$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3230322e362e3230382e302f32302d3234203d3e203137343530.roa File: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (raw, json) Hash identifier: wpi+A3QiGq0ZlH1T9XK03PNS16oXniLKGOp2khUpYoA= Subject key identifier: 80:2D:78:59:2B:3D:A6:0E:F5:34:29:08:67:D0:26:23:F9:64:D9:62 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 5F547346AA4DC89B6F87EF26FFC5298E5A37A5D4 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3230322e362e3230382e302f32302d3234203d3e203137343530.roa Signing time: Tue 15 Oct 2024 03:00:01 +0000 ROA not before: Tue 15 Oct 2024 02:55:01 +0000 ROA not after: Tue 14 Oct 2025 03:00:01 +0000 asID: 17450 IP address blocks: 202.6.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:54:73:46:aa:4d:c8:9b:6f:87:ef:26:ff:c5:29:8e:5a:37:a5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Oct 15 02:55:01 2024 GMT Not After : Oct 14 03:00:01 2025 GMT Subject: CN=802D78592B3DA60EF534290867D02623F964D962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:11:09:55:ff:b9:85:98:f9:54:f1:7d:02: ba:2b:73:20:4d:ca:31:04:8b:7f:f5:e1:da:f6:1e: 0b:ed:80:5f:f9:d0:36:79:9a:fe:74:82:df:14:77: 7d:54:94:28:65:46:6a:0a:9d:ab:ae:4e:83:3e:37: 8d:d2:8a:e2:6e:cb:18:16:99:42:41:34:74:8c:56: 2c:11:d7:e3:c1:39:8c:00:2d:f9:86:1b:82:65:15: e5:ec:fb:fb:1d:cd:d8:b9:60:18:cf:2a:3e:fa:95: 4f:d0:87:82:11:a4:ee:84:9e:15:1a:c1:a4:55:30: f2:37:be:91:6b:dd:3d:37:c7:86:45:45:28:53:d4: 42:7e:44:31:1e:ec:24:33:bf:4b:66:a6:67:39:3e: 02:c2:ba:16:a6:3a:85:99:22:f3:1e:b6:43:99:57: 0c:b2:b4:c7:0c:05:8d:df:d4:6a:6a:3c:9d:89:f1: db:8b:92:6d:19:a5:6f:ff:ce:f9:a9:0d:c5:0c:3f: e7:fc:e0:f5:a8:6a:d1:e9:17:a3:ff:0c:e1:4e:16: 9a:4f:10:74:51:11:3f:bb:30:39:28:e1:7c:9c:3b: 5c:30:ac:7b:d8:1c:a6:67:d8:b2:5c:0b:92:d0:86: 1c:e4:1c:5c:87:d0:16:cb:43:75:11:7e:6b:39:aa: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2D:78:59:2B:3D:A6:0E:F5:34:29:08:67:D0:26:23:F9:64:D9:62 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3230322e362e3230382e302f32302d3234203d3e203137343530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.6.208.0/20 Signature Algorithm: sha256WithRSAEncryption 95:7a:38:a9:93:f2:1d:47:8d:57:6e:b0:73:35:40:28:1b:b3: fe:f6:8e:f7:4b:82:64:cd:41:1a:45:12:91:a0:48:9c:96:7c: 53:44:df:73:59:c5:d4:98:f0:70:4d:bb:c3:07:83:15:6c:c4: 69:cb:d5:c8:ad:d3:2a:fe:8d:42:fb:42:82:de:70:fc:be:5c: 1c:80:a5:71:8f:1c:23:0a:4d:bd:77:e3:00:6a:7f:a6:c5:2d: 78:e4:20:9f:52:28:0f:ca:89:fb:33:ec:d2:ff:26:83:f2:7e: cb:07:c6:0e:7e:fe:1d:90:d5:49:66:8e:39:87:04:b0:88:2f: 10:05:fa:71:88:44:0d:81:1f:d2:64:60:2d:23:e3:23:8e:9b: 66:ef:76:72:85:ad:27:7b:77:bf:e1:44:0f:63:7f:f3:78:a1: e4:a5:15:00:0b:13:3f:a7:0d:cd:67:49:d0:5c:49:a3:40:cf: 98:60:49:85:f4:24:26:8c:b3:1b:88:ea:fa:e1:6d:d1:81:1d: 00:8a:c1:5c:75:81:6e:c8:a3:4e:b0:d5:6a:7b:96:36:ea:46: 24:d9:b4:7e:d5:21:d6:5f:66:13:05:0b:f1:57:49:29:b0:e3: eb:14:33:57:fa:a1:9a:4e:33:b3:27:44:7b:57:b7:7f:de:bb: 1d:32:4f:85 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUX1RzRqpNyJtvh+8m/8Upjlo3pdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNDEwMTUwMjU1MDFaFw0yNTEwMTQwMzAwMDFaMDMxMTAvBgNV BAMTKDgwMkQ3ODU5MkIzREE2MEVGNTM0MjkwODY3RDAyNjIzRjk2NEQ5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKREJVf+5hZj5VPF9ArorcyBN yjEEi3/14dr2HgvtgF/50DZ5mv50gt8Ud31UlChlRmoKnauuToM+N43SiuJuyxgW mUJBNHSMViwR1+PBOYwALfmGG4JlFeXs+/sdzdi5YBjPKj76lU/Qh4IRpO6EnhUa waRVMPI3vpFr3T03x4ZFRShT1EJ+RDEe7CQzv0tmpmc5PgLCuhamOoWZIvMetkOZ VwyytMcMBY3f1GpqPJ2J8duLkm0ZpW//zvmpDcUMP+f84PWoatHpF6P/DOFOFppP EHRRET+7MDko4XycO1wwrHvYHKZn2LJcC5LQhhzkHFyH0BbLQ3URfms5qpE9AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUgC14WSs9pg71NCkIZ9AmI/lk2WIwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzODA2MWYxLWZhMzAtNGJkNi04 MWEwLTJlYzY3MDgzNmM0Mi8wLzMyMzAzMjJlMzYyZTMyMzAzODJlMzAyZjMyMzAy ZDMyMzQyMDNkM2UyMDMxMzczNDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKBtAwDQYJKoZIhvcN AQELBQADggEBAJV6OKmT8h1HjVdusHM1QCgbs/72jvdLgmTNQRpFEpGgSJyWfFNE 33NZxdSY8HBNu8MHgxVsxGnL1cit0yr+jUL7QoLecPy+XByApXGPHCMKTb134wBq f6bFLXjkIJ9SKA/Kifsz7NL/JoPyfssHxg5+/h2Q1UlmjjmHBLCILxAF+nGIRA2B H9JkYC0j4yOOm2bvdnKFrSd7d7/hRA9jf/N4oeSlFQALEz+nDc1nSdBcSaNAz5hg SYX0JCaMsxuI6vrhbdGBHQCKwVx1gW7Io06w1Wp7ljbqRiTZtH7VIdZfZhMFC/FX SSmw4+sUM1f6oZpOM7MnRHtXt3/eux0yT4U= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org