$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31372e302f32342d3234203d3e203436303435.roa File: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (raw, json) Hash identifier: qubI6gWPCNz5X+/Gfs0NEPDYI/K0k/cB9IVAWx8bTyg= Subject key identifier: F0:CE:A9:B2:65:8B:81:1E:0A:33:BC:A0:6C:DC:92:97:D7:6B:79:79 Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F Certificate serial: 19AC678075E564327F9441627936E8B9FCE6776E Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31372e302f32342d3234203d3e203436303435.roa Signing time: Tue 18 Jun 2024 04:01:29 +0000 ROA not before: Tue 18 Jun 2024 03:56:29 +0000 ROA not after: Tue 17 Jun 2025 04:01:29 +0000 asID: 46045 IP address blocks: 122.128.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 18:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ac:67:80:75:e5:64:32:7f:94:41:62:79:36:e8:b9:fc:e6:77:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00EE953FD699788668C724460F4D8D420238194F Validity Not Before: Jun 18 03:56:29 2024 GMT Not After : Jun 17 04:01:29 2025 GMT Subject: CN=F0CEA9B2658B811E0A33BCA06CDC9297D76B7979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:c6:5c:a0:39:8a:c1:a9:1d:1f:10:52:90: 1b:d2:82:ca:5d:99:1a:7b:13:70:e6:29:47:d7:9c: 36:01:f2:34:62:37:bb:39:cc:92:fb:35:e9:ae:48: 94:f9:29:fb:b2:8b:f9:0a:20:92:fc:df:9a:6e:d7: ac:72:ea:d0:b8:ec:ec:65:b4:6b:ee:a9:16:c3:d7: 3b:a8:17:8e:d6:05:30:2b:9d:55:ef:15:a2:c9:bd: a1:12:fd:6f:bd:fd:6b:dd:fb:20:a1:d7:a1:99:cf: 5d:42:13:b9:2a:2b:a5:c2:bd:dd:2c:15:e4:95:cc: 2d:b3:e2:3a:52:fd:fa:eb:c0:b1:3d:39:7f:69:ee: 7d:92:e2:1c:7d:d2:f5:ad:73:c7:73:7b:6a:b1:96: 3e:df:64:ed:da:83:3e:fa:44:cb:68:09:e3:d3:41: 51:9b:12:df:55:6d:dc:6d:a4:8c:24:3c:c1:2f:43: 58:9f:d6:e6:50:fb:49:0a:6a:57:ac:6c:1a:66:e1: 88:df:b6:8a:82:54:3f:63:a7:f5:5c:32:90:38:79: f0:d6:17:d5:f8:ce:c9:a4:b0:c4:4f:22:9f:05:54: 8c:44:ba:cd:01:c9:a9:55:9d:8c:7e:98:25:58:67: d2:ce:fb:0a:c0:ef:16:84:3e:e7:1f:7e:97:cd:9e: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CE:A9:B2:65:8B:81:1E:0A:33:BC:A0:6C:DC:92:97:D7:6B:79:79 X509v3 Authority Key Identifier: keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31372e302f32342d3234203d3e203436303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.17.0/24 Signature Algorithm: sha256WithRSAEncryption 23:3c:90:ad:30:29:bb:63:d5:9e:39:68:97:13:c5:fe:55:47: 9d:14:a1:b6:f8:6a:ae:83:eb:23:02:00:10:c5:77:9b:a4:e3: c9:2b:a8:c9:ae:77:a3:03:ce:52:09:0a:0d:bf:53:72:64:6b: be:a2:4f:c8:b6:78:99:0a:df:33:32:78:5c:d7:18:54:b6:10: 8e:a0:fa:8f:c5:37:21:26:01:ff:b9:94:ee:c2:41:aa:bd:d6: c6:16:97:6a:9f:4b:2a:5c:89:30:6f:16:29:8c:a1:d2:4b:50: 2b:0a:4b:10:a3:79:d1:29:c1:ab:a8:d8:8c:87:4a:37:81:91: 1a:5a:03:22:85:a9:e0:66:e9:3f:79:f1:5d:5d:97:22:d5:bc: 7a:a0:82:36:61:11:93:c7:ba:e6:2f:c3:59:78:52:cf:45:eb: 1a:2f:63:07:22:04:2f:a3:69:d5:65:a3:ee:85:db:7d:08:0e: 97:e8:e1:74:6f:de:64:a2:1c:fa:51:20:c0:5e:25:37:54:4a: 45:20:ac:d4:a6:34:78:88:27:b5:55:9a:de:4d:3e:94:df:f7: ef:f1:9f:36:35:d3:19:79:a9:fe:2f:bd:c6:a2:69:96:33:2d: c5:37:07:d7:0e:16:26:d0:0f:e1:56:f9:27:e3:4d:e2:78:4e: c0:13:4b:4b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGaxngHXlZDJ/lEFieTboufzmd24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw MjM4MTk0RjAeFw0yNDA2MTgwMzU2MjlaFw0yNTA2MTcwNDAxMjlaMDMxMTAvBgNV BAMTKEYwQ0VBOUIyNjU4QjgxMUUwQTMzQkNBMDZDREM5Mjk3RDc2Qjc5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQMZcoDmKwakdHxBSkBvSgspd mRp7E3DmKUfXnDYB8jRiN7s5zJL7NemuSJT5Kfuyi/kKIJL835pu16xy6tC47Oxl tGvuqRbD1zuoF47WBTArnVXvFaLJvaES/W+9/Wvd+yCh16GZz11CE7kqK6XCvd0s FeSVzC2z4jpS/frrwLE9OX9p7n2S4hx90vWtc8dze2qxlj7fZO3agz76RMtoCePT QVGbEt9VbdxtpIwkPMEvQ1if1uZQ+0kKalesbBpm4YjftoqCVD9jp/VcMpA4efDW F9X4zsmksMRPIp8FVIxEus0ByalVnYx+mCVYZ9LO+wrA7xaEPucffpfNnmgtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8M6psmWLgR4KM7ygbNySl9dreXkwHwYDVR0j BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2 OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4 MTk0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAETANBgkqhkiG 9w0BAQsFAAOCAQEAIzyQrTApu2PVnjlolxPF/lVHnRShtvhqroPrIwIAEMV3m6Tj ySuoya53owPOUgkKDb9TcmRrvqJPyLZ4mQrfMzJ4XNcYVLYQjqD6j8U3ISYB/7mU 7sJBqr3WxhaXap9LKlyJMG8WKYyh0ktQKwpLEKN50SnBq6jYjIdKN4GRGloDIoWp 4GbpP3nxXV2XItW8eqCCNmERk8e65i/DWXhSz0XrGi9jByIEL6Np1WWj7oXbfQgO l+jhdG/eZKIc+lEgwF4lN1RKRSCs1KY0eIgntVWa3k0+lN/37/GfNjXTGXmp/i+9 xqJpljMtxTcH1w4WJtAP4Vb5J+NN4nhOwBNLSw== -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:07 2025 by rpki-client