$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37382e302f32342d3234203d3e203137363731.roa File: 3230322e34372e37382e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: dkfbTiLU+wlmpeTcqOaUTw9MJeQ42zCTKo8eA2Q18sA= Subject key identifier: 9A:F8:93:73:F9:D8:A4:27:FA:02:59:17:EC:44:BD:32:8D:42:49:E3 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 1C1801A6097CA3F66692D28360DBC5AFA2CD8587 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37382e302f32342d3234203d3e203137363731.roa Signing time: Sat 15 Jun 2024 12:01:52 +0000 ROA not before: Sat 15 Jun 2024 11:56:52 +0000 ROA not after: Sat 14 Jun 2025 12:01:52 +0000 asID: 17671 IP address blocks: 202.47.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:18:01:a6:09:7c:a3:f6:66:92:d2:83:60:db:c5:af:a2:cd:85:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Jun 15 11:56:52 2024 GMT Not After : Jun 14 12:01:52 2025 GMT Subject: CN=9AF89373F9D8A427FA025917EC44BD328D4249E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:70:cb:db:0a:2f:75:b6:46:ea:03:f0:e9: e3:5a:6f:1b:ce:78:ad:eb:db:62:a1:99:be:38:ec: 1d:39:42:6e:13:dc:dd:ab:12:2e:ef:0e:5c:55:0d: 31:a5:54:4c:fd:96:58:49:c2:83:c6:31:d4:48:01: 9f:8e:b7:47:50:c0:bf:75:93:bb:27:20:6a:c9:8e: 8b:16:6c:ce:a4:c7:73:be:98:7f:6f:a4:6d:1f:8c: 71:4b:6e:c7:ca:26:24:d3:47:3f:7a:f8:1b:92:ca: 97:fd:f6:39:e1:85:ed:69:06:f5:87:c3:5d:46:88: 61:1f:70:2a:1b:9a:3b:41:c4:06:a2:69:14:fa:db: ca:43:ee:ca:94:5e:8a:de:61:7d:93:8f:49:24:46: 15:92:2b:96:48:6f:22:2e:d4:26:38:c9:0c:23:b8: f2:6a:62:0a:40:b2:a5:fb:7f:8f:c7:30:35:a0:7b: db:a3:a9:e8:17:26:57:26:5e:62:73:e7:de:94:ea: c1:7d:f4:84:f5:5c:19:e1:37:b3:1d:c9:91:f2:be: 36:e3:0f:74:ae:72:8f:1f:33:cb:8e:ce:69:8a:b4: 1d:ae:95:c9:a8:32:a4:af:bf:bd:5e:ea:2d:e4:bf: 0a:6f:76:82:b4:88:71:40:a4:19:b1:75:65:ed:0a: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F8:93:73:F9:D8:A4:27:FA:02:59:17:EC:44:BD:32:8D:42:49:E3 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37382e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.78.0/24 Signature Algorithm: sha256WithRSAEncryption b7:1b:9f:a0:33:8b:bc:6a:a5:53:64:2a:f1:b5:08:32:b2:e1: 5d:96:e4:cd:63:d0:aa:05:73:28:5a:bf:1f:82:10:ee:f6:3f: 43:da:4c:4c:2a:7c:c3:9d:b1:0e:40:0f:2d:5e:b2:5f:08:8a: ec:ca:84:b3:fc:c5:2b:a4:e4:70:06:ed:f1:d0:42:c7:68:30: 94:1f:cc:59:ed:90:fc:00:90:06:27:32:cd:8f:8d:80:01:1d: 4d:d2:3d:f1:69:2c:fc:b2:6b:9f:f0:02:89:37:2d:06:8a:f9: bd:19:70:5a:3a:5e:76:70:94:3a:b7:7b:59:00:16:0f:f2:a7: 0b:d6:5f:bb:c0:38:68:b8:fe:31:c8:f6:30:45:04:c7:39:f2: e9:94:b4:a4:b1:55:aa:6a:1e:e4:aa:3f:e2:55:05:ad:bf:f3: 85:0f:17:8a:1a:c9:c1:dc:a4:f6:6e:d1:23:a2:41:fa:7f:05: f0:ea:f2:17:a1:42:6a:83:f5:6a:97:5d:a2:38:cd:38:5f:ec: 68:05:fa:90:ac:a9:6d:d1:61:97:95:da:0c:2e:87:ad:a6:35: 01:50:16:e3:4d:7b:9e:f8:e0:cf:9f:be:cc:0d:70:15:89:8f: 5b:87:bd:25:0b:1a:7f:71:71:46:11:b1:29:20:66:63:43:a3: 02:1a:31:4e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHBgBpgl8o/ZmktKDYNvFr6LNhYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNDA2MTUxMTU2NTJaFw0yNTA2MTQxMjAxNTJaMDMxMTAvBgNV BAMTKDlBRjg5MzczRjlEOEE0MjdGQTAyNTkxN0VDNDRCRDMyOEQ0MjQ5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPT3DL2wovdbZG6gPw6eNabxvO eK3r22Khmb447B05Qm4T3N2rEi7vDlxVDTGlVEz9llhJwoPGMdRIAZ+Ot0dQwL91 k7snIGrJjosWbM6kx3O+mH9vpG0fjHFLbsfKJiTTRz96+BuSypf99jnhhe1pBvWH w11GiGEfcCobmjtBxAaiaRT628pD7sqUXoreYX2Tj0kkRhWSK5ZIbyIu1CY4yQwj uPJqYgpAsqX7f4/HMDWge9ujqegXJlcmXmJz596U6sF99IT1XBnhN7MdyZHyvjbj D3Suco8fM8uOzmmKtB2ulcmoMqSvv71e6i3kvwpvdoK0iHFApBmxdWXtCsEtAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUmviTc/nYpCf6AlkX7ES9Mo1CSeMwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL04wDQYJKoZIhvcN AQELBQADggEBALcbn6Azi7xqpVNkKvG1CDKy4V2W5M1j0KoFcyhavx+CEO72P0Pa TEwqfMOdsQ5ADy1esl8IiuzKhLP8xSuk5HAG7fHQQsdoMJQfzFntkPwAkAYnMs2P jYABHU3SPfFpLPyya5/wAok3LQaK+b0ZcFo6XnZwlDq3e1kAFg/ypwvWX7vAOGi4 /jHI9jBFBMc58umUtKSxVapqHuSqP+JVBa2/84UPF4oaycHcpPZu0SOiQfp/BfDq 8hehQmqD9WqXXaI4zThf7GgF+pCsqW3RYZeV2gwuh62mNQFQFuNNe5744M+fvswN cBWJj1uHvSULGn9xcUYRsSkgZmNDowIaMU4= -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org