$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa File: 3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa (raw, json) Hash identifier: NHYWr2woBW9iMoKm8UJ/j001iZnX8w4XNG1fwCnHf/E= Subject key identifier: E3:11:05:F0:AA:F7:C3:82:83:0E:F1:1A:E5:65:95:57:39:DD:1B:AD Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 471CBFBA2531C217171F1DB61A0F82B12E568008 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa Signing time: Tue 04 Jun 2024 10:16:50 +0000 ROA not before: Tue 04 Jun 2024 10:11:50 +0000 ROA not after: Tue 03 Jun 2025 10:16:50 +0000 asID: 149707 IP address blocks: 202.154.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:1c:bf:ba:25:31:c2:17:17:1f:1d:b6:1a:0f:82:b1:2e:56:80:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Jun 4 10:11:50 2024 GMT Not After : Jun 3 10:16:50 2025 GMT Subject: CN=E31105F0AAF7C382830EF11AE565955739DD1BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:96:3c:76:a7:68:0d:01:29:35:50:c3:bd: e1:c5:a7:36:69:38:a7:b7:ec:47:69:36:27:f8:3c: 41:40:36:6f:cf:76:1a:74:c9:3e:cf:6b:eb:84:16: 84:4c:19:07:39:28:83:3b:4c:ef:cd:67:63:8d:76: 0a:9f:58:70:da:30:46:ff:31:49:9f:ff:6e:52:31: 7a:f0:08:03:2c:b6:b7:0d:1c:ae:fe:0d:2b:e9:48: ff:43:dd:d2:4d:f4:7a:fa:40:05:58:ac:62:a4:54: fd:d6:e0:aa:da:b3:e8:b2:ae:3c:a1:df:e1:8f:1b: 0c:f8:09:aa:34:3f:43:41:93:c6:fb:1a:c5:35:be: 19:bf:56:9e:2a:37:64:4a:f8:1c:f2:fb:47:ea:da: c5:06:a4:8d:0d:0e:10:27:5d:c1:52:df:78:0d:9b: ff:3e:38:68:9c:11:c1:82:74:29:7d:c1:9c:f9:f2: 50:e5:f4:b0:cf:9c:1a:21:ef:2f:00:28:a4:fe:1e: 22:48:4f:bd:6f:b8:f7:0e:cc:f6:d8:45:a7:eb:bb: 9d:c7:bd:cd:ce:b4:4d:5c:13:3d:01:3b:0d:44:44: 84:73:36:7e:14:aa:a5:80:0d:de:cc:51:e3:df:00: c2:11:b5:e7:78:75:5b:c6:b5:69:a4:58:2b:e9:e0: 62:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:11:05:F0:AA:F7:C3:82:83:0E:F1:1A:E5:65:95:57:39:DD:1B:AD X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.12.0/23 Signature Algorithm: sha256WithRSAEncryption b8:49:c6:bc:a0:57:d5:23:c3:7e:fc:43:1a:f0:51:99:b6:bb: c0:85:20:c5:b4:1d:54:50:62:4b:43:c3:24:34:e9:bf:30:9c: ae:c3:b1:a2:b2:3c:a2:15:6b:d6:89:75:f8:5d:e7:ca:86:6f: 55:6b:8e:d7:90:d6:02:10:68:8d:6f:0d:7b:a9:f1:31:0d:57: 16:35:43:dc:ef:93:9e:33:51:a1:23:95:26:c8:40:12:11:68: 47:a8:d3:94:07:0f:23:f9:3c:38:52:59:86:81:2d:dc:8f:49: 31:62:06:4d:2b:b4:39:fa:c0:f6:97:2b:6e:7d:16:c9:c7:b9: a6:92:e3:c8:a2:d2:39:c1:d1:8d:83:8c:aa:4d:15:7c:80:e4: 3e:55:5a:55:dc:64:9c:c5:ce:a7:3f:e3:9c:30:5b:77:75:11: b4:99:94:9a:43:b5:83:ac:5f:3c:99:d4:25:45:7a:3c:de:4d: 4f:b3:e8:2d:ed:27:3a:f0:89:b5:c3:8c:53:10:a8:2c:50:34: e9:84:6e:b7:0b:d5:e7:3a:b6:65:26:da:9b:d2:cc:73:a6:c0: 8d:6c:55:ea:85:eb:cd:f6:45:26:97:5d:fc:8a:30:f1:95:49: f3:d9:c8:3e:ea:f5:b8:29:5a:cf:9f:a3:ae:97:3c:25:28:d4: f6:8b:0d:7c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURxy/uiUxwhcXHx22Gg+CsS5WgAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNDA2MDQxMDExNTBaFw0yNTA2MDMxMDE2NTBaMDMxMTAvBgNV BAMTKEUzMTEwNUYwQUFGN0MzODI4MzBFRjExQUU1NjU5NTU3MzlERDFCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLZY8dqdoDQEpNVDDveHFpzZp OKe37EdpNif4PEFANm/Pdhp0yT7Pa+uEFoRMGQc5KIM7TO/NZ2ONdgqfWHDaMEb/ MUmf/25SMXrwCAMstrcNHK7+DSvpSP9D3dJN9Hr6QAVYrGKkVP3W4Kras+iyrjyh 3+GPGwz4Cao0P0NBk8b7GsU1vhm/Vp4qN2RK+Bzy+0fq2sUGpI0NDhAnXcFS33gN m/8+OGicEcGCdCl9wZz58lDl9LDPnBoh7y8AKKT+HiJIT71vuPcOzPbYRafru53H vc3OtE1cEz0BOw1ERIRzNn4UqqWADd7MUePfAMIRted4dVvGtWmkWCvp4GLXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4xEF8Kr3w4KDDvEa5WWVVzndG60wHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypoMMA0GCSqG SIb3DQEBCwUAA4IBAQC4Sca8oFfVI8N+/EMa8FGZtrvAhSDFtB1UUGJLQ8MkNOm/ MJyuw7GisjyiFWvWiXX4XefKhm9Va47XkNYCEGiNbw17qfExDVcWNUPc75OeM1Gh I5UmyEASEWhHqNOUBw8j+Tw4UlmGgS3cj0kxYgZNK7Q5+sD2lytufRbJx7mmkuPI otI5wdGNg4yqTRV8gOQ+VVpV3GScxc6nP+OcMFt3dRG0mZSaQ7WDrF88mdQlRXo8 3k1Ps+gt7Sc68Im1w4xTEKgsUDTphG63C9XnOrZlJtqb0sxzpsCNbFXqhevN9kUm l138ijDxlUnz2cg+6vW4KVrPn6OulzwlKNT2iw18 -----END CERTIFICATE-----Generated at Sat Jun 22 13:58:56 2024 by rpki-client on console-fra.rpki-client.org