$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e2039373835.roa File: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (raw, json) Hash identifier: A23I7fqnPXhBPRczLk5QNBh0X32BPlyjicsamPzFLkk= Subject key identifier: 8C:9B:3A:0C:0C:36:5C:0D:D5:65:F7:A0:9B:4A:38:EA:1A:E2:24:7D Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 1DBF9C5D27F4F1602AEE3D2410A0721EEBB330EC Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e2039373835.roa Signing time: Mon 01 Jul 2024 01:05:53 +0000 ROA not before: Mon 01 Jul 2024 01:00:53 +0000 ROA not after: Mon 30 Jun 2025 01:05:53 +0000 asID: 9785 IP address blocks: 202.69.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:bf:9c:5d:27:f4:f1:60:2a:ee:3d:24:10:a0:72:1e:eb:b3:30:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Jul 1 01:00:53 2024 GMT Not After : Jun 30 01:05:53 2025 GMT Subject: CN=8C9B3A0C0C365C0DD565F7A09B4A38EA1AE2247D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:90:37:ee:26:73:3a:b8:35:14:f9:7c:41: 6b:5f:bd:a5:fe:b4:61:35:d6:af:ea:c1:b3:7f:de: 59:1f:34:1b:b9:f6:c1:a5:c6:91:14:b4:59:ec:c2: d7:ca:6f:e4:38:03:b3:3d:fb:5d:ec:57:5c:c8:d3: de:9b:62:ca:29:01:92:24:2c:e5:da:28:a9:75:7d: a5:b4:f0:92:82:03:0e:10:4f:c7:e4:65:fb:f1:c2: a7:61:d9:8c:95:02:36:ef:78:20:a8:f4:13:a8:7b: dd:a4:a0:51:02:78:41:fc:b1:d5:bd:6f:de:48:6f: 9d:a0:0f:2f:f7:17:3c:c4:2f:73:7f:9c:77:52:88: 5e:d2:c7:a0:6e:cd:c0:6b:d2:87:06:31:50:c1:bc: 93:8f:d7:eb:ba:9b:8c:67:f8:83:0e:8e:05:ed:27: 3a:a1:64:42:8c:dc:ab:bb:ce:f7:a3:3a:ca:0a:94: db:61:ea:4b:a2:a4:ac:70:bc:2d:db:44:fe:17:17: 53:e4:30:c0:61:a1:a6:cd:2b:db:77:ce:02:5e:3d: f1:d5:96:f6:91:28:9d:f8:db:71:29:82:ac:ae:39: 3b:44:78:80:10:05:e1:8f:43:65:32:9b:ea:d6:a8: 56:d5:45:f3:16:1d:6a:56:ba:18:fd:0c:c1:0f:05: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9B:3A:0C:0C:36:5C:0D:D5:65:F7:A0:9B:4A:38:EA:1A:E2:24:7D X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e2039373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.69.96.0/20 Signature Algorithm: sha256WithRSAEncryption 93:52:6f:6c:b1:c6:84:19:e4:b7:b2:cb:f4:7d:11:f0:fe:ac: 87:35:00:a1:94:61:34:61:09:84:22:e3:11:1a:27:bb:f2:e0: 63:7a:b8:1a:65:9b:ad:9b:e0:07:6d:4e:2d:bc:95:b0:c9:c9: 06:80:ec:33:17:d2:5d:d9:90:f1:cb:86:85:9d:12:67:11:8d: 01:9d:37:00:79:6d:3f:50:76:69:55:3a:6c:c5:61:ae:c8:c4: e4:76:b8:73:ee:fc:ee:d0:6c:53:ee:80:90:e4:27:aa:e0:57: e7:cd:db:38:e6:db:ef:e9:1e:72:68:bc:d2:4d:17:f6:2b:42: c8:f5:fd:51:0f:07:af:b1:ee:cc:fd:05:15:da:cc:2d:81:a9: 7e:e6:fe:81:16:af:93:6d:30:a9:37:13:94:3f:c1:3a:b8:40: 0e:5d:e6:9e:b7:80:8a:8c:53:7d:93:5d:d2:95:f7:40:15:da: 2c:0b:31:7f:2e:7a:1b:ff:ea:1d:78:33:cf:a0:65:cf:2a:33: 28:cf:f3:b1:3e:00:9e:90:0a:8f:30:89:c2:55:03:3f:d0:c5: 76:6e:7c:52:a7:23:c5:b9:aa:2b:84:24:d0:c5:98:a2:a7:4f: 13:1c:f8:57:d7:2a:80:7b:88:e2:59:80:d0:7e:f7:71:07:8a: a5:a3:a8:06 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUHb+cXSf08WAq7j0kEKByHuuzMOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNDA3MDEwMTAwNTNaFw0yNTA2MzAwMTA1NTNaMDMxMTAvBgNV BAMTKDhDOUIzQTBDMEMzNjVDMERENTY1RjdBMDlCNEEzOEVBMUFFMjI0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOipA37iZzOrg1FPl8QWtfvaX+ tGE11q/qwbN/3lkfNBu59sGlxpEUtFnswtfKb+Q4A7M9+13sV1zI096bYsopAZIk LOXaKKl1faW08JKCAw4QT8fkZfvxwqdh2YyVAjbveCCo9BOoe92koFECeEH8sdW9 b95Ib52gDy/3FzzEL3N/nHdSiF7Sx6BuzcBr0ocGMVDBvJOP1+u6m4xn+IMOjgXt JzqhZEKM3Ku7zvejOsoKlNth6kuipKxwvC3bRP4XF1PkMMBhoabNK9t3zgJePfHV lvaRKJ3423EpgqyuOTtEeIAQBeGPQ2Uym+rWqFbVRfMWHWpWuhj9DMEPBWcLAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUjJs6DAw2XA3VZfegm0o46hriJH0wHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvMzIzMDMyMmUzNjM5MmUzOTM2MmUzMDJmMzIzMDJk MzIzNDIwM2QzZTIwMzkzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKRWAwDQYJKoZIhvcNAQEL BQADggEBAJNSb2yxxoQZ5Leyy/R9EfD+rIc1AKGUYTRhCYQi4xEaJ7vy4GN6uBpl m62b4AdtTi28lbDJyQaA7DMX0l3ZkPHLhoWdEmcRjQGdNwB5bT9QdmlVOmzFYa7I xOR2uHPu/O7QbFPugJDkJ6rgV+fN2zjm2+/pHnJovNJNF/YrQsj1/VEPB6+x7sz9 BRXazC2BqX7m/oEWr5NtMKk3E5Q/wTq4QA5d5p63gIqMU32TXdKV90AV2iwLMX8u ehv/6h14M8+gZc8qMyjP87E+AJ6QCo8wicJVAz/QxXZufFKnI8W5qiuEJNDFmKKn TxMc+FfXKoB7iOJZgNB+93EHiqWjqAY= -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org