$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e39362e302f32342d3234203d3e203536323431.roa File: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (raw, json) Hash identifier: Qn9apBGjQBVCcad6HISv3b7df2u+b4JoEgV/5o9l6f8= Subject key identifier: B5:D2:BB:41:06:4E:2A:63:A7:EE:4F:C8:F3:33:E6:A2:D8:E6:68:2A Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 17D4BFF2E0D346EE34ED673796B499DBC5B917C9 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e39362e302f32342d3234203d3e203536323431.roa Signing time: Thu 13 Jul 2023 07:43:56 +0000 ROA not before: Thu 13 Jul 2023 07:38:56 +0000 ROA not after: Thu 11 Jul 2024 07:43:56 +0000 asID: 56241 IP address blocks: 203.99.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d4:bf:f2:e0:d3:46:ee:34:ed:67:37:96:b4:99:db:c5:b9:17:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Jul 13 07:38:56 2023 GMT Not After : Jul 11 07:43:56 2024 GMT Subject: CN=B5D2BB41064E2A63A7EE4FC8F333E6A2D8E6682A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:e5:e8:06:75:61:a9:6d:51:73:0f:92:ce: 87:e1:b2:f0:fd:56:19:3f:63:ee:05:0e:ef:d9:b9: 32:f4:25:67:d9:fc:57:f3:f2:d9:f3:5f:27:65:03: 52:6c:b3:d8:92:53:10:79:9f:90:17:d0:00:bb:26: 16:c7:6c:fb:c8:c3:55:2b:fe:b4:d9:5a:5d:24:80: a2:70:4d:7b:8d:37:8a:73:be:54:c0:56:4b:1c:92: f1:ea:a4:6c:35:30:40:87:63:ba:c4:9a:4d:2f:fe: 2c:4d:b3:c3:e6:b9:34:57:5b:bf:55:30:a8:17:7a: 02:44:be:ca:5f:60:e1:be:a1:99:2a:04:fe:d7:59: 9d:d4:2d:8d:2e:78:5c:2b:b4:af:27:2d:88:84:bc: 30:f9:88:9e:c4:ae:61:82:42:87:04:7a:5f:4b:88: 0a:28:7a:e0:66:5b:23:67:54:8c:98:96:ce:cf:81: de:b9:12:b3:c8:07:8a:75:71:61:d7:19:6b:09:bb: 28:79:f5:ef:f5:30:02:6c:c0:6d:36:16:16:f8:19: 5c:b9:1c:76:6e:36:46:4a:4d:d7:02:8c:20:32:cb: f6:c0:ea:34:d1:01:5f:45:41:9f:92:51:f5:45:f3: 3e:0c:eb:a8:08:e8:2c:a6:9a:59:14:07:18:eb:13: 75:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D2:BB:41:06:4E:2A:63:A7:EE:4F:C8:F3:33:E6:A2:D8:E6:68:2A X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e39362e302f32342d3234203d3e203536323431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.96.0/24 Signature Algorithm: sha256WithRSAEncryption 57:a1:d4:77:6d:85:bc:60:3f:a7:9f:c2:96:9e:e9:18:dd:43: 09:d9:86:46:b1:4c:19:9d:5b:c8:a8:cd:22:23:f4:03:c6:e1: 39:a7:b6:3b:54:7b:3c:9f:2a:4c:37:67:c7:1c:12:03:26:16: a5:d5:da:c6:b3:16:f1:48:2b:09:c7:a3:72:f9:33:8b:b0:0f: 79:b1:f0:4b:56:e3:8a:4c:87:b1:03:47:33:7d:18:eb:84:7c: a4:9d:0a:07:45:78:e1:8c:e9:bf:d0:a9:6f:9f:f8:e2:fe:23: b3:4b:51:f4:5f:66:b5:3a:e7:de:aa:c3:e6:84:98:dd:3a:df: 30:f2:de:4a:c6:a5:70:a7:e4:75:a2:7e:24:ec:23:ec:c3:7c: e3:15:cc:59:bc:dc:a0:36:ea:2b:6b:34:03:77:43:b1:b2:31: 05:e6:a5:ba:85:47:af:82:98:e5:f3:e2:8b:fd:50:8c:10:7f: 2d:8a:eb:20:a0:87:81:d3:57:33:ef:37:f0:b3:57:7d:75:04: fc:14:c4:ba:e2:31:aa:16:c0:6b:21:eb:37:9a:04:5a:19:d6: e3:58:cf:85:9b:b6:67:c4:7d:5e:d9:51:5c:68:7f:e2:cb:b1: 1d:c7:04:a6:74:f6:2c:f7:51:51:b5:ed:c1:57:04:a6:90:a9: 8b:61:dd:4a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUF9S/8uDTRu407Wc3lrSZ28W5F8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yMzA3MTMwNzM4NTZaFw0yNDA3MTEwNzQzNTZaMDMxMTAvBgNV BAMTKEI1RDJCQjQxMDY0RTJBNjNBN0VFNEZDOEYzMzNFNkEyRDhFNjY4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4OXoBnVhqW1Rcw+SzofhsvD9 Vhk/Y+4FDu/ZuTL0JWfZ/Ffz8tnzXydlA1Jss9iSUxB5n5AX0AC7JhbHbPvIw1Ur /rTZWl0kgKJwTXuNN4pzvlTAVksckvHqpGw1MECHY7rEmk0v/ixNs8PmuTRXW79V MKgXegJEvspfYOG+oZkqBP7XWZ3ULY0ueFwrtK8nLYiEvDD5iJ7ErmGCQocEel9L iAooeuBmWyNnVIyYls7Pgd65ErPIB4p1cWHXGWsJuyh59e/1MAJswG02Fhb4GVy5 HHZuNkZKTdcCjCAyy/bA6jTRAV9FQZ+SUfVF8z4M66gI6CymmlkUBxjrE3UrAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUtdK7QQZOKmOn7k/I8zPmotjmaCowHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzkzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzYzMjM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLY2AwDQYJKoZIhvcN AQELBQADggEBAFeh1HdthbxgP6efwpae6RjdQwnZhkaxTBmdW8iozSIj9APG4Tmn tjtUezyfKkw3Z8ccEgMmFqXV2sazFvFIKwnHo3L5M4uwD3mx8EtW44pMh7EDRzN9 GOuEfKSdCgdFeOGM6b/QqW+f+OL+I7NLUfRfZrU6596qw+aEmN063zDy3krGpXCn 5HWifiTsI+zDfOMVzFm83KA26itrNAN3Q7GyMQXmpbqFR6+CmOXz4ov9UIwQfy2K 6yCgh4HTVzPvN/CzV311BPwUxLriMaoWwGsh6zeaBFoZ1uNYz4WbtmfEfV7ZUVxo f+LLsR3HBKZ09iz3UVG17cFXBKaQqYth3Uo= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:09 2024 by rpki-client on console-fra.rpki-client.org