$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231382e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: ZdWbLgkVJGLo/kBl+Bv3IjcDL7081GhXGKzw9hOifvs= Subject key identifier: DF:C3:F0:AC:58:FE:2B:56:9F:E8:E9:65:97:B9:E3:3F:A9:1B:D2:E7 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 07D5F15B478FC56189AB447762D577D2DD48E476 Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231382e302f32342d3234203d3e203338313432.roa Signing time: Mon 20 Nov 2023 12:00:00 +0000 ROA not before: Mon 20 Nov 2023 11:55:00 +0000 ROA not after: Mon 18 Nov 2024 12:00:00 +0000 asID: 38142 IP address blocks: 210.57.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d5:f1:5b:47:8f:c5:61:89:ab:44:77:62:d5:77:d2:dd:48:e4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Nov 20 11:55:00 2023 GMT Not After : Nov 18 12:00:00 2024 GMT Subject: CN=DFC3F0AC58FE2B569FE8E96597B9E33FA91BD2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:41:cb:7d:8a:d0:7e:e3:dd:52:85:d2:46: 89:47:8d:11:06:65:9a:5a:1d:c8:ef:8c:86:88:c1: 07:33:c1:e4:c8:8c:5c:ab:96:bd:13:3f:d3:47:da: 06:5a:59:b2:cd:bc:fe:c0:0d:51:8b:29:c4:ba:5d: 2d:7e:8f:92:c9:aa:0a:fe:c8:da:b0:09:4d:1b:f5: 98:ce:c7:08:5a:b1:a3:91:de:74:79:69:6b:90:24: 1d:c7:59:e0:ea:f9:05:0c:bf:25:89:1d:c0:2d:fd: 72:fb:18:98:ae:0c:42:be:48:6a:8b:7b:8f:67:ac: 14:a3:3a:4d:58:03:ee:39:cd:e5:3d:6f:e4:5e:06: 84:0e:be:64:6b:47:f4:bd:82:1a:cd:b7:90:be:2c: c1:75:df:f8:6d:be:01:52:d0:8a:7a:a8:bf:e7:1e: c4:57:e0:f2:63:f6:51:15:dc:f9:18:50:a4:ef:c3: 3a:ef:ab:16:e2:b1:7a:8e:66:a6:17:44:f2:49:5e: 33:a5:83:87:fa:eb:8a:1e:ae:dd:16:85:d1:ba:2e: db:04:2c:89:0d:d9:e8:e8:ff:2b:aa:50:45:fd:56: 6d:bf:91:ed:16:9d:f2:10:a8:b2:ff:f6:e0:79:4a: d5:7d:fa:a7:f9:a6:9d:f1:8e:6d:e8:a3:aa:34:8d: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C3:F0:AC:58:FE:2B:56:9F:E8:E9:65:97:B9:E3:3F:A9:1B:D2:E7 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231382e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.218.0/24 Signature Algorithm: sha256WithRSAEncryption 29:1e:7d:8a:c5:63:60:a4:3c:f0:00:3c:f9:06:6e:c2:a1:56: 75:02:14:83:8b:fd:90:24:e5:7c:7c:dc:ce:e4:c7:ae:36:54: 98:42:d0:46:95:51:4a:09:0c:a3:1e:f3:3f:aa:19:27:50:d5: 58:70:dd:ed:d6:4c:0c:f2:60:05:91:af:84:8e:9a:69:fd:5e: b4:ea:70:f8:ee:71:da:a6:9f:11:91:3d:64:ee:c8:15:d6:fb: 37:b3:c0:4f:eb:ae:4c:c9:ee:ca:03:ce:60:0c:8f:82:8a:47: 24:06:d9:40:30:a6:15:49:6d:2a:21:29:8f:50:2f:af:d0:6d: 74:c8:27:10:ca:62:db:b2:d4:5c:14:03:bb:52:b8:a4:d2:d4: 2f:7f:e9:8d:a4:f8:21:c3:a6:59:1a:f3:e0:a7:0c:d3:36:b6: 6f:59:dd:61:56:8f:75:e9:8b:74:0e:c6:45:2f:de:15:7b:80: eb:14:25:d3:c8:bf:eb:03:87:0d:e6:45:7f:7d:fb:6d:eb:c4: f3:5c:52:f5:bd:b2:2e:a0:7b:77:75:9b:dd:33:23:de:6c:bb: 42:8b:f2:9f:d2:a8:9b:24:63:70:c3:4a:c2:46:0c:05:0a:06: 7a:56:81:76:0c:70:51:53:29:c5:94:b2:9e:75:30:8b:9c:a5: a8:db:a7:ec -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUB9XxW0ePxWGJq0R3YtV30t1I5HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yMzExMjAxMTU1MDBaFw0yNDExMTgxMjAwMDBaMDMxMTAvBgNV BAMTKERGQzNGMEFDNThGRTJCNTY5RkU4RTk2NTk3QjlFMzNGQTkxQkQyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNUHLfYrQfuPdUoXSRolHjREG ZZpaHcjvjIaIwQczweTIjFyrlr0TP9NH2gZaWbLNvP7ADVGLKcS6XS1+j5LJqgr+ yNqwCU0b9ZjOxwhasaOR3nR5aWuQJB3HWeDq+QUMvyWJHcAt/XL7GJiuDEK+SGqL e49nrBSjOk1YA+45zeU9b+ReBoQOvmRrR/S9ghrNt5C+LMF13/htvgFS0Ip6qL/n HsRX4PJj9lEV3PkYUKTvwzrvqxbisXqOZqYXRPJJXjOlg4f664oert0WhdG6LtsE LIkN2ejo/yuqUEX9Vm2/ke0WnfIQqLL/9uB5StV9+qf5pp3xjm3oo6o0jVQPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU38PwrFj+K1af6Olll7njP6kb0ucwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI52jANBgkqhkiG 9w0BAQsFAAOCAQEAKR59isVjYKQ88AA8+QZuwqFWdQIUg4v9kCTlfHzczuTHrjZU mELQRpVRSgkMox7zP6oZJ1DVWHDd7dZMDPJgBZGvhI6aaf1etOpw+O5x2qafEZE9 ZO7IFdb7N7PAT+uuTMnuygPOYAyPgopHJAbZQDCmFUltKiEpj1Avr9BtdMgnEMpi 27LUXBQDu1K4pNLUL3/pjaT4IcOmWRrz4KcM0za2b1ndYVaPdemLdA7GRS/eFXuA 6xQl08i/6wOHDeZFf337bevE81xS9b2yLqB7d3Wb3TMj3my7Qovyn9KomyRjcMNK wkYMBQoGelaBdgxwUVMpxZSynnUwi5ylqNun7A== -----END CERTIFICATE-----Generated at Sat Jun 22 14:21:51 2024 by rpki-client on console-ams.rpki-client.org