$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa File: 3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa (raw, json) Hash identifier: BlFJ6j0ZUFTbl6b52jlclFCV7eqrWZRPS5YZadFVZ8Y= Subject key identifier: 49:EE:3E:F1:6B:8A:B6:29:91:FA:01:D6:E8:BD:D6:8C:21:72:2B:FE Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 2AB2DC4FE825A328156C37AE92D34B99673A0C17 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa Signing time: Wed 11 Sep 2024 11:00:01 +0000 ROA not before: Wed 11 Sep 2024 10:55:01 +0000 ROA not after: Wed 10 Sep 2025 11:00:01 +0000 asID: 136121 IP address blocks: 202.154.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Mar 2025 06:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b2:dc:4f:e8:25:a3:28:15:6c:37:ae:92:d3:4b:99:67:3a:0c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Sep 11 10:55:01 2024 GMT Not After : Sep 10 11:00:01 2025 GMT Subject: CN=49EE3EF16B8AB62991FA01D6E8BDD68C21722BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2c:cf:46:93:68:24:24:d2:1a:d6:79:03:d5: 12:4b:62:e3:19:0b:16:73:97:b5:0f:fa:e5:3c:9e: 6e:1c:98:1a:08:8b:d4:5c:37:72:d8:56:71:72:a3: 4f:53:5c:8e:e6:66:8f:18:92:73:d2:cc:30:49:ea: 82:7b:ab:2f:09:62:1e:8b:4f:08:6c:f4:fd:e1:28: 8e:6a:a4:96:14:3f:ec:ea:f8:4f:85:2a:3b:86:20: c2:91:90:91:ba:5b:ae:3d:f5:2b:c5:7b:c5:f0:bb: 60:a7:5d:70:9e:42:83:17:e6:4f:a0:aa:3b:c5:04: 94:f7:79:13:4a:b7:aa:4b:71:7b:14:c8:3b:ee:93: ff:aa:d6:c5:81:0f:a6:96:e7:63:84:52:e5:b3:e3: 81:cf:8d:36:1f:13:64:88:5b:63:e0:95:41:4d:06: 8c:c2:c5:41:8d:a1:09:cf:aa:68:e2:0b:d1:2d:cc: 9f:ca:f7:19:97:df:83:75:ae:a3:c8:7a:d6:04:0d: cc:1c:5a:b5:d9:ae:95:fb:99:a8:c2:e2:a8:61:95: 59:c9:b4:10:87:5d:29:56:4f:e8:53:3f:fa:f7:bb: 08:94:8c:84:28:82:61:62:53:99:67:8e:11:cf:ae: 0c:03:af:de:aa:b1:c4:26:27:a7:90:24:83:e9:04: 4d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EE:3E:F1:6B:8A:B6:29:91:FA:01:D6:E8:BD:D6:8C:21:72:2B:FE X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.19.0/24 Signature Algorithm: sha256WithRSAEncryption 21:9e:ac:a7:d6:68:b4:d9:ab:5a:39:b8:67:eb:82:a2:28:60: 67:b0:b9:b0:77:3c:7c:ed:b0:93:66:b1:77:9b:8f:e0:55:16: 87:9e:ee:07:73:c4:84:1b:a5:ad:8c:85:65:27:b7:6e:6f:68: ec:c9:55:db:a8:be:3a:0a:a4:a0:eb:4c:80:15:85:a8:1c:28: 1f:52:5d:fc:e3:5a:8c:2d:5b:fd:57:08:68:d3:2b:5d:81:7e: 2e:2c:b1:9b:39:ac:05:ae:66:41:4e:58:29:be:7d:0b:58:d2: 7d:30:0c:6e:86:1b:68:79:34:ae:9b:6c:95:42:8e:ed:20:d4: 20:ae:27:b4:f9:d0:f1:ef:dc:67:3f:3b:ea:82:c0:6f:d0:1e: 53:fc:d8:14:f1:78:7d:d0:c3:db:de:b9:73:0c:dd:38:b9:43: 82:67:ea:b7:53:67:2c:10:64:40:30:df:9d:8a:44:bc:53:a2: c0:0f:c5:ba:d3:9d:50:3a:1a:ab:c1:71:5d:b3:7e:34:2b:7e: 2d:64:95:f3:ab:17:64:25:fe:ba:d3:bc:1c:19:83:77:74:85: 7f:08:cd:c1:14:1a:90:97:d8:ad:8e:a7:2e:9a:86:ea:7d:d1: 1a:50:81:cf:75:9f:58:1c:80:5a:da:37:d2:01:02:65:8b:ad: 0d:b5:c0:ec -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKrLcT+gloygVbDeuktNLmWc6DBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNDA5MTExMDU1MDFaFw0yNTA5MTAxMTAwMDFaMDMxMTAvBgNV BAMTKDQ5RUUzRUYxNkI4QUI2Mjk5MUZBMDFENkU4QkRENjhDMjE3MjJCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLM9Gk2gkJNIa1nkD1RJLYuMZ CxZzl7UP+uU8nm4cmBoIi9RcN3LYVnFyo09TXI7mZo8YknPSzDBJ6oJ7qy8JYh6L Twhs9P3hKI5qpJYUP+zq+E+FKjuGIMKRkJG6W6499SvFe8Xwu2CnXXCeQoMX5k+g qjvFBJT3eRNKt6pLcXsUyDvuk/+q1sWBD6aW52OEUuWz44HPjTYfE2SIW2PglUFN BozCxUGNoQnPqmjiC9EtzJ/K9xmX34N1rqPIetYEDcwcWrXZrpX7majC4qhhlVnJ tBCHXSlWT+hTP/r3uwiUjIQogmFiU5lnjhHPrgwDr96qscQmJ6eQJIPpBE3tAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSe4+8WuKtimR+gHW6L3WjCFyK/4wHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoTMA0GCSqG SIb3DQEBCwUAA4IBAQAhnqyn1mi02ataObhn64KiKGBnsLmwdzx87bCTZrF3m4/g VRaHnu4Hc8SEG6WtjIVlJ7dub2jsyVXbqL46CqSg60yAFYWoHCgfUl3841qMLVv9 Vwho0ytdgX4uLLGbOawFrmZBTlgpvn0LWNJ9MAxuhhtoeTSum2yVQo7tINQgrie0 +dDx79xnPzvqgsBv0B5T/NgU8Xh90MPb3rlzDN04uUOCZ+q3U2csEGRAMN+dikS8 U6LAD8W6051QOhqrwXFds340K34tZJXzqxdkJf6607wcGYN3dIV/CM3BFBqQl9it jqcumobqfdEaUIHPdZ9YHIBa2jfSAQJli60NtcDs -----END CERTIFICATE-----Generated at Tue Mar 11 05:05:20 2025 by rpki-client