$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3232302e3234372e3136382e302f32312d3234203d3e2039333431.roa File: 3232302e3234372e3136382e302f32312d3234203d3e2039333431.roa (raw, json) Hash identifier: CYnj2JT+yIuLvoZ1IZRRScO6hHoNIqZloJPAC8Ya/1A= Subject key identifier: 97:26:F1:FA:36:5D:1C:83:2F:84:FE:B4:E4:CE:3B:E1:04:D3:C7:51 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 11B7473C7052D34057BD211518CF58C5503A01FE Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3232302e3234372e3136382e302f32312d3234203d3e2039333431.roa Signing time: Tue 23 Apr 2024 04:00:01 +0000 ROA not before: Tue 23 Apr 2024 03:55:01 +0000 ROA not after: Tue 22 Apr 2025 04:00:01 +0000 asID: 9341 IP address blocks: 220.247.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b7:47:3c:70:52:d3:40:57:bd:21:15:18:cf:58:c5:50:3a:01:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Apr 23 03:55:01 2024 GMT Not After : Apr 22 04:00:01 2025 GMT Subject: CN=9726F1FA365D1C832F84FEB4E4CE3BE104D3C751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:d3:db:3a:21:42:92:de:0b:21:86:7d:e1: 60:ad:25:e2:03:a0:68:9d:bc:ec:8f:77:cb:1b:81: 38:3b:cb:c3:0f:7a:55:69:cd:a1:41:b6:88:44:80: db:95:0a:ca:7b:f5:a6:1d:97:e8:31:37:27:36:d1: 76:ad:d7:4c:84:24:83:5e:52:64:5f:51:bf:a3:67: 3d:b0:f2:a3:96:2d:1e:be:53:93:62:02:06:cb:90: 91:8a:3f:f8:0e:61:b6:94:1c:87:3c:e1:13:d3:ae: 68:ee:d3:3d:a4:3f:06:dc:c6:9b:11:b3:2b:8e:a9: c7:a3:b3:7d:2c:0a:fa:36:fb:dc:0b:59:b8:9e:0c: e4:c3:c1:24:6a:7d:3c:a1:b3:f8:81:cc:fb:46:48: 54:11:ed:4e:cf:d3:8a:ff:7f:12:c9:98:ca:7d:98: 47:29:14:58:03:46:6d:a3:93:d2:ea:fb:ec:0d:e4: af:12:56:df:55:9d:d4:87:44:09:49:19:96:28:8e: 7c:ea:72:21:26:9a:b7:aa:50:97:9a:7e:3c:09:bb: d9:21:25:20:59:ae:5e:76:9e:00:c6:c8:9d:25:70: 90:d7:26:22:fd:f7:dd:87:b1:32:5c:dd:05:99:80: 5b:7f:d6:7e:49:25:19:e4:d9:a4:e8:16:7f:b6:ed: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:26:F1:FA:36:5D:1C:83:2F:84:FE:B4:E4:CE:3B:E1:04:D3:C7:51 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3232302e3234372e3136382e302f32312d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.247.168.0/21 Signature Algorithm: sha256WithRSAEncryption 54:9a:f8:29:fa:0b:a0:32:38:c7:0d:b3:01:93:73:b7:98:90: bb:97:2f:0c:50:95:4c:82:3b:26:c3:e6:c1:a8:b8:f0:c5:a8: 9c:0b:d6:ca:0d:e2:8e:cc:ce:40:63:f8:10:9a:2a:7c:c5:76: c4:18:e6:56:48:11:7c:d0:cf:7c:d2:8a:d0:fc:9e:e0:33:1b: 5a:fd:39:a7:06:1a:a5:2c:b0:da:21:d2:42:8a:73:ca:15:dc: 75:90:01:89:de:95:76:02:3c:ca:a0:c8:38:eb:b1:70:d6:c5: 59:8e:35:24:b9:9a:74:75:16:a7:b8:2d:30:58:91:aa:29:71: 36:ee:6e:3c:2b:58:96:4d:be:ce:73:a0:d7:89:62:99:f4:99: 0c:9d:c3:c8:34:a5:05:75:04:ed:14:8b:ca:ab:13:45:dc:88: c8:cd:bc:be:dd:df:3f:7b:4d:9e:b7:68:38:d1:6b:55:92:e8: 9d:99:0b:79:5a:7e:2c:18:bd:77:34:18:72:bd:7f:81:b3:7d: 99:87:13:c3:46:39:4c:77:b7:81:f6:52:7b:be:2d:f7:45:5d: 18:fe:9f:a4:3d:30:2e:34:02:b4:03:83:58:bb:de:36:2d:e3: 0a:28:8e:30:86:45:ca:95:fb:59:25:17:0b:3d:0c:f6:15:f1: cb:7f:a4:c2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEbdHPHBS00BXvSEVGM9YxVA6Af4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNDA0MjMwMzU1MDFaFw0yNTA0MjIwNDAwMDFaMDMxMTAvBgNV BAMTKDk3MjZGMUZBMzY1RDFDODMyRjg0RkVCNEU0Q0UzQkUxMDREM0M3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfXdPbOiFCkt4LIYZ94WCtJeID oGidvOyPd8sbgTg7y8MPelVpzaFBtohEgNuVCsp79aYdl+gxNyc20Xat10yEJINe UmRfUb+jZz2w8qOWLR6+U5NiAgbLkJGKP/gOYbaUHIc84RPTrmju0z2kPwbcxpsR syuOqcejs30sCvo2+9wLWbieDOTDwSRqfTyhs/iBzPtGSFQR7U7P04r/fxLJmMp9 mEcpFFgDRm2jk9Lq++wN5K8SVt9VndSHRAlJGZYojnzqciEmmreqUJeafjwJu9kh JSBZrl52ngDGyJ0lcJDXJiL9992HsTJc3QWZgFt/1n5JJRnk2aToFn+27ZgJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUlybx+jZdHIMvhP605M474QTTx1EwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMyMzIzMDJlMzIzNDM3MmUzMTM2MzgyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9z3qDANBgkqhkiG 9w0BAQsFAAOCAQEAVJr4KfoLoDI4xw2zAZNzt5iQu5cvDFCVTII7JsPmwai48MWo nAvWyg3ijszOQGP4EJoqfMV2xBjmVkgRfNDPfNKK0Pye4DMbWv05pwYapSyw2iHS QopzyhXcdZABid6VdgI8yqDIOOuxcNbFWY41JLmadHUWp7gtMFiRqilxNu5uPCtY lk2+znOg14limfSZDJ3DyDSlBXUE7RSLyqsTRdyIyM28vt3fP3tNnrdoONFrVZLo nZkLeVp+LBi9dzQYcr1/gbN9mYcTw0Y5THe3gfZSe74t90VdGP6fpD0wLjQCtAOD WLveNi3jCiiOMIZFypX7WSUXCz0M9hXxy3+kwg== -----END CERTIFICATE-----Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org