$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa File: 3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa (raw, json) Hash identifier: ksrSbg4MfDLDoHdr2tCcBXBbEZ7DzYOl4Xtwxvr/TLM= Subject key identifier: 03:23:3B:F1:D4:75:2E:83:04:44:A3:75:46:D6:EC:2B:79:A2:B0:37 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 6DDA7BAED66485E0C0B2C84B54160ADB9D7E9F13 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa Signing time: Tue 19 Mar 2024 02:13:45 +0000 ROA not before: Tue 19 Mar 2024 02:08:45 +0000 ROA not after: Tue 18 Mar 2025 02:13:45 +0000 asID: 9341 IP address blocks: 124.158.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:da:7b:ae:d6:64:85:e0:c0:b2:c8:4b:54:16:0a:db:9d:7e:9f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Mar 19 02:08:45 2024 GMT Not After : Mar 18 02:13:45 2025 GMT Subject: CN=03233BF1D4752E830444A37546D6EC2B79A2B037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:f3:49:1a:3d:c0:19:3a:10:47:43:62:58: 14:c3:9d:da:fc:92:22:d7:97:ea:a1:65:21:f8:01: 26:cb:f6:e2:e9:8f:2c:28:50:b1:97:49:3a:3a:0f: 15:07:3e:2c:12:00:ad:06:54:ed:d9:13:cc:34:42: 82:78:b6:18:bb:93:4f:5b:ae:5a:3c:14:e4:93:a4: 03:21:21:45:f3:22:12:5d:2b:c8:f5:cf:7d:eb:e9: 11:08:42:ea:d2:74:3d:01:94:f7:24:76:66:d1:83: 82:77:54:7e:47:c8:b5:10:68:12:0c:84:36:33:21: 43:df:ee:5e:30:e3:65:2e:b3:ab:9b:e3:a7:fd:dd: b1:e1:7c:93:ca:74:34:03:1d:f4:3e:7c:11:33:dc: 6b:00:ac:f5:88:08:45:8e:3b:bf:09:5c:a4:50:75: e0:60:1a:7a:ef:19:01:47:e6:ae:06:a4:16:28:21: 37:b9:85:1d:e7:42:25:fc:ca:92:68:98:45:53:66: a1:07:79:75:1c:8e:b0:df:43:ab:58:4b:63:96:a3: 09:07:ef:47:94:06:fc:03:84:8d:d5:02:88:cb:93: e6:17:12:0e:d5:42:1d:87:f3:5d:74:f3:5e:d7:d4: 27:66:3e:1d:56:96:0f:92:f6:33:f3:b0:26:14:52: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:23:3B:F1:D4:75:2E:83:04:44:A3:75:46:D6:EC:2B:79:A2:B0:37 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.160.0/20 Signature Algorithm: sha256WithRSAEncryption 00:7b:9c:47:50:f9:68:d2:e2:05:86:3e:c0:1b:bd:b9:03:ba: 7c:ad:63:0d:e4:09:4d:66:70:ff:d5:2d:b1:a0:83:e2:72:8c: 08:51:7c:8f:24:6d:59:fd:89:c9:c2:e6:b1:6e:72:47:4e:aa: 6e:96:94:4c:14:b8:2f:e0:df:3b:b2:78:9b:89:5d:4c:20:6a: e6:cf:18:a8:c9:16:b3:43:e1:ee:61:2b:b0:66:04:2f:aa:64: e9:bb:e9:ea:80:62:12:81:f2:21:93:66:ad:90:21:e4:28:f0: cf:b9:2e:5d:d7:b4:51:2f:48:33:de:fc:7d:98:7e:a4:4f:2b: 7b:e5:62:b1:9b:d5:f5:fd:c5:30:1a:66:3b:6d:05:51:aa:1b: 8b:7b:67:79:72:c7:71:d2:36:0c:97:1c:2a:64:4d:a5:78:5c: 46:3a:b1:20:d4:ce:f8:d4:ec:05:f7:70:07:f8:54:ff:83:bf: bc:55:e4:77:5a:59:92:82:13:08:e7:69:64:f7:90:3c:83:29: 5f:af:19:47:36:c8:be:bb:5e:26:dc:0c:a2:47:39:69:e4:f6: 2b:cb:1f:2b:a8:aa:5e:24:29:e0:be:90:c3:9e:aa:5e:ce:87: bb:7e:13:a2:74:7f:cb:50:8a:77:64:2e:ce:91:c1:47:28:db: e1:51:3a:f6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbdp7rtZkheDAsshLVBYK251+nxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNDAzMTkwMjA4NDVaFw0yNTAzMTgwMjEzNDVaMDMxMTAvBgNV BAMTKDAzMjMzQkYxRDQ3NTJFODMwNDQ0QTM3NTQ2RDZFQzJCNzlBMkIwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyPNJGj3AGToQR0NiWBTDndr8 kiLXl+qhZSH4ASbL9uLpjywoULGXSTo6DxUHPiwSAK0GVO3ZE8w0QoJ4thi7k09b rlo8FOSTpAMhIUXzIhJdK8j1z33r6REIQurSdD0BlPckdmbRg4J3VH5HyLUQaBIM hDYzIUPf7l4w42Uus6ub46f93bHhfJPKdDQDHfQ+fBEz3GsArPWICEWOO78JXKRQ deBgGnrvGQFH5q4GpBYoITe5hR3nQiX8ypJomEVTZqEHeXUcjrDfQ6tYS2OWowkH 70eUBvwDhI3VAojLk+YXEg7VQh2H8110817X1CdmPh1Wlg+S9jPzsCYUUikNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAyM78dR1LoMERKN1RtbsK3misDcwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzIzNDJlMzEzNTM4MmUzMTM2MzAyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHyeoDANBgkqhkiG 9w0BAQsFAAOCAQEAAHucR1D5aNLiBYY+wBu9uQO6fK1jDeQJTWZw/9UtsaCD4nKM CFF8jyRtWf2JycLmsW5yR06qbpaUTBS4L+DfO7J4m4ldTCBq5s8YqMkWs0Ph7mEr sGYEL6pk6bvp6oBiEoHyIZNmrZAh5Cjwz7kuXde0US9IM978fZh+pE8re+VisZvV 9f3FMBpmO20FUaobi3tneXLHcdI2DJccKmRNpXhcRjqxINTO+NTsBfdwB/hU/4O/ vFXkd1pZkoITCOdpZPeQPIMpX68ZRzbIvrteJtwMokc5aeT2K8sfK6iqXiQp4L6Q w56qXs6Hu34TonR/y1CKd2QuzpHBRyjb4VE69g== -----END CERTIFICATE-----Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org