$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa File: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (raw, json) Hash identifier: XL51m8qCCMdZ/MeraS+TLjplQBrWd1/iq0OzRCxKdAw= Subject key identifier: C6:D8:5D:71:E7:2F:87:BB:3E:64:16:F1:43:E1:8B:FD:60:D5:54:7E Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 07EAB72A53377E5DF0CF914CE15B49EE716C9F83 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa Signing time: Thu 13 Jun 2024 08:00:02 +0000 ROA not before: Thu 13 Jun 2024 07:55:02 +0000 ROA not after: Thu 12 Jun 2025 08:00:02 +0000 asID: 10137 IP address blocks: 203.99.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 01:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ea:b7:2a:53:37:7e:5d:f0:cf:91:4c:e1:5b:49:ee:71:6c:9f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Jun 13 07:55:02 2024 GMT Not After : Jun 12 08:00:02 2025 GMT Subject: CN=C6D85D71E72F87BB3E6416F143E18BFD60D5547E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:83:17:3f:f1:c3:cc:f6:cd:c9:36:e9:fe: 38:02:62:88:4c:8b:4b:d9:1d:28:ba:62:b2:91:4d: 4f:ae:51:c7:00:60:df:5d:37:7d:f0:ce:72:f9:c4: 54:10:aa:1f:28:00:b9:af:cb:15:15:72:7f:9a:33: 9a:b8:6f:ea:e9:11:47:db:d1:65:ce:4b:5c:ee:74: b5:90:93:40:53:60:c0:02:d2:2f:36:8f:54:c3:08: d1:e8:ea:8c:db:0b:8e:c2:17:7a:c2:6a:fb:85:b9: 1d:cc:48:06:84:1e:a7:1e:7b:32:20:60:d3:04:d8: 41:2c:9d:9a:2e:6c:23:66:fb:0a:46:54:e9:86:d1: 20:da:db:80:f2:1f:e6:f9:05:08:08:45:bb:9d:4b: 86:1d:64:c5:e8:38:82:f1:4a:5f:37:61:f9:da:aa: 6e:3d:41:73:8a:1e:34:05:79:bf:1a:54:e2:14:d1: 2d:71:04:78:0d:5a:c1:26:24:bd:08:18:75:4d:9b: 4d:8c:d4:22:73:ca:e5:7b:ff:9c:b2:20:3b:3e:76: 2a:2e:6f:73:2d:28:b6:c7:67:97:8b:94:e5:e4:3d: f6:cb:f7:60:8f:1e:58:63:b5:00:a2:03:4c:9c:aa: 2f:35:c0:58:bb:51:87:74:3a:34:d9:50:1c:b4:9d: f8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D8:5D:71:E7:2F:87:BB:3E:64:16:F1:43:E1:8B:FD:60:D5:54:7E X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.111.0/24 Signature Algorithm: sha256WithRSAEncryption 40:33:e1:67:27:9f:e8:8c:75:72:15:ee:3d:a9:45:77:a3:1c: f9:3e:e9:7e:7f:3a:28:4a:df:6c:b8:ac:14:6b:e1:36:45:76: 7f:0c:a3:36:93:14:8b:fd:03:11:01:d4:7c:e7:98:e4:03:fa: 1a:c4:c5:cc:a7:b7:d0:d3:7b:a5:26:41:0f:3b:1c:a6:20:1b: 2c:5b:51:11:75:73:04:b0:9a:6e:89:8d:90:97:07:fa:ce:05: ca:7d:51:3a:19:5c:7b:b6:85:56:07:5d:81:f2:5b:0a:c4:d0: 71:06:63:b6:11:b9:2e:b0:ff:a7:af:eb:88:33:d7:b6:15:3e: 2b:e8:01:d4:d8:58:ee:69:52:cb:a6:d9:c3:67:92:e0:e2:0d: 9e:94:23:57:e6:1c:93:e6:8b:31:1e:9d:76:60:54:a0:99:86: 21:53:37:9f:08:43:cd:75:34:4d:4b:7c:1f:56:c2:20:7b:a6: a9:e5:ee:4e:d0:7a:ce:24:d1:c7:8c:60:91:b3:61:db:d7:62: a2:8b:bf:68:d3:6f:91:0d:7a:1f:aa:62:5f:2c:b5:a9:f1:ef: 2b:94:37:9c:77:14:9a:8e:54:cb:a4:06:c3:cf:66:2c:20:19: 61:d8:40:c3:f4:d2:ba:0c:b3:f5:38:86:82:55:c2:8b:19:67: ee:80:d8:21 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUB+q3KlM3fl3wz5FM4VtJ7nFsn4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNDA2MTMwNzU1MDJaFw0yNTA2MTIwODAwMDJaMDMxMTAvBgNV BAMTKEM2RDg1RDcxRTcyRjg3QkIzRTY0MTZGMTQzRTE4QkZENjBENTU0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvYMXP/HDzPbNyTbp/jgCYohM i0vZHSi6YrKRTU+uUccAYN9dN33wznL5xFQQqh8oALmvyxUVcn+aM5q4b+rpEUfb 0WXOS1zudLWQk0BTYMAC0i82j1TDCNHo6ozbC47CF3rCavuFuR3MSAaEHqceezIg YNME2EEsnZoubCNm+wpGVOmG0SDa24DyH+b5BQgIRbudS4YdZMXoOILxSl83Yfna qm49QXOKHjQFeb8aVOIU0S1xBHgNWsEmJL0IGHVNm02M1CJzyuV7/5yyIDs+diou b3MtKLbHZ5eLlOXkPfbL92CPHlhjtQCiA0ycqi81wFi7UYd0OjTZUBy0nfiHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxthdcecvh7s+ZBbxQ+GL/WDVVH4wHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzEzMTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMDMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtjbzANBgkqhkiG 9w0BAQsFAAOCAQEAQDPhZyef6Ix1chXuPalFd6Mc+T7pfn86KErfbLisFGvhNkV2 fwyjNpMUi/0DEQHUfOeY5AP6GsTFzKe30NN7pSZBDzscpiAbLFtREXVzBLCabomN kJcH+s4Fyn1ROhlce7aFVgddgfJbCsTQcQZjthG5LrD/p6/riDPXthU+K+gB1NhY 7mlSy6bZw2eS4OINnpQjV+Yck+aLMR6ddmBUoJmGIVM3nwhDzXU0TUt8H1bCIHum qeXuTtB6ziTRx4xgkbNh29dioou/aNNvkQ16H6piXyy1qfHvK5Q3nHcUmo5Uy6QG w89mLCAZYdhAw/TSugyz9TiGglXCixln7oDYIQ== -----END CERTIFICATE-----Generated at Sat Nov 23 03:54:06 2024 by rpki-client on console-ams.rpki-client.org