$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa File: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (raw, json) Hash identifier: Ni8K6MxuczEixPJW7FrAgC5kkezA9a+/a/29Cb7hSuw= Subject key identifier: 15:59:38:5D:4A:07:91:44:77:0A:E4:AE:62:80:16:28:84:F9:63:EA Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Certificate serial: 38E1333FA0788EEBA6804BF1A90A94F25C7538AE Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa Signing time: Wed 24 Jul 2024 14:00:00 +0000 ROA not before: Wed 24 Jul 2024 13:55:00 +0000 ROA not after: Wed 23 Jul 2025 14:00:00 +0000 asID: 38505 IP address blocks: 203.153.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e1:33:3f:a0:78:8e:eb:a6:80:4b:f1:a9:0a:94:f2:5c:75:38:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Validity Not Before: Jul 24 13:55:00 2024 GMT Not After : Jul 23 14:00:00 2025 GMT Subject: CN=1559385D4A079144770AE4AE6280162884F963EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:ad:27:c5:f0:46:16:04:65:f0:fb:57:66: c9:cd:b4:4b:82:af:7a:99:69:15:50:ad:48:45:9c: ec:8a:80:6d:50:8d:de:6b:2f:20:15:fa:2b:b7:15: b8:00:79:a9:b2:08:93:96:72:b6:e1:cf:32:a0:f1: ba:73:ae:51:e9:e7:42:a3:5b:28:bd:58:e1:e2:14: a1:52:23:25:f5:17:43:ff:63:cd:58:d5:97:7b:49: 77:70:8a:7a:4d:20:18:d7:fe:17:2b:a8:2b:09:de: b6:df:03:20:bc:5d:b6:28:0b:77:83:9f:5e:f7:76: 14:21:30:d7:74:af:c1:2a:84:0f:f7:b5:8a:e9:20: 0f:1d:12:f6:67:bf:2f:0f:c4:8d:53:e4:06:dd:82: 7a:d6:33:bd:de:9a:e4:8e:af:dc:0d:1c:de:8d:ad: 6e:37:69:cf:c9:56:0f:c5:9a:22:fd:b1:04:e4:6e: a3:ec:5e:38:90:4f:98:7c:d4:4c:a8:8c:49:80:e9: 0d:c5:d8:dd:58:3e:87:73:fc:2c:dd:a0:b0:08:5e: 03:ce:47:23:b0:87:ff:be:e5:ec:45:3f:4f:44:90: 0f:56:34:01:7d:65:1d:c3:b2:cf:d6:12:9b:c8:fb: b6:b9:09:23:78:55:3d:a7:8d:26:a7:f9:f6:d2:60: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:59:38:5D:4A:07:91:44:77:0A:E4:AE:62:80:16:28:84:F9:63:EA X509v3 Authority Key Identifier: keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.126.0/23 Signature Algorithm: sha256WithRSAEncryption 52:56:8e:a3:88:df:74:81:04:b2:c4:1e:8f:ad:f7:9d:c4:0d: 99:3f:b9:59:55:ab:78:44:7b:a8:16:f7:2d:ef:62:8d:78:41: 4b:21:90:a9:ae:55:dc:88:83:2c:29:57:77:91:16:1f:20:1d: 89:a5:76:88:ea:1f:99:ec:b3:6f:f1:b0:9c:a6:21:84:d2:1c: b9:e1:25:ed:23:7a:3e:cb:92:78:e8:fb:83:60:2c:67:aa:94: a1:01:01:97:ca:af:80:34:47:ca:c5:3a:98:99:a7:a9:38:73: a6:b1:d2:f9:7e:f9:6e:1e:bf:67:df:7d:b8:ac:5e:80:93:10: d0:15:d4:71:65:65:2d:1f:78:75:75:78:41:1e:77:a2:61:59: 75:5a:4e:23:23:16:64:7a:00:5b:76:a3:8c:48:5d:bf:01:03: 28:e4:3e:ef:e5:6b:da:6a:e1:16:25:36:a5:60:2c:df:10:16: 60:d6:1a:5e:e8:03:2a:f6:84:14:ec:37:13:fe:6a:b5:ec:73: 29:2e:77:56:1a:33:8f:0f:e5:77:2b:dd:74:17:fd:d8:de:8f: fd:89:ae:27:05:9f:1e:9f:a3:d4:96:fb:a9:37:4f:1f:8c:42: 9a:93:33:17:60:f8:4b:7f:6e:39:62:5a:11:a0:49:9a:5d:6e: 5e:5a:f1:6b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOOEzP6B4juumgEvxqQqU8lx1OK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE MTFEMzNBNjAeFw0yNDA3MjQxMzU1MDBaFw0yNTA3MjMxNDAwMDBaMDMxMTAvBgNV BAMTKDE1NTkzODVENEEwNzkxNDQ3NzBBRTRBRTYyODAxNjI4ODRGOTYzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsaa0nxfBGFgRl8PtXZsnNtEuC r3qZaRVQrUhFnOyKgG1Qjd5rLyAV+iu3FbgAeamyCJOWcrbhzzKg8bpzrlHp50Kj Wyi9WOHiFKFSIyX1F0P/Y81Y1Zd7SXdwinpNIBjX/hcrqCsJ3rbfAyC8XbYoC3eD n173dhQhMNd0r8EqhA/3tYrpIA8dEvZnvy8PxI1T5AbdgnrWM73emuSOr9wNHN6N rW43ac/JVg/FmiL9sQTkbqPsXjiQT5h81EyojEmA6Q3F2N1YPodz/CzdoLAIXgPO RyOwh/++5exFP09EkA9WNAF9ZR3Dss/WEpvI+7a5CSN4VT2njSan+fbSYMBbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFVk4XUoHkUR3CuSuYoAWKIT5Y+owHwYDVR0j BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE MzNBNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05 NjY1LThkNDc0ZmQxNGFlYS8wLzMyMzAzMzJlMzEzNTMzMmUzMTMyMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy5l+MA0GCSqG SIb3DQEBCwUAA4IBAQBSVo6jiN90gQSyxB6PrfedxA2ZP7lZVat4RHuoFvct72KN eEFLIZCprlXciIMsKVd3kRYfIB2JpXaI6h+Z7LNv8bCcpiGE0hy54SXtI3o+y5J4 6PuDYCxnqpShAQGXyq+ANEfKxTqYmaepOHOmsdL5fvluHr9n3324rF6AkxDQFdRx ZWUtH3h1dXhBHneiYVl1Wk4jIxZkegBbdqOMSF2/AQMo5D7v5WvaauEWJTalYCzf EBZg1hpe6AMq9oQU7DcT/mq17HMpLndWGjOPD+V3K910F/3Y3o/9ia4nBZ8en6PU lvupN08fjEKakzMXYPhLf245YloRoEmaXW5eWvFr -----END CERTIFICATE-----Generated at Thu Nov 21 05:34:32 2024 by rpki-client on console-ams.rpki-client.org