$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31302e302f32342d3234203d3e2034343334.roa File: 3230322e3135342e31302e302f32342d3234203d3e2034343334.roa (raw, json) Hash identifier: ZpeBe7mFPzRy0Xq+EOYdgnsyG4slFk56sszTgA3jwV4= Subject key identifier: 04:09:3C:65:B0:B8:84:EF:8E:CC:1E:F6:F1:A3:18:3A:D2:61:09:B8 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 4726238B965726339197F19AD035D2D09305995D Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31302e302f32342d3234203d3e2034343334.roa Signing time: Wed 21 Aug 2024 11:00:52 +0000 ROA not before: Wed 21 Aug 2024 10:55:52 +0000 ROA not after: Wed 20 Aug 2025 11:00:52 +0000 asID: 4434 IP address blocks: 202.154.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 07:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:26:23:8b:96:57:26:33:91:97:f1:9a:d0:35:d2:d0:93:05:99:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Aug 21 10:55:52 2024 GMT Not After : Aug 20 11:00:52 2025 GMT Subject: CN=04093C65B0B884EF8ECC1EF6F1A3183AD26109B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:1d:1e:01:50:87:76:3b:06:02:58:82:d4: 59:71:5f:83:b2:95:77:06:51:8d:7b:ac:7b:29:3b: 7c:86:98:50:09:a2:39:8e:d8:56:15:e6:b7:e2:55: 91:5e:4e:e5:4e:38:a5:3b:ad:26:48:2f:a1:e9:50: 48:23:6a:5a:5d:0e:b0:f8:b8:65:9e:40:6c:d1:f2: 71:f2:14:1a:0a:f9:33:75:24:05:8d:c9:27:32:fb: 5b:83:59:9b:db:7a:a5:ad:54:b0:b5:ed:11:1c:5b: 49:30:1e:fc:44:4b:db:cf:18:44:b5:26:cd:bc:d1: b6:5c:d9:d8:c9:d3:27:2a:dc:08:0e:42:14:a1:42: 63:8d:d4:75:f0:3b:37:85:be:02:76:8c:0f:63:f5: 56:60:66:bc:e0:fa:da:d9:28:bb:43:bd:31:0e:ab: 32:99:54:19:d7:41:42:f5:71:a6:e3:89:3c:32:95: 2c:45:fb:89:7d:51:28:8b:f5:42:f7:ae:0e:49:9f: e4:1d:68:5f:52:14:a0:32:10:01:28:1c:7c:aa:65: 76:80:47:c0:e3:9b:6e:31:c0:07:17:b0:ff:5f:07: 43:f1:8a:2e:e2:af:b4:c4:47:72:6f:72:4c:81:d7: 63:79:8d:0b:3b:3a:6c:4c:67:49:4f:ee:42:bf:07: 07:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:09:3C:65:B0:B8:84:EF:8E:CC:1E:F6:F1:A3:18:3A:D2:61:09:B8 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31302e302f32342d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.10.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:c9:69:2f:f1:3c:50:cc:4f:fe:8c:90:b6:f4:3a:05:fb:11: 7a:3b:35:f9:05:bd:6f:e4:a2:53:1a:69:50:9a:5b:3d:ec:09: 27:62:5e:2f:d8:24:04:c7:07:e4:9c:6c:80:45:b4:d2:a0:12: 41:01:61:79:78:5c:be:80:eb:d6:cf:b2:c8:19:66:7d:94:f6: 27:c9:de:50:a0:d7:4b:21:18:b3:71:1c:4a:9e:c4:c1:f2:0f: e8:bb:82:ca:38:2c:b6:dd:7b:d7:12:88:88:78:41:bf:da:dc: 4d:50:96:d4:de:44:28:d1:53:3e:d2:b2:f5:52:94:81:52:7e: b2:c4:82:52:37:f1:be:6b:dd:ee:fa:bf:bd:34:d5:d5:70:e7: f2:35:da:1f:d4:a4:5f:b6:a3:d9:55:59:0e:d3:b9:d1:fa:12: ea:5e:6d:d3:1a:bb:9b:57:de:43:f8:0f:9b:47:ec:3f:f4:36: 27:bd:fa:94:d7:44:59:ec:00:7f:58:3f:a1:b3:43:ef:40:bf: 28:22:c5:8e:38:51:78:8c:52:a1:49:cb:a7:3f:84:77:60:d5: 84:fa:c2:02:68:46:ba:d9:5e:c2:3b:75:e7:5d:b6:a2:bd:9d: dd:21:ca:43:9d:e9:c5:ea:55:00:ef:68:c6:5e:ae:64:9f:e9: ee:67:e6:b2 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIURyYji5ZXJjORl/Ga0DXS0JMFmV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNDA4MjExMDU1NTJaFw0yNTA4MjAxMTAwNTJaMDMxMTAvBgNV BAMTKDA0MDkzQzY1QjBCODg0RUY4RUNDMUVGNkYxQTMxODNBRDI2MTA5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXox0eAVCHdjsGAliC1FlxX4Oy lXcGUY17rHspO3yGmFAJojmO2FYV5rfiVZFeTuVOOKU7rSZIL6HpUEgjalpdDrD4 uGWeQGzR8nHyFBoK+TN1JAWNyScy+1uDWZvbeqWtVLC17REcW0kwHvxES9vPGES1 Js280bZc2djJ0ycq3AgOQhShQmON1HXwOzeFvgJ2jA9j9VZgZrzg+trZKLtDvTEO qzKZVBnXQUL1cabjiTwylSxF+4l9USiL9UL3rg5Jn+QdaF9SFKAyEAEoHHyqZXaA R8Djm24xwAcXsP9fB0Pxii7ir7TER3JvckyB12N5jQs7OmxMZ0lP7kK/BwfRAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUBAk8ZbC4hO+OzB728aMYOtJhCbgwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKmgowDQYJKoZIhvcN AQELBQADggEBAD3JaS/xPFDMT/6MkLb0OgX7EXo7NfkFvW/kolMaaVCaWz3sCSdi Xi/YJATHB+ScbIBFtNKgEkEBYXl4XL6A69bPssgZZn2U9ifJ3lCg10shGLNxHEqe xMHyD+i7gso4LLbde9cSiIh4Qb/a3E1QltTeRCjRUz7SsvVSlIFSfrLEglI38b5r 3e76v7001dVw5/I12h/UpF+2o9lVWQ7TudH6EupebdMau5tX3kP4D5tH7D/0Nie9 +pTXRFnsAH9YP6GzQ+9AvygixY44UXiMUqFJy6c/hHdg1YT6wgJoRrrZXsI7dedd tqK9nd0hykOd6cXqVQDvaMZermSf6e5n5rI= -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org