$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230332e302f32342d3234203d3e203535363936.roa File: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (raw, json) Hash identifier: AJg/cUVcCeYeduL3fWzjVB1U3XDTz0Sbijz+A7Hj40E= Subject key identifier: 56:0B:0D:D1:F7:1C:9C:53:C0:28:3F:39:78:92:FF:9B:12:AF:AA:54 Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 0BD981C04D921CC3BBC2DD819A77F2ACE489783C Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230332e302f32342d3234203d3e203535363936.roa Signing time: Wed 24 Jan 2024 06:00:00 +0000 ROA not before: Wed 24 Jan 2024 05:55:00 +0000 ROA not after: Wed 22 Jan 2025 06:00:00 +0000 asID: 55696 IP address blocks: 202.50.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 17:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d9:81:c0:4d:92:1c:c3:bb:c2:dd:81:9a:77:f2:ac:e4:89:78:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Jan 24 05:55:00 2024 GMT Not After : Jan 22 06:00:00 2025 GMT Subject: CN=560B0DD1F71C9C53C0283F397892FF9B12AFAA54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8f:0d:3f:5c:9f:e4:28:0a:fb:d7:a0:cb:87: 33:26:46:a6:b9:92:99:00:c1:0b:9c:3b:b4:d9:57: 74:3a:df:68:ab:33:91:69:c2:dc:3c:10:25:38:72: c7:fd:a8:9f:ab:cf:63:44:89:ca:e6:e5:8d:f4:1e: 29:6f:27:4f:c9:f2:d8:72:d8:4e:49:f0:56:98:73: 6d:fb:bc:b7:c3:7c:e5:31:7e:bb:a2:72:9c:04:99: a6:b9:0d:03:1a:c9:38:ed:52:81:b5:a7:ce:e3:7e: be:ab:53:9a:1d:34:7b:58:e9:db:a3:f6:b8:e4:bf: 3c:67:d2:d5:32:ee:5f:62:27:aa:72:a7:a4:0b:0b: c9:03:84:b1:80:82:06:85:e6:16:42:47:6c:d5:27: b6:ea:43:2a:68:55:6e:00:71:03:ee:53:fe:3a:28: 57:28:fa:7a:d4:28:fe:a7:12:f6:9c:07:79:5b:91: 95:a5:bb:87:4b:f3:f6:ad:ba:98:d7:52:11:cb:69: 4c:98:c0:42:39:fb:73:be:31:da:f6:d5:e3:ec:75: e6:82:a4:b5:77:1a:2b:af:81:46:98:bd:04:ad:26: 1b:2a:c2:df:b1:20:d2:c1:9e:f2:5c:2a:b1:28:ce: 73:b2:ba:80:a0:86:95:59:6f:2d:8c:8b:31:5d:d9: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0B:0D:D1:F7:1C:9C:53:C0:28:3F:39:78:92:FF:9B:12:AF:AA:54 X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230332e302f32342d3234203d3e203535363936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.50.203.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:58:03:7c:ec:b0:fe:aa:cc:6f:9d:e3:4b:7e:80:1e:a7:c9: 02:a9:c0:03:45:55:39:52:17:36:aa:3b:70:e8:e1:01:db:d7: c1:2e:2f:a7:73:0e:f6:4d:51:69:b2:6c:e3:71:a9:4d:39:14: 8c:f1:64:3a:31:e5:7f:ae:99:a7:b3:75:f8:9a:31:ce:36:1d: e4:0b:ab:44:60:84:80:53:71:98:ba:46:1c:ec:36:d3:58:fc: f5:9b:71:2f:fb:04:8e:9a:e9:f5:5e:3f:50:ed:33:81:8d:a2: f2:3d:1e:4c:82:03:07:14:27:a9:a2:0f:15:6e:6f:2d:52:75: dc:94:62:1b:22:59:a9:66:a9:cd:2f:be:6f:69:b3:b2:15:1d: d2:58:b2:ef:b4:f6:84:d8:da:5c:80:14:9c:ac:a3:05:fb:2b: cd:f6:84:1e:9b:96:f3:3f:5b:1e:fe:32:f2:16:7c:8b:90:81: 1d:ea:fa:e3:b7:c8:c6:4a:fc:b3:94:61:76:f3:3d:4c:70:d3: fc:1d:b5:3d:61:a3:00:47:df:9b:89:75:33:b9:fc:db:3d:0f: 07:fa:6d:78:db:57:08:67:88:5f:e2:b6:95:75:6b:a1:42:21: 88:1a:4b:d6:e2:04:bb:cc:83:81:29:41:2a:11:05:08:0c:f9: 36:49:59:ea -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUC9mBwE2SHMO7wt2BmnfyrOSJeDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNDAxMjQwNTU1MDBaFw0yNTAxMjIwNjAwMDBaMDMxMTAvBgNV BAMTKDU2MEIwREQxRjcxQzlDNTNDMDI4M0YzOTc4OTJGRjlCMTJBRkFBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjw0/XJ/kKAr716DLhzMmRqa5 kpkAwQucO7TZV3Q632irM5Fpwtw8ECU4csf9qJ+rz2NEicrm5Y30HilvJ0/J8thy 2E5J8FaYc237vLfDfOUxfruicpwEmaa5DQMayTjtUoG1p87jfr6rU5odNHtY6duj 9rjkvzxn0tUy7l9iJ6pyp6QLC8kDhLGAggaF5hZCR2zVJ7bqQypoVW4AcQPuU/46 KFco+nrUKP6nEvacB3lbkZWlu4dL8/atupjXUhHLaUyYwEI5+3O+Mdr21ePsdeaC pLV3GiuvgUaYvQStJhsqwt+xINLBnvJcKrEoznOyuoCghpVZby2MizFd2USZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVgsN0fccnFPAKD85eJL/mxKvqlQwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyODgwZGVlLTdhYTItNGJlNC1i ZjM1LWNkYmQxMWQ3OTUwNy8wLzMyMzAzMjJlMzUzMDJlMzIzMDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoyyzANBgkqhkiG 9w0BAQsFAAOCAQEAHFgDfOyw/qrMb53jS36AHqfJAqnAA0VVOVIXNqo7cOjhAdvX wS4vp3MO9k1RabJs43GpTTkUjPFkOjHlf66Zp7N1+JoxzjYd5AurRGCEgFNxmLpG HOw201j89ZtxL/sEjprp9V4/UO0zgY2i8j0eTIIDBxQnqaIPFW5vLVJ13JRiGyJZ qWapzS++b2mzshUd0liy77T2hNjaXIAUnKyjBfsrzfaEHpuW8z9bHv4y8hZ8i5CB Her647fIxkr8s5RhdvM9THDT/B21PWGjAEffm4l1M7n82z0PB/pteNtXCGeIX+K2 lXVroUIhiBpL1uIEu8yDgSlBKhEFCAz5NklZ6g== -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org