$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa File: 3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa (raw, json) Hash identifier: IFQrvJWBqvefTsubpUBvBOgW2h48ALHBU51BJtyftac= Subject key identifier: BA:94:DC:10:E1:7F:44:8B:5A:6D:74:C5:82:BE:B3:8A:39:6F:7C:95 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 259FF8DD3448DB7E67C3E9E9B19910C00AB49372 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa Signing time: Wed 13 Sep 2023 03:00:01 +0000 ROA not before: Wed 13 Sep 2023 02:55:01 +0000 ROA not after: Wed 11 Sep 2024 03:00:01 +0000 asID: 141898 IP address blocks: 202.154.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9f:f8:dd:34:48:db:7e:67:c3:e9:e9:b1:99:10:c0:0a:b4:93:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Sep 13 02:55:01 2023 GMT Not After : Sep 11 03:00:01 2024 GMT Subject: CN=BA94DC10E17F448B5A6D74C582BEB38A396F7C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:48:12:95:ed:5e:e3:0a:39:b2:d8:c4:74: 33:da:00:1d:4c:12:11:c5:a3:a9:d0:c2:04:62:ca: a8:c5:93:77:fd:b2:e3:f6:09:b4:c1:19:e4:f6:cb: 33:48:6b:39:53:7a:34:4a:9a:ca:15:96:94:14:c0: 15:78:6a:ef:fc:dd:5a:b2:67:9f:da:e9:f7:01:18: 8e:c8:a3:e0:76:74:d2:57:48:63:7d:64:3b:74:ae: 0a:46:66:09:95:05:7d:3a:ae:48:39:59:69:5c:9e: de:29:4c:36:42:72:4f:0e:9d:a9:3d:99:2f:17:68: 92:f7:b3:64:2c:05:c7:96:51:9b:ee:d6:b4:e3:3f: 46:85:c1:93:8b:42:f0:70:20:26:79:62:62:6f:f8: 7e:1d:94:f9:7d:da:ff:ca:18:2f:7f:e3:44:1c:71: 9e:a2:39:ee:45:6b:f0:ad:17:4a:c2:0e:d8:8c:08: 70:f2:39:8e:f1:f5:1a:a4:40:68:17:d1:91:1b:51: ca:92:d5:b7:d5:ab:b4:64:00:27:06:44:4a:3d:15: 4a:f8:d3:ca:d5:24:f7:67:1e:5c:63:df:15:42:72: b4:a7:67:48:e8:44:73:91:84:66:82:d3:6f:1c:ac: 9a:54:3c:99:0c:f7:20:4f:e1:73:18:ff:20:70:e6: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:94:DC:10:E1:7F:44:8B:5A:6D:74:C5:82:BE:B3:8A:39:6F:7C:95 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.14.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:a5:46:c3:2a:bf:3b:dc:cd:fd:ad:e6:f1:79:91:ad:d3:7f: e2:f7:35:3c:d8:f8:86:61:7e:20:54:03:3f:bf:43:fa:43:09: 7a:65:6a:ff:1c:96:6e:3e:f8:dd:c5:18:3e:25:ad:3f:37:eb: 4d:8e:af:4a:52:f3:55:59:c5:0c:9d:75:38:af:b4:76:66:8a: 49:46:81:d9:38:5e:45:18:22:31:e4:88:82:70:9c:5a:34:47: 90:2e:ca:9f:14:b8:18:0f:07:48:f5:13:d7:2a:70:73:8f:6c: 8e:ef:94:81:03:80:70:ea:3c:f0:c9:80:03:5c:a3:c7:33:0e: b7:fe:f6:e4:9e:b7:54:e6:3d:1b:ae:dc:a8:9e:27:ff:48:d0: f4:22:cb:c6:50:dd:86:5a:ff:8d:79:24:11:65:16:6a:4f:ef: 50:ca:8a:9d:cc:ac:9a:1d:2a:35:ae:5a:f8:12:87:5e:ea:db: 83:c5:2d:fd:1a:ed:55:8e:22:c2:45:01:dc:57:0c:f7:39:1e: d8:f6:d6:c7:c7:21:c3:48:7b:c6:c7:28:4e:02:30:9a:b6:32: ab:b1:2d:78:a5:e5:ec:f7:d0:9f:b2:6f:5e:d7:f7:51:af:2b: a5:77:bd:29:3c:16:09:68:45:07:83:3c:e0:b2:36:52:80:b8: 64:0c:ad:07 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJZ/43TRI235nw+npsZkQwAq0k3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yMzA5MTMwMjU1MDFaFw0yNDA5MTEwMzAwMDFaMDMxMTAvBgNV BAMTKEJBOTREQzEwRTE3RjQ0OEI1QTZENzRDNTgyQkVCMzhBMzk2RjdDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGEgSle1e4wo5stjEdDPaAB1M EhHFo6nQwgRiyqjFk3f9suP2CbTBGeT2yzNIazlTejRKmsoVlpQUwBV4au/83Vqy Z5/a6fcBGI7Io+B2dNJXSGN9ZDt0rgpGZgmVBX06rkg5WWlcnt4pTDZCck8Onak9 mS8XaJL3s2QsBceWUZvu1rTjP0aFwZOLQvBwICZ5YmJv+H4dlPl92v/KGC9/40Qc cZ6iOe5Fa/CtF0rCDtiMCHDyOY7x9RqkQGgX0ZEbUcqS1bfVq7RkACcGREo9FUr4 08rVJPdnHlxj3xVCcrSnZ0joRHORhGaC028crJpUPJkM9yBP4XMY/yBw5hqjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUupTcEOF/RItabXTFgr6zijlvfJUwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoOMA0GCSqG SIb3DQEBCwUAA4IBAQCcpUbDKr873M39rebxeZGt03/i9zU82PiGYX4gVAM/v0P6 Qwl6ZWr/HJZuPvjdxRg+Ja0/N+tNjq9KUvNVWcUMnXU4r7R2ZopJRoHZOF5FGCIx 5IiCcJxaNEeQLsqfFLgYDwdI9RPXKnBzj2yO75SBA4Bw6jzwyYADXKPHMw63/vbk nrdU5j0brtyonif/SND0IsvGUN2GWv+NeSQRZRZqT+9QyoqdzKyaHSo1rlr4Eode 6tuDxS39Gu1VjiLCRQHcVwz3OR7Y9tbHxyHDSHvGxyhOAjCatjKrsS14peXs99Cf sm9e1/dRryuld70pPBYJaEUHgzzgsjZSgLhkDK0H -----END CERTIFICATE-----Generated at Fri May 3 03:08:23 2024 by rpki-client on console-ams.rpki-client.org