$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230322e302f32342d3234203d3e203138313533.roa File: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (raw, json) Hash identifier: qoFoSbEjvotob245ERNaqYAqcBr27SjHGBEF7/cp8Ss= Subject key identifier: FC:F3:2F:06:BF:15:5A:B9:8C:47:B8:5B:A5:C6:B8:0C:FF:10:E0:BB Certificate issuer: /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE Certificate serial: 376CB4EA3CB1AD10AADCA0202A482211DFA432AE Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230322e302f32342d3234203d3e203138313533.roa Signing time: Mon 01 Jul 2024 01:03:54 +0000 ROA not before: Mon 01 Jul 2024 00:58:54 +0000 ROA not after: Mon 30 Jun 2025 01:03:54 +0000 asID: 18153 IP address blocks: 202.72.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6c:b4:ea:3c:b1:ad:10:aa:dc:a0:20:2a:48:22:11:df:a4:32:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE Validity Not Before: Jul 1 00:58:54 2024 GMT Not After : Jun 30 01:03:54 2025 GMT Subject: CN=FCF32F06BF155AB98C47B85BA5C6B80CFF10E0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2b:b5:d9:6c:f7:6a:39:81:db:15:96:76:d5: 7c:25:c4:1e:d3:4c:8a:a2:04:72:67:f7:8c:3f:70: fb:6c:e1:c3:96:0d:03:6e:76:34:7d:68:72:1c:7a: 57:5a:fd:21:36:3e:c5:e1:31:8f:59:06:9e:fa:6b: 85:cf:43:bc:75:f7:65:79:28:dc:06:e7:a5:75:cc: 86:04:6e:bb:8d:bc:84:7b:50:9f:fc:34:4a:d4:0d: 41:84:72:54:31:c2:39:53:e2:cc:99:7b:c6:9c:36: 30:5c:20:62:b0:0e:d6:5b:98:61:4a:77:4d:b8:f6: 2e:e7:32:f5:56:9c:3f:ec:15:fb:c1:ad:97:dc:de: fb:ce:0b:5e:1b:71:0f:08:fc:ec:77:9d:b6:79:24: bf:ec:88:c0:53:5b:d8:ce:a4:c1:f7:1d:16:11:91: 52:53:57:eb:e7:9d:f9:b1:63:50:b9:63:f8:59:13: b7:4f:4c:5f:7c:86:9d:3e:c7:cb:1a:03:1c:b3:62: 71:4d:27:9f:b9:ea:1c:10:7a:ee:ee:74:f3:f8:d8: ac:7e:d3:2b:d2:06:5a:6c:88:06:05:83:6e:3a:2f: 40:08:ca:88:6e:2b:03:56:b2:aa:50:0e:52:cd:04: 6f:1a:81:54:1b:d1:c8:5d:92:88:b7:1c:8b:2e:2f: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F3:2F:06:BF:15:5A:B9:8C:47:B8:5B:A5:C6:B8:0C:FF:10:E0:BB X509v3 Authority Key Identifier: keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230322e302f32342d3234203d3e203138313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.72.202.0/24 Signature Algorithm: sha256WithRSAEncryption 41:c4:ec:00:fc:01:e7:35:90:1f:64:52:b7:62:e9:a5:df:96: c2:31:a8:5b:1d:d9:62:52:97:90:7b:f8:ac:1e:79:72:6d:28: 35:ee:03:7b:71:55:0c:35:6d:4c:5d:52:c7:a4:81:a1:8f:69: 82:30:e4:48:ee:33:e1:29:04:54:02:31:0a:b0:f1:db:21:4e: ab:ef:7d:9a:c2:92:1b:ad:b6:29:f6:01:6f:0d:91:0e:05:96: 98:2b:19:fb:c0:0f:98:a0:df:22:56:f0:ca:75:d3:7a:56:f5: d1:d2:4a:09:1e:f7:05:26:39:fa:f1:90:f3:63:40:ad:a1:2e: 51:29:83:45:05:72:42:ba:12:27:33:a1:5d:94:8c:4c:fa:b3: 43:51:d1:2a:de:7c:00:6b:7d:27:ba:98:78:7f:1a:8d:7c:b8: eb:88:d0:bc:0c:89:33:c8:19:72:cb:82:22:ff:37:b7:05:04: 27:fe:f8:9a:f4:45:0b:bb:11:21:0a:c7:aa:35:b6:36:16:b1: 84:5c:27:d7:70:f2:04:19:c7:c8:30:73:4e:32:4f:bc:74:80: 88:6f:63:c7:bd:b2:a5:ce:2d:37:ab:06:ec:96:fe:17:a3:cd: 64:c9:d2:12:3e:fa:89:32:43:49:14:ad:7a:13:1c:9d:19:5a: 95:4a:ac:83 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUN2y06jyxrRCq3KAgKkgiEd+kMq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4 Rjc4ODFFRTAeFw0yNDA3MDEwMDU4NTRaFw0yNTA2MzAwMTAzNTRaMDMxMTAvBgNV BAMTKEZDRjMyRjA2QkYxNTVBQjk4QzQ3Qjg1QkE1QzZCODBDRkYxMEUwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuK7XZbPdqOYHbFZZ21XwlxB7T TIqiBHJn94w/cPts4cOWDQNudjR9aHIcelda/SE2PsXhMY9ZBp76a4XPQ7x192V5 KNwG56V1zIYEbruNvIR7UJ/8NErUDUGEclQxwjlT4syZe8acNjBcIGKwDtZbmGFK d0249i7nMvVWnD/sFfvBrZfc3vvOC14bcQ8I/Ox3nbZ5JL/siMBTW9jOpMH3HRYR kVJTV+vnnfmxY1C5Y/hZE7dPTF98hp0+x8saAxyzYnFNJ5+56hwQeu7udPP42Kx+ 0yvSBlpsiAYFg246L0AIyohuKwNWsqpQDlLNBG8agVQb0chdkoi3HIsuL1DFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/PMvBr8VWrmMR7hbpca4DP8Q4LswHwYDVR0j BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0 MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4 ODFFRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04 NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzIzMDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMxMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIyjANBgkqhkiG 9w0BAQsFAAOCAQEAQcTsAPwB5zWQH2RSt2Lppd+WwjGoWx3ZYlKXkHv4rB55cm0o Ne4De3FVDDVtTF1Sx6SBoY9pgjDkSO4z4SkEVAIxCrDx2yFOq+99msKSG622KfYB bw2RDgWWmCsZ+8APmKDfIlbwynXTelb10dJKCR73BSY5+vGQ82NAraEuUSmDRQVy QroSJzOhXZSMTPqzQ1HRKt58AGt9J7qYeH8ajXy464jQvAyJM8gZcsuCIv83twUE J/74mvRFC7sRIQrHqjW2NhaxhFwn13DyBBnHyDBzTjJPvHSAiG9jx72ypc4tN6sG 7Jb+F6PNZMnSEj76iTJDSRStehMcnRlalUqsgw== -----END CERTIFICATE-----Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org