$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa File: 3230322e3135342e33322e302f32332d3234203d3e2034343334.roa (raw, json) Hash identifier: DXBBTTa5VR7TK6Q1LOLMBpTKsjoeuaRI9YBN3Kwe908= Subject key identifier: C4:5E:B2:F1:ED:F5:FF:9C:31:B3:11:FF:79:02:C3:AB:AB:E1:16:2C Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 4EE5BB0D14B67981EC02F47B697E3F5D302010EB Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa Signing time: Wed 21 Aug 2024 11:00:50 +0000 ROA not before: Wed 21 Aug 2024 10:55:50 +0000 ROA not after: Wed 20 Aug 2025 11:00:50 +0000 asID: 4434 IP address blocks: 202.154.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 07:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e5:bb:0d:14:b6:79:81:ec:02:f4:7b:69:7e:3f:5d:30:20:10:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Aug 21 10:55:50 2024 GMT Not After : Aug 20 11:00:50 2025 GMT Subject: CN=C45EB2F1EDF5FF9C31B311FF7902C3ABABE1162C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:a1:87:e1:57:b6:37:f1:ab:8c:e9:85:8b: 0c:48:28:b7:bb:99:20:ea:ad:42:b2:c7:34:ab:a8: 8c:b1:88:a1:ec:a1:88:7f:a3:0b:44:24:af:14:d8: 46:3d:b8:f1:30:de:00:17:b1:bd:bc:8a:40:40:a2: a0:99:a0:2c:28:3d:53:81:7c:b6:1f:f0:ad:cf:94: c2:b3:8c:27:c0:ee:12:e7:11:75:f9:e0:d3:b5:26: ec:8b:8c:a0:0a:46:d1:65:b8:1e:8a:99:52:29:bf: 22:78:10:93:e3:46:3a:fa:88:31:af:98:f4:ec:6c: 75:94:c1:89:51:75:58:6f:fd:be:71:27:94:aa:c6: aa:bc:8d:6d:c3:4f:4f:7f:9a:a9:26:3e:30:f9:d5: 82:6e:9a:06:40:9e:a9:08:ba:ac:b9:c3:fb:55:19: 56:5d:c7:cc:76:12:61:1e:33:f1:97:c7:c5:61:08: 0c:8f:d7:e8:eb:35:75:c1:b7:25:3a:af:b9:ac:75: b3:23:b9:95:62:72:d7:b5:c6:be:48:92:7a:6a:35: 51:7a:db:d4:9c:87:18:cd:9b:29:cc:63:39:b3:42: 9d:d8:3a:9b:09:5d:8d:12:44:6d:f7:5b:af:6d:18: ac:b1:d8:29:2b:2d:f3:81:dc:8a:6a:23:c5:9f:d5: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5E:B2:F1:ED:F5:FF:9C:31:B3:11:FF:79:02:C3:AB:AB:E1:16:2C X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.32.0/23 Signature Algorithm: sha256WithRSAEncryption ae:8f:c7:f8:58:c5:1a:31:79:d3:79:0a:29:77:67:d1:b3:f3: 61:de:20:61:12:9e:8a:15:a2:3d:af:e6:6a:e5:c5:3f:5c:d5: 98:25:0e:39:31:ca:52:45:f5:fb:35:2d:ef:6d:65:7c:e6:eb: a4:21:9b:54:55:a5:8c:40:51:a3:c7:d8:d1:83:5f:42:67:e4: 69:66:a6:5a:af:f2:be:15:3b:93:68:a6:7f:d5:fc:f0:e2:4f: a2:9e:9d:15:ba:de:3f:32:c4:93:3c:f0:73:5a:88:37:da:e2: c4:00:d8:7c:1e:0a:49:15:c2:28:42:29:d6:e2:69:3b:53:89: 1c:c7:2b:e7:c5:2f:4e:27:e2:3d:05:26:32:e9:7e:38:97:4f: 64:0d:97:d3:7d:11:7e:2f:01:26:b8:49:91:75:55:68:7b:51: 28:72:2d:7a:93:f0:a9:c0:69:19:0a:aa:f0:c4:9c:32:b3:ca: fe:f4:82:80:38:25:71:56:89:75:1a:4f:a3:7b:1e:cb:5b:8a: 9c:81:18:36:ac:a0:f8:7d:72:8f:d1:5b:c0:30:7d:e6:07:97: 3d:87:e0:0a:84:3b:68:1e:c5:77:ee:f4:5b:8c:85:bd:a2:41: a0:74:1c:a9:d7:4d:46:33:d2:5e:a2:bc:e6:8e:92:74:f3:00: f7:33:59:2f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUTuW7DRS2eYHsAvR7aX4/XTAgEOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNDA4MjExMDU1NTBaFw0yNTA4MjAxMTAwNTBaMDMxMTAvBgNV BAMTKEM0NUVCMkYxRURGNUZGOUMzMUIzMTFGRjc5MDJDM0FCQUJFMTE2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqKGH4Ve2N/GrjOmFiwxIKLe7 mSDqrUKyxzSrqIyxiKHsoYh/owtEJK8U2EY9uPEw3gAXsb28ikBAoqCZoCwoPVOB fLYf8K3PlMKzjCfA7hLnEXX54NO1JuyLjKAKRtFluB6KmVIpvyJ4EJPjRjr6iDGv mPTsbHWUwYlRdVhv/b5xJ5Sqxqq8jW3DT09/mqkmPjD51YJumgZAnqkIuqy5w/tV GVZdx8x2EmEeM/GXx8VhCAyP1+jrNXXBtyU6r7msdbMjuZVicte1xr5IknpqNVF6 29SchxjNmynMYzmzQp3YOpsJXY0SRG33W69tGKyx2CkrLfOB3IpqI8Wf1ShrAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUxF6y8e31/5wxsxH/eQLDq6vhFiwwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMzMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmiAwDQYJKoZIhvcN AQELBQADggEBAK6Px/hYxRoxedN5Cil3Z9Gz82HeIGESnooVoj2v5mrlxT9c1Zgl DjkxylJF9fs1Le9tZXzm66Qhm1RVpYxAUaPH2NGDX0Jn5Glmplqv8r4VO5Nopn/V /PDiT6KenRW63j8yxJM88HNaiDfa4sQA2HweCkkVwihCKdbiaTtTiRzHK+fFL04n 4j0FJjLpfjiXT2QNl9N9EX4vASa4SZF1VWh7UShyLXqT8KnAaRkKqvDEnDKzyv70 goA4JXFWiXUaT6N7HstbipyBGDasoPh9co/RW8AwfeYHlz2H4AqEO2gexXfu9FuM hb2iQaB0HKnXTUYz0l6ivOaOknTzAPczWS8= -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org