$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133382e302f32342d3234203d3e203538343034.roa File: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (raw, json) Hash identifier: 6aACRlZDtPDfbUv4fSt9lM6NKFQcVH4Wsg/EgnefO58= Subject key identifier: 6A:49:73:4F:B0:A5:6E:9E:E3:E7:AE:AD:B3:A8:1F:9F:96:01:94:28 Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 072F2D6D99A8A48894C2B1C7A54A2DE1BE23E3B9 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133382e302f32342d3234203d3e203538343034.roa Signing time: Wed 20 Dec 2023 11:00:01 +0000 ROA not before: Wed 20 Dec 2023 10:55:01 +0000 ROA not after: Wed 18 Dec 2024 11:00:01 +0000 asID: 58404 IP address blocks: 43.252.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2f:2d:6d:99:a8:a4:88:94:c2:b1:c7:a5:4a:2d:e1:be:23:e3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Dec 20 10:55:01 2023 GMT Not After : Dec 18 11:00:01 2024 GMT Subject: CN=6A49734FB0A56E9EE3E7AEADB3A81F9F96019428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:ba:51:03:62:b6:3b:ea:4c:c8:8d:4c:b5: 71:9f:0b:db:06:d4:38:b0:e7:18:80:21:35:17:79: 3b:22:92:ee:20:88:14:43:33:bb:61:84:b1:15:c7: 9d:cd:94:66:70:38:4a:5e:3c:4f:71:c0:79:cf:e2: 16:2b:f8:4f:a5:1b:37:de:1b:6a:89:3a:c9:3c:62: c3:37:d4:f9:cf:1a:90:0b:d1:04:d7:9a:a6:70:b3: 7c:0a:be:24:f6:77:43:ea:d2:0f:68:28:8d:f8:a1: 0e:62:ec:1c:59:fc:ed:d5:67:3c:2e:ae:ec:ec:c0: 3a:e5:37:85:64:c8:6e:69:b2:bf:41:5b:da:db:89: 4e:e1:8d:65:28:49:90:b5:77:fd:de:84:61:c7:05: 23:e0:99:8c:1c:99:ff:83:60:72:ec:31:31:6e:83: 7b:db:32:a5:5f:ec:b9:22:ad:f2:95:7c:3d:ab:99: 78:16:2f:48:1f:84:8f:a3:f8:22:bc:42:50:32:14: cc:09:3d:b4:1c:e2:99:71:48:39:18:f3:c8:41:26: 5a:85:b7:d3:dd:96:e1:53:53:4f:b8:f3:d8:5f:d6: ca:6d:2e:32:c1:e6:19:b5:0a:9c:55:0d:e3:8b:09: 1a:f9:08:5f:d7:2f:fa:3e:8f:83:7c:2e:a7:0f:e8: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:49:73:4F:B0:A5:6E:9E:E3:E7:AE:AD:B3:A8:1F:9F:96:01:94:28 X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133382e302f32342d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.138.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:b6:41:a6:c3:cf:98:45:84:2e:6f:26:c4:8a:aa:e3:9f:0f: a3:3f:51:0b:b4:8d:11:df:d7:f3:a7:b1:fe:e4:e7:5e:b3:86: 91:7e:03:2e:19:0d:ca:d8:22:cb:2a:c9:6e:89:28:a8:2f:32: 56:4d:f6:5a:30:e7:d4:34:5d:81:e2:ed:ea:07:35:6a:c4:84: d7:ab:90:a6:88:43:f0:6e:bb:54:d6:a8:eb:a3:10:9c:c0:e6: d9:d5:1a:e4:3b:96:5c:f4:dd:8c:12:57:08:b8:0d:30:11:08: b7:84:70:76:02:a8:df:86:74:2e:5b:a0:c3:cf:0a:88:1d:b9: 3e:15:c2:4d:ee:be:95:ea:3b:e4:b0:79:22:96:68:e6:4d:99: 6b:2e:62:53:4b:30:77:4e:4d:15:80:4d:bf:d3:8b:f8:96:88: 7c:ad:94:08:32:9c:f8:ec:13:77:6d:2d:f8:98:da:05:cc:e0: ea:ed:68:f2:f1:63:1b:f6:e2:0e:fe:72:be:78:68:a1:be:5b: 10:a2:e6:78:da:22:08:4a:4c:d1:73:61:34:5c:e2:9b:0c:b7: 5f:11:83:66:92:df:12:e3:29:bc:e1:86:0d:1c:db:25:51:06: 6d:fe:fc:ec:a7:78:cb:42:85:05:42:12:38:ac:8b:62:38:c2: 00:24:c1:fd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBy8tbZmopIiUwrHHpUot4b4j47kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yMzEyMjAxMDU1MDFaFw0yNDEyMTgxMTAwMDFaMDMxMTAvBgNV BAMTKDZBNDk3MzRGQjBBNTZFOUVFM0U3QUVBREIzQTgxRjlGOTYwMTk0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqELpRA2K2O+pMyI1MtXGfC9sG 1Diw5xiAITUXeTsiku4giBRDM7thhLEVx53NlGZwOEpePE9xwHnP4hYr+E+lGzfe G2qJOsk8YsM31PnPGpAL0QTXmqZws3wKviT2d0Pq0g9oKI34oQ5i7BxZ/O3VZzwu ruzswDrlN4VkyG5psr9BW9rbiU7hjWUoSZC1d/3ehGHHBSPgmYwcmf+DYHLsMTFu g3vbMqVf7LkirfKVfD2rmXgWL0gfhI+j+CK8QlAyFMwJPbQc4plxSDkY88hBJlqF t9PdluFTU0+489hf1sptLjLB5hm1CpxVDeOLCRr5CF/XL/o+j4N8LqcP6G2PAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUaklzT7Clbp7j566ts6gfn5YBlCgwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMGY5MTYzLTNlNWEtNGVmYS04 YmQ5LTRhYzRiYzYzMDQxNC8wLzM0MzMyZTMyMzUzMjJlMzEzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8ijANBgkqhkiG 9w0BAQsFAAOCAQEAf7ZBpsPPmEWELm8mxIqq458Poz9RC7SNEd/X86ex/uTnXrOG kX4DLhkNytgiyyrJbokoqC8yVk32WjDn1DRdgeLt6gc1asSE16uQpohD8G67VNao 66MQnMDm2dUa5DuWXPTdjBJXCLgNMBEIt4RwdgKo34Z0Llugw88KiB25PhXCTe6+ leo75LB5IpZo5k2Zay5iU0swd05NFYBNv9OL+JaIfK2UCDKc+OwTd20t+JjaBczg 6u1o8vFjG/biDv5yvnhoob5bEKLmeNoiCEpM0XNhNFzimwy3XxGDZpLfEuMpvOGG DRzbJVEGbf787Kd4y0KFBUISOKyLYjjCACTB/Q== -----END CERTIFICATE-----Generated at Tue Apr 30 21:57:34 2024 by rpki-client on console-ams.rpki-client.org