$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37372e302f32342d3234203d3e203137363731.roa File: 3230322e34372e37372e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: 9DQPSz8dPD4buS4lBZNVbR8e62TrznKJIf7Jo80b/eQ= Subject key identifier: 87:6E:4E:0D:FA:C9:C1:88:9C:C4:38:8F:BE:56:CB:F7:34:9D:7D:5A Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 31B0306E34A48ACA688DBA33842A398A9F3C2F5C Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37372e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 12:01:53 +0000 ROA not before: Sat 15 Jun 2024 11:56:53 +0000 ROA not after: Sat 14 Jun 2025 12:01:53 +0000 asID: 17671 IP address blocks: 202.47.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b0:30:6e:34:a4:8a:ca:68:8d:ba:33:84:2a:39:8a:9f:3c:2f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 11:56:53 2024 GMT Not After : Jun 14 12:01:53 2025 GMT Subject: CN=876E4E0DFAC9C1889CC4388FBE56CBF7349D7D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:b9:c7:68:da:4a:f8:4b:95:44:65:6b:50: b4:ef:ef:10:23:61:60:e8:83:9a:03:c8:9d:79:b9: 71:b0:41:b6:cc:5f:97:c8:d4:db:f9:7f:f7:c3:1d: 3c:ed:fc:a5:51:c2:41:47:63:e6:e4:c9:99:44:14: 65:aa:73:42:48:d7:47:4c:9c:bb:fd:1a:64:3c:e4: 20:5a:54:42:c1:1d:2b:cc:29:23:16:1b:05:22:a8: a4:a3:a5:44:ad:19:63:96:97:99:a2:d9:96:02:b1: a4:79:1b:29:13:36:b0:16:cc:b2:a6:25:3f:c0:2f: 99:44:c9:61:77:77:8b:dd:2d:04:2e:53:56:89:08: ef:66:2d:65:7d:43:93:80:86:e7:a9:c0:eb:22:ff: 90:c6:97:1b:f1:68:05:a2:a4:57:17:94:82:36:0c: d0:cc:10:d6:f3:6d:21:59:a5:15:97:a1:3d:27:69: 4e:12:7a:0d:00:60:17:72:8f:34:96:d5:a0:63:a8: 0f:16:58:47:9f:f3:4a:ec:b1:9e:88:79:85:9c:de: d8:64:79:4f:f9:bc:39:0d:08:f9:a6:81:66:e7:e9: a3:f8:6b:50:20:47:1a:10:3d:48:b6:ae:86:e6:65: aa:e2:d6:b5:d8:39:12:46:8e:74:dd:a7:72:a3:13: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6E:4E:0D:FA:C9:C1:88:9C:C4:38:8F:BE:56:CB:F7:34:9D:7D:5A X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37372e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.77.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:44:6d:46:e9:60:b3:1e:0d:0d:8e:e5:57:72:71:ae:8d:66: 67:95:8d:6b:3e:8e:4b:f9:ab:49:63:7f:98:83:dd:de:aa:3a: c0:65:e4:b3:2a:0a:c9:9c:a5:44:0a:2a:4a:e1:dc:8e:9e:48: 09:ee:e8:3c:50:73:ec:11:d8:86:40:54:e9:17:ff:73:a6:98: b6:ad:6e:a7:b5:a9:50:a0:09:9c:6f:01:a8:fe:b5:e9:08:3c: 6e:8f:93:77:d7:06:e5:6c:6f:11:2c:05:84:a8:b6:94:e2:f3: 83:32:68:07:6c:b6:a0:73:10:a5:bf:da:1d:b9:83:04:74:fc: 94:67:d7:f1:28:bb:e3:67:e4:ed:0e:f9:d4:3c:15:dc:21:8d: ef:d5:e1:80:39:0e:c9:f8:ec:ed:dc:02:b4:6d:bb:de:33:8f: f3:43:7e:1f:04:e2:f2:a5:a7:59:00:63:7d:49:ed:58:68:49: fd:5c:cb:36:33:da:6f:d5:c2:32:08:e6:c0:8f:c7:df:60:64: 2f:31:04:ae:55:d9:a1:fb:ba:11:54:5f:17:95:85:c6:8a:4c: a8:78:c0:a1:09:52:5d:5e:6e:5b:44:53:0d:f6:ee:ea:2b:2c: 5c:9e:14:de:df:ea:b1:6d:4b:1c:90:a8:d3:36:4d:c4:19:43: 7e:f0:e5:cd -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUMbAwbjSkispojbozhCo5ip88L1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMTU2NTNaFw0yNTA2MTQxMjAxNTNaMDMxMTAvBgNV BAMTKDg3NkU0RTBERkFDOUMxODg5Q0M0Mzg4RkJFNTZDQkY3MzQ5RDdENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfjbnHaNpK+EuVRGVrULTv7xAj YWDog5oDyJ15uXGwQbbMX5fI1Nv5f/fDHTzt/KVRwkFHY+bkyZlEFGWqc0JI10dM nLv9GmQ85CBaVELBHSvMKSMWGwUiqKSjpUStGWOWl5mi2ZYCsaR5GykTNrAWzLKm JT/AL5lEyWF3d4vdLQQuU1aJCO9mLWV9Q5OAhuepwOsi/5DGlxvxaAWipFcXlII2 DNDMENbzbSFZpRWXoT0naU4Seg0AYBdyjzSW1aBjqA8WWEef80rssZ6IeYWc3thk eU/5vDkNCPmmgWbn6aP4a1AgRxoQPUi2robmZari1rXYORJGjnTdp3KjE2IjAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUh25ODfrJwYicxDiPvlbL9zSdfVowHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL00wDQYJKoZIhvcN AQELBQADggEBAD9EbUbpYLMeDQ2O5Vdyca6NZmeVjWs+jkv5q0ljf5iD3d6qOsBl 5LMqCsmcpUQKKkrh3I6eSAnu6DxQc+wR2IZAVOkX/3OmmLatbqe1qVCgCZxvAaj+ tekIPG6Pk3fXBuVsbxEsBYSotpTi84MyaAdstqBzEKW/2h25gwR0/JRn1/Eou+Nn 5O0O+dQ8Fdwhje/V4YA5Dsn47O3cArRtu94zj/NDfh8E4vKlp1kAY31J7VhoSf1c yzYz2m/VwjII5sCPx99gZC8xBK5V2aH7uhFUXxeVhcaKTKh4wKEJUl1ebltEUw32 7uorLFyeFN7f6rFtSxyQqNM2TcQZQ37w5c0= -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org