$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa File: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (raw, json) Hash identifier: tRSLd0VrGUP/Pm5hKXXyVC8JxAXp3mJlmmx5bWeemDQ= Subject key identifier: F2:7B:47:13:4A:64:63:A8:F6:84:1A:89:5E:8B:B3:CD:CA:60:56:F7 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 34DF661D0D1A889558A12AE96737CF2E7BCFEB7F Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa Signing time: Tue 14 May 2024 05:00:01 +0000 ROA not before: Tue 14 May 2024 04:55:01 +0000 ROA not after: Tue 13 May 2025 05:00:01 +0000 asID: 140443 IP address blocks: 202.125.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:df:66:1d:0d:1a:88:95:58:a1:2a:e9:67:37:cf:2e:7b:cf:eb:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: May 14 04:55:01 2024 GMT Not After : May 13 05:00:01 2025 GMT Subject: CN=F27B47134A6463A8F6841A895E8BB3CDCA6056F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:f3:4c:a8:f5:ee:d4:c9:81:61:d5:a0:a6: a5:02:66:b7:d2:24:95:5c:31:69:69:fc:74:e6:ff: a9:17:c8:6a:cf:e4:c4:90:bd:eb:7b:4b:01:7c:6f: 4a:1a:16:03:7e:eb:ff:0a:61:d2:18:a2:a5:ab:8e: 3c:55:aa:f6:b3:0e:4b:b4:56:99:f9:34:31:5c:e9: a8:18:c3:e4:86:c4:0b:9f:5e:b3:00:c5:e1:d6:2e: 00:48:62:d0:66:52:77:8a:3a:b9:33:fd:59:85:9f: 90:a3:ad:15:c6:48:42:8a:87:a1:4c:44:3e:bc:6e: 31:aa:2e:d6:04:cc:68:5b:4d:2d:b2:47:ab:43:0c: 4f:b5:c2:9a:dc:76:fc:62:49:5a:25:99:80:46:79: c2:16:81:1d:e1:4a:9d:37:0f:b6:9e:7c:93:3c:6b: 76:34:d0:01:99:2e:c2:44:ec:d0:4b:bd:a9:90:c9: 5f:40:f7:95:c4:30:7f:49:b4:c8:72:28:9f:2c:85: 61:cb:ae:67:5d:a0:a0:cc:d6:85:19:c5:ad:08:12: 69:3e:50:92:e6:5a:b1:3e:ef:34:b7:af:46:e7:2b: f1:11:ba:7b:82:45:6d:01:a9:2d:3a:44:c3:ef:20: af:7e:d0:0b:8d:85:b3:8c:79:8c:e8:32:c7:7c:44: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7B:47:13:4A:64:63:A8:F6:84:1A:89:5E:8B:B3:CD:CA:60:56:F7 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.125.83.0/24 Signature Algorithm: sha256WithRSAEncryption ae:fb:9d:c1:f6:26:b0:a5:7f:bd:03:cf:ee:41:ae:b7:50:11: 22:13:1a:88:7e:80:6f:fc:ff:e8:5c:b7:b5:3e:4a:33:46:5c: a3:d1:af:36:2f:3c:39:d5:84:79:0b:f1:ab:7f:b9:ab:da:17: 28:c9:31:17:32:a2:57:87:88:a7:8b:b1:ac:b0:97:9f:9e:9f: 63:ef:b2:cd:ad:8d:32:2e:cd:2d:1f:6b:0e:44:a9:ea:cb:56: c2:7a:3d:af:f6:a3:d4:d2:91:e3:19:b8:cc:e0:1f:9d:23:42: dd:06:89:0a:6c:e8:46:2b:24:6b:4f:e6:ad:6e:d3:35:53:10: 85:b0:2e:65:bf:b3:e1:83:0c:1b:f9:38:7a:eb:43:14:a1:9d: cd:d7:13:62:10:9e:6b:75:c4:6a:7a:7a:86:3c:f0:23:c8:1f: 5b:bf:1f:73:c4:88:b5:51:49:bd:c0:c8:96:3f:e2:6b:fe:26: c1:69:e6:79:75:59:b0:15:41:4c:b9:9d:05:05:8f:9b:38:21: 49:8e:8f:86:dd:22:b7:16:81:ec:0f:f3:9a:a9:ba:a5:5d:17: 3d:d7:5e:ec:1e:c2:92:5e:a6:d7:73:b6:e3:26:67:28:63:69: 48:94:76:65:6f:79:4c:9a:40:02:8b:39:57:c8:5c:d4:59:e3: 9c:19:88:f7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNN9mHQ0aiJVYoSrpZzfPLnvP638wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNDA1MTQwNDU1MDFaFw0yNTA1MTMwNTAwMDFaMDMxMTAvBgNV BAMTKEYyN0I0NzEzNEE2NDYzQThGNjg0MUE4OTVFOEJCM0NEQ0E2MDU2RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNvNMqPXu1MmBYdWgpqUCZrfS JJVcMWlp/HTm/6kXyGrP5MSQvet7SwF8b0oaFgN+6/8KYdIYoqWrjjxVqvazDku0 Vpn5NDFc6agYw+SGxAufXrMAxeHWLgBIYtBmUneKOrkz/VmFn5CjrRXGSEKKh6FM RD68bjGqLtYEzGhbTS2yR6tDDE+1wprcdvxiSVolmYBGecIWgR3hSp03D7aefJM8 a3Y00AGZLsJE7NBLvamQyV9A95XEMH9JtMhyKJ8shWHLrmddoKDM1oUZxa0IEmk+ UJLmWrE+7zS3r0bnK/ERunuCRW0BqS06RMPvIK9+0AuNhbOMeYzoMsd8RMMPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8ntHE0pkY6j2hBqJXouzzcpgVvcwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjZDMyM2JlLTgzN2QtNDI0NC04 NDZjLTdkMjM5M2E5YTAwOS8wLzMyMzAzMjJlMzEzMjM1MmUzODMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyn1TMA0GCSqG SIb3DQEBCwUAA4IBAQCu+53B9iawpX+9A8/uQa63UBEiExqIfoBv/P/oXLe1Pkoz Rlyj0a82Lzw51YR5C/Grf7mr2hcoyTEXMqJXh4ini7GssJefnp9j77LNrY0yLs0t H2sORKnqy1bCej2v9qPU0pHjGbjM4B+dI0LdBokKbOhGKyRrT+atbtM1UxCFsC5l v7Phgwwb+Th660MUoZ3N1xNiEJ5rdcRqenqGPPAjyB9bvx9zxIi1UUm9wMiWP+Jr /ibBaeZ5dVmwFUFMuZ0FBY+bOCFJjo+G3SK3FoHsD/OaqbqlXRc9117sHsKSXqbX c7bjJmcoY2lIlHZlb3lMmkACizlXyFzUWeOcGYj3 -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org