$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232322e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: TLaO6KI7SG1lpUCP/r6jMX+pB8+hhGtmV0X1fOQNxSI= Subject key identifier: F7:86:55:C6:54:2D:2C:62:16:E9:8A:61:F1:1C:0D:D0:AE:59:59:FC Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 6DDCA0D9F6A5E41ACA7088277DF726FB0D1213C7 Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232322e302f32342d3234203d3e203338313432.roa Signing time: Mon 20 Nov 2023 12:00:02 +0000 ROA not before: Mon 20 Nov 2023 11:55:02 +0000 ROA not after: Mon 18 Nov 2024 12:00:02 +0000 asID: 38142 IP address blocks: 210.57.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:dc:a0:d9:f6:a5:e4:1a:ca:70:88:27:7d:f7:26:fb:0d:12:13:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Nov 20 11:55:02 2023 GMT Not After : Nov 18 12:00:02 2024 GMT Subject: CN=F78655C6542D2C6216E98A61F11C0DD0AE5959FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:fd:80:dd:5d:a3:f1:41:15:0f:b5:5a:bb: 3f:21:1f:16:20:74:9f:67:5a:8d:28:47:c7:53:47: cf:f3:12:51:ce:8f:d9:ad:fe:aa:5e:f4:24:a2:ea: b2:b7:63:34:ce:ac:e8:74:6b:2a:ac:f2:47:18:be: e8:5a:44:ab:63:90:a5:e2:b7:69:17:91:ac:9b:0f: e8:b7:13:99:97:c1:a1:4b:e1:34:c7:67:04:97:3b: 93:57:e9:5b:9a:0b:02:aa:c2:a5:5b:80:a8:9a:87: 7c:a9:d4:7f:94:e1:f4:9d:2f:e6:29:ba:3a:0b:57: 9e:5d:56:7c:ed:7b:dc:18:26:56:ff:08:70:0e:99: bd:1c:c6:4e:2c:c0:cd:09:a0:be:86:00:97:9f:35: d3:7c:1d:29:26:10:e8:08:62:f4:7a:6d:04:e6:79: 13:31:ad:c5:22:7d:c5:07:30:f6:e2:21:22:3f:3f: ae:79:f8:be:0c:e1:f4:4f:9f:96:ef:a6:6b:0c:52: fb:0d:85:35:ef:65:fb:05:46:e7:6e:d8:50:cd:0b: 2b:c7:e2:17:c0:b1:9d:51:25:0c:03:ce:60:50:e3: de:80:ee:30:64:7e:3d:50:19:f2:a2:0c:02:27:29: 27:74:9b:2b:e9:69:25:18:18:5a:09:c4:3a:50:11: 2c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:86:55:C6:54:2D:2C:62:16:E9:8A:61:F1:1C:0D:D0:AE:59:59:FC X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232322e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.222.0/24 Signature Algorithm: sha256WithRSAEncryption 85:b8:ed:1c:1d:14:0b:67:41:10:e9:c1:95:72:2d:8c:b0:bf: 20:fe:cf:af:e0:6c:1f:bb:16:bb:8b:23:9b:88:9b:e0:36:cb: 4c:f5:1b:dd:98:95:e2:9e:03:99:f1:4d:3f:cd:c2:cd:bd:26: 2b:04:59:0f:e9:a8:7e:80:b7:95:f2:6e:bd:a3:c8:25:2e:75: d3:e0:f7:40:4a:3e:2b:fa:5b:54:c3:91:ec:17:6a:83:75:7c: f3:8a:80:52:ee:39:cc:49:89:46:4d:00:04:a8:63:0b:fa:ee: 97:f7:39:7c:ab:af:03:c2:11:92:0f:62:de:ee:80:76:ec:a5: 49:f6:c3:78:04:04:f6:07:9c:0b:85:e2:4d:6a:ac:3b:b2:8a: f9:b2:28:1d:ce:97:77:53:4b:67:c5:2d:d0:26:75:c6:f5:6c: 74:59:f2:67:59:ac:49:65:95:59:6b:c6:87:90:77:c5:6a:1f: c2:53:8c:10:4e:15:19:4f:21:be:58:e1:b4:ce:20:b4:ce:60: 3f:79:ce:8e:95:48:c7:33:75:fc:d7:f2:ce:38:28:d9:82:bd: 65:53:b1:cf:0c:41:3e:32:e3:18:4b:e7:34:61:cd:01:24:82: f8:09:d1:0c:3b:e1:f0:0e:8a:17:43:41:dd:57:95:71:4f:72: 39:59:b9:e8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbdyg2fal5BrKcIgnffcm+w0SE8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yMzExMjAxMTU1MDJaFw0yNDExMTgxMjAwMDJaMDMxMTAvBgNV BAMTKEY3ODY1NUM2NTQyRDJDNjIxNkU5OEE2MUYxMUMwREQwQUU1OTU5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwi/2A3V2j8UEVD7Vauz8hHxYg dJ9nWo0oR8dTR8/zElHOj9mt/qpe9CSi6rK3YzTOrOh0ayqs8kcYvuhaRKtjkKXi t2kXkaybD+i3E5mXwaFL4TTHZwSXO5NX6VuaCwKqwqVbgKiah3yp1H+U4fSdL+Yp ujoLV55dVnzte9wYJlb/CHAOmb0cxk4swM0JoL6GAJefNdN8HSkmEOgIYvR6bQTm eRMxrcUifcUHMPbiISI/P655+L4M4fRPn5bvpmsMUvsNhTXvZfsFRudu2FDNCyvH 4hfAsZ1RJQwDzmBQ496A7jBkfj1QGfKiDAInKSd0myvpaSUYGFoJxDpQESyHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU94ZVxlQtLGIW6Yph8RwN0K5ZWfwwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI53jANBgkqhkiG 9w0BAQsFAAOCAQEAhbjtHB0UC2dBEOnBlXItjLC/IP7Pr+BsH7sWu4sjm4ib4DbL TPUb3ZiV4p4DmfFNP83Czb0mKwRZD+mofoC3lfJuvaPIJS510+D3QEo+K/pbVMOR 7Bdqg3V884qAUu45zEmJRk0ABKhjC/rul/c5fKuvA8IRkg9i3u6AduylSfbDeAQE 9gecC4XiTWqsO7KK+bIoHc6Xd1NLZ8Ut0CZ1xvVsdFnyZ1msSWWVWWvGh5B3xWof wlOMEE4VGU8hvljhtM4gtM5gP3nOjpVIxzN1/Nfyzjgo2YK9ZVOxzwxBPjLjGEvn NGHNASSC+AnRDDvh8A6KF0NB3VeVcU9yOVm56A== -----END CERTIFICATE-----Generated at Sun Jun 2 05:58:48 2024 by rpki-client on console-ams.rpki-client.org