$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133382e302f32342d3234203d3e203538343034.roa File: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (raw, json) Hash identifier: cfaaVl5RivAI5aEsFEpR96b1yzNXPD55gNZl0+j6JoI= Subject key identifier: CE:DF:D0:66:A8:C1:73:0E:61:9A:D1:45:24:02:33:A6:4D:9E:6E:21 Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 7CC44E1FA0F28A25E0E29A9651808B0D7A780E36 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133382e302f32342d3234203d3e203538343034.roa Signing time: Wed 20 Nov 2024 11:00:01 +0000 ROA not before: Wed 20 Nov 2024 10:55:01 +0000 ROA not after: Wed 19 Nov 2025 11:00:01 +0000 asID: 58404 IP address blocks: 43.252.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c4:4e:1f:a0:f2:8a:25:e0:e2:9a:96:51:80:8b:0d:7a:78:0e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Nov 20 10:55:01 2024 GMT Not After : Nov 19 11:00:01 2025 GMT Subject: CN=CEDFD066A8C1730E619AD145240233A64D9E6E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:06:66:8b:82:0d:af:15:5a:98:02:b2:df: 50:51:0e:84:fb:ec:e2:35:09:d3:34:ae:31:ac:24: 32:86:32:ca:14:35:2d:68:58:84:f6:f8:62:6f:f0: df:ad:49:a6:4c:65:fc:8e:e9:06:71:c8:6d:ff:56: d3:62:c1:04:fe:34:bc:c5:19:65:0c:aa:f9:7e:e6: 23:ff:03:8d:f7:02:69:5e:43:50:58:8c:6c:63:9e: 96:87:f8:58:6b:0a:8d:f7:79:b4:80:0a:92:17:fc: 56:2a:e0:63:3e:23:30:e5:d4:90:a1:21:49:2e:93: f7:c4:d5:67:8b:03:cc:ff:82:5a:86:58:ef:97:06: 41:0e:0c:ca:ea:bd:3b:bc:80:b9:16:88:f5:f9:64: 37:b6:fd:41:7d:55:e0:e6:37:6c:55:83:88:46:41: d8:f4:05:40:b0:94:33:90:78:68:1a:f2:40:38:25: 36:9a:87:cd:00:3f:59:8c:ec:21:22:fc:6d:1e:06: 94:66:1b:a0:d6:2b:d8:a1:33:5f:2b:f1:2f:3c:c6: c0:8b:9a:4d:fd:01:2b:be:6f:97:3e:f8:46:58:85: 1e:8e:e6:0c:c3:ee:ec:37:8a:f7:02:53:8f:c3:a7: 27:d7:ac:cc:e3:cb:11:0e:eb:4e:eb:7b:98:7d:33: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DF:D0:66:A8:C1:73:0E:61:9A:D1:45:24:02:33:A6:4D:9E:6E:21 X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133382e302f32342d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.138.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:14:da:3b:13:e5:c0:b1:69:74:5d:2e:78:bc:5b:c2:2b:96: df:86:f2:86:7d:fe:e7:44:56:a8:d2:9c:95:90:20:fa:c0:45: 2c:0b:11:d8:64:68:be:df:ff:00:f1:af:9e:71:62:f5:b4:5b: 16:10:d5:36:74:16:0d:8e:73:2f:44:91:8e:c8:2a:41:ea:15: 6f:06:77:a4:65:7b:0a:97:65:fa:c0:f0:a7:5f:0f:27:e1:15: cb:d8:be:1e:93:b0:99:c7:93:d8:b9:b7:a8:a2:ef:bf:f1:67: a7:89:31:6d:ea:f2:de:21:5f:ff:4a:a6:7f:e6:47:d6:46:1c: d1:36:36:fb:db:69:e1:72:f9:e1:4e:b9:85:68:d2:b9:58:c6: 58:b9:a9:0b:28:c4:d8:3e:7b:38:71:99:e7:b6:21:68:50:40: fb:c4:64:2c:18:d0:d6:cd:ba:94:57:51:ab:0a:68:c1:56:d4: ea:61:17:e1:c9:d1:37:a7:0f:0b:cc:61:dd:01:17:84:49:e4: 6f:57:81:26:f6:84:b5:68:39:88:6f:9e:2c:05:aa:9d:24:30: 8a:19:89:f3:0e:e8:ac:0d:2f:9a:63:89:26:f8:62:c8:44:7e: 46:59:6b:aa:8a:1d:cb:bf:61:90:c5:9d:45:dd:37:e5:0c:c0: ed:26:c4:05 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfMROH6DyiiXg4pqWUYCLDXp4DjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNDExMjAxMDU1MDFaFw0yNTExMTkxMTAwMDFaMDMxMTAvBgNV BAMTKENFREZEMDY2QThDMTczMEU2MTlBRDE0NTI0MDIzM0E2NEQ5RTZFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLQZmi4INrxVamAKy31BRDoT7 7OI1CdM0rjGsJDKGMsoUNS1oWIT2+GJv8N+tSaZMZfyO6QZxyG3/VtNiwQT+NLzF GWUMqvl+5iP/A433AmleQ1BYjGxjnpaH+FhrCo33ebSACpIX/FYq4GM+IzDl1JCh IUkuk/fE1WeLA8z/glqGWO+XBkEODMrqvTu8gLkWiPX5ZDe2/UF9VeDmN2xVg4hG Qdj0BUCwlDOQeGga8kA4JTaah80AP1mM7CEi/G0eBpRmG6DWK9ihM18r8S88xsCL mk39ASu+b5c++EZYhR6O5gzD7uw3ivcCU4/DpyfXrMzjyxEO607re5h9M7nXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzt/QZqjBcw5hmtFFJAIzpk2ebiEwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMGY5MTYzLTNlNWEtNGVmYS04 YmQ5LTRhYzRiYzYzMDQxNC8wLzM0MzMyZTMyMzUzMjJlMzEzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8ijANBgkqhkiG 9w0BAQsFAAOCAQEAjBTaOxPlwLFpdF0ueLxbwiuW34byhn3+50RWqNKclZAg+sBF LAsR2GRovt//APGvnnFi9bRbFhDVNnQWDY5zL0SRjsgqQeoVbwZ3pGV7Cpdl+sDw p18PJ+EVy9i+HpOwmceT2Lm3qKLvv/Fnp4kxbery3iFf/0qmf+ZH1kYc0TY2+9tp 4XL54U65hWjSuVjGWLmpCyjE2D57OHGZ57YhaFBA+8RkLBjQ1s26lFdRqwpowVbU 6mEX4cnRN6cPC8xh3QEXhEnkb1eBJvaEtWg5iG+eLAWqnSQwihmJ8w7orA0vmmOJ JvhiyER+Rllrqoody79hkMWdRd035QzA7SbEBQ== -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org