$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34332e3232392e3234382e302f32322d3234203d3e203435373331.roa File: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (raw, json) Hash identifier: E9+TZYKSEU4mPFuwGcufm7MpFov0VpsZNyq/YwoW43w= Subject key identifier: 77:ED:7F:F9:B5:59:F7:65:29:6F:35:E8:20:AC:7E:29:17:14:E4:5A Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Certificate serial: 6B1300AB56F89610D0B959A7D05C621794B1A68A Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34332e3232392e3234382e302f32322d3234203d3e203435373331.roa Signing time: Mon 11 Sep 2023 09:00:02 +0000 ROA not before: Mon 11 Sep 2023 08:55:02 +0000 ROA not after: Mon 09 Sep 2024 09:00:02 +0000 asID: 45731 IP address blocks: 43.229.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:13:00:ab:56:f8:96:10:d0:b9:59:a7:d0:5c:62:17:94:b1:a6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Validity Not Before: Sep 11 08:55:02 2023 GMT Not After : Sep 9 09:00:02 2024 GMT Subject: CN=77ED7FF9B559F765296F35E820AC7E291714E45A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:95:4c:16:f3:a6:d7:41:c4:99:18:26:cd: 0e:88:49:66:b8:8f:2d:ff:45:22:c0:6f:84:8d:4e: f0:5f:67:a1:9c:9f:50:68:07:8d:5b:68:4c:c5:03: 86:bf:08:7f:1b:f2:25:8b:c9:ea:49:b4:92:34:d3: 59:68:7d:37:a0:25:1a:37:e8:c1:ac:c1:c6:d5:db: 1d:b8:d4:ea:83:88:bb:1f:37:bf:c4:eb:f2:3e:42: 6e:57:49:14:8d:b5:b9:b7:d9:53:0e:09:08:0c:67: 2d:6d:0a:60:48:64:23:57:ca:c2:b4:dd:06:b4:a9: 94:2b:ad:ee:1c:d8:8f:30:ba:d7:f4:81:64:6b:f0: d4:cb:6f:d4:49:c0:f6:a6:f1:bc:04:c7:76:7d:47: 23:aa:8a:59:13:5e:e9:3a:4f:ea:5a:a4:6b:b5:d9: 9a:39:ed:65:62:31:34:65:b5:ba:1a:b2:26:97:dd: d1:da:ba:d9:60:f5:16:84:4c:8c:47:01:63:c5:05: 3d:c3:5e:eb:2e:5e:58:b5:37:22:40:c3:52:06:ed: 16:ca:c8:4a:ea:d1:c0:22:a5:b1:ff:31:ee:eb:4d: 00:52:ae:c9:2c:58:1e:06:f3:53:8b:a1:b7:ab:af: 9e:3a:4b:47:d1:50:d2:51:d9:17:4c:7b:8a:5b:c6: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:ED:7F:F9:B5:59:F7:65:29:6F:35:E8:20:AC:7E:29:17:14:E4:5A X509v3 Authority Key Identifier: keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34332e3232392e3234382e302f32322d3234203d3e203435373331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.248.0/22 Signature Algorithm: sha256WithRSAEncryption 83:b9:bc:9c:47:66:c9:b1:75:d2:81:01:14:26:6b:7e:63:9a: f8:4b:8b:71:14:e3:73:94:39:67:9e:4b:f3:c3:04:4b:c5:f3: c5:23:63:ae:02:29:11:c9:33:dd:99:65:63:62:19:71:9b:32: 70:e2:82:7b:34:e3:06:45:f1:29:f2:d6:bb:53:11:92:ad:e3: 11:9f:dc:3f:9e:f1:b7:f2:a6:80:e2:9b:bf:7b:02:fb:6d:0a: e7:4b:90:a6:57:66:38:37:33:45:3e:64:7a:5f:68:5d:14:ca: 45:35:eb:fd:e4:de:7a:59:c9:cf:0f:dc:df:9f:48:e6:5f:a2: 2c:3a:7e:33:d8:86:43:7d:8a:7e:29:37:05:47:af:2c:28:2f: 40:db:9c:e4:bb:ff:33:a8:a4:72:3f:54:23:9f:e8:27:cb:9b: a3:d0:ed:1c:cf:dd:88:8f:3e:91:2e:13:76:f3:de:87:a4:90: a0:04:e6:b7:5e:70:c4:45:ef:84:6f:7f:f0:9e:fa:a8:1e:15: 35:ff:7f:6d:28:e1:c2:3b:ed:c8:f1:be:fd:79:9d:ef:38:b9: 94:56:13:0c:38:db:86:fe:fd:c9:c0:19:f4:74:cd:5a:8a:e6: 16:28:50:68:d6:3d:b5:ea:30:bb:d9:ab:88:e1:6c:7e:72:ce: 5b:cb:21:5b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaxMAq1b4lhDQuVmn0FxiF5SxpoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUw REEzMjFDRDAeFw0yMzA5MTEwODU1MDJaFw0yNDA5MDkwOTAwMDJaMDMxMTAvBgNV BAMTKDc3RUQ3RkY5QjU1OUY3NjUyOTZGMzVFODIwQUM3RTI5MTcxNEU0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqF5VMFvOm10HEmRgmzQ6ISWa4 jy3/RSLAb4SNTvBfZ6Gcn1BoB41baEzFA4a/CH8b8iWLyepJtJI001lofTegJRo3 6MGswcbV2x241OqDiLsfN7/E6/I+Qm5XSRSNtbm32VMOCQgMZy1tCmBIZCNXysK0 3Qa0qZQrre4c2I8wutf0gWRr8NTLb9RJwPam8bwEx3Z9RyOqilkTXuk6T+papGu1 2Zo57WViMTRltboasiaX3dHautlg9RaETIxHAWPFBT3DXusuXli1NyJAw1IG7RbK yErq0cAipbH/Me7rTQBSrsksWB4G81OLoberr546S0fRUNJR2RdMe4pbxsbLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUd+1/+bVZ92UpbzXoIKx+KRcU5FowHwYDVR0j BBgwFoAUgRXTAJH4lIt2rgqsi09oVQ2jIc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmRiYmMwOC00ZThlLTQ0YmEtYTRjZi0wNWUyMzNkZGEzYTUvMC84MTE1RDMwMDkx Rjg5NDhCNzZBRTBBQUM4QjRGNjg1NTBEQTMyMUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUwREEz MjFDRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZGJiYzA4LTRlOGUtNDRiYS1h NGNmLTA1ZTIzM2RkYTNhNS8wLzM0MzMyZTMyMzIzOTJlMzIzNDM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNTM3MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAivl+DANBgkqhkiG 9w0BAQsFAAOCAQEAg7m8nEdmybF10oEBFCZrfmOa+EuLcRTjc5Q5Z55L88MES8Xz xSNjrgIpEckz3ZllY2IZcZsycOKCezTjBkXxKfLWu1MRkq3jEZ/cP57xt/KmgOKb v3sC+20K50uQpldmODczRT5kel9oXRTKRTXr/eTeelnJzw/c359I5l+iLDp+M9iG Q32Kfik3BUevLCgvQNuc5Lv/M6ikcj9UI5/oJ8ubo9DtHM/diI8+kS4TdvPeh6SQ oATmt15wxEXvhG9/8J76qB4VNf9/bSjhwjvtyPG+/Xmd7zi5lFYTDDjbhv79ycAZ 9HTNWormFihQaNY9teowu9mriOFsfnLOW8shWw== -----END CERTIFICATE-----Generated at Mon Jun 24 01:27:24 2024 by rpki-client on console-ams.rpki-client.org