$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa File: 3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa (raw, json) Hash identifier: 89fPROhZUZi50QkEt+kZi8eXkrlknS00tp8+CAUNlvs= Subject key identifier: A9:26:0E:3D:17:0F:7C:32:3C:9B:05:77:E0:6A:2B:CE:AB:D1:52:AF Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 7C9EBDF2909EE9A71C67CA5523BFC82FACA8A59E Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa Signing time: Wed 11 Sep 2024 11:00:01 +0000 ROA not before: Wed 11 Sep 2024 10:55:01 +0000 ROA not after: Wed 10 Sep 2025 11:00:01 +0000 asID: 141607 IP address blocks: 202.154.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 07:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9e:bd:f2:90:9e:e9:a7:1c:67:ca:55:23:bf:c8:2f:ac:a8:a5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Sep 11 10:55:01 2024 GMT Not After : Sep 10 11:00:01 2025 GMT Subject: CN=A9260E3D170F7C323C9B0577E06A2BCEABD152AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:3d:24:a7:83:49:41:f7:28:67:55:97:84: 81:d2:38:ec:51:24:43:60:3a:c6:1a:5a:d0:0f:89: 6d:e3:27:79:1b:d2:d4:27:12:84:51:f8:16:77:4d: 49:9e:bc:bd:50:09:a4:89:5b:09:7b:9a:52:31:7d: 34:34:f8:85:1c:e7:35:25:c8:3b:6a:77:be:7a:fb: 68:e4:c3:60:71:69:e1:7f:8d:6d:71:fe:81:df:20: 32:15:52:21:20:81:da:cf:de:18:aa:20:a4:2e:96: c8:5f:9d:fb:44:e7:aa:1d:9e:54:0e:65:07:c4:5d: 9b:1a:da:e7:5c:f2:f2:89:8b:26:03:65:71:47:85: 5d:11:5b:ba:ca:e4:a0:83:a7:d1:7d:f1:b0:80:85: 2d:e7:08:1a:5a:2b:36:f2:f6:21:cf:cf:26:cb:ca: 33:a8:0f:7d:9c:2e:36:6f:6c:a2:0f:55:20:32:4f: 5e:a6:2f:ca:d4:40:61:fc:00:c2:0c:2c:7f:6f:e1: 9c:14:83:2f:70:ee:da:26:6b:aa:f6:c7:68:a8:48: a8:16:e2:63:c1:85:71:b2:41:0f:c6:21:be:54:10: 32:86:f1:f7:2f:05:58:ae:d6:95:52:04:26:bd:ae: 1e:e3:c1:40:72:94:fe:70:98:b2:7e:9c:03:67:01: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:26:0E:3D:17:0F:7C:32:3C:9B:05:77:E0:6A:2B:CE:AB:D1:52:AF X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.17.0/24 Signature Algorithm: sha256WithRSAEncryption 01:8c:c5:cc:b5:ea:a3:97:4b:f8:12:2a:6a:27:21:8e:26:b1: 91:d8:7d:b6:11:5a:6c:32:33:17:fa:b1:f4:73:c4:84:02:4e: aa:09:26:88:b7:aa:da:d1:33:6a:d5:e4:6d:1c:9f:9d:ad:1f: d2:14:82:77:3a:83:16:c7:01:0b:ad:cc:2e:82:af:63:34:4a: ef:d0:67:9d:94:09:4e:1f:64:b5:b5:5f:70:05:bf:d4:cb:d7: c3:f4:c5:7b:bb:7d:07:df:bf:10:33:98:2c:ed:fe:2b:e2:52: f5:8b:22:2d:c1:86:bd:3f:b4:ab:51:57:b0:1c:05:d9:33:e4: ea:8a:d5:9b:20:4c:95:02:0f:2c:6d:47:68:99:9a:aa:26:08: 00:a1:9e:e5:fe:30:00:7d:b7:bb:45:40:e4:db:e2:fc:19:fb: 70:ec:de:b7:b7:a4:8c:0c:b9:bb:8e:9e:7d:1f:bb:0d:a8:4f: 0f:9e:5c:53:ec:f3:0d:9b:47:2c:2d:01:e7:c6:bc:2a:da:2e: d6:ba:5d:37:39:f3:80:8f:08:f7:78:90:4d:52:0c:f4:b1:f1: 14:48:f0:3a:c9:11:c1:d1:ec:1d:05:b0:74:59:a8:21:45:73: 7a:b7:1f:24:7d:ee:98:bc:27:fb:e1:96:de:21:e4:85:26:f7: e9:68:75:ac -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfJ698pCe6accZ8pVI7/IL6yopZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNDA5MTExMDU1MDFaFw0yNTA5MTAxMTAwMDFaMDMxMTAvBgNV BAMTKEE5MjYwRTNEMTcwRjdDMzIzQzlCMDU3N0UwNkEyQkNFQUJEMTUyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHj0kp4NJQfcoZ1WXhIHSOOxR JENgOsYaWtAPiW3jJ3kb0tQnEoRR+BZ3TUmevL1QCaSJWwl7mlIxfTQ0+IUc5zUl yDtqd756+2jkw2BxaeF/jW1x/oHfIDIVUiEggdrP3hiqIKQulshfnftE56odnlQO ZQfEXZsa2udc8vKJiyYDZXFHhV0RW7rK5KCDp9F98bCAhS3nCBpaKzby9iHPzybL yjOoD32cLjZvbKIPVSAyT16mL8rUQGH8AMIMLH9v4ZwUgy9w7toma6r2x2ioSKgW 4mPBhXGyQQ/GIb5UEDKG8fcvBViu1pVSBCa9rh7jwUBylP5wmLJ+nANnAYdTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqSYOPRcPfDI8mwV34GorzqvRUq8wHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoRMA0GCSqG SIb3DQEBCwUAA4IBAQABjMXMteqjl0v4EipqJyGOJrGR2H22EVpsMjMX+rH0c8SE Ak6qCSaIt6ra0TNq1eRtHJ+drR/SFIJ3OoMWxwELrcwugq9jNErv0GedlAlOH2S1 tV9wBb/Uy9fD9MV7u30H378QM5gs7f4r4lL1iyItwYa9P7SrUVewHAXZM+TqitWb IEyVAg8sbUdomZqqJggAoZ7l/jAAfbe7RUDk2+L8Gftw7N63t6SMDLm7jp59H7sN qE8PnlxT7PMNm0csLQHnxrwq2i7Wul03OfOAjwj3eJBNUgz0sfEUSPA6yRHB0ewd BbB0WaghRXN6tx8kfe6YvCf74ZbeIeSFJvfpaHWs -----END CERTIFICATE-----Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org