$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231302e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: 7qusHinD7yGu3yRHFbfUFahecP6csfaCnVL/WleyFIk= Subject key identifier: D2:B1:7E:F4:3A:DC:6D:9A:FF:0F:A8:37:8A:34:16:5E:5E:D4:C1:46 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 56A01A7C03574E5D5F3D148804BDB751F0469C0A Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231302e302f32342d3234203d3e203338313432.roa Signing time: Mon 20 Nov 2023 12:00:01 +0000 ROA not before: Mon 20 Nov 2023 11:55:01 +0000 ROA not after: Mon 18 Nov 2024 12:00:01 +0000 asID: 38142 IP address blocks: 210.57.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a0:1a:7c:03:57:4e:5d:5f:3d:14:88:04:bd:b7:51:f0:46:9c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Nov 20 11:55:01 2023 GMT Not After : Nov 18 12:00:01 2024 GMT Subject: CN=D2B17EF43ADC6D9AFF0FA8378A34165E5ED4C146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:d6:78:cf:68:97:ba:9d:05:e5:1d:9d:5e: eb:ff:e8:5b:ac:a3:b4:df:87:33:cf:d3:95:d9:64: d4:7b:73:92:c3:7c:8c:d9:ae:f5:47:25:2d:5b:14: 59:5c:1a:46:1a:09:45:fe:1e:80:6b:70:ae:28:f9: f7:be:32:6e:36:fc:70:76:6e:45:b2:ce:56:f1:ac: 85:a8:2d:3e:d2:29:96:f2:4f:09:5f:2d:85:4a:26: 0c:c6:0b:18:41:e0:8d:d6:7c:3f:69:2d:0b:42:3f: b1:ec:d0:6e:e1:ab:d4:aa:e1:ff:32:28:e6:79:8c: 39:9a:4d:70:5f:6b:2f:ee:27:6c:36:1d:07:fa:0f: e0:58:75:da:60:a0:30:ef:f1:f3:40:8e:96:05:fb: e8:f2:84:4d:8c:6c:0b:0f:7f:4c:e7:5b:bc:0c:bd: 9d:b3:fa:17:7b:81:ef:53:7d:0c:62:08:5e:91:70: da:6e:ba:f0:15:b1:0e:75:3d:c3:c9:d5:88:b8:1c: ca:c6:63:76:2a:df:01:ac:4c:f1:2a:8f:89:b1:aa: ec:bb:b5:fe:64:cc:7a:72:1c:2f:62:a2:31:a9:f4: 13:10:ed:7f:b9:e9:ae:c1:24:72:5e:26:5c:97:9d: 0c:69:c9:9a:d6:2a:96:8a:39:e7:f3:3e:1e:b4:c8: d5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:7E:F4:3A:DC:6D:9A:FF:0F:A8:37:8A:34:16:5E:5E:D4:C1:46 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231302e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.210.0/24 Signature Algorithm: sha256WithRSAEncryption 51:96:b5:f7:10:d6:aa:3d:9b:74:14:5d:80:14:56:ad:d6:ff: a2:4e:cc:ea:dd:5d:c9:86:0d:98:f7:43:28:1b:e6:c3:e3:cf: 80:33:c6:10:77:95:d3:51:15:f1:2e:c5:ef:ce:08:46:cc:3b: d7:b0:2c:0c:7d:3f:af:cc:22:35:78:d3:b4:d5:51:17:26:b4: 16:f3:96:ad:d5:f2:7f:27:a5:0a:6f:84:23:ec:84:9f:43:09: 02:33:08:bc:fd:9e:4f:41:6a:2a:8b:d0:11:1c:4b:da:b4:9f: 97:f3:42:9e:dd:95:03:df:1c:8e:d7:37:9b:d1:6a:b5:30:f0: 39:d1:6d:3a:bd:50:a2:4c:df:66:3c:0e:b5:2b:66:7f:cc:95: 32:92:ad:86:a4:26:f1:47:5c:64:04:2c:40:33:00:98:ec:ac: 7e:65:52:e9:66:01:a8:f2:26:72:21:c8:8d:bc:55:ad:bf:6a: 69:b3:18:15:25:a1:93:c0:0b:d8:29:d5:96:e9:6d:bb:a0:78: ec:89:71:45:66:6a:dc:4c:86:9e:70:e3:0a:4d:16:0b:4c:a2: ef:58:da:00:46:18:13:a4:54:c5:ec:92:44:af:56:64:08:50: f4:97:c5:b5:4e:d8:30:25:f0:23:81:e9:31:d7:de:f5:46:07: 5e:ff:84:6f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVqAafANXTl1fPRSIBL23UfBGnAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yMzExMjAxMTU1MDFaFw0yNDExMTgxMjAwMDFaMDMxMTAvBgNV BAMTKEQyQjE3RUY0M0FEQzZEOUFGRjBGQTgzNzhBMzQxNjVFNUVENEMxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJdZ4z2iXup0F5R2dXuv/6Fus o7TfhzPP05XZZNR7c5LDfIzZrvVHJS1bFFlcGkYaCUX+HoBrcK4o+fe+Mm42/HB2 bkWyzlbxrIWoLT7SKZbyTwlfLYVKJgzGCxhB4I3WfD9pLQtCP7Hs0G7hq9Sq4f8y KOZ5jDmaTXBfay/uJ2w2HQf6D+BYddpgoDDv8fNAjpYF++jyhE2MbAsPf0znW7wM vZ2z+hd7ge9TfQxiCF6RcNpuuvAVsQ51PcPJ1Yi4HMrGY3Yq3wGsTPEqj4mxquy7 tf5kzHpyHC9iojGp9BMQ7X+56a7BJHJeJlyXnQxpyZrWKpaKOefzPh60yNWdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU0rF+9DrcbZr/D6g3ijQWXl7UwUYwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI50jANBgkqhkiG 9w0BAQsFAAOCAQEAUZa19xDWqj2bdBRdgBRWrdb/ok7M6t1dyYYNmPdDKBvmw+PP gDPGEHeV01EV8S7F784IRsw717AsDH0/r8wiNXjTtNVRFya0FvOWrdXyfyelCm+E I+yEn0MJAjMIvP2eT0FqKovQERxL2rSfl/NCnt2VA98cjtc3m9FqtTDwOdFtOr1Q okzfZjwOtStmf8yVMpKthqQm8UdcZAQsQDMAmOysfmVS6WYBqPImciHIjbxVrb9q abMYFSWhk8AL2CnVlultu6B47IlxRWZq3EyGnnDjCk0WC0yi71jaAEYYE6RUxeyS RK9WZAhQ9JfFtU7YMCXwI4HpMdfe9UYHXv+Ebw== -----END CERTIFICATE-----Generated at Sat Jun 22 13:19:02 2024 by rpki-client on console-fra.rpki-client.org