$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36372e302f32342d3234203d3e203137363731.roa File: 3230322e34372e36372e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: w769uUUipMs/uUHxqvnMNlNEUk4AcjLaU6DIorqs9HY= Subject key identifier: 21:BB:D7:DB:3E:78:21:26:40:2E:A7:63:97:99:14:C5:BA:D3:27:4D Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 6A516B8027222B01882C6E30221716C1F1F18E44 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36372e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 12:01:53 +0000 ROA not before: Sat 15 Jun 2024 11:56:53 +0000 ROA not after: Sat 14 Jun 2025 12:01:53 +0000 asID: 17671 IP address blocks: 202.47.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:51:6b:80:27:22:2b:01:88:2c:6e:30:22:17:16:c1:f1:f1:8e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 11:56:53 2024 GMT Not After : Jun 14 12:01:53 2025 GMT Subject: CN=21BBD7DB3E782126402EA763979914C5BAD3274D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:03:8e:67:f1:a0:72:6c:44:a5:48:cc:44: 81:7a:c1:4e:29:7b:2e:cd:5b:d1:19:55:68:d7:f4: 9f:5a:4b:31:f6:2e:b7:d5:af:c6:dd:68:37:69:d1: f2:2a:24:77:44:18:8d:42:0a:9d:e5:5a:a2:4b:7a: e2:94:69:52:d3:b2:65:0a:bd:09:76:ff:82:34:df: f6:ce:8b:2f:69:7e:36:2e:65:e0:e5:0d:8a:34:b2: 38:fb:b4:b2:2e:f6:5b:69:8f:0d:1a:df:16:3c:fd: ef:93:a7:ce:ef:f7:ea:25:ce:18:84:b8:9a:d0:d5: 55:f2:f0:3d:6d:b9:e5:0d:65:ff:1a:c2:65:be:36: 0c:ac:5f:af:53:7f:b7:75:66:d3:f5:a8:0d:82:f1: 1b:45:bb:57:41:3e:38:6f:91:05:70:6d:08:43:56: 5a:e5:30:cd:3d:21:f5:fb:00:14:27:a9:da:04:09: 8f:a6:bd:fb:44:b1:e5:2f:de:db:42:b0:a8:90:8c: 90:1d:13:06:63:eb:1d:a4:bd:67:8b:70:cd:fa:d4: 81:6a:6c:db:ae:a9:93:13:b4:17:89:75:5a:b9:c6: a0:c9:3a:a6:e8:48:90:c2:44:4e:e9:b7:9b:f1:a7: c0:f6:89:66:ec:d0:62:f2:2e:32:ec:dd:9a:ae:86: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BB:D7:DB:3E:78:21:26:40:2E:A7:63:97:99:14:C5:BA:D3:27:4D X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36372e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.67.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:d4:de:fe:f0:49:4c:63:a7:d1:19:8a:a6:c1:d8:38:f7:57: 75:15:48:6f:1a:ce:77:25:d1:62:67:cd:46:48:b4:05:bb:27: 22:66:8d:cf:12:22:7c:c9:66:c4:46:1a:16:8c:e9:0d:58:c2: 77:72:22:7e:ba:4b:f7:4b:54:3b:05:aa:81:34:a3:73:b1:c4: a5:d2:d5:9a:f7:ec:4f:b0:2a:b4:fd:be:6a:77:f0:be:08:13: 81:92:24:98:24:dc:99:0e:b9:ed:c9:ed:8e:dc:5b:f3:b7:b2: 27:34:92:07:e8:6c:49:9f:e0:fc:79:1b:b9:87:46:3e:8e:04: 47:23:6c:03:e4:54:46:52:35:2e:6d:11:69:4a:8f:71:52:a9: 19:b5:d8:83:93:dc:17:c4:f2:e8:4a:4e:4c:9a:2f:aa:39:6d: a9:af:c0:1c:81:40:26:50:48:5e:8a:c3:ae:9a:ce:55:f8:15: 7e:8a:cb:c1:1d:e7:9f:b8:47:51:93:c5:59:0a:83:3c:1c:05: 07:9b:ec:7e:96:92:7e:93:64:f1:c0:73:72:0c:73:4c:3e:00: fb:6e:e3:50:b0:dd:34:7d:de:8a:7c:54:9c:d4:87:e3:d2:21: 3a:e4:55:65:ff:37:20:6a:53:a9:8e:cc:91:2c:e6:cc:e7:82: 7d:cb:90:dd -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUalFrgCciKwGILG4wIhcWwfHxjkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMTU2NTNaFw0yNTA2MTQxMjAxNTNaMDMxMTAvBgNV BAMTKDIxQkJEN0RCM0U3ODIxMjY0MDJFQTc2Mzk3OTkxNEM1QkFEMzI3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALQOOZ/GgcmxEpUjMRIF6wU4p ey7NW9EZVWjX9J9aSzH2LrfVr8bdaDdp0fIqJHdEGI1CCp3lWqJLeuKUaVLTsmUK vQl2/4I03/bOiy9pfjYuZeDlDYo0sjj7tLIu9ltpjw0a3xY8/e+Tp87v9+olzhiE uJrQ1VXy8D1tueUNZf8awmW+NgysX69Tf7d1ZtP1qA2C8RtFu1dBPjhvkQVwbQhD VlrlMM09IfX7ABQnqdoECY+mvftEseUv3ttCsKiQjJAdEwZj6x2kvWeLcM361IFq bNuuqZMTtBeJdVq5xqDJOqboSJDCRE7pt5vxp8D2iWbs0GLyLjLs3ZquhsmrAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUIbvX2z54ISZALqdjl5kUxbrTJ00wHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzYzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0MwDQYJKoZIhvcN AQELBQADggEBAAzU3v7wSUxjp9EZiqbB2Dj3V3UVSG8azncl0WJnzUZItAW7JyJm jc8SInzJZsRGGhaM6Q1YwndyIn66S/dLVDsFqoE0o3OxxKXS1Zr37E+wKrT9vmp3 8L4IE4GSJJgk3JkOue3J7Y7cW/O3sic0kgfobEmf4Px5G7mHRj6OBEcjbAPkVEZS NS5tEWlKj3FSqRm12IOT3BfE8uhKTkyaL6o5bamvwByBQCZQSF6Kw66azlX4FX6K y8Ed55+4R1GTxVkKgzwcBQeb7H6Wkn6TZPHAc3IMc0w+APtu41Cw3TR93op8VJzU h+PSITrkVWX/NyBqU6mOzJEs5szngn3LkN0= -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org