$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/3230332e3230372e35322e302f32322d3234203d3e203138333531.roa File: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (raw, json) Hash identifier: eP9HYV3PuOgWsaNidklL7fFxAiMdSf/LVzna0rIUQhA= Subject key identifier: D3:C2:83:33:54:34:B1:F1:AC:19:BE:77:9B:18:E6:E4:91:23:03:B5 Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 448C052ACCF4C55958D63574459D0BAC2669CB60 Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/3230332e3230372e35322e302f32322d3234203d3e203138333531.roa Signing time: Mon 01 Jul 2024 01:03:33 +0000 ROA not before: Mon 01 Jul 2024 00:58:33 +0000 ROA not after: Mon 30 Jun 2025 01:03:33 +0000 asID: 18351 IP address blocks: 203.207.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 08:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8c:05:2a:cc:f4:c5:59:58:d6:35:74:45:9d:0b:ac:26:69:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Jul 1 00:58:33 2024 GMT Not After : Jun 30 01:03:33 2025 GMT Subject: CN=D3C283335434B1F1AC19BE779B18E6E4912303B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:f7:2e:b0:e9:1d:14:4d:33:30:55:c5:c8: 26:62:41:f2:29:ba:77:17:6e:c3:cb:19:8f:de:7f: d1:f1:fb:a2:8f:33:79:96:61:83:74:1d:50:f2:fb: 90:2e:98:a0:17:e2:1b:27:a0:d4:19:4b:ae:e6:65: 91:d9:19:41:7a:1c:65:4f:44:98:a2:48:cb:20:93: a7:65:87:49:03:9d:38:64:28:6c:da:69:cd:fa:e2: 6a:82:83:d3:78:33:35:0b:7d:90:10:1b:c0:bc:3d: 42:e8:80:89:50:f2:db:0a:3a:7b:ca:91:45:41:45: 6c:c0:e8:ab:3c:70:24:61:72:60:a8:32:cd:8e:d8: b2:e7:62:d3:b7:e0:ce:87:4d:5f:d3:1a:23:14:3c: 2f:af:21:af:16:f5:46:a8:5a:8d:f4:48:3d:53:a7: 2b:06:2c:ee:6d:05:1d:13:07:78:ac:5b:41:43:fb: e3:9a:67:70:49:89:37:75:ef:90:48:1e:e9:00:1f: 23:53:9e:91:13:6a:94:08:d2:92:59:a9:31:0f:ca: fa:c5:06:6f:3d:68:29:47:1f:4e:39:d9:7d:71:af: 9d:4d:5e:54:2c:a3:d2:6f:08:76:54:78:ec:0c:85: 7e:91:46:ef:0c:2a:87:8e:d9:7e:21:91:69:fe:b9: 7d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C2:83:33:54:34:B1:F1:AC:19:BE:77:9B:18:E6:E4:91:23:03:B5 X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/3230332e3230372e35322e302f32322d3234203d3e203138333531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.207.52.0/22 Signature Algorithm: sha256WithRSAEncryption 69:b5:d7:68:b5:67:fb:23:ee:81:fc:1c:4d:2d:a9:c1:e4:2e: 71:8c:d4:fa:53:cd:ac:16:2e:56:7c:67:b1:4f:69:e1:0e:66: b4:eb:74:75:9a:27:c6:58:63:6e:f0:91:de:3b:81:13:a8:05: f2:9b:84:f3:e2:b7:c8:3d:9f:52:6c:3e:d9:f8:5a:2b:14:b2: 0d:6f:fd:0f:3c:e8:84:62:5a:16:a5:66:d5:6c:08:93:e9:1e: 6f:1e:04:f7:08:7c:de:73:79:f9:e7:60:1b:e2:60:5e:25:08: 4f:1b:6a:21:a0:77:3b:5a:47:3e:64:db:b2:da:e2:af:30:e7: b4:b6:72:92:60:85:10:ed:1d:a9:fe:62:01:fd:e9:82:84:06: d3:53:ce:4f:86:18:87:64:a1:a0:bb:22:da:c0:66:10:db:2c: b3:ba:17:34:cb:e5:4d:cb:75:55:08:ad:ac:4d:05:db:df:cb: b5:d8:41:f3:67:d7:28:12:48:8b:55:0d:ad:14:39:02:6d:62: d8:57:44:9a:3d:64:66:19:9c:c6:e6:d5:24:b9:3a:b5:cc:57: 5b:99:99:f1:65:50:fb:6b:fb:92:45:14:d3:9a:e5:bd:d0:d2: 33:cf:1b:4d:5a:de:5b:0c:8b:5c:be:98:b3:11:d3:9f:03:74: 37:44:9f:f1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURIwFKsz0xVlY1jV0RZ0LrCZpy2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNDA3MDEwMDU4MzNaFw0yNTA2MzAwMTAzMzNaMDMxMTAvBgNV BAMTKEQzQzI4MzMzNTQzNEIxRjFBQzE5QkU3NzlCMThFNkU0OTEyMzAzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCvcusOkdFE0zMFXFyCZiQfIp uncXbsPLGY/ef9Hx+6KPM3mWYYN0HVDy+5AumKAX4hsnoNQZS67mZZHZGUF6HGVP RJiiSMsgk6dlh0kDnThkKGzaac364mqCg9N4MzULfZAQG8C8PULogIlQ8tsKOnvK kUVBRWzA6Ks8cCRhcmCoMs2O2LLnYtO34M6HTV/TGiMUPC+vIa8W9UaoWo30SD1T pysGLO5tBR0TB3isW0FD++OaZ3BJiTd175BIHukAHyNTnpETapQI0pJZqTEPyvrF Bm89aClHH0452X1xr51NXlQso9JvCHZUeOwMhX6RRu8MKoeO2X4hkWn+uX2nAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU08KDM1Q0sfGsGb53mxjm5JEjA7UwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzZjc1ZTk4LTE0ZWYtNDQ1Ny05 NGYzLWU1YjczYTkyMmZjNS8wLzMyMzAzMzJlMzIzMDM3MmUzNTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzODMzMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsvPNDANBgkqhkiG 9w0BAQsFAAOCAQEAabXXaLVn+yPugfwcTS2pweQucYzU+lPNrBYuVnxnsU9p4Q5m tOt0dZonxlhjbvCR3juBE6gF8puE8+K3yD2fUmw+2fhaKxSyDW/9DzzohGJaFqVm 1WwIk+kebx4E9wh83nN5+edgG+JgXiUITxtqIaB3O1pHPmTbstrirzDntLZykmCF EO0dqf5iAf3pgoQG01POT4YYh2ShoLsi2sBmENsss7oXNMvlTct1VQitrE0F29/L tdhB82fXKBJIi1UNrRQ5Am1i2FdEmj1kZhmcxubVJLk6tcxXW5mZ8WVQ+2v7kkUU 05rlvdDSM88bTVreWwyLXL6YsxHTnwN0N0Sf8Q== -----END CERTIFICATE-----Generated at Fri Nov 22 09:29:42 2024 by rpki-client on console-fra.rpki-client.org