$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/34332e3234372e32322e302f32342d3234203d3e20313331373830.roa File: 34332e3234372e32322e302f32342d3234203d3e20313331373830.roa (raw, json) Hash identifier: HBRVL6ab1EXX/4v+TicYMdAP2m56HzSbazq4BRWuQH4= Subject key identifier: 11:8C:C2:95:D0:9D:52:BB:71:48:0F:EA:76:B8:7A:6F:AE:19:74:14 Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Certificate serial: 641FD8A01A78F4036A41E5D8F34301E79C6F8E07 Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/34332e3234372e32322e302f32342d3234203d3e20313331373830.roa Signing time: Fri 23 Aug 2024 12:00:01 +0000 ROA not before: Fri 23 Aug 2024 11:55:01 +0000 ROA not after: Fri 22 Aug 2025 12:00:01 +0000 asID: 131780 IP address blocks: 43.247.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1f:d8:a0:1a:78:f4:03:6a:41:e5:d8:f3:43:01:e7:9c:6f:8e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Validity Not Before: Aug 23 11:55:01 2024 GMT Not After : Aug 22 12:00:01 2025 GMT Subject: CN=118CC295D09D52BB71480FEA76B87A6FAE197414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:41:b1:88:6c:28:02:17:96:a1:7e:dc:0e: 90:c2:ec:66:54:46:ea:75:05:e2:7b:99:8f:21:bf: fa:b1:bf:ef:93:09:ad:0f:33:bd:26:a1:be:e9:84: 59:90:ba:ff:71:65:80:e3:10:4d:19:34:28:89:f3: 5a:d4:28:3f:ec:af:d0:9c:93:1d:f6:10:00:fd:89: 9e:4c:c3:a4:99:5e:4b:e8:e6:06:58:7d:c2:7b:1c: bf:46:05:79:b2:ac:6d:48:9a:73:fb:91:6a:fc:8d: b1:ea:3d:24:f2:33:d3:e8:2d:e6:3c:6b:f8:e1:75: 12:54:06:91:72:be:af:28:fe:05:35:ac:9d:5b:2a: 2e:16:92:ba:80:ff:03:cc:11:ee:51:92:89:ba:4d: 5b:39:a0:e3:23:16:74:00:53:41:23:fa:f7:be:c3: 0e:e4:2c:5d:b1:ea:9a:c2:9e:d7:c2:bd:03:9a:5b: 7c:6a:37:4b:8c:3d:07:87:22:3b:b5:c1:ca:3b:17: cd:d4:7e:e1:7f:d4:fe:e2:dd:82:2b:cd:61:3a:36: ae:99:3b:24:99:aa:45:f5:11:60:ff:8b:36:46:08: 1e:d5:8a:f2:1a:a6:fa:2f:4e:13:b0:8e:a1:e5:6f: f6:be:c0:c4:88:10:90:30:0e:87:45:6c:7f:bf:0f: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8C:C2:95:D0:9D:52:BB:71:48:0F:EA:76:B8:7A:6F:AE:19:74:14 X509v3 Authority Key Identifier: keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/34332e3234372e32322e302f32342d3234203d3e20313331373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.22.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:7c:c2:6a:a1:52:a4:01:55:2d:f5:19:d4:a0:02:44:41:c1: 24:45:66:2f:d0:47:61:43:14:2f:1a:63:62:14:42:4d:62:55: 2b:03:17:37:90:11:23:27:43:e8:3c:a6:a1:75:c6:1e:a5:4e: 29:64:38:d1:45:b5:ab:18:93:24:9a:ef:66:a3:b6:5f:91:d2: c8:97:98:04:4c:58:5d:02:fc:66:54:88:29:ab:c6:5f:13:84: 36:8e:06:50:be:1c:fc:8d:0f:2a:be:d2:e2:69:b2:69:61:fb: 0d:85:8a:60:d6:36:f5:d6:b2:ef:29:79:ab:47:2e:ae:54:b0: 3f:07:2b:e9:f7:97:ca:41:97:1c:3d:6a:a2:a9:44:de:ec:23: eb:99:cc:b2:14:d7:bb:e8:d4:ff:96:85:43:41:96:ea:80:60: b0:85:30:c6:ef:a9:36:b9:a6:f7:b0:2f:52:40:71:85:de:40: fa:2a:fb:b7:a0:42:9a:16:e3:a8:3e:0a:15:df:f9:4c:04:cc: 82:10:90:f2:cc:60:29:27:15:de:a5:84:f5:50:15:3d:a1:58: 27:fe:22:7f:44:d1:fb:9b:00:49:8e:44:7a:e0:1f:2a:3e:c1: 14:bb:47:92:d9:df:b8:1a:2f:75:b7:ea:54:cc:a6:87:24:38: 71:bc:f5:6c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZB/YoBp49ANqQeXY80MB55xvjgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC MjUwM0EzODAeFw0yNDA4MjMxMTU1MDFaFw0yNTA4MjIxMjAwMDFaMDMxMTAvBgNV BAMTKDExOENDMjk1RDA5RDUyQkI3MTQ4MEZFQTc2Qjg3QTZGQUUxOTc0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSUGxiGwoAheWoX7cDpDC7GZU Rup1BeJ7mY8hv/qxv++TCa0PM70mob7phFmQuv9xZYDjEE0ZNCiJ81rUKD/sr9Cc kx32EAD9iZ5Mw6SZXkvo5gZYfcJ7HL9GBXmyrG1ImnP7kWr8jbHqPSTyM9PoLeY8 a/jhdRJUBpFyvq8o/gU1rJ1bKi4WkrqA/wPMEe5Rkom6TVs5oOMjFnQAU0Ej+ve+ ww7kLF2x6prCntfCvQOaW3xqN0uMPQeHIju1wco7F83UfuF/1P7i3YIrzWE6Nq6Z OySZqkX1EWD/izZGCB7VivIapvovThOwjqHlb/a+wMSIEJAwDodFbH+/D83BAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUEYzCldCdUrtxSA/qdrh6b64ZdBQwHwYDVR0j BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw M0EzOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjNjY3NzY5LTgwZGMtNDA5My1i NWY3LWRmZTdjNTcyMDQ4Ni8wLzM0MzMyZTMyMzQzNzJlMzIzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv3FjANBgkqhkiG 9w0BAQsFAAOCAQEAbnzCaqFSpAFVLfUZ1KACREHBJEVmL9BHYUMULxpjYhRCTWJV KwMXN5ARIydD6DymoXXGHqVOKWQ40UW1qxiTJJrvZqO2X5HSyJeYBExYXQL8ZlSI KavGXxOENo4GUL4c/I0PKr7S4mmyaWH7DYWKYNY29day7yl5q0curlSwPwcr6feX ykGXHD1qoqlE3uwj65nMshTXu+jU/5aFQ0GW6oBgsIUwxu+pNrmm97AvUkBxhd5A +ir7t6BCmhbjqD4KFd/5TATMghCQ8sxgKScV3qWE9VAVPaFYJ/4if0TR+5sASY5E euAfKj7BFLtHktnfuBovdbfqVMymhyQ4cbz1bA== -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org