$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa File: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (raw, json) Hash identifier: Libkq+4v6T+5YBjIiCFZUeyWPbwga60nsVMLOCri8wc= Subject key identifier: 80:C8:3E:70:99:35:B7:CD:74:AE:F9:91:71:FB:46:92:81:B4:44:1B Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 6FA9313AD2B384F989AB4AC4A82EA9A236B09C08 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa Signing time: Thu 23 May 2024 03:00:00 +0000 ROA not before: Thu 23 May 2024 02:55:00 +0000 ROA not after: Thu 22 May 2025 03:00:00 +0000 asID: 140443 IP address blocks: 202.70.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a9:31:3a:d2:b3:84:f9:89:ab:4a:c4:a8:2e:a9:a2:36:b0:9c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: May 23 02:55:00 2024 GMT Not After : May 22 03:00:00 2025 GMT Subject: CN=80C83E709935B7CD74AEF99171FB469281B4441B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:2c:a2:da:f6:b5:eb:a7:4a:df:8a:6e:dd: 21:6c:68:19:5d:82:b2:52:a8:98:ac:10:5a:d5:6b: 97:4a:ae:77:3b:23:5f:21:55:e7:84:eb:da:2c:f0: f3:05:45:a6:90:77:2f:65:c3:c0:8e:f4:1a:28:9f: 62:5f:b0:52:57:3a:9e:f6:d3:10:67:83:ba:6d:ab: 3d:e6:50:a4:b0:72:2e:e7:d5:dd:1a:fa:af:c7:4f: 96:0e:6f:dc:3b:fc:e9:e3:e3:c9:36:9e:e8:27:ce: b5:6e:9f:f3:28:37:04:95:c6:f1:5f:08:3b:de:05: af:54:33:36:c6:3f:40:22:90:bb:f2:ca:bc:4e:ee: 58:b0:f1:33:98:93:40:77:a7:a9:45:ac:4a:6b:a7: 0e:31:ef:cf:ee:41:89:26:f9:10:b4:cc:34:2c:3a: 79:20:13:8e:57:2f:f5:94:01:39:97:0d:bc:b9:22: b9:bf:24:d2:45:0b:04:9e:c2:e7:fa:2e:3e:05:d1: 43:b0:ce:5e:25:7a:9b:7d:22:96:ae:40:6b:20:1f: 34:84:01:2a:2f:d0:2f:3b:9a:0e:7d:21:a3:65:f7: 8b:12:a1:98:57:fd:97:5a:04:dd:cc:39:d5:ec:18: 00:ce:1d:cd:39:f8:8b:82:4c:b0:09:5e:ab:cf:45: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C8:3E:70:99:35:B7:CD:74:AE:F9:91:71:FB:46:92:81:B4:44:1B X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.70.133.0/24 Signature Algorithm: sha256WithRSAEncryption 43:96:88:82:1c:c2:42:5d:79:c9:59:ac:42:f5:46:ed:54:44: 70:a0:a4:83:73:5f:0c:0c:52:22:63:39:f3:6a:46:f1:07:42: 09:3e:02:f8:8f:0a:7c:9a:45:83:c4:90:ed:f7:0a:16:d8:6a: 73:e9:38:f8:5f:5b:28:1d:39:47:11:aa:da:fc:a8:a7:11:55: 67:c4:4f:db:0a:03:0a:6c:13:8d:b5:30:83:81:60:1a:0d:89: 17:a1:24:c9:2c:0b:0f:88:95:35:1d:81:ae:2e:96:8c:0d:72: 88:a9:9c:11:54:6e:25:c0:75:38:f3:6b:28:b4:63:03:33:48: fd:47:4f:6b:03:4f:30:8a:f4:ee:ae:2b:ba:dd:c6:f3:60:b2: 57:c3:35:65:11:5e:9b:f9:f4:50:67:1d:47:a6:1a:0a:dd:e9: 15:54:93:cd:29:5c:e0:37:db:8f:be:43:f9:99:5e:64:9e:f8: d2:52:64:27:bd:86:29:48:8d:b6:b2:fa:92:7f:74:80:04:1f: e0:a4:8f:af:80:8d:c9:05:55:98:9f:e1:9e:fd:93:02:97:ed: 34:db:06:3b:58:34:6d:bc:db:52:f8:d4:1c:dc:a8:c9:07:c2: f8:2a:4e:8e:a5:59:4d:d7:03:09:9f:54:90:88:8c:1e:fd:d4: a6:a7:b3:e3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb6kxOtKzhPmJq0rEqC6pojawnAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNDA1MjMwMjU1MDBaFw0yNTA1MjIwMzAwMDBaMDMxMTAvBgNV BAMTKDgwQzgzRTcwOTkzNUI3Q0Q3NEFFRjk5MTcxRkI0NjkyODFCNDQ0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nCyi2va166dK34pu3SFsaBld grJSqJisEFrVa5dKrnc7I18hVeeE69os8PMFRaaQdy9lw8CO9Boon2JfsFJXOp72 0xBng7ptqz3mUKSwci7n1d0a+q/HT5YOb9w7/Onj48k2nugnzrVun/MoNwSVxvFf CDveBa9UMzbGP0AikLvyyrxO7liw8TOYk0B3p6lFrEprpw4x78/uQYkm+RC0zDQs OnkgE45XL/WUATmXDby5Irm/JNJFCwSewuf6Lj4F0UOwzl4lept9IpauQGsgHzSE ASov0C87mg59IaNl94sSoZhX/ZdaBN3MOdXsGADOHc05+IuCTLAJXqvPRcxfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgMg+cJk1t810rvmRcftGkoG0RBswHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjZDMyM2JlLTgzN2QtNDI0NC04 NDZjLTdkMjM5M2E5YTAwOS8wLzMyMzAzMjJlMzczMDJlMzEzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAykaFMA0GCSqG SIb3DQEBCwUAA4IBAQBDloiCHMJCXXnJWaxC9UbtVERwoKSDc18MDFIiYznzakbx B0IJPgL4jwp8mkWDxJDt9woW2Gpz6Tj4X1soHTlHEara/KinEVVnxE/bCgMKbBON tTCDgWAaDYkXoSTJLAsPiJU1HYGuLpaMDXKIqZwRVG4lwHU482sotGMDM0j9R09r A08wivTuriu63cbzYLJXwzVlEV6b+fRQZx1HphoK3ekVVJPNKVzgN9uPvkP5mV5k nvjSUmQnvYYpSI22svqSf3SABB/gpI+vgI3JBVWYn+Ge/ZMCl+002wY7WDRtvNtS +NQc3KjJB8L4Kk6OpVlN1wMJn1SQiIwe/dSmp7Pj -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org