$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37342e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e37342e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: k1WzNJfqVu50cDIqA1064SRwAcoOV/sKzbNS9+Ys41Q= Subject key identifier: BB:FA:FB:3E:89:B8:04:2E:5B:88:0E:EE:2F:35:1F:3D:23:D4:37:2E Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 6F4AAE7B7E243D32A4AF79EFB2F3045AFC1A5A77 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37342e302f32342d3234203d3e203233363935.roa Signing time: Tue 17 Oct 2023 15:51:48 +0000 ROA not before: Tue 17 Oct 2023 15:46:48 +0000 ROA not after: Tue 15 Oct 2024 15:51:48 +0000 asID: 23695 IP address blocks: 202.173.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4a:ae:7b:7e:24:3d:32:a4:af:79:ef:b2:f3:04:5a:fc:1a:5a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Oct 17 15:46:48 2023 GMT Not After : Oct 15 15:51:48 2024 GMT Subject: CN=BBFAFB3E89B8042E5B880EEE2F351F3D23D4372E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:1e:ec:05:7c:92:5b:da:48:45:a5:65:48: f4:f1:e8:05:eb:be:b7:11:04:d7:0c:52:24:5e:35: b5:d7:80:af:f6:4b:95:c6:bd:d1:c5:3f:e8:9e:b8: fa:8f:82:40:83:e4:03:ef:00:26:2f:9e:85:a4:2a: 2e:22:b1:2c:66:f6:eb:70:7a:68:fb:1b:aa:aa:3d: 01:de:20:ad:d7:55:5c:5f:cf:80:b4:1d:73:06:c1: 08:ee:f4:f7:2d:f5:8a:69:1e:c8:54:27:40:df:e5: 8c:f5:42:57:38:9c:ad:6c:59:8f:1d:aa:28:4f:04: f6:b9:7c:43:6e:1c:80:cf:26:67:12:a3:05:fc:e9: 79:d1:18:80:a5:1c:4c:61:9c:76:e5:9c:39:57:cc: 12:89:18:8a:89:4a:a6:d6:a8:a5:e6:9a:2f:91:54: 3d:7c:bf:4f:fb:de:3c:dc:c4:21:a2:9b:ee:6a:89: 55:03:fd:ea:e7:ec:ec:bd:a3:ad:c6:20:87:77:ae: 0d:6f:25:e0:63:17:dd:a8:c8:7e:f4:83:b7:f3:6f: 54:d9:ca:30:3f:3a:b9:70:28:6d:1c:df:82:22:3b: 67:ce:c3:c9:a6:ae:a7:dd:aa:26:52:7d:14:d8:a4: c0:85:ea:16:6b:26:a5:6d:56:c1:de:f2:f8:70:75: 69:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FA:FB:3E:89:B8:04:2E:5B:88:0E:EE:2F:35:1F:3D:23:D4:37:2E X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37342e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.74.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:24:fc:db:1b:0d:a1:02:6a:cf:06:db:79:c8:cf:f4:98:99: 45:27:b2:9a:b3:44:d7:4f:e3:e9:24:dc:a9:35:c5:d9:01:2e: c4:e1:e2:a8:50:73:9f:8f:e3:c4:38:18:c1:e7:b5:8e:3c:87: ed:34:5c:87:38:4b:57:a1:6f:c6:e7:94:a1:b2:de:54:e4:94: 78:e1:6a:0f:50:f7:fc:0d:6c:b3:3d:d2:81:c2:9b:06:a8:af: 18:8e:f7:36:9d:63:f0:3a:84:7d:9f:45:f1:b0:44:11:e4:d6: 04:bc:1b:95:00:cb:2a:60:7f:bd:6c:cc:5c:39:44:46:7a:95: 7b:47:a8:cb:a5:7b:c6:15:39:72:36:2a:6c:44:aa:e4:f9:85: cf:f1:ac:3b:7d:79:a4:49:2d:a8:86:10:03:26:ad:3c:85:77: 1b:46:ad:76:27:e4:6c:2d:99:43:18:d8:7b:f2:7e:d6:ef:98: b7:14:1d:cf:f6:99:8c:87:c7:fe:b6:4c:5f:d4:2f:dc:c5:2f: c2:67:5c:3c:bf:91:15:60:dd:dc:1a:22:1e:65:0e:80:d7:88: cb:3f:04:91:75:8c:52:a0:cf:f2:5b:43:3e:42:b7:58:6d:b1: 3f:1c:2d:18:7c:01:6a:7d:7a:f4:2c:b5:7f:d3:09:bf:48:14: 87:3e:42:74 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUb0que34kPTKkr3nvsvMEWvwaWncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yMzEwMTcxNTQ2NDhaFw0yNDEwMTUxNTUxNDhaMDMxMTAvBgNV BAMTKEJCRkFGQjNFODlCODA0MkU1Qjg4MEVFRTJGMzUxRjNEMjNENDM3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8R7sBXySW9pIRaVlSPTx6AXr vrcRBNcMUiReNbXXgK/2S5XGvdHFP+ieuPqPgkCD5APvACYvnoWkKi4isSxm9utw emj7G6qqPQHeIK3XVVxfz4C0HXMGwQju9Pct9YppHshUJ0Df5Yz1Qlc4nK1sWY8d qihPBPa5fENuHIDPJmcSowX86XnRGIClHExhnHblnDlXzBKJGIqJSqbWqKXmmi+R VD18v0/73jzcxCGim+5qiVUD/ern7Oy9o63GIId3rg1vJeBjF92oyH70g7fzb1TZ yjA/OrlwKG0c34IiO2fOw8mmrqfdqiZSfRTYpMCF6hZrJqVtVsHe8vhwdWnPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUu/r7Pom4BC5biA7uLzUfPSPUNy4wHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtSjANBgkqhkiG 9w0BAQsFAAOCAQEAbCT82xsNoQJqzwbbecjP9JiZRSeymrNE10/j6STcqTXF2QEu xOHiqFBzn4/jxDgYwee1jjyH7TRchzhLV6FvxueUobLeVOSUeOFqD1D3/A1ssz3S gcKbBqivGI73Np1j8DqEfZ9F8bBEEeTWBLwblQDLKmB/vWzMXDlERnqVe0eoy6V7 xhU5cjYqbESq5PmFz/GsO315pEktqIYQAyatPIV3G0atdifkbC2ZQxjYe/J+1u+Y txQdz/aZjIfH/rZMX9Qv3MUvwmdcPL+RFWDd3BoiHmUOgNeIyz8EkXWMUqDP8ltD PkK3WG2xPxwtGHwBan169Cy1f9MJv0gUhz5CdA== -----END CERTIFICATE-----Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org