$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e342e302f32322d3234203d3e2039393035.roa File: 3230322e3133372e342e302f32322d3234203d3e2039393035.roa (raw, json) Hash identifier: 35Pmqu6PpjgVddBFFVN9/Ntr9+k71ZEY5f1SwowR1ko= Subject key identifier: C5:0A:91:49:7D:36:9C:22:86:65:44:82:53:62:3B:51:6C:04:86:D1 Certificate issuer: /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Certificate serial: 05762561D25887B8A370AEA934CFB6BEE2F094F8 Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e342e302f32322d3234203d3e2039393035.roa Signing time: Tue 14 May 2024 10:00:01 +0000 ROA not before: Tue 14 May 2024 09:55:01 +0000 ROA not after: Tue 13 May 2025 10:00:01 +0000 asID: 9905 IP address blocks: 202.137.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:76:25:61:d2:58:87:b8:a3:70:ae:a9:34:cf:b6:be:e2:f0:94:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Validity Not Before: May 14 09:55:01 2024 GMT Not After : May 13 10:00:01 2025 GMT Subject: CN=C50A91497D369C228665448253623B516C0486D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:14:b1:13:22:7f:fc:84:00:db:b8:ed:1b:a0: 4d:bc:aa:e0:e7:c2:07:22:60:3b:a0:7a:86:61:62: 4e:a7:66:f1:50:16:b2:cb:f3:ad:82:e6:44:58:87: 50:f1:19:13:4b:4e:48:75:b9:0e:b3:70:47:d0:9b: 75:d0:6f:a2:45:36:bd:92:11:09:15:59:4d:46:6d: 48:04:bb:2a:3e:0c:93:b2:d7:4e:86:99:28:14:da: c9:c4:ca:d1:52:c3:a6:b9:73:36:c1:7b:89:4c:da: dc:ca:f9:9a:e3:8e:7b:17:6c:45:ef:29:ec:1f:43: 58:a7:c9:1c:39:69:6e:60:2e:85:46:b0:1f:ff:a6: 8f:32:8e:f4:11:fe:1f:75:83:e4:0a:80:c4:ee:47: 84:a8:fd:bf:a5:e2:79:76:91:0a:a0:ce:51:9b:32: 11:0a:73:00:6c:41:f9:00:ac:1b:24:c1:dd:dc:d8: 4e:5f:94:48:e6:10:4e:8a:0a:7e:06:9f:c5:92:d7: a2:35:d9:92:50:e1:4c:f9:49:dc:6c:91:21:27:cf: 53:74:55:37:c8:69:4e:80:ab:61:3f:81:c1:04:eb: d9:b8:b2:9a:fa:dd:86:0b:dc:b9:98:ae:fb:d4:24: 96:0d:eb:a8:37:8f:d3:50:af:e9:25:58:d3:59:11: ab:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0A:91:49:7D:36:9C:22:86:65:44:82:53:62:3B:51:6C:04:86:D1 X509v3 Authority Key Identifier: keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e342e302f32322d3234203d3e2039393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.137.4.0/22 Signature Algorithm: sha256WithRSAEncryption 59:f2:23:52:f6:0d:c3:9c:72:92:f0:bf:df:00:d3:f0:73:f1: c9:2a:98:9f:4c:ea:3b:59:63:62:49:f8:d0:02:ff:da:12:e7: 51:b5:da:a5:b5:1e:63:24:58:43:97:04:75:a4:a3:37:61:56: 42:a4:6f:d5:cf:bb:f9:66:ce:68:dc:0a:0f:fe:05:3a:24:ed: 74:ef:bd:bf:c4:e3:b4:9d:65:67:70:9d:fa:e6:81:dc:ce:0d: 5c:f6:36:34:c7:0c:ae:69:02:20:02:82:a5:7f:fd:a8:45:4c: 79:d9:dd:4b:03:42:ad:36:19:18:32:73:f0:f5:ab:25:4d:3f: c4:ae:a6:63:18:b9:8d:59:7f:b5:0e:fc:ee:31:fc:07:27:b1: 17:79:b2:97:d1:29:19:1e:3f:98:3a:4d:f4:7f:d8:db:60:f9: f3:10:85:d6:38:cd:a6:c9:62:7e:3a:a7:2c:8d:af:75:26:cb: 9d:c1:ad:60:0c:94:da:35:26:f5:48:56:bc:48:70:62:14:38: 68:c9:07:5f:3a:d2:89:79:94:0c:33:44:63:63:0a:cb:aa:7d: 63:10:2b:93:dc:df:47:4f:cd:7a:42:26:a7:71:72:0b:72:a7: dd:d3:68:78:04:78:8a:49:82:61:48:f0:27:7b:0e:61:82:5b: 1f:59:9e:11 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUBXYlYdJYh7ijcK6pNM+2vuLwlPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdB RjA5OTlFNzAeFw0yNDA1MTQwOTU1MDFaFw0yNTA1MTMxMDAwMDFaMDMxMTAvBgNV BAMTKEM1MEE5MTQ5N0QzNjlDMjI4NjY1NDQ4MjUzNjIzQjUxNkMwNDg2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnFLETIn/8hADbuO0boE28quDn wgciYDugeoZhYk6nZvFQFrLL862C5kRYh1DxGRNLTkh1uQ6zcEfQm3XQb6JFNr2S EQkVWU1GbUgEuyo+DJOy106GmSgU2snEytFSw6a5czbBe4lM2tzK+ZrjjnsXbEXv KewfQ1inyRw5aW5gLoVGsB//po8yjvQR/h91g+QKgMTuR4So/b+l4nl2kQqgzlGb MhEKcwBsQfkArBskwd3c2E5flEjmEE6KCn4Gn8WS16I12ZJQ4Uz5SdxskSEnz1N0 VTfIaU6Aq2E/gcEE69m4spr63YYL3LmYrvvUJJYN66g3j9NQr+klWNNZEatxAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUxQqRSX02nCKGZUSCU2I7UWwEhtEwHwYDVR0j BBgwFoAUeCY3tYuOB+xkoPquF2mvF68JmecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWMwNWVlMy03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMC83ODI2MzdCNThC OEUwN0VDNjRBMEZBQUUxNzY5QUYxN0FGMDk5OUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdBRjA5 OTlFNy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzljMDVlZTMtN2ZjOC00NDA3LWIy YzAtY2I0MGJmY2ZiODY2LzAvMzIzMDMyMmUzMTMzMzcyZTM0MmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKiQQwDQYJKoZIhvcNAQEL BQADggEBAFnyI1L2DcOccpLwv98A0/Bz8ckqmJ9M6jtZY2JJ+NAC/9oS51G12qW1 HmMkWEOXBHWkozdhVkKkb9XPu/lmzmjcCg/+BTok7XTvvb/E47SdZWdwnfrmgdzO DVz2NjTHDK5pAiACgqV//ahFTHnZ3UsDQq02GRgyc/D1qyVNP8SupmMYuY1Zf7UO /O4x/AcnsRd5spfRKRkeP5g6TfR/2Ntg+fMQhdY4zabJYn46pyyNr3Umy53BrWAM lNo1JvVIVrxIcGIUOGjJB1860ol5lAwzRGNjCsuqfWMQK5Pc30dPzXpCJqdxcgty p93TaHgEeIpJgmFI8Cd7DmGCWx9ZnhE= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org