$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa File: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (raw, json) Hash identifier: EiocqLCh5acMXbZ6HiEfGJEU3SziY2qRKhtAWMOQoeA= Subject key identifier: 58:2A:4B:9F:86:6D:1A:F8:F4:5B:B8:E8:D7:A8:24:07:CA:29:C9:D5 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 4AE171246736B3CDA0205F4B739C3350A1B1937D Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa Signing time: Wed 09 Aug 2023 00:43:13 +0000 ROA not before: Wed 09 Aug 2023 00:38:13 +0000 ROA not after: Wed 07 Aug 2024 00:43:13 +0000 asID: 136873 IP address blocks: 223.25.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 10:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e1:71:24:67:36:b3:cd:a0:20:5f:4b:73:9c:33:50:a1:b1:93:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Aug 9 00:38:13 2023 GMT Not After : Aug 7 00:43:13 2024 GMT Subject: CN=582A4B9F866D1AF8F45BB8E8D7A82407CA29C9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:6e:3a:4c:07:2d:a4:46:5e:3b:df:3e:3c: d0:5b:57:b1:33:3b:1e:44:c9:70:ed:33:81:e6:61: 30:59:2d:59:c2:ae:69:1d:2d:b3:55:70:8b:1a:03: bc:c0:8b:80:51:2b:8a:61:8e:31:20:9d:a1:b7:c9: 98:59:d3:6b:e8:94:6c:4f:d8:a2:5d:43:8f:45:b8: 7f:c0:70:54:eb:bc:85:01:26:30:c0:bf:1f:77:ca: c2:3f:b9:f2:76:a8:48:fc:3f:f4:c7:c3:e0:fb:0d: d1:c3:44:fb:63:af:8e:c9:70:83:69:25:4e:70:95: e2:4b:e0:ef:be:b7:cc:e6:80:37:1c:e3:e3:f1:93: 8f:8b:2f:03:80:13:9f:66:f1:7d:94:bf:99:de:94: 22:59:ba:96:86:b7:14:ad:9a:7a:68:52:00:ea:3d: 13:f9:24:4b:30:0e:55:2c:bf:16:73:78:a1:f1:b1: 4b:d1:c8:ff:0a:10:4f:d9:07:15:36:35:fe:63:7f: b9:6e:91:eb:60:30:51:d7:0f:ed:81:3c:81:4d:9c: 42:e4:17:bb:bb:15:0e:21:6a:27:37:94:3f:54:1c: 5c:85:2c:40:e5:57:25:ab:42:1c:96:52:7b:b5:3c: 84:b5:54:ec:fa:a0:62:14:21:39:1c:e5:07:0d:65: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:4B:9F:86:6D:1A:F8:F4:5B:B8:E8:D7:A8:24:07:CA:29:C9:D5 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.106.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:38:6d:c1:ef:6c:97:f1:83:4a:8d:ec:1a:62:fd:b3:6f:60: 8d:d0:39:88:9e:e5:a2:7a:f3:ef:29:b8:94:af:e7:b7:16:85: a6:8f:71:d3:b3:82:17:42:8d:33:d6:09:2b:9e:c1:ec:c2:c2: be:a9:ce:3e:3c:c8:f6:0c:cb:16:8b:a2:bc:7e:c8:b5:1e:3d: b4:78:39:c4:96:09:03:68:57:a2:47:5f:2e:15:ac:3a:87:84: 01:be:c9:da:a8:17:cc:54:9c:08:94:08:57:be:e8:bf:f0:c2: c4:52:6d:31:4a:6d:5a:21:2b:01:a0:1e:7c:be:22:bb:09:70: 16:8d:c1:02:05:69:8f:4c:95:4c:7d:63:b1:8e:d3:fe:78:e6: b6:85:07:56:79:92:eb:f9:d3:85:1f:11:c3:e1:ad:af:a7:e7: c1:ff:65:d4:36:06:ac:9a:42:83:cf:7a:b3:45:0e:df:c8:a9: c6:8d:c6:4d:ea:03:b8:46:ae:df:2c:26:f6:1b:8e:5a:17:2b: 43:f5:67:5c:0b:69:c8:54:bb:db:04:17:0e:70:34:72:a8:ca: 0a:75:e1:0b:f7:c5:4d:cd:64:1d:eb:09:ac:8b:da:83:06:50: ac:88:55:20:07:55:77:e5:4e:49:c0:4b:63:51:5b:38:de:79: 5f:d1:b0:6d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSuFxJGc2s82gIF9Lc5wzUKGxk30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yMzA4MDkwMDM4MTNaFw0yNDA4MDcwMDQzMTNaMDMxMTAvBgNV BAMTKDU4MkE0QjlGODY2RDFBRjhGNDVCQjhFOEQ3QTgyNDA3Q0EyOUM5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0W46TActpEZeO98+PNBbV7Ez Ox5EyXDtM4HmYTBZLVnCrmkdLbNVcIsaA7zAi4BRK4phjjEgnaG3yZhZ02volGxP 2KJdQ49FuH/AcFTrvIUBJjDAvx93ysI/ufJ2qEj8P/THw+D7DdHDRPtjr47JcINp JU5wleJL4O++t8zmgDcc4+Pxk4+LLwOAE59m8X2Uv5nelCJZupaGtxStmnpoUgDq PRP5JEswDlUsvxZzeKHxsUvRyP8KEE/ZBxU2Nf5jf7luketgMFHXD+2BPIFNnELk F7u7FQ4haic3lD9UHFyFLEDlVyWrQhyWUnu1PIS1VOz6oGIUITkc5QcNZdyBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWCpLn4ZtGvj0W7jo16gkB8opydUwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xlqMA0GCSqG SIb3DQEBCwUAA4IBAQB8OG3B72yX8YNKjewaYv2zb2CN0DmInuWievPvKbiUr+e3 FoWmj3HTs4IXQo0z1gkrnsHswsK+qc4+PMj2DMsWi6K8fsi1Hj20eDnElgkDaFei R18uFaw6h4QBvsnaqBfMVJwIlAhXvui/8MLEUm0xSm1aISsBoB58viK7CXAWjcEC BWmPTJVMfWOxjtP+eOa2hQdWeZLr+dOFHxHD4a2vp+fB/2XUNgasmkKDz3qzRQ7f yKnGjcZN6gO4Rq7fLCb2G45aFytD9WdcC2nIVLvbBBcOcDRyqMoKdeEL98VNzWQd 6wmsi9qDBlCsiFUgB1V35U5JwEtjUVs43nlf0bBt -----END CERTIFICATE-----Generated at Sun May 5 12:23:54 2024 by rpki-client on console-fra.rpki-client.org