$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa File: 3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa (raw, json) Hash identifier: vsVamVUBMTKANhMAeppT9+J9M/iZDaPm12oxsublMoE= Subject key identifier: F2:F2:01:0C:69:31:A0:7E:B6:64:18:09:B3:43:E3:32:AA:AF:58:27 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 1BD7B133261E9D1D9397CA670E32612C963FA893 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa Signing time: Wed 11 Sep 2024 10:00:01 +0000 ROA not before: Wed 11 Sep 2024 09:55:01 +0000 ROA not after: Wed 10 Sep 2025 10:00:01 +0000 asID: 136121 IP address blocks: 202.154.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d7:b1:33:26:1e:9d:1d:93:97:ca:67:0e:32:61:2c:96:3f:a8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Sep 11 09:55:01 2024 GMT Not After : Sep 10 10:00:01 2025 GMT Subject: CN=F2F2010C6931A07EB6641809B343E332AAAF5827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:bc:4c:0c:33:a3:ad:c4:ba:36:2f:8b:f3: 66:b4:2b:fb:0d:fa:0a:d1:bc:71:d5:be:97:55:6a: de:21:29:22:d1:f1:ac:02:15:21:0b:0f:fa:1e:00: 1f:40:4e:ea:03:b6:f2:64:d3:07:42:6a:ee:31:27: 72:28:52:5b:9b:ee:5c:53:24:61:2c:7b:12:75:7b: 25:f8:7b:db:29:4b:92:6e:d5:ce:a2:87:2d:7d:fc: 33:23:28:56:93:f8:ad:55:b3:24:ae:41:84:b7:45: 37:21:9d:f6:e7:5d:38:0f:ec:78:74:e3:d2:be:10: ce:f4:ad:fa:f0:e2:7e:da:6a:0a:d5:64:59:89:51: 16:36:6b:2d:54:fa:4b:bd:ef:13:e4:6a:a6:70:08: d6:e5:82:8f:27:17:20:19:b4:6e:c9:ca:9a:8f:28: 5a:80:af:60:2b:09:66:12:e6:60:97:4e:64:17:1f: b0:54:2a:6c:c1:90:4d:4d:d1:6a:57:4f:0d:46:ed: 26:69:21:fb:2a:09:4d:53:1f:50:c5:6f:aa:7f:19: d5:98:d0:80:9a:fb:1c:dd:19:8a:d8:09:05:c7:a6: c3:d1:02:f2:7e:dc:be:0d:6a:1d:bc:ba:3d:a3:9f: c6:6d:5a:58:bb:48:20:39:92:b4:0c:bf:2c:b2:6f: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F2:01:0C:69:31:A0:7E:B6:64:18:09:B3:43:E3:32:AA:AF:58:27 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.18.0/24 Signature Algorithm: sha256WithRSAEncryption 58:8f:a7:f3:20:c3:7f:30:1a:b3:ca:29:08:ba:e1:8c:8b:b0: 3c:b8:50:1b:34:8a:dd:df:2c:30:7e:3a:b7:85:8b:36:29:6e: 6b:2a:78:4b:52:3c:c9:bb:c8:06:af:78:88:d6:05:39:4e:f4: 79:94:52:24:35:ce:6f:88:0a:ef:fc:4b:6d:90:78:3e:a3:34: 38:9a:f1:d1:4c:f7:bb:25:13:6c:f9:ab:86:8f:71:43:09:89: 30:81:fd:82:79:07:35:80:df:44:eb:73:63:74:24:f8:69:77: 9e:a1:35:9e:ac:ea:2e:40:41:e3:0f:dc:13:bd:ad:29:f1:89: d7:cd:f1:4c:b3:f1:e9:c8:47:20:ac:c9:2f:0c:e9:64:2a:e6: ad:af:ec:29:56:08:6e:db:70:8f:df:2e:68:bd:15:60:ce:de: fb:a9:bc:76:8a:f3:ee:28:7e:7d:de:40:4b:1a:6a:18:47:31: 3a:a9:fe:50:a9:e1:11:4e:ef:27:23:88:0a:ca:08:60:0c:9b: 81:55:4f:36:15:36:42:ed:3c:c9:3e:cd:f3:90:e6:8b:6e:a4: 41:90:9f:85:ac:af:df:0a:3b:80:80:98:b4:db:4b:e9:e3:52: 10:a9:ae:d3:e2:f0:50:cc:c4:8e:2e:2f:20:91:cf:44:70:19: 2f:39:2b:eb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUG9exMyYenR2Tl8pnDjJhLJY/qJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNDA5MTEwOTU1MDFaFw0yNTA5MTAxMDAwMDFaMDMxMTAvBgNV BAMTKEYyRjIwMTBDNjkzMUEwN0VCNjY0MTgwOUIzNDNFMzMyQUFBRjU4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPbxMDDOjrcS6Ni+L82a0K/sN +grRvHHVvpdVat4hKSLR8awCFSELD/oeAB9ATuoDtvJk0wdCau4xJ3IoUlub7lxT JGEsexJ1eyX4e9spS5Ju1c6ihy19/DMjKFaT+K1VsySuQYS3RTchnfbnXTgP7Hh0 49K+EM70rfrw4n7aagrVZFmJURY2ay1U+ku97xPkaqZwCNblgo8nFyAZtG7JypqP KFqAr2ArCWYS5mCXTmQXH7BUKmzBkE1N0WpXTw1G7SZpIfsqCU1TH1DFb6p/GdWY 0ICa+xzdGYrYCQXHpsPRAvJ+3L4Nah28uj2jn8ZtWli7SCA5krQMvyyybw+vAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8vIBDGkxoH62ZBgJs0PjMqqvWCcwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoSMA0GCSqG SIb3DQEBCwUAA4IBAQBYj6fzIMN/MBqzyikIuuGMi7A8uFAbNIrd3ywwfjq3hYs2 KW5rKnhLUjzJu8gGr3iI1gU5TvR5lFIkNc5viArv/EttkHg+ozQ4mvHRTPe7JRNs +auGj3FDCYkwgf2CeQc1gN9E63NjdCT4aXeeoTWerOouQEHjD9wTva0p8YnXzfFM s/HpyEcgrMkvDOlkKuatr+wpVghu23CP3y5ovRVgzt77qbx2ivPuKH593kBLGmoY RzE6qf5QqeERTu8nI4gKyghgDJuBVU82FTZC7TzJPs3zkOaLbqRBkJ+FrK/fCjuA gJi020vp41IQqa7T4vBQzMSOLi8gkc9EcBkvOSvr -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:02 2024 by rpki-client on console-ams.rpki-client.org