$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e3135312e382e302f32322d3234203d3e2039373835.roa File: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (raw, json) Hash identifier: 2eHMbsun56NqfmKlpFAG+zy53c2fesECLK8xZvpMLw8= Subject key identifier: 85:3E:E7:8F:08:69:F9:6A:F4:AB:2B:B9:C0:0D:FF:A1:3A:0A:AB:CE Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 354CDE7070784C80E096714F56466AB308515DC9 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e3135312e382e302f32322d3234203d3e2039373835.roa Signing time: Mon 01 Jul 2024 01:05:53 +0000 ROA not before: Mon 01 Jul 2024 01:00:53 +0000 ROA not after: Mon 30 Jun 2025 01:05:53 +0000 asID: 9785 IP address blocks: 202.151.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4c:de:70:70:78:4c:80:e0:96:71:4f:56:46:6a:b3:08:51:5d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Jul 1 01:00:53 2024 GMT Not After : Jun 30 01:05:53 2025 GMT Subject: CN=853EE78F0869F96AF4AB2BB9C00DFFA13A0AABCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d9:75:ca:ed:2d:dc:fd:62:88:6e:22:ff:dd: 3d:0a:fc:9a:9a:54:34:6a:4c:8b:66:83:07:10:2d: b8:4a:8a:76:64:4c:68:be:41:7b:a4:b8:05:04:50: 2c:d0:de:b1:f5:b2:6a:77:ba:f1:91:df:dc:50:f8: 96:87:a1:18:57:47:19:01:7c:7d:e1:6c:62:ca:fd: 64:a8:dc:70:ed:1b:a4:ad:dc:a0:7d:d7:c5:83:aa: f1:d3:7a:9a:c6:af:78:c6:80:93:c6:1a:0a:41:da: 8b:d5:d3:c5:c4:0c:a1:96:0a:47:db:78:9a:a6:a1: 7d:90:ed:64:5f:a6:44:90:97:a4:45:bb:09:87:9b: 69:28:90:44:5c:f2:cf:ce:fd:08:28:a6:8d:4b:21: 6a:8b:1c:2a:88:32:33:b5:a2:62:0d:44:0c:d7:d4: dc:7e:c2:c6:70:ce:04:33:6f:ef:6d:7a:78:41:d9: a8:aa:bd:ba:bb:10:16:53:84:9d:9b:cf:ac:55:27: 6c:e9:c2:c7:7f:0a:43:76:2b:b1:f5:22:e0:6a:7d: 28:08:94:31:cd:ff:e3:95:ea:ac:e4:35:6e:f7:79: 7f:5a:63:61:3d:c6:5d:a9:fe:09:c9:41:96:fd:9f: 64:48:c1:03:14:a4:34:b1:a8:bd:5f:a8:06:ba:86: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:E7:8F:08:69:F9:6A:F4:AB:2B:B9:C0:0D:FF:A1:3A:0A:AB:CE X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e3135312e382e302f32322d3234203d3e2039373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.151.8.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:86:4a:c2:ba:d6:71:6d:30:68:03:4e:d3:d9:7c:e0:99:a5: 99:e0:af:51:c6:79:da:e7:57:bf:0f:24:1f:cf:34:9a:46:fb: 14:ed:1a:7e:39:8e:6e:5c:22:e1:6a:0e:ca:4c:f9:71:9c:56: ca:10:c0:74:1d:7c:05:e5:2c:af:73:2e:23:50:63:80:d0:a5: 08:e5:96:25:23:15:fa:dc:8c:41:e3:3b:59:e6:7f:da:bb:b6: e7:77:58:c7:8f:e8:f0:b0:5c:93:ff:3a:f3:9f:64:b8:47:63: f6:44:d7:d0:e3:6d:42:34:54:5b:cc:bb:35:f8:00:2b:9e:16: 28:d2:59:ca:9f:d7:79:3c:42:4f:a2:b2:8f:95:4b:0f:b8:3d: 07:c8:9c:23:17:64:2a:60:21:d4:c3:5c:27:e2:c6:38:e0:a6: b5:73:4d:c3:9b:b2:39:b7:69:4e:c2:14:a6:a7:15:93:69:58: fe:e9:08:52:bc:01:06:04:d8:01:64:e7:a2:08:0c:08:3f:2c: ec:d5:79:cc:f2:b2:4e:d0:79:73:e4:52:4d:c8:fd:fe:1b:e8: fc:72:aa:11:62:54:03:0b:0d:21:1d:37:64:23:11:41:34:da: 5f:64:85:ec:31:e9:38:47:c9:39:ee:02:39:e2:05:5c:99:e9: 11:5b:ef:ef -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUNUzecHB4TIDglnFPVkZqswhRXckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNDA3MDEwMTAwNTNaFw0yNTA2MzAwMTA1NTNaMDMxMTAvBgNV BAMTKDg1M0VFNzhGMDg2OUY5NkFGNEFCMkJCOUMwMERGRkExM0EwQUFCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf2XXK7S3c/WKIbiL/3T0K/Jqa VDRqTItmgwcQLbhKinZkTGi+QXukuAUEUCzQ3rH1smp3uvGR39xQ+JaHoRhXRxkB fH3hbGLK/WSo3HDtG6St3KB918WDqvHTeprGr3jGgJPGGgpB2ovV08XEDKGWCkfb eJqmoX2Q7WRfpkSQl6RFuwmHm2kokERc8s/O/Qgopo1LIWqLHCqIMjO1omINRAzX 1Nx+wsZwzgQzb+9tenhB2aiqvbq7EBZThJ2bz6xVJ2zpwsd/CkN2K7H1IuBqfSgI lDHN/+OV6qzkNW73eX9aY2E9xl2p/gnJQZb9n2RIwQMUpDSxqL1fqAa6hkftAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUhT7njwhp+Wr0qyu5wA3/oToKq84wHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvMzIzMDMyMmUzMTM1MzEyZTM4MmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzkzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKlwgwDQYJKoZIhvcNAQEL BQADggEBAIyGSsK61nFtMGgDTtPZfOCZpZngr1HGedrnV78PJB/PNJpG+xTtGn45 jm5cIuFqDspM+XGcVsoQwHQdfAXlLK9zLiNQY4DQpQjlliUjFfrcjEHjO1nmf9q7 tud3WMeP6PCwXJP/OvOfZLhHY/ZE19DjbUI0VFvMuzX4ACueFijSWcqf13k8Qk+i so+VSw+4PQfInCMXZCpgIdTDXCfixjjgprVzTcObsjm3aU7CFKanFZNpWP7pCFK8 AQYE2AFk56IIDAg/LOzVeczysk7QeXPkUk3I/f4b6PxyqhFiVAMLDSEdN2QjEUE0 2l9khewx6ThHyTnuAjniBVyZ6RFb7+8= -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org