$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232322e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: pskMfYPfJQyJpqkNm3oh9E3JvBHhwECedewtWAR2iFU= Subject key identifier: 88:59:66:E0:60:61:90:5A:82:74:9C:11:91:39:13:43:F5:CF:CB:7D Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 72A7DF9446FEA4D0A86335948DEFB6F2DDBE827E Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232322e302f32342d3234203d3e203338313432.roa Signing time: Mon 21 Oct 2024 13:00:02 +0000 ROA not before: Mon 21 Oct 2024 12:55:02 +0000 ROA not after: Mon 20 Oct 2025 13:00:02 +0000 asID: 38142 IP address blocks: 210.57.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a7:df:94:46:fe:a4:d0:a8:63:35:94:8d:ef:b6:f2:dd:be:82:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Oct 21 12:55:02 2024 GMT Not After : Oct 20 13:00:02 2025 GMT Subject: CN=885966E06061905A82749C1191391343F5CFCB7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cf:3d:52:f6:09:6c:25:56:b0:97:1a:07:bd: d3:d7:d7:5f:cb:d3:5a:0e:70:46:98:ef:6b:cd:45: b3:4c:8b:97:ed:c1:a1:66:a9:0c:d2:0a:3b:00:1c: bc:76:34:23:18:a6:df:ac:91:d9:cf:73:f9:98:4e: 2b:2d:ad:07:83:d7:76:3d:c6:75:e7:29:be:ef:75: 7c:f3:e6:07:17:cb:0a:77:8e:40:e1:db:ee:26:42: 2c:4b:ef:7c:b0:df:8f:cd:37:70:1e:f0:3f:ca:06: 62:3c:e4:ba:46:e9:a1:1f:20:50:99:70:d0:5d:40: dc:50:fa:c9:0f:fe:b0:01:f4:fb:f2:89:e5:4b:e1: 46:d4:40:1c:b3:5d:a1:c4:ef:12:68:1f:4c:93:49: ee:61:22:3f:6f:d4:98:a4:97:ed:63:1c:67:14:a3: 76:7a:d5:aa:3b:1d:9a:fb:25:ad:83:b9:f2:59:87: ac:8e:1c:e1:95:d7:fd:11:be:79:78:74:bc:af:df: e6:0e:88:cf:01:14:b7:46:1b:7b:06:79:d0:c5:39: ea:66:10:60:15:fd:2b:4d:7b:69:9c:8a:3d:0b:79: ea:f9:da:a3:d1:ca:16:5c:3e:df:39:e7:3d:9f:3d: 81:5f:7d:d1:ef:47:28:dc:30:ac:bf:ab:c3:c7:09: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:59:66:E0:60:61:90:5A:82:74:9C:11:91:39:13:43:F5:CF:CB:7D X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232322e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.222.0/24 Signature Algorithm: sha256WithRSAEncryption 93:31:8a:fa:2c:cf:be:df:8f:b2:f3:f4:f6:31:44:fa:99:71: 5d:f4:2e:6d:55:ce:e7:9b:cd:a8:6c:d0:7e:2a:a3:df:ae:fb: 4e:dd:5d:38:91:37:ed:18:8f:b6:25:77:b2:7e:73:7c:73:5f: 88:39:75:c2:bf:c8:b2:42:67:2c:d6:ef:a7:a2:70:4c:a6:b0: db:f4:7f:09:be:cf:f3:fd:dc:c0:bb:ba:ce:56:9b:ae:cb:47: 4c:0d:f5:31:4f:ae:f0:33:b2:b0:a2:4e:6c:92:30:21:50:56: a2:40:0d:49:3d:c9:39:31:38:5d:64:05:e4:a9:14:13:e1:d1: 51:bf:06:87:ac:37:52:7f:25:07:bd:d7:82:f0:80:7d:50:d5: 62:f7:f7:18:7f:a8:9b:e8:ad:95:2b:36:7f:07:ee:86:29:35: ce:43:ef:d9:30:13:71:79:76:0f:da:a0:d9:75:d6:19:3f:cb: ff:da:3f:3f:63:75:91:8a:1e:11:03:18:5b:f4:e8:2e:b6:cb: 23:f7:60:04:fb:d8:66:ce:12:3b:cd:47:15:a0:ef:e6:99:20: fc:f0:9d:ea:af:6e:86:8a:84:c7:f0:8e:14:56:ce:ce:18:f0: a3:f8:69:ee:db:24:29:ca:c8:a1:29:3d:40:e6:ee:1f:af:b0: 59:ec:4f:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcqfflEb+pNCoYzWUje+28t2+gn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNDEwMjExMjU1MDJaFw0yNTEwMjAxMzAwMDJaMDMxMTAvBgNV BAMTKDg4NTk2NkUwNjA2MTkwNUE4Mjc0OUMxMTkxMzkxMzQzRjVDRkNCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxzz1S9glsJVawlxoHvdPX11/L 01oOcEaY72vNRbNMi5ftwaFmqQzSCjsAHLx2NCMYpt+skdnPc/mYTistrQeD13Y9 xnXnKb7vdXzz5gcXywp3jkDh2+4mQixL73yw34/NN3Ae8D/KBmI85LpG6aEfIFCZ cNBdQNxQ+skP/rAB9PvyieVL4UbUQByzXaHE7xJoH0yTSe5hIj9v1Jikl+1jHGcU o3Z61ao7HZr7Ja2DufJZh6yOHOGV1/0Rvnl4dLyv3+YOiM8BFLdGG3sGedDFOepm EGAV/StNe2mcij0Leer52qPRyhZcPt855z2fPYFffdHvRyjcMKy/q8PHCUmtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUiFlm4GBhkFqCdJwRkTkTQ/XPy30wHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI53jANBgkqhkiG 9w0BAQsFAAOCAQEAkzGK+izPvt+PsvP09jFE+plxXfQubVXO55vNqGzQfiqj3677 Tt1dOJE37RiPtiV3sn5zfHNfiDl1wr/IskJnLNbvp6JwTKaw2/R/Cb7P8/3cwLu6 zlabrstHTA31MU+u8DOysKJObJIwIVBWokANST3JOTE4XWQF5KkUE+HRUb8Gh6w3 Un8lB73XgvCAfVDVYvf3GH+om+itlSs2fwfuhik1zkPv2TATcXl2D9qg2XXWGT/L /9o/P2N1kYoeEQMYW/ToLrbLI/dgBPvYZs4SO81HFaDv5pkg/PCd6q9uhoqEx/CO FFbOzhjwo/hp7tskKcrIoSk9QObuH6+wWexPqg== -----END CERTIFICATE-----Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org