$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31362e302f32342d3234203d3e2034343334.roa File: 3230322e3135342e31362e302f32342d3234203d3e2034343334.roa (raw, json) Hash identifier: m+E+A9/8K0f9pwhGforXax8C4S4cdn10Ejb3oOhP1Qk= Subject key identifier: DD:1E:58:B6:BB:41:E1:D8:51:6C:18:42:52:51:CC:20:1D:69:D6:E0 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 43EEB2459B43B3B0143BF4D816CC7FC49DCC5A18 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31362e302f32342d3234203d3e2034343334.roa Signing time: Wed 11 Oct 2023 10:00:01 +0000 ROA not before: Wed 11 Oct 2023 09:55:01 +0000 ROA not after: Wed 09 Oct 2024 10:00:01 +0000 asID: 4434 IP address blocks: 202.154.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ee:b2:45:9b:43:b3:b0:14:3b:f4:d8:16:cc:7f:c4:9d:cc:5a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Oct 11 09:55:01 2023 GMT Not After : Oct 9 10:00:01 2024 GMT Subject: CN=DD1E58B6BB41E1D8516C18425251CC201D69D6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fa:3e:da:e8:61:3b:3b:b0:67:39:32:39:33: bf:6e:b1:cd:23:0b:6c:12:46:e5:e1:29:b7:81:e2: 05:a2:c3:ea:06:87:47:bc:06:e2:a8:40:8f:b2:ef: ba:0e:1a:42:1b:ef:75:45:a3:79:84:12:3a:f4:ae: 60:c6:62:76:3a:b4:b4:17:66:87:c1:d6:36:33:f9: c3:e2:3e:e9:fe:0e:ba:7f:a2:58:ea:d3:2d:fa:42: 2b:e2:a3:d9:f5:d1:87:e6:a8:94:3e:e7:5b:a5:1a: f6:97:5d:79:ac:d3:97:30:89:69:f3:ff:e6:aa:69: c5:ae:a5:cc:eb:a3:32:86:a9:25:d8:ef:d4:b4:ee: 2c:33:68:37:c3:eb:e7:59:1f:e5:4c:e9:e8:ff:16: 58:53:fd:e4:b9:a5:e5:a4:1b:f5:38:3f:b1:2d:70: 8e:71:71:9a:41:10:3f:dc:cc:c5:54:ac:83:ba:79: b1:55:5c:a1:1b:30:cd:75:71:a6:c7:10:60:36:b6: e8:50:47:b8:36:d5:e6:8e:83:b7:16:a6:db:56:36: 88:7d:57:b8:a8:9b:e5:fa:c0:60:a8:d3:d0:1f:80: f8:ca:24:d2:26:ec:21:f4:a6:78:a1:25:4c:42:d9: 6d:7e:90:61:fb:ed:6b:17:03:c0:95:9f:17:bf:86: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1E:58:B6:BB:41:E1:D8:51:6C:18:42:52:51:CC:20:1D:69:D6:E0 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31362e302f32342d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.16.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:f6:13:11:83:93:b7:5d:7d:e7:19:20:03:39:dd:c9:43:59: c5:75:02:f2:f6:94:9c:f5:d3:60:15:f9:04:32:9c:50:07:33: 4a:4c:25:d4:31:e4:fd:f4:aa:41:4f:ed:cb:67:37:31:00:25: d3:47:65:c3:3b:cc:26:58:19:41:c6:39:d5:10:5e:31:5c:90: ac:48:b4:e5:fa:2d:22:e7:98:d4:4e:bf:50:85:36:f1:83:05: 9c:5e:db:1a:89:6f:3c:21:e8:53:18:a8:e6:9e:be:97:71:bf: 1b:58:e9:08:19:d2:2a:25:ff:a4:15:1e:de:18:55:8c:7d:b6: 60:e8:a7:7e:d8:8e:77:01:70:aa:11:bf:d1:74:e2:8d:45:52: bf:b4:59:79:ed:65:0f:8f:a2:d1:42:dd:dc:29:5d:a8:f7:70: fe:7c:d5:97:4a:e2:a7:cc:35:20:fa:f0:5a:63:87:90:a2:15: b6:d0:af:64:3a:b2:79:ed:16:77:82:27:ff:cc:36:1c:d7:77: a8:2a:b6:ec:f5:8e:73:58:57:98:21:c8:63:8e:79:86:c7:1b: 31:6f:9c:ce:16:59:54:f1:3c:77:02:36:98:76:0b:6c:d8:28: 1b:b0:5b:33:65:65:4a:46:cf:8f:e9:fb:b3:13:7a:84:b7:71: 0a:40:fd:74 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUQ+6yRZtDs7AUO/TYFsx/xJ3MWhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yMzEwMTEwOTU1MDFaFw0yNDEwMDkxMDAwMDFaMDMxMTAvBgNV BAMTKEREMUU1OEI2QkI0MUUxRDg1MTZDMTg0MjUyNTFDQzIwMUQ2OUQ2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw+j7a6GE7O7BnOTI5M79usc0j C2wSRuXhKbeB4gWiw+oGh0e8BuKoQI+y77oOGkIb73VFo3mEEjr0rmDGYnY6tLQX ZofB1jYz+cPiPun+Drp/oljq0y36Qivio9n10YfmqJQ+51ulGvaXXXms05cwiWnz /+aqacWupczrozKGqSXY79S07iwzaDfD6+dZH+VM6ej/FlhT/eS5peWkG/U4P7Et cI5xcZpBED/czMVUrIO6ebFVXKEbMM11cabHEGA2tuhQR7g21eaOg7cWpttWNoh9 V7iom+X6wGCo09AfgPjKJNIm7CH0pnihJUxC2W1+kGH77WsXA8CVnxe/hmAtAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU3R5YtrtB4dhRbBhCUlHMIB1p1uAwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKmhAwDQYJKoZIhvcN AQELBQADggEBAIv2ExGDk7ddfecZIAM53clDWcV1AvL2lJz102AV+QQynFAHM0pM JdQx5P30qkFP7ctnNzEAJdNHZcM7zCZYGUHGOdUQXjFckKxItOX6LSLnmNROv1CF NvGDBZxe2xqJbzwh6FMYqOaevpdxvxtY6QgZ0iol/6QVHt4YVYx9tmDop37YjncB cKoRv9F04o1FUr+0WXntZQ+PotFC3dwpXaj3cP581ZdK4qfMNSD68Fpjh5CiFbbQ r2Q6snntFneCJ//MNhzXd6gqtuz1jnNYV5ghyGOOeYbHGzFvnM4WWVTxPHcCNph2 C2zYKBuwWzNlZUpGz4/p+7MTeoS3cQpA/XQ= -----END CERTIFICATE-----Generated at Sat Jun 22 14:21:50 2024 by rpki-client on console-ams.rpki-client.org