f:5e:9a:95:c0: 8f:a0:2e:7d:de:d5:ef:5c:eb:aa:b7:c2:20:d2:47: 99:24:b9:83:c7:29:75:a4:99:ac:bc:b0:f4:5d:02: a4:b7:8f:f6:3f:a4:57:1a:1d:51:92:1a:7f:83:b8: f5:63:ab:47:94:f5:8b:a5:1b:96:50:90:84:d7:80: 47:0c:83:5e:e8:03:b2:5a:8b:f4:da:27:94:16:bc: 87:64:1b:97:a2:61:9d:90:d6:5c:a8:bd:b2:4c:1e: 22:f6:60:69:21:32:fc:2f:c3:4f:97:f4:33:54:89: ac:e3:da:17:bf:f9:34:25:1b:b3:32:bb:77:7f:68: 17:37:64:c4:26:b8:83:ec:d7:fd:b7:de:4a:e1:2c: 5a:16:6e:c9:15:3e:47:8a:57:b2:ef:2a:cb:6e:60: d9:07:59:b4:3e:ce:5c:12:b2:28:3f:07:7d:6e:23: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2F:2D:EE:9A:25:F7:5B:D8:39:B0:56:B3:35:5E:04:AA:B9:D1:D1 X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.145.58.0/24 Signature Algorithm: sha256WithRSAEncryption 63:c9:82:49:80:71:3a:d9:f2:2a:f6:96:ee:01:85:58:18:2a: 31:6a:46:70:76:a0:1e:17:47:98:4a:6c:f3:06:dc:59:ee:31: 0b:43:c1:25:20:51:ed:fb:b4:4f:06:10:fc:8c:d8:0d:55:f4: 12:6e:27:02:a4:ec:c7:d9:6e:08:5c:50:ed:42:0b:28:5d:82: e9:79:f3:7c:e0:8e:95:26:c8:77:89:05:9f:9f:4b:43:0d:a7: a9:56:57:bd:47:e1:d6:87:3c:05:e1:f2:b1:87:24:bc:99:e2: 37:f2:11:27:7d:db:3e:5b:eb:56:28:dd:3f:b7:5e:81:c3:b7: 88:e7:79:00:e9:7a:2f:6a:0d:4b:fd:f7:77:b3:26:17:b2:f8: 2e:e1:39:e8:a5:c1:56:9c:52:73:7a:41:e5:c0:35:c4:40:75: 70:26:b1:7b:0c:ce:06:a5:a4:70:28:81:2c:df:76:9f:bd:67: 61:bf:28:17:23:50:91:0b:90:72:c2:49:d8:7f:9c:27:6a:c8: 4c:25:58:e1:5a:1a:6c:e0:a0:de:ca:22:a3:80:46:18:bc:91: 01:42:2e:f1:9b:ec:35:eb:80:ef:6c:95:4f:84:d2:8e:4b:c4: e8:69:ed:e9:ab:92:03:34:4f:47:6f:f4:c8:14:6d:1f:5c:b0: ea:01:b7:79 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO+0LxX54ObisWoY6nb7DwcGyqD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNDAzMDMwNjUzMzRaFw0yNTAzMDIwNjU4MzRaMDMxMTAvBgNV BAMTKERDMkYyREVFOUEyNUY3NUJEODM5QjA1NkIzMzU1RTA0QUFCOUQxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJBfHCHlb4VGxiOjqAD2GL3XJ LSjoOaHrn8mB1YaM1I/R4SADg2r7+HeKod/9rOswiJIMUYgc+xTss28GTFDfUdCT /Ayjp47eaEs6EpPRIPZej82fXpqVwI+gLn3e1e9c66q3wiDSR5kkuYPHKXWkmay8 sPRdAqS3j/Y/pFcaHVGSGn+DuPVjq0eU9YulG5ZQkITXgEcMg17oA7Jai/TaJ5QW vIdkG5eiYZ2Q1lyovbJMHiL2YGkhMvwvw0+X9DNUiazj2he/+TQlG7Myu3d/aBc3 ZMQmuIPs1/233krhLFoWbskVPkeKV7LvKstuYNkHWbQ+zlwSsig/B31uI55hAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3C8t7pol91vYObBWszVeBKq50dEwHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2YWEzYmViLTU3NjEtNGMzNC04 OGQzLTAxNWNjYzY0MDAyZi8wLzMyMzAzMzJlMzEzNDM1MmUzNTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy5E6MA0GCSqG SIb3DQEBCwUAA4IBAQBjyYJJgHE62fIq9pbuAYVYGCoxakZwdqAeF0eYSmzzBtxZ 7jELQ8ElIFHt+7RPBhD8jNgNVfQSbicCpOzH2W4IXFDtQgsoXYLpefN84I6VJsh3 iQWfn0tDDaepVle9R+HWhzwF4fKxhyS8meI38hEnfds+W+tWKN0/t16Bw7eI53kA 6Xovag1L/fd3syYXsvgu4TnopcFWnFJzekHlwDXEQHVwJrF7DM4GpaRwKIEs33af vWdhvygXI1CRC5BywknYf5wnashMJVjhWhps4KDeyiKjgEYYvJEBQi7xm+w164Dv bJVPhNKOS8Toae3pq5IDNE9Hb/TIFG0fXLDqAbd5 -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org