$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa File: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (raw, json) Hash identifier: osRmKn7FScKzb2daWT8/MvxVRyMF/MJC8QyNa3WXVZA= Subject key identifier: 92:81:DF:FD:49:B3:AA:4F:78:42:D3:55:2B:24:0E:EA:3D:C6:F3:F9 Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 62551D8807AD0D8D3C6CB480CF89B94728371DAB Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa Signing time: Fri 22 Dec 2023 10:00:00 +0000 ROA not before: Fri 22 Dec 2023 09:55:00 +0000 ROA not after: Fri 20 Dec 2024 10:00:00 +0000 asID: 24211 IP address blocks: 203.190.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 19:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:55:1d:88:07:ad:0d:8d:3c:6c:b4:80:cf:89:b9:47:28:37:1d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Dec 22 09:55:00 2023 GMT Not After : Dec 20 10:00:00 2024 GMT Subject: CN=9281DFFD49B3AA4F7842D3552B240EEA3DC6F3F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:04:4a:4f:45:b9:6a:fb:4e:de:0d:6b:ba: 5c:e4:c0:3d:d6:1e:e8:6a:f5:48:79:45:6f:fd:74: 11:d9:6c:67:a8:de:7c:e7:5e:5d:c3:68:f0:96:9e: c7:d3:d4:4d:95:a5:85:41:ba:23:22:36:e9:f7:ad: ec:b5:4c:f8:f2:09:69:57:ef:e1:cd:06:8f:2b:85: d0:c9:52:d7:4d:2e:47:cb:77:5a:0b:e7:b7:33:85: 4a:26:57:ab:86:9d:de:57:4f:f4:88:7c:c8:7c:9c: cd:b1:69:36:2f:38:d4:34:c8:27:e2:c6:87:d2:61: 60:c0:47:9a:6e:c2:bd:fc:a6:86:41:26:fd:56:e9: 4d:5a:17:0e:ec:2e:97:17:59:29:ce:f0:9b:2a:a5: 19:ee:f2:85:e8:6a:1c:c4:b3:03:5d:b1:3d:94:d9: 87:ed:2a:e1:72:c2:47:cc:6b:aa:d5:68:f7:d1:17: e7:75:9a:4c:c7:43:fb:21:81:f7:fe:4d:67:8b:4a: 1c:1f:b8:7e:7c:bf:c2:76:e5:4d:37:8e:5e:31:e7: 3f:24:90:02:7f:06:cf:fb:b3:b5:f2:80:12:5a:ca: bc:03:a7:bd:4b:c1:6f:bd:fa:8d:76:8f:aa:b4:cb: 38:f2:30:fe:9a:16:eb:ae:e7:42:ed:d8:97:9d:b9: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:81:DF:FD:49:B3:AA:4F:78:42:D3:55:2B:24:0E:EA:3D:C6:F3:F9 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.246.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:5a:8e:ae:e5:11:87:05:b1:00:ae:27:0b:87:53:d0:4e:25: d5:b6:ce:8e:71:59:61:2b:21:f4:0b:a2:1d:be:2b:6b:f1:52: 0e:99:2d:d1:2f:1d:9a:36:f0:ce:62:b8:e7:61:70:0d:63:4c: 7f:db:85:a5:af:16:24:d0:fa:ec:23:ed:64:2a:ff:92:63:06: e2:dd:24:66:ec:cd:e0:57:20:a1:19:5c:dc:85:d9:1f:a3:35: 0c:8d:4e:f6:53:a8:52:54:4a:52:ea:8c:c3:d2:6f:73:8a:0f: 91:e2:28:da:79:22:8e:d5:1d:7b:57:cd:8e:61:80:33:13:cc: 6d:50:15:e1:90:1b:ba:3d:31:61:e6:9c:c7:0c:53:46:e9:83: e4:a5:70:20:d0:3a:36:06:f5:e9:44:6f:6d:a3:a5:db:29:a5: 93:8f:83:96:df:65:a3:08:46:2d:c0:79:46:5a:eb:10:12:28: 80:c3:eb:0f:fa:bd:03:3a:b6:a6:e3:25:33:7c:dd:b3:63:71: 4b:77:c2:39:76:96:b9:39:af:c0:ad:73:93:42:19:60:8e:81: b4:9b:a1:26:a9:e2:86:a6:ce:51:5d:0d:74:db:03:30:5e:38: 88:93:d2:08:bc:82:f0:33:17:40:bc:30:de:70:bd:64:44:ff: 46:76:ea:50 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYlUdiAetDY08bLSAz4m5Ryg3HaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yMzEyMjIwOTU1MDBaFw0yNDEyMjAxMDAwMDBaMDMxMTAvBgNV BAMTKDkyODFERkZENDlCM0FBNEY3ODQyRDM1NTJCMjQwRUVBM0RDNkYzRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2QRKT0W5avtO3g1rulzkwD3W Huhq9Uh5RW/9dBHZbGeo3nznXl3DaPCWnsfT1E2VpYVBuiMiNun3rey1TPjyCWlX 7+HNBo8rhdDJUtdNLkfLd1oL57czhUomV6uGnd5XT/SIfMh8nM2xaTYvONQ0yCfi xofSYWDAR5puwr38poZBJv1W6U1aFw7sLpcXWSnO8JsqpRnu8oXoahzEswNdsT2U 2YftKuFywkfMa6rVaPfRF+d1mkzHQ/shgff+TWeLShwfuH58v8J25U03jl4x5z8k kAJ/Bs/7s7XygBJayrwDp71LwW+9+o12j6q0yzjyMP6aFuuu50Lt2JeduegPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkoHf/Umzqk94QtNVKyQO6j3G8/kwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzAzMzJlMzEzOTMwMmUzMjM0MzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy772MA0GCSqG SIb3DQEBCwUAA4IBAQAcWo6u5RGHBbEAricLh1PQTiXVts6OcVlhKyH0C6Idvitr 8VIOmS3RLx2aNvDOYrjnYXANY0x/24WlrxYk0PrsI+1kKv+SYwbi3SRm7M3gVyCh GVzchdkfozUMjU72U6hSVEpS6ozD0m9zig+R4ijaeSKO1R17V82OYYAzE8xtUBXh kBu6PTFh5pzHDFNG6YPkpXAg0Do2BvXpRG9to6XbKaWTj4OW32WjCEYtwHlGWusQ EiiAw+sP+r0DOram4yUzfN2zY3FLd8I5dpa5Oa/ArXOTQhlgjoG0m6EmqeKGps5R XQ102wMwXjiIk9IIvILwMxdAvDDecL1kRP9GdupQ -----END CERTIFICATE-----Generated at Sat Apr 27 13:32:23 2024 by rpki-client on console-ams.rpki-client.org