$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232382e302f32342d3234203d3e203538353532.roa File: 34332e3234302e3232382e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: atDe9SEuipqpNeFA8KR5xQSUbH9QoK+Y5stoQGO28m8= Subject key identifier: 31:71:87:D7:93:21:C4:73:03:23:28:E4:38:CA:66:75:D7:29:F7:8D Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 5C08D6A02ABD21E409F4D060407916D75B92F02A Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232382e302f32342d3234203d3e203538353532.roa Signing time: Mon 01 Jul 2024 01:03:07 +0000 ROA not before: Mon 01 Jul 2024 00:58:07 +0000 ROA not after: Mon 30 Jun 2025 01:03:07 +0000 asID: 58552 IP address blocks: 43.240.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 18:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:08:d6:a0:2a:bd:21:e4:09:f4:d0:60:40:79:16:d7:5b:92:f0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 1 00:58:07 2024 GMT Not After : Jun 30 01:03:07 2025 GMT Subject: CN=317187D79321C473032328E438CA6675D729F78D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:66:46:54:52:68:7b:bb:44:02:52:3b:80:01: f8:58:d0:54:89:47:43:b3:86:a4:85:df:11:ec:7a: d0:11:20:f1:df:d4:0d:2b:be:28:7b:a5:b6:5f:cb: 23:29:19:e0:11:80:73:79:17:81:e7:29:da:5c:e3: 3d:d8:ba:28:50:97:6a:11:9e:3a:6e:a2:57:ad:fc: 4e:d0:7b:ca:ce:ed:6c:bb:e4:1c:07:0e:01:48:7c: c2:87:8c:31:13:5a:a2:84:64:58:c0:38:5f:63:8b: 9a:5a:a3:c3:07:db:b4:9b:96:7a:e4:10:90:8e:0e: d6:64:e7:38:14:38:aa:21:39:dc:5e:29:e6:a0:dc: fd:00:84:a8:02:12:8d:47:28:1a:83:a3:88:49:ee: 37:32:f0:bc:3f:f9:a9:74:d7:d7:20:b0:64:24:5c: c9:45:eb:02:00:eb:35:c7:16:83:34:96:ce:38:74: b0:f2:9e:dc:e5:c9:e2:ec:c2:35:f7:4f:3b:f0:19: e4:9a:ce:e4:39:8e:fc:9c:7a:f3:ae:f7:a3:b7:62: 0f:68:b9:94:a8:71:d8:b8:d9:6e:e1:b9:3f:27:af: 50:7a:ca:f0:2c:80:69:89:0f:a4:e9:69:22:44:0b: a9:b7:0d:45:0f:48:eb:a5:26:b2:51:7f:71:f3:2d: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:71:87:D7:93:21:C4:73:03:23:28:E4:38:CA:66:75:D7:29:F7:8D X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232382e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.228.0/24 Signature Algorithm: sha256WithRSAEncryption 35:99:b1:52:16:e1:ef:4d:33:80:f8:3c:35:e7:16:cc:83:93: d4:91:26:03:f3:3a:52:21:c9:14:cb:dd:ea:14:92:23:76:cd: ca:06:91:a2:f8:e0:b8:cb:65:99:b3:68:5f:88:14:21:a5:6b: 2a:33:5a:da:ad:be:95:fd:99:45:e0:55:54:27:23:91:9d:92: b0:2b:ac:94:b2:8f:c9:c0:6d:b3:06:a9:51:e8:d1:24:25:5b: 83:e0:fd:e7:38:9e:72:4f:2a:bc:ad:c8:12:d9:de:7a:18:2f: 80:f5:36:7a:e1:68:6b:a1:1f:e8:c6:09:c2:a0:63:eb:a1:d1: f5:90:58:8c:c3:2f:5d:83:05:5b:ac:60:f2:12:89:0e:e5:52: cc:15:81:fb:e2:83:96:c6:ad:16:e9:81:7d:0d:79:6b:d6:ac: d4:83:7c:b9:93:4b:df:ad:70:28:f3:32:e9:c6:a8:17:a5:d3: ca:cb:e1:a4:a4:48:81:4b:ce:3d:88:34:ad:c8:9d:02:7c:d7: 26:f5:b8:21:a5:26:18:f0:f2:c8:a8:7f:88:c7:93:59:c0:e3: ea:d0:18:d8:56:9b:19:fa:0f:fc:2d:15:ed:2c:c2:96:5c:f1: 9d:d5:0e:d6:22:5b:6e:a2:a1:0b:26:ca:24:c9:25:17:e7:1d: 68:13:db:0d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXAjWoCq9IeQJ9NBgQHkW11uS8CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNDA3MDEwMDU4MDdaFw0yNTA2MzAwMTAzMDdaMDMxMTAvBgNV BAMTKDMxNzE4N0Q3OTMyMUM0NzMwMzIzMjhFNDM4Q0E2Njc1RDcyOUY3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZkZUUmh7u0QCUjuAAfhY0FSJ R0OzhqSF3xHsetARIPHf1A0rvih7pbZfyyMpGeARgHN5F4HnKdpc4z3YuihQl2oR njpuolet/E7Qe8rO7Wy75BwHDgFIfMKHjDETWqKEZFjAOF9ji5pao8MH27Sblnrk EJCODtZk5zgUOKohOdxeKeag3P0AhKgCEo1HKBqDo4hJ7jcy8Lw/+al019cgsGQk XMlF6wIA6zXHFoM0ls44dLDyntzlyeLswjX3TzvwGeSazuQ5jvycevOu96O3Yg9o uZSocdi42W7huT8nr1B6yvAsgGmJD6TpaSJEC6m3DUUPSOulJrJRf3HzLZJhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMXGH15MhxHMDIyjkOMpmddcp940wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzM0MzMyZTMyMzQzMDJlMzIzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw5DANBgkqhkiG 9w0BAQsFAAOCAQEANZmxUhbh700zgPg8NecWzIOT1JEmA/M6UiHJFMvd6hSSI3bN ygaRovjguMtlmbNoX4gUIaVrKjNa2q2+lf2ZReBVVCcjkZ2SsCuslLKPycBtswap UejRJCVbg+D95zieck8qvK3IEtneehgvgPU2euFoa6Ef6MYJwqBj66HR9ZBYjMMv XYMFW6xg8hKJDuVSzBWB++KDlsatFumBfQ15a9as1IN8uZNL361wKPMy6caoF6XT ysvhpKRIgUvOPYg0rcidAnzXJvW4IaUmGPDyyKh/iMeTWcDj6tAY2FabGfoP/C0V 7SzCllzxndUO1iJbbqKhCybKJMklF+cdaBPbDQ== -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org