$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37352e302f32342d3234203d3e203137363731.roa File: 3230322e34372e37352e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: Rlf/ITLVwDsfzIAxpZN0azaHMqrrY3ULFE5bKpNuIzo= Subject key identifier: 71:4D:E2:07:70:7B:39:19:82:7C:B1:5E:A0:AE:A7:3C:B0:29:AC:84 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 53DA390C41D7EDDB992F7D33071D9420162FBE55 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37352e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 11:00:03 +0000 ROA not before: Sat 15 Jun 2024 10:55:03 +0000 ROA not after: Sat 14 Jun 2025 11:00:03 +0000 asID: 17671 IP address blocks: 202.47.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:da:39:0c:41:d7:ed:db:99:2f:7d:33:07:1d:94:20:16:2f:be:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 10:55:03 2024 GMT Not After : Jun 14 11:00:03 2025 GMT Subject: CN=714DE207707B3919827CB15EA0AEA73CB029AC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f2:89:41:dd:a3:05:f2:71:b3:24:10:86:a4: 56:c6:57:11:52:f1:ce:5c:ed:43:4c:e3:aa:d3:70: 4c:d5:31:6e:1f:d3:4e:af:8d:98:c9:fe:9e:06:9b: 5e:8b:b2:3e:9e:78:b2:1c:01:89:46:4b:b0:64:42: 3c:d6:99:77:33:6c:f7:71:f0:50:6c:1b:9a:a3:97: 05:a6:d1:92:67:79:7b:cd:f4:12:ea:ae:c4:5f:10: c6:9a:6c:a1:99:22:4c:45:fa:89:48:f9:09:03:6e: 29:88:92:fb:5a:59:be:21:89:72:d3:01:c4:0e:a6: d8:99:60:da:17:f3:60:93:df:d9:3e:69:96:97:68: 92:6e:7c:e7:9b:3f:47:b8:2a:fd:3a:f8:8d:f8:e4: a2:db:d7:8e:35:cc:27:95:56:e7:4b:83:a6:54:d7: 2f:d1:3a:20:03:70:b3:f7:ad:d4:a9:fc:fa:ea:c2: e5:15:5f:a0:b6:26:71:69:ff:8d:76:a7:8c:a1:4a: 7e:66:d2:4a:84:a2:86:92:aa:a1:17:4c:88:de:35: 7b:71:6d:a0:0c:d4:2e:72:05:64:35:8a:fe:b9:fb: c9:06:85:ff:bb:f6:f2:66:1b:cf:7a:12:f4:1c:5a: 10:01:71:3e:1e:e1:ab:98:6e:aa:27:f4:14:8d:25: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4D:E2:07:70:7B:39:19:82:7C:B1:5E:A0:AE:A7:3C:B0:29:AC:84 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37352e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.75.0/24 Signature Algorithm: sha256WithRSAEncryption ae:d3:69:b7:32:b9:94:e0:b7:87:32:21:a0:d7:06:79:c3:0d: b5:15:53:13:29:80:1b:b4:8c:44:4e:22:98:b5:66:9c:31:58: 9d:60:3d:de:94:7e:71:ce:ce:fe:89:cd:ad:09:2c:e6:c9:a9: 4b:52:c7:14:a4:ca:dd:80:a2:65:01:b0:08:06:a9:1d:a5:da: 6e:d4:14:2b:67:67:fe:89:fc:b0:50:49:e8:2a:19:f0:8a:07: da:f5:7c:bd:24:98:af:87:83:b8:09:0a:7d:74:37:ed:e8:6b: 35:84:8f:fa:b1:54:12:cc:a5:8e:54:14:e8:fb:c6:82:77:5c: de:12:be:0e:16:d0:d9:84:f4:15:15:cf:6a:af:7d:9a:f8:16: 5e:dd:f4:b8:87:2d:2e:8b:52:ba:da:12:a0:3d:e8:11:5c:d8: 53:d9:3d:8d:28:23:bf:0d:62:03:16:04:1e:c2:5f:42:9c:10: 15:e1:84:f4:32:cc:92:12:8b:bf:b3:32:1a:4d:89:92:4e:e4: 8f:e3:be:66:5d:97:35:5f:91:89:08:06:19:27:12:df:50:4b: 1c:f6:c6:f9:f2:ff:d6:a2:56:38:d0:d4:a7:f3:d6:bd:e0:39: 9a:f8:cf:4b:70:3f:eb:01:f3:92:55:2d:f6:48:1c:d2:c9:7e: cf:cd:82:3a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUU9o5DEHX7duZL30zBx2UIBYvvlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMDU1MDNaFw0yNTA2MTQxMTAwMDNaMDMxMTAvBgNV BAMTKDcxNERFMjA3NzA3QjM5MTk4MjdDQjE1RUEwQUVBNzNDQjAyOUFDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8olB3aMF8nGzJBCGpFbGVxFS 8c5c7UNM46rTcEzVMW4f006vjZjJ/p4Gm16Lsj6eeLIcAYlGS7BkQjzWmXczbPdx 8FBsG5qjlwWm0ZJneXvN9BLqrsRfEMaabKGZIkxF+olI+QkDbimIkvtaWb4hiXLT AcQOptiZYNoX82CT39k+aZaXaJJufOebP0e4Kv06+I345KLb1441zCeVVudLg6ZU 1y/ROiADcLP3rdSp/PrqwuUVX6C2JnFp/412p4yhSn5m0kqEooaSqqEXTIjeNXtx baAM1C5yBWQ1iv65+8kGhf+79vJmG896EvQcWhABcT4e4auYbqon9BSNJSfJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUcU3iB3B7ORmCfLFeoK6nPLAprIQwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0swDQYJKoZIhvcN AQELBQADggEBAK7TabcyuZTgt4cyIaDXBnnDDbUVUxMpgBu0jEROIpi1ZpwxWJ1g Pd6UfnHOzv6Jza0JLObJqUtSxxSkyt2AomUBsAgGqR2l2m7UFCtnZ/6J/LBQSegq GfCKB9r1fL0kmK+Hg7gJCn10N+3oazWEj/qxVBLMpY5UFOj7xoJ3XN4Svg4W0NmE 9BUVz2qvfZr4Fl7d9LiHLS6LUrraEqA96BFc2FPZPY0oI78NYgMWBB7CX0KcEBXh hPQyzJISi7+zMhpNiZJO5I/jvmZdlzVfkYkIBhknEt9QSxz2xvny/9aiVjjQ1Kfz 1r3gOZr4z0twP+sB85JVLfZIHNLJfs/Ngjo= -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org