$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37362e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: P5crg0R32gyS1n02458lLpX18WRXH3sQSc1skd1DZ2k= Subject key identifier: C2:1D:00:47:28:AD:03:D4:4F:F9:4E:0E:E1:BC:AA:1F:6B:3E:7B:88 Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 25B5B008C2EA242F7094C029A456BC5177CB8DC7 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37362e302f32342d3234203d3e203233363935.roa Signing time: Tue 17 Sep 2024 16:00:02 +0000 ROA not before: Tue 17 Sep 2024 15:55:02 +0000 ROA not after: Tue 16 Sep 2025 16:00:02 +0000 asID: 23695 IP address blocks: 202.173.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Sep 2024 05:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b5:b0:08:c2:ea:24:2f:70:94:c0:29:a4:56:bc:51:77:cb:8d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Sep 17 15:55:02 2024 GMT Not After : Sep 16 16:00:02 2025 GMT Subject: CN=C21D004728AD03D44FF94E0EE1BCAA1F6B3E7B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:de:d2:08:d6:22:75:f2:75:46:3a:c1:f5:4a: aa:fa:7d:7a:f4:3c:01:07:a4:34:d7:8a:e2:2c:0e: 3f:4d:da:e0:be:37:e5:9e:a5:e0:fe:a8:a1:fd:dc: 85:1b:3a:08:06:3b:f5:50:9e:bf:b0:49:b8:09:a2: 95:4e:7a:c8:e8:98:ee:5f:9f:35:93:b6:85:9e:2f: 58:ad:8c:63:4d:81:72:b1:9d:66:f1:18:00:19:7d: 8f:47:67:48:9a:3d:21:6b:a4:ba:c1:b8:eb:39:8b: af:f1:4f:19:c1:b6:a7:93:07:a8:5c:72:ba:4f:3c: bd:a1:6c:9c:4e:01:6c:6d:4d:40:e5:f2:5d:c0:cc: 5f:68:c7:b6:b0:f0:67:e6:42:f9:4f:96:aa:02:63: 07:e4:85:68:e4:98:3f:f3:54:b2:bd:c4:d5:c6:47: c8:62:42:d1:fd:ed:20:af:ce:50:05:90:9a:4c:17: 9f:2b:0d:ef:5c:fe:39:5c:58:1d:60:95:45:e4:d2: 71:ee:a0:4f:f9:81:c2:e7:e2:0a:dd:76:5f:54:d1: 91:2c:60:bc:74:b9:6a:81:45:66:38:0e:bc:d1:dc: b8:5b:ff:fc:c6:7c:80:91:23:b2:c8:32:91:51:36: 70:56:10:f6:1f:cc:47:7d:c1:e1:36:e7:af:db:0e: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1D:00:47:28:AD:03:D4:4F:F9:4E:0E:E1:BC:AA:1F:6B:3E:7B:88 X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37362e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.76.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:d9:4c:35:0f:8a:53:28:65:13:4e:f0:8e:cf:f4:18:de:0b: 59:b6:a2:a9:6f:8d:06:04:05:fa:12:8b:aa:8c:1b:68:b8:bc: f7:e8:35:49:11:25:62:eb:34:36:89:7b:8d:f1:9e:28:b7:56: e2:ba:b8:a6:d0:7e:1e:49:ac:00:ea:6d:86:3a:45:14:80:34: 11:3a:dc:5c:a6:b4:9d:12:34:e3:12:7b:47:0b:25:7d:75:73: 43:05:c4:ed:c7:1d:d3:56:5c:ad:25:42:e0:9a:96:5c:84:fa: 20:d1:73:76:48:a4:4b:d7:2d:ac:96:70:0a:32:d9:cc:42:09: 7b:b6:81:5e:95:9e:0c:cf:d8:fc:a9:a6:0c:22:78:03:5d:fa: 7f:eb:46:d3:74:ff:91:35:75:c8:a8:db:8c:d1:4e:70:90:40: ee:5f:49:d1:93:d4:1f:1a:7e:a9:01:3d:61:16:fe:c9:b4:4d: 50:98:58:34:01:80:ce:db:65:d3:dd:50:f8:93:02:3b:a9:77: f7:ac:33:18:7d:9e:31:e4:47:bd:7e:0f:25:45:b5:11:34:fe: 9c:ff:22:33:1e:37:6a:90:e1:ae:f6:f4:40:b4:be:d3:cd:0d: cd:5e:20:e1:31:52:fc:4a:1a:18:f3:36:27:70:ca:57:1a:81: ca:9a:59:98 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJbWwCMLqJC9wlMAppFa8UXfLjccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNDA5MTcxNTU1MDJaFw0yNTA5MTYxNjAwMDJaMDMxMTAvBgNV BAMTKEMyMUQwMDQ3MjhBRDAzRDQ0RkY5NEUwRUUxQkNBQTFGNkIzRTdCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3tII1iJ18nVGOsH1Sqr6fXr0 PAEHpDTXiuIsDj9N2uC+N+WepeD+qKH93IUbOggGO/VQnr+wSbgJopVOesjomO5f nzWTtoWeL1itjGNNgXKxnWbxGAAZfY9HZ0iaPSFrpLrBuOs5i6/xTxnBtqeTB6hc crpPPL2hbJxOAWxtTUDl8l3AzF9ox7aw8GfmQvlPlqoCYwfkhWjkmD/zVLK9xNXG R8hiQtH97SCvzlAFkJpMF58rDe9c/jlcWB1glUXk0nHuoE/5gcLn4grddl9U0ZEs YLx0uWqBRWY4DrzR3Lhb//zGfICRI7LIMpFRNnBWEPYfzEd9weE256/bDrI9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwh0ARyitA9RP+U4O4byqH2s+e4gwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtTDANBgkqhkiG 9w0BAQsFAAOCAQEAfNlMNQ+KUyhlE07wjs/0GN4LWbaiqW+NBgQF+hKLqowbaLi8 9+g1SRElYus0Nol7jfGeKLdW4rq4ptB+HkmsAOpthjpFFIA0ETrcXKa0nRI04xJ7 RwslfXVzQwXE7ccd01ZcrSVC4JqWXIT6INFzdkikS9ctrJZwCjLZzEIJe7aBXpWe DM/Y/KmmDCJ4A136f+tG03T/kTV1yKjbjNFOcJBA7l9J0ZPUHxp+qQE9YRb+ybRN UJhYNAGAzttl091Q+JMCO6l396wzGH2eMeRHvX4PJUW1ETT+nP8iMx43apDhrvb0 QLS+080NzV4g4TFS/EoaGPM2J3DKVxqByppZmA== -----END CERTIFICATE-----Generated at Fri Sep 20 04:36:23 2024 by rpki-client on console-ams.rpki-client.org