$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38302e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: Qe7KScU7+lZMmSIY+33thQD4DgpTET1HSNVXslVMyw8= Subject key identifier: 4A:5F:DF:7F:C6:36:13:70:E9:BF:CB:4A:85:45:8F:B0:92:34:7F:4C Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 493CA3E64CF1A07AC120E271BC2ABC58737A90A8 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38302e302f32342d3234203d3e203233363935.roa Signing time: Wed 28 Aug 2024 04:02:15 +0000 ROA not before: Wed 28 Aug 2024 03:57:15 +0000 ROA not after: Wed 27 Aug 2025 04:02:15 +0000 asID: 23695 IP address blocks: 202.173.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3c:a3:e6:4c:f1:a0:7a:c1:20:e2:71:bc:2a:bc:58:73:7a:90:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Aug 28 03:57:15 2024 GMT Not After : Aug 27 04:02:15 2025 GMT Subject: CN=4A5FDF7FC6361370E9BFCB4A85458FB092347F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d7:66:0e:7e:0f:1b:82:64:c6:d9:d9:e3:7e: d5:ab:91:f3:2d:ea:f2:0b:b6:a4:26:cf:ab:4f:75: 1e:d8:f4:8b:90:48:1a:64:78:d0:84:26:8f:3f:47: 74:04:fa:2c:5b:b3:c1:8c:6a:af:0f:f8:5b:c2:9a: ab:2b:58:87:31:6e:13:9c:0d:3c:43:b4:5c:50:ce: e8:ca:48:64:91:8c:17:42:e8:4e:d8:7b:69:52:ea: 38:1a:a8:b5:25:52:93:cd:5d:1d:f2:9d:0e:3c:a1: 78:73:56:f0:57:ee:86:e6:b9:e8:95:36:18:b8:3d: 63:6c:74:8d:66:a5:8a:37:a5:44:eb:16:d6:68:dd: a7:98:d2:d5:99:29:c4:16:d9:b8:77:e2:83:32:c1: f1:71:cc:16:4f:6f:02:5f:a0:dc:b9:3c:a1:c4:13: 9f:d0:ff:11:0a:30:f5:7c:ec:3b:38:05:78:40:99: 1e:ec:9d:a4:1b:83:5b:a1:4a:ec:60:52:ab:16:be: ad:1e:2a:ea:96:44:ee:65:61:0f:ab:92:67:e2:8f: 2f:52:e6:7c:95:c2:9a:b1:ef:e7:1e:7c:4b:ca:0a: bb:b3:c8:d7:4b:61:83:b8:9e:6c:81:a0:a1:9b:00: 74:c8:e7:3e:64:34:01:af:14:3c:00:3f:8e:10:76: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5F:DF:7F:C6:36:13:70:E9:BF:CB:4A:85:45:8F:B0:92:34:7F:4C X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38302e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.80.0/24 Signature Algorithm: sha256WithRSAEncryption 45:c3:98:5c:43:2e:35:b3:60:73:36:f3:bf:3f:fc:78:37:10: 62:8f:d3:46:d4:58:db:00:31:11:73:71:22:62:a9:1f:a0:06: 9d:6e:9f:13:07:a8:ff:b7:2b:03:74:c5:0c:15:bb:54:2e:15: 16:c7:cf:04:cd:55:b3:0c:bd:a3:07:f1:1a:fb:5b:d0:f6:6d: c7:a0:f0:e8:69:39:6c:3f:15:f7:2a:f9:28:dc:c8:55:a1:60: 58:c3:4e:6f:58:e0:96:c4:e0:13:bb:8f:4e:d9:d8:cf:6d:14: e0:e9:86:ef:8e:e6:38:ea:dd:13:05:59:4e:c8:2a:42:a9:d6: 17:09:18:82:85:0f:50:c1:e6:b9:6a:1f:1f:eb:b6:21:c1:2d: aa:6a:ca:83:02:19:c2:c1:95:59:24:0e:4f:aa:50:f8:ec:22: a3:98:2c:89:a4:26:06:f9:0f:ff:25:ca:a3:3d:f7:b2:22:a8: 2a:f8:ec:81:76:b3:de:4c:cf:bb:a6:f1:10:d6:e9:e1:86:c4: db:b8:8d:02:53:3c:a7:57:8b:22:cd:7b:bf:f0:54:df:54:1d: ba:49:60:ee:ab:66:03:34:f3:8a:7f:a9:13:66:e5:e2:14:b6: 3e:7d:c9:a3:32:3b:38:29:2e:38:3d:dc:54:c3:73:b5:07:74: a0:ac:ef:44 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSTyj5kzxoHrBIOJxvCq8WHN6kKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNDA4MjgwMzU3MTVaFw0yNTA4MjcwNDAyMTVaMDMxMTAvBgNV BAMTKDRBNUZERjdGQzYzNjEzNzBFOUJGQ0I0QTg1NDU4RkIwOTIzNDdGNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd12YOfg8bgmTG2dnjftWrkfMt 6vILtqQmz6tPdR7Y9IuQSBpkeNCEJo8/R3QE+ixbs8GMaq8P+FvCmqsrWIcxbhOc DTxDtFxQzujKSGSRjBdC6E7Ye2lS6jgaqLUlUpPNXR3ynQ48oXhzVvBX7obmueiV Nhi4PWNsdI1mpYo3pUTrFtZo3aeY0tWZKcQW2bh34oMywfFxzBZPbwJfoNy5PKHE E5/Q/xEKMPV87Ds4BXhAmR7snaQbg1uhSuxgUqsWvq0eKuqWRO5lYQ+rkmfijy9S 5nyVwpqx7+cefEvKCruzyNdLYYO4nmyBoKGbAHTI5z5kNAGvFDwAP44QdsCJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUSl/ff8Y2E3Dpv8tKhUWPsJI0f0wwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzODMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtUDANBgkqhkiG 9w0BAQsFAAOCAQEARcOYXEMuNbNgczbzvz/8eDcQYo/TRtRY2wAxEXNxImKpH6AG nW6fEweo/7crA3TFDBW7VC4VFsfPBM1Vswy9owfxGvtb0PZtx6Dw6Gk5bD8V9yr5 KNzIVaFgWMNOb1jglsTgE7uPTtnYz20U4OmG747mOOrdEwVZTsgqQqnWFwkYgoUP UMHmuWofH+u2IcEtqmrKgwIZwsGVWSQOT6pQ+Owio5gsiaQmBvkP/yXKoz33siKo KvjsgXaz3kzPu6bxENbp4YbE27iNAlM8p1eLIs17v/BU31Qduklg7qtmAzTzin+p E2bl4hS2Pn3JozI7OCkuOD3cVMNztQd0oKzvRA== -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org