$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e20313533313230.roa File: 3230322e34372e36342e302f32342d3234203d3e20313533313230.roa (raw, json) Hash identifier: yOQv2qa2RDEze+O/kIWFcX33n9ITibKc1r4xv21zpE4= Subject key identifier: C0:6C:85:26:D6:DF:C8:7C:E3:4D:A5:FC:BE:B1:9A:64:B5:1D:21:04 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 6260F8A8A24F97C059B33BA4FD2602A2DB3EFA2F Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e20313533313230.roa Signing time: Tue 15 Oct 2024 04:23:29 +0000 ROA not before: Tue 15 Oct 2024 04:18:29 +0000 ROA not after: Tue 14 Oct 2025 04:23:29 +0000 asID: 153120 IP address blocks: 202.47.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:60:f8:a8:a2:4f:97:c0:59:b3:3b:a4:fd:26:02:a2:db:3e:fa:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Oct 15 04:18:29 2024 GMT Not After : Oct 14 04:23:29 2025 GMT Subject: CN=C06C8526D6DFC87CE34DA5FCBEB19A64B51D2104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:80:66:05:19:a5:4b:a9:06:77:c7:7d:e9: 3d:13:39:68:94:73:1f:85:6e:f8:2f:ba:c7:1e:7e: ea:58:6f:f0:a8:f3:13:b9:d6:b0:f8:12:c1:35:42: 7d:20:b3:b4:93:0d:55:9b:63:1d:5b:86:03:de:21: 7f:25:80:67:17:db:74:1d:a7:a0:20:bf:84:32:10: d7:fd:15:4e:cd:b7:02:3d:aa:6a:45:c9:a5:fe:55: b3:a2:15:93:a4:25:2c:46:df:a1:f5:bf:45:aa:52: 5c:fd:2e:1a:21:05:a7:b2:83:1c:6d:7a:7c:1a:9b: ac:0d:46:a3:62:99:47:5b:e4:e8:fb:e7:eb:98:48: 20:73:0f:dd:f7:07:1c:24:70:85:15:a0:7f:08:00: 7e:26:0f:4c:42:ce:4b:27:3b:c8:db:7d:57:b4:a9: 18:7d:e8:82:5b:ed:e3:63:de:a5:d3:6c:69:1b:23: 0d:d0:2a:d2:35:b4:34:c4:69:ef:32:99:56:e1:e3: 9a:3f:f4:24:96:0f:73:05:cd:0d:8a:1a:90:b8:24: cc:4b:07:1a:f8:33:52:44:f6:a6:75:38:03:2c:e8: 99:ed:8a:a5:9b:c5:95:23:2e:c9:07:ff:ec:ea:31: 4a:61:74:2d:b7:8e:25:9d:18:2a:65:86:25:39:00: 15:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6C:85:26:D6:DF:C8:7C:E3:4D:A5:FC:BE:B1:9A:64:B5:1D:21:04 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e20313533313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.64.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:54:89:d7:30:ce:a7:ac:6e:c6:ce:56:a5:eb:9c:53:2d:aa: e9:29:12:a0:33:74:73:10:dd:16:2f:74:e0:51:7d:cc:41:b6: 9b:ba:b4:3e:5a:c1:99:2c:f1:58:20:5d:ca:c8:2a:19:f2:d3: a7:a6:43:aa:24:04:2b:ed:a1:21:92:f8:44:e0:45:06:16:f9: c6:ae:3d:9f:b9:d2:d4:32:6c:84:e0:15:b5:df:a4:52:05:5e: c9:3f:bf:ae:73:48:e9:82:bd:38:07:33:17:98:20:a6:4e:34: eb:af:41:da:19:31:f0:4b:3a:1d:36:53:20:43:9f:43:e5:28: fc:2c:d4:49:67:6a:45:db:4e:c0:83:b0:2c:e3:fa:9b:f2:7f: e2:df:2f:5e:84:91:25:5e:73:93:40:42:e8:c6:2d:e4:05:28: 70:79:1e:97:73:5d:e3:6b:83:38:b8:d6:87:32:92:13:7f:37: 71:54:ee:4c:de:43:31:05:32:07:55:a2:fc:75:04:fd:95:71: 30:cb:70:97:1d:e1:fd:50:18:dc:1f:56:cd:dc:28:2d:56:c6: 33:4f:24:9e:ae:64:c2:78:c5:e8:18:79:54:1a:7d:86:bc:2c: 9a:d3:d3:7c:61:12:95:ad:49:15:04:4c:f4:4b:9b:c0:1d:5e: e0:f7:66:3d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYmD4qKJPl8BZszuk/SYCots++i8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDEwMTUwNDE4MjlaFw0yNTEwMTQwNDIzMjlaMDMxMTAvBgNV BAMTKEMwNkM4NTI2RDZERkM4N0NFMzREQTVGQ0JFQjE5QTY0QjUxRDIxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgoBmBRmlS6kGd8d96T0TOWiU cx+FbvgvuscefupYb/Co8xO51rD4EsE1Qn0gs7STDVWbYx1bhgPeIX8lgGcX23Qd p6Agv4QyENf9FU7NtwI9qmpFyaX+VbOiFZOkJSxG36H1v0WqUlz9LhohBaeygxxt enwam6wNRqNimUdb5Oj75+uYSCBzD933BxwkcIUVoH8IAH4mD0xCzksnO8jbfVe0 qRh96IJb7eNj3qXTbGkbIw3QKtI1tDTEae8ymVbh45o/9CSWD3MFzQ2KGpC4JMxL Bxr4M1JE9qZ1OAMs6JntiqWbxZUjLskH/+zqMUphdC23jiWdGCplhiU5ABWVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwGyFJtbfyHzjTaX8vrGaZLUdIQQwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzYzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMovQDANBgkqhkiG 9w0BAQsFAAOCAQEAalSJ1zDOp6xuxs5WpeucUy2q6SkSoDN0cxDdFi904FF9zEG2 m7q0PlrBmSzxWCBdysgqGfLTp6ZDqiQEK+2hIZL4ROBFBhb5xq49n7nS1DJshOAV td+kUgVeyT+/rnNI6YK9OAczF5ggpk40669B2hkx8Es6HTZTIEOfQ+Uo/CzUSWdq RdtOwIOwLOP6m/J/4t8vXoSRJV5zk0BC6MYt5AUocHkel3Nd42uDOLjWhzKSE383 cVTuTN5DMQUyB1Wi/HUE/ZVxMMtwlx3h/VAY3B9WzdwoLVbGM08knq5kwnjF6Bh5 VBp9hrwsmtPTfGESla1JFQRM9EubwB1e4PdmPQ== -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org