$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36342e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e36342e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: mn95e/RHwrm52jwgTOEuu2HIFPqZkwjgw7iJzDcC0Aw= Subject key identifier: 6D:D8:E2:19:29:76:5F:96:6B:ED:1B:F9:CE:24:1B:08:A2:84:29:74 Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 2B2B1D028C3433E47B96FC6E74148879254CFC16 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36342e302f32342d3234203d3e203233363935.roa Signing time: Tue 10 Sep 2024 04:00:02 +0000 ROA not before: Tue 10 Sep 2024 03:55:02 +0000 ROA not after: Tue 09 Sep 2025 04:00:02 +0000 asID: 23695 IP address blocks: 202.173.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2b:1d:02:8c:34:33:e4:7b:96:fc:6e:74:14:88:79:25:4c:fc:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Sep 10 03:55:02 2024 GMT Not After : Sep 9 04:00:02 2025 GMT Subject: CN=6DD8E21929765F966BED1BF9CE241B08A2842974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:29:1d:65:60:20:b2:ed:05:99:59:bb:b8: 6c:94:fa:9f:d6:35:75:3c:f5:aa:c0:3d:6d:1f:e4: af:22:83:cf:16:42:c5:8c:7e:ba:f0:d4:be:7e:8a: 95:36:52:fe:88:d9:9f:70:1f:3e:25:24:a3:ea:8a: 6a:c8:ea:95:98:77:a4:d0:2c:4a:d5:49:fc:d8:0e: 44:56:91:80:4e:a7:19:12:8d:ed:d9:d1:6f:9a:98: 0f:f0:c5:fe:c9:f8:3f:5d:82:5c:af:21:87:7b:a7: e8:bb:70:00:a9:a2:22:d6:84:54:6e:44:c4:55:e9: 21:ba:2c:ef:00:76:d3:64:6e:28:57:7d:9f:1e:0d: 9e:1e:38:dc:d5:8b:46:03:62:57:f0:2e:07:6f:c8: 19:b8:bd:c9:e5:2e:9d:b1:49:70:92:5f:56:53:da: 29:7d:3a:c9:d2:eb:a8:82:80:53:a8:43:e5:e9:d8: 8b:b2:3c:7e:b5:eb:32:72:46:79:d2:e3:e6:6f:a5: 31:45:93:bd:ab:a5:2b:18:ee:62:13:31:55:b3:fb: 6b:eb:e8:01:ec:04:7d:6d:4b:08:ac:05:6c:0d:ec: 8a:cd:cf:f6:c2:d5:89:08:5c:75:32:3e:e9:1d:4f: dc:0c:60:6b:44:93:74:e3:45:24:9a:59:c9:d8:06: 9b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D8:E2:19:29:76:5F:96:6B:ED:1B:F9:CE:24:1B:08:A2:84:29:74 X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36342e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.64.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:c0:ee:90:02:6e:f0:ba:c5:94:d2:c7:b6:d7:80:5e:d7:d4: dc:4c:fb:29:80:f0:67:12:dd:16:1f:f9:91:c0:ae:dc:60:c7: 85:ce:21:ab:23:1a:d8:e3:ae:a5:29:6a:02:1b:a8:55:c8:1b: 5c:f7:6c:b2:53:86:a6:e0:c5:61:2c:c8:f9:7d:18:5e:d8:4e: 18:a7:43:f3:62:49:5b:d3:08:6b:da:dc:28:99:88:8a:ae:9c: 27:34:fb:7a:0f:ca:34:7b:90:9c:9e:a5:9d:9b:1e:77:cb:1e: 62:b3:09:44:ca:fe:0f:c6:48:2a:16:b9:77:15:20:90:4c:30: 01:0a:b8:b7:9f:a7:3a:8e:1e:07:51:0d:70:40:54:2a:bc:2d: 32:3c:00:b3:83:34:a8:b1:be:12:91:3b:53:4e:6e:3b:b4:d3: 1a:83:ca:77:1b:f2:bb:66:b1:0f:cf:a7:e8:8d:fb:d1:95:3c: 79:f7:43:e1:f3:e3:a6:d6:10:bc:ab:81:5d:b1:10:e0:f1:eb: de:cd:41:48:e9:29:36:5f:b2:53:37:7c:46:bb:1a:f7:90:64: ea:fc:4a:6e:f7:1e:eb:4e:da:06:c7:fc:ca:69:1b:97:e4:ca: 83:16:f6:b0:dd:b6:4f:bb:4b:c2:da:9d:a3:2e:03:ba:d6:44: ad:80:2e:98 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKysdAow0M+R7lvxudBSIeSVM/BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNDA5MTAwMzU1MDJaFw0yNTA5MDkwNDAwMDJaMDMxMTAvBgNV BAMTKDZERDhFMjE5Mjk3NjVGOTY2QkVEMUJGOUNFMjQxQjA4QTI4NDI5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpikdZWAgsu0FmVm7uGyU+p/W NXU89arAPW0f5K8ig88WQsWMfrrw1L5+ipU2Uv6I2Z9wHz4lJKPqimrI6pWYd6TQ LErVSfzYDkRWkYBOpxkSje3Z0W+amA/wxf7J+D9dglyvIYd7p+i7cACpoiLWhFRu RMRV6SG6LO8AdtNkbihXfZ8eDZ4eONzVi0YDYlfwLgdvyBm4vcnlLp2xSXCSX1ZT 2il9OsnS66iCgFOoQ+Xp2IuyPH616zJyRnnS4+ZvpTFFk72rpSsY7mITMVWz+2vr 6AHsBH1tSwisBWwN7IrNz/bC1YkIXHUyPukdT9wMYGtEk3TjRSSaWcnYBptdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbdjiGSl2X5Zr7Rv5ziQbCKKEKXQwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtQDANBgkqhkiG 9w0BAQsFAAOCAQEATcDukAJu8LrFlNLHtteAXtfU3Ez7KYDwZxLdFh/5kcCu3GDH hc4hqyMa2OOupSlqAhuoVcgbXPdsslOGpuDFYSzI+X0YXthOGKdD82JJW9MIa9rc KJmIiq6cJzT7eg/KNHuQnJ6lnZsed8seYrMJRMr+D8ZIKha5dxUgkEwwAQq4t5+n Oo4eB1ENcEBUKrwtMjwAs4M0qLG+EpE7U05uO7TTGoPKdxvyu2axD8+n6I370ZU8 efdD4fPjptYQvKuBXbEQ4PHr3s1BSOkpNl+yUzd8Rrsa95Bk6vxKbvce607aBsf8 ymkbl+TKgxb2sN22T7tLwtqdoy4DutZErYAumA== -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org