$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa File: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (raw, json) Hash identifier: I1MqTlW3Nbk576r2Yxvip0ZNvGZvD6MB25x1BaXP3Z4= Subject key identifier: 26:5F:E3:21:F2:D2:9F:04:F2:2B:F7:4D:18:F1:2E:A3:7F:07:CA:95 Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 387114F93FE716213706A0225CE45F8FE6073236 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa Signing time: Mon 01 Jul 2024 01:04:48 +0000 ROA not before: Mon 01 Jul 2024 00:59:48 +0000 ROA not after: Mon 30 Jun 2025 01:04:48 +0000 asID: 24202 IP address blocks: 202.87.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:71:14:f9:3f:e7:16:21:37:06:a0:22:5c:e4:5f:8f:e6:07:32:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Jul 1 00:59:48 2024 GMT Not After : Jun 30 01:04:48 2025 GMT Subject: CN=265FE321F2D29F04F22BF74D18F12EA37F07CA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:6a:bf:5c:49:ce:cb:d2:38:a5:10:61:a9: e5:d6:2d:06:f2:2c:21:df:b0:f0:bb:96:99:6d:1e: 6a:55:ce:1f:26:25:71:10:b8:fc:28:65:89:e5:4a: e9:d1:4d:b1:4f:96:21:e9:1d:4d:1e:cc:80:be:5f: db:95:fc:be:b9:99:9a:a6:c0:df:52:09:6a:88:8b: 90:b6:95:19:b2:19:74:df:03:7c:11:7a:a7:8c:e3: 3e:0f:cc:38:57:4f:ad:2f:bf:46:6a:15:4f:f2:9a: a8:2e:e0:0b:26:ba:51:2f:df:08:f2:8f:23:a5:9c: c0:88:ea:e2:b1:c9:10:c6:80:83:42:05:e8:99:f6: 86:f9:5d:22:6f:67:e6:b3:5b:9d:f5:a1:93:ff:2e: cb:37:e6:03:9e:58:0f:56:e4:b0:76:d9:78:f7:f2: 17:0c:5f:1b:38:b6:f4:a4:12:30:a4:9e:d4:99:3c: de:c2:e8:bf:a3:32:2e:45:74:f7:07:08:66:2c:86: aa:bc:f8:0d:5d:d1:bf:91:78:e7:ee:4b:2a:60:04: fe:e7:aa:a3:66:d3:15:94:f5:7a:0b:bc:0f:c5:52: b1:29:2a:e3:b3:ea:1b:ba:ed:a1:a8:3e:53:c3:af: 7c:4a:94:5c:be:d6:1b:8a:95:68:07:55:ab:f5:7c: 58:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5F:E3:21:F2:D2:9F:04:F2:2B:F7:4D:18:F1:2E:A3:7F:07:CA:95 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.240.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:b6:fc:e2:d8:b5:27:95:be:50:d0:c5:d7:a6:b9:1c:32:d8: 98:36:37:5f:63:9d:c2:d6:b1:f7:16:7d:77:ff:26:70:78:d7: 71:c1:89:3e:98:68:cb:22:95:e0:3c:cf:6d:53:2f:5c:7c:6a: 8c:0a:bf:6e:3d:f8:8b:6e:3c:22:3e:88:c0:11:86:05:c9:63: 3a:79:42:67:89:be:ec:6d:c0:c9:ff:1b:a9:5b:45:bd:42:a4: e9:db:d6:ea:11:c5:00:af:d8:a4:a1:52:f7:f0:ec:e7:18:8b: dc:80:b7:a7:75:18:96:1d:4a:a7:a6:11:4b:8f:54:62:0c:67: 94:b4:da:bc:78:e9:a5:54:be:44:7e:1f:72:4a:05:5e:5f:6a: 13:f3:2f:08:7d:f7:78:52:0d:98:d0:f9:61:fc:20:73:7e:ec: 03:9d:5d:96:08:42:b6:ac:fd:d6:1e:76:f3:2c:64:f6:6d:35: c2:15:c4:d9:39:d5:89:01:ff:3b:7e:31:f2:ea:ec:24:8b:2c: 15:d7:65:5e:9a:bd:a8:25:14:28:b5:4f:a7:27:f8:5e:a7:49: 8f:1c:c7:18:0b:f3:77:97:09:72:a6:c9:97:21:1b:73:29:57: 42:8c:1c:bd:22:d5:eb:1b:77:69:30:08:71:32:39:52:1a:0a: 48:32:e0:6c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOHEU+T/nFiE3BqAiXORfj+YHMjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNDA3MDEwMDU5NDhaFw0yNTA2MzAwMTA0NDhaMDMxMTAvBgNV BAMTKDI2NUZFMzIxRjJEMjlGMDRGMjJCRjc0RDE4RjEyRUEzN0YwN0NBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2mq/XEnOy9I4pRBhqeXWLQby LCHfsPC7lpltHmpVzh8mJXEQuPwoZYnlSunRTbFPliHpHU0ezIC+X9uV/L65mZqm wN9SCWqIi5C2lRmyGXTfA3wReqeM4z4PzDhXT60vv0ZqFU/ymqgu4AsmulEv3wjy jyOlnMCI6uKxyRDGgINCBeiZ9ob5XSJvZ+azW531oZP/Lss35gOeWA9W5LB22Xj3 8hcMXxs4tvSkEjCkntSZPN7C6L+jMi5FdPcHCGYshqq8+A1d0b+ReOfuSypgBP7n qqNm0xWU9XoLvA/FUrEpKuOz6hu67aGoPlPDr3xKlFy+1huKlWgHVav1fFjLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJl/jIfLSnwTyK/dNGPEuo38HypUwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZjAyYTg5LTdlZTgtNGE4My04 MDA0LTIzNGQ5MTRhMGZkNC8wLzMyMzAzMjJlMzgzNzJlMzIzNDMwMmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pX8DANBgkqhkiG 9w0BAQsFAAOCAQEAjbb84ti1J5W+UNDF16a5HDLYmDY3X2Odwtax9xZ9d/8mcHjX ccGJPphoyyKV4DzPbVMvXHxqjAq/bj34i248Ij6IwBGGBcljOnlCZ4m+7G3Ayf8b qVtFvUKk6dvW6hHFAK/YpKFS9/Ds5xiL3IC3p3UYlh1Kp6YRS49UYgxnlLTavHjp pVS+RH4fckoFXl9qE/MvCH33eFINmND5Yfwgc37sA51dlghCtqz91h528yxk9m01 whXE2TnViQH/O34x8ursJIssFddlXpq9qCUUKLVPpyf4XqdJjxzHGAvzd5cJcqbJ lyEbcylXQowcvSLV6xt3aTAIcTI5UhoKSDLgbA== -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org