$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa File: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (raw, json) Hash identifier: sSIdllnvg4M1DGs8YGmNKZNiURvN96H1MMo+ucCRqd8= Subject key identifier: B8:1B:4F:69:9B:B6:6B:DE:B2:05:0E:CA:0D:28:9C:82:4C:79:35:57 Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F Certificate serial: 428B75C3E0697EE61DFFAA698A8C66381CC744E9 Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa Signing time: Sun 13 Oct 2024 21:39:58 +0000 ROA not before: Sun 13 Oct 2024 21:34:58 +0000 ROA not after: Sun 12 Oct 2025 21:39:58 +0000 asID: 202673 IP address blocks: 122.128.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8b:75:c3:e0:69:7e:e6:1d:ff:aa:69:8a:8c:66:38:1c:c7:44:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00EE953FD699788668C724460F4D8D420238194F Validity Not Before: Oct 13 21:34:58 2024 GMT Not After : Oct 12 21:39:58 2025 GMT Subject: CN=B81B4F699BB66BDEB2050ECA0D289C824C793557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:7b:49:ed:9d:11:10:81:a8:67:8c:38:30: d7:3e:8a:57:99:dc:61:8f:22:33:74:87:bc:f9:5b: da:4c:19:15:29:11:ea:18:d3:97:22:ea:95:fe:54: c1:2f:2a:7a:3a:b9:61:ee:b6:d0:16:9e:f3:f8:9c: b8:12:a3:3c:84:59:3a:44:74:27:46:bb:ac:21:57: 5f:ca:ae:d0:a7:80:d4:03:4c:21:0b:25:92:0c:bb: f3:fc:e2:12:6b:96:0e:f7:4d:2d:27:86:fe:92:d7: 76:07:84:20:a5:a5:a7:2a:55:27:4e:2e:e2:43:b1: 1d:8d:e2:74:4d:f0:0f:17:57:e1:54:33:75:cb:19: d8:16:3b:d4:18:3f:5c:d7:f2:1c:35:a6:02:ca:4b: a7:53:00:a1:02:08:7e:11:da:df:26:41:d2:94:53: fd:43:5d:4d:34:1a:9a:84:d7:e7:d3:88:32:cd:97: f5:80:ec:1d:f1:2f:ca:b7:7f:63:a3:2c:25:ac:eb: 68:e3:21:69:46:e6:37:4e:f3:bc:ba:ca:5c:d9:e8: 03:26:60:d6:dd:7a:b0:7b:99:20:56:84:51:8d:88: 96:11:0d:87:72:c2:4e:f1:d7:6f:13:9f:fb:4b:d1: 92:65:b1:bc:1a:80:06:27:a9:e9:5d:b4:30:40:f2: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1B:4F:69:9B:B6:6B:DE:B2:05:0E:CA:0D:28:9C:82:4C:79:35:57 X509v3 Authority Key Identifier: keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.22.0/24 Signature Algorithm: sha256WithRSAEncryption 61:96:8e:19:c5:cd:92:cb:1a:8c:7c:d1:c0:b8:87:3d:f9:89: 4a:da:2f:ea:6d:f1:74:35:43:a2:a2:d9:46:d5:31:b7:2f:5b: cc:03:48:0e:63:e4:09:4f:fc:7d:93:e9:df:e4:c5:4f:a9:45: 5d:a9:a1:81:9a:7c:79:46:56:5b:1e:13:02:2f:e9:61:a8:83: f3:c7:a8:38:a3:a4:d7:d4:06:b0:51:ef:5f:7b:2d:09:32:66: 35:d4:3e:32:74:1b:42:22:ed:39:d3:ff:da:fd:f8:7f:5c:6e: 45:a9:72:59:e2:bb:e4:a2:b1:d3:7b:37:5a:9b:b3:4f:dc:88: 33:75:aa:39:80:fa:9a:df:78:0f:7f:32:a3:cd:40:0c:b6:24: 6c:e2:8c:51:8e:3b:dd:60:33:2d:c7:3a:d8:72:59:39:a8:9a: 55:39:59:98:95:b5:b3:28:66:40:9b:ef:7f:5f:bb:9d:a7:7d: d5:ce:5d:c9:fe:53:48:91:88:62:01:c9:e1:10:aa:5f:1b:e1: 3f:46:78:3c:5a:ff:df:dd:b9:a8:e7:05:0c:9a:c4:34:49:f3: 8b:02:e1:46:b3:c0:a2:92:17:33:30:8b:63:7a:ec:e2:92:78: 62:ca:88:9b:3a:f5:4d:e5:82:6f:11:85:57:bd:0f:d9:05:de: a6:d0:52:a2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQot1w+BpfuYd/6ppioxmOBzHROkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw MjM4MTk0RjAeFw0yNDEwMTMyMTM0NThaFw0yNTEwMTIyMTM5NThaMDMxMTAvBgNV BAMTKEI4MUI0RjY5OUJCNjZCREVCMjA1MEVDQTBEMjg5QzgyNEM3OTM1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQHtJ7Z0REIGoZ4w4MNc+ileZ 3GGPIjN0h7z5W9pMGRUpEeoY05ci6pX+VMEvKno6uWHuttAWnvP4nLgSozyEWTpE dCdGu6whV1/KrtCngNQDTCELJZIMu/P84hJrlg73TS0nhv6S13YHhCClpacqVSdO LuJDsR2N4nRN8A8XV+FUM3XLGdgWO9QYP1zX8hw1pgLKS6dTAKECCH4R2t8mQdKU U/1DXU00GpqE1+fTiDLNl/WA7B3xL8q3f2OjLCWs62jjIWlG5jdO87y6ylzZ6AMm YNbderB7mSBWhFGNiJYRDYdywk7x128Tn/tL0ZJlsbwagAYnqeldtDBA8rK9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUuBtPaZu2a96yBQ7KDSicgkx5NVcwHwYDVR0j BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2 OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4 MTk0Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMDMyMzYzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeoAWMA0GCSqG SIb3DQEBCwUAA4IBAQBhlo4Zxc2SyxqMfNHAuIc9+YlK2i/qbfF0NUOiotlG1TG3 L1vMA0gOY+QJT/x9k+nf5MVPqUVdqaGBmnx5RlZbHhMCL+lhqIPzx6g4o6TX1Aaw Ue9fey0JMmY11D4ydBtCIu050//a/fh/XG5FqXJZ4rvkorHTezdam7NP3Igzdao5 gPqa33gPfzKjzUAMtiRs4oxRjjvdYDMtxzrYclk5qJpVOVmYlbWzKGZAm+9/X7ud p33Vzl3J/lNIkYhiAcnhEKpfG+E/Rng8Wv/f3bmo5wUMmsQ0SfOLAuFGs8Cikhcz MItjeuziknhiyoibOvVN5YJvEYVXvQ/ZBd6m0FKi -----END CERTIFICATE-----Generated at Wed Nov 20 18:41:50 2024 by rpki-client on console-fra.rpki-client.org