$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa File: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (raw, json) Hash identifier: bouZAasMgOPM9QXaYDi4csM+kLJSSiEoYCEC3ZJXQLg= Subject key identifier: 46:3B:D8:C4:A5:66:41:5F:A3:5C:73:98:E5:33:28:36:43:84:E1:A4 Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90 Certificate serial: 6E84E56F612B049C5BA81B8A7DB4E92DA81D58C8 Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa Signing time: Tue 26 Dec 2023 23:29:50 +0000 ROA not before: Tue 26 Dec 2023 23:24:50 +0000 ROA not after: Tue 24 Dec 2024 23:29:50 +0000 asID: 139952 IP address blocks: 203.175.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:84:e5:6f:61:2b:04:9c:5b:a8:1b:8a:7d:b4:e9:2d:a8:1d:58:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90 Validity Not Before: Dec 26 23:24:50 2023 GMT Not After : Dec 24 23:29:50 2024 GMT Subject: CN=463BD8C4A566415FA35C7398E53328364384E1A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:b2:27:ed:a1:7b:fc:59:b9:38:a3:ff:03: a0:81:fe:06:2e:cf:14:7a:94:1c:49:5e:7e:c3:14: e5:6c:37:f2:75:86:97:72:f2:cb:22:f1:a4:9a:64: 77:dc:6d:bd:a9:29:23:f4:f0:26:48:3a:61:f2:cc: d3:4a:73:3c:68:65:ae:29:06:c9:1c:46:f2:f9:88: d8:4e:ea:ed:71:d2:21:dc:51:cb:e7:26:dc:68:30: 3c:c1:3c:56:68:12:f7:ed:1a:8c:20:8e:66:e2:fd: 47:40:be:9c:ad:12:32:0b:f7:9f:3b:7c:d9:d1:17: 65:b4:b4:bd:d8:63:f4:b5:29:62:46:af:78:26:68: ac:de:b1:f7:47:2e:a2:a5:46:3d:ab:e9:d8:d6:2a: ce:52:05:28:bb:f0:09:01:ca:31:d8:77:71:a5:3d: 6e:d1:46:f3:c2:02:02:dd:34:03:2b:e1:f1:bf:d3: f4:e3:d5:80:9c:90:88:05:d1:d9:d8:fa:be:c5:31: 65:aa:43:5a:ca:f8:ee:81:ba:e7:33:13:cb:37:70: 6c:9e:e5:8e:42:a4:fa:cf:ba:fd:e0:0b:b8:b9:d3: 44:59:ad:4f:f3:fc:cd:7c:63:52:df:cc:fd:3f:5a: 2d:83:ef:c6:c0:79:e6:38:4b:ea:9a:55:2f:9e:a3: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3B:D8:C4:A5:66:41:5F:A3:5C:73:98:E5:33:28:36:43:84:E1:A4 X509v3 Authority Key Identifier: keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.124.0/24 Signature Algorithm: sha256WithRSAEncryption 17:a6:de:1e:44:5b:33:bd:9c:73:5c:0e:1a:c2:94:ff:66:cb: cd:42:fb:f1:a1:c0:c4:45:a6:65:a9:63:24:43:d8:bd:e3:ce: ff:0c:fb:b8:78:d5:7e:4e:0b:69:f8:49:03:98:3d:1d:69:18: 9b:18:4b:a2:15:19:e3:3b:ec:70:d9:0e:58:e0:6a:6c:94:7f: b3:af:d4:db:4c:1a:9d:65:d9:7b:49:d8:45:13:ff:50:3d:94: 7b:43:38:42:77:39:1a:84:09:a4:4f:68:a6:f6:90:5d:69:85: 5f:63:b0:74:a7:6c:15:36:a2:7e:ac:bf:41:2b:d9:79:f7:c6: 0b:a3:f2:8b:2c:63:b3:07:9b:11:3b:b1:99:cf:b7:47:e5:74: d8:71:ff:9d:59:ef:b8:09:a5:4f:c3:ac:ce:09:79:fa:85:cf: 11:be:62:de:b8:d4:da:d2:83:07:69:4d:13:30:08:3b:30:35: aa:88:c7:09:4a:b7:11:f8:e4:67:64:2e:58:d5:af:63:be:e9: ff:01:01:0f:5b:5d:53:02:cd:05:0a:74:5f:15:cf:d4:17:1a: d2:3d:77:f5:d5:6e:6e:bf:83:b8:82:c6:d2:1c:f6:25:cc:24: fe:e4:d9:ed:46:52:83:3b:c9:3c:c2:13:88:56:57:bf:51:d6: 08:88:11:1b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUboTlb2ErBJxbqBuKfbTpLagdWMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2 NjRFN0M5MDAeFw0yMzEyMjYyMzI0NTBaFw0yNDEyMjQyMzI5NTBaMDMxMTAvBgNV BAMTKDQ2M0JEOEM0QTU2NjQxNUZBMzVDNzM5OEU1MzMyODM2NDM4NEUxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KLIn7aF7/Fm5OKP/A6CB/gYu zxR6lBxJXn7DFOVsN/J1hpdy8ssi8aSaZHfcbb2pKSP08CZIOmHyzNNKczxoZa4p BskcRvL5iNhO6u1x0iHcUcvnJtxoMDzBPFZoEvftGowgjmbi/UdAvpytEjIL9587 fNnRF2W0tL3YY/S1KWJGr3gmaKzesfdHLqKlRj2r6djWKs5SBSi78AkByjHYd3Gl PW7RRvPCAgLdNAMr4fG/0/Tj1YCckIgF0dnY+r7FMWWqQ1rK+O6BuuczE8s3cGye 5Y5CpPrPuv3gC7i500RZrU/z/M18Y1LfzP0/Wi2D78bAeeY4S+qaVS+eo2qfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQURjvYxKVmQV+jXHOY5TMoNkOE4aQwHwYDVR0j BBgwFoAUTkyaR3iUBrkIZxPFuCFSS2ZOfJAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmIzOGY3OS0yNmQzLTQ0ODktYTQ3ZC0wYTg4MDViNDQ4YWUvMC80RTRDOUE0Nzc4 OTQwNkI5MDg2NzEzQzVCODIxNTI0QjY2NEU3QzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2NjRF N0M5MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyYjM4Zjc5LTI2ZDMtNDQ4OS1h NDdkLTBhODgwNWI0NDhhZS8wLzMyMzAzMzJlMzEzNzM1MmUzMTMyMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLr3wwDQYJ KoZIhvcNAQELBQADggEBABem3h5EWzO9nHNcDhrClP9my81C+/GhwMRFpmWpYyRD 2L3jzv8M+7h41X5OC2n4SQOYPR1pGJsYS6IVGeM77HDZDljgamyUf7Ov1NtMGp1l 2XtJ2EUT/1A9lHtDOEJ3ORqECaRPaKb2kF1phV9jsHSnbBU2on6sv0Er2Xn3xguj 8ossY7MHmxE7sZnPt0fldNhx/51Z77gJpU/DrM4JefqFzxG+Yt641NrSgwdpTRMw CDswNaqIxwlKtxH45GdkLljVr2O+6f8BAQ9bXVMCzQUKdF8Vz9QXGtI9d/XVbm6/ g7iCxtIc9iXMJP7k2e1GUoM7yTzCE4hWV79R1giIERs= -----END CERTIFICATE-----Generated at Sun Jun 2 10:34:47 2024 by rpki-client on console-fra.rpki-client.org