$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa File: 3230322e34372e37302e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: vMb7ajGeGNPlBXrmstAemMn5dpepMEIIT3EbFiXhXVA= Subject key identifier: 3C:24:B6:19:38:92:33:63:3B:6B:C9:01:29:53:E2:05:59:5F:AE:73 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 48A476B83DEA37F6180BD3E23C99BE8CB6549B96 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 12:01:53 +0000 ROA not before: Sat 15 Jun 2024 11:56:53 +0000 ROA not after: Sat 14 Jun 2025 12:01:53 +0000 asID: 17671 IP address blocks: 202.47.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a4:76:b8:3d:ea:37:f6:18:0b:d3:e2:3c:99:be:8c:b6:54:9b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 11:56:53 2024 GMT Not After : Jun 14 12:01:53 2025 GMT Subject: CN=3C24B619389233633B6BC9012953E205595FAE73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:1b:af:bc:47:0e:0a:a7:05:1d:fe:b4:89: 5e:41:9b:46:40:d5:dc:62:1a:93:21:8c:ab:9d:98: 17:53:9b:fd:09:91:af:2a:bb:9f:fb:25:e8:ec:9d: 5d:ce:aa:94:53:db:27:f3:06:7a:8d:c8:a1:42:bd: 39:0f:f4:b6:f6:bb:7b:dc:18:ca:9d:b0:c0:3c:f6: bf:da:5d:b4:7a:9d:67:b6:14:0e:59:bd:16:f9:01: 6d:b6:a6:7f:b8:68:2e:7d:ed:83:07:81:a6:15:d6: 3d:c4:31:a6:7a:8c:ba:2c:0b:94:47:83:e1:8e:c3: 73:90:8d:1d:49:68:d8:5e:bc:8c:da:ae:a9:8b:78: fd:91:39:61:6e:f5:77:e9:68:1e:e4:a9:fb:aa:2b: 31:cc:0d:47:46:3b:44:03:05:bb:f6:66:4d:b5:c5: 54:ac:7d:13:ee:e0:25:78:88:55:83:c2:74:3f:57: f6:36:67:32:16:7e:4a:10:21:ae:f2:ea:85:63:45: 32:c7:29:22:4f:01:16:af:bb:15:ff:af:fa:7f:f5: 40:51:89:7b:67:57:5b:a1:00:42:78:db:7c:23:ea: 62:6e:6b:d9:c9:64:da:06:0e:d7:6c:92:c7:e0:c7: 5f:26:06:5c:51:b8:42:93:16:7d:d2:fa:8e:ef:9d: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:24:B6:19:38:92:33:63:3B:6B:C9:01:29:53:E2:05:59:5F:AE:73 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.70.0/24 Signature Algorithm: sha256WithRSAEncryption b5:9e:67:d7:32:08:48:5e:1c:11:f4:95:bd:9d:10:ba:8a:67: 2a:99:c5:2d:cd:f4:17:c7:92:26:12:e2:b9:15:5b:bf:1e:a7: 0a:d2:3b:86:7f:4b:f6:9b:bd:4a:1e:13:23:57:9e:ec:e8:c7: 88:66:74:f2:c2:38:b3:ba:1b:62:46:ee:e1:f5:53:78:1f:33: 6f:81:d7:21:73:3e:d0:77:ef:58:9d:5d:ac:f6:d5:cf:d4:52: 35:e4:5d:40:af:6f:2f:5e:11:bc:a2:88:66:10:25:6d:31:f0: ed:69:12:23:d5:4b:23:a5:25:3b:b7:5d:00:be:1c:07:69:c7: 0b:a5:de:02:07:a5:aa:4b:c9:e2:da:c9:d6:42:38:7d:1d:f7: e2:60:98:c4:12:e4:2d:6f:17:ca:be:34:d8:75:ea:f4:f7:ff: ea:b4:5a:63:54:fc:da:80:c9:77:fe:2f:dd:86:3a:f7:90:5f: 17:37:bc:34:40:52:63:81:42:2e:36:93:bf:73:50:29:50:0f: 7b:9a:9b:e7:e4:6b:02:7c:e9:99:c5:f5:f0:da:80:05:30:45: 01:b0:ee:b4:6e:0a:84:2d:04:68:35:f6:f2:70:3f:04:bc:42: e9:36:cd:79:64:bb:09:dc:6f:2e:69:8f:55:fd:4e:b6:cc:1e: 72:23:1f:cb -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSKR2uD3qN/YYC9PiPJm+jLZUm5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMTU2NTNaFw0yNTA2MTQxMjAxNTNaMDMxMTAvBgNV BAMTKDNDMjRCNjE5Mzg5MjMzNjMzQjZCQzkwMTI5NTNFMjA1NTk1RkFFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmexuvvEcOCqcFHf60iV5Bm0ZA 1dxiGpMhjKudmBdTm/0Jka8qu5/7JejsnV3OqpRT2yfzBnqNyKFCvTkP9Lb2u3vc GMqdsMA89r/aXbR6nWe2FA5ZvRb5AW22pn+4aC597YMHgaYV1j3EMaZ6jLosC5RH g+GOw3OQjR1JaNhevIzarqmLeP2ROWFu9XfpaB7kqfuqKzHMDUdGO0QDBbv2Zk21 xVSsfRPu4CV4iFWDwnQ/V/Y2ZzIWfkoQIa7y6oVjRTLHKSJPARavuxX/r/p/9UBR iXtnV1uhAEJ423wj6mJua9nJZNoGDtdsksfgx18mBlxRuEKTFn3S+o7vnbibAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUPCS2GTiSM2M7a8kBKVPiBVlfrnMwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0YwDQYJKoZIhvcN AQELBQADggEBALWeZ9cyCEheHBH0lb2dELqKZyqZxS3N9BfHkiYS4rkVW78epwrS O4Z/S/abvUoeEyNXnuzox4hmdPLCOLO6G2JG7uH1U3gfM2+B1yFzPtB371idXaz2 1c/UUjXkXUCvby9eEbyiiGYQJW0x8O1pEiPVSyOlJTu3XQC+HAdpxwul3gIHpapL yeLaydZCOH0d9+JgmMQS5C1vF8q+NNh16vT3/+q0WmNU/NqAyXf+L92GOveQXxc3 vDRAUmOBQi42k79zUClQD3uam+fkawJ86ZnF9fDagAUwRQGw7rRuCoQtBGg19vJw PwS8Quk2zXlkuwncby5pj1X9TrbMHnIjH8s= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org