$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa File: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (raw, json) Hash identifier: rCOH3xxAAfj1pNlzN0wjwUk5FjWuLhDJdIwrQTwN1l8= Subject key identifier: 4A:16:00:CE:4A:2E:67:37:80:FE:F9:42:9D:B6:7F:3F:3A:07:61:BA Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 7FE0FE91AD75591CD1C6E0152EEE924108700F2D Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa Signing time: Mon 08 Apr 2024 05:00:01 +0000 ROA not before: Mon 08 Apr 2024 04:55:01 +0000 ROA not after: Mon 07 Apr 2025 05:00:01 +0000 asID: 136873 IP address blocks: 223.25.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 10:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e0:fe:91:ad:75:59:1c:d1:c6:e0:15:2e:ee:92:41:08:70:0f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Apr 8 04:55:01 2024 GMT Not After : Apr 7 05:00:01 2025 GMT Subject: CN=4A1600CE4A2E673780FEF9429DB67F3F3A0761BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:dd:0b:e1:db:2e:02:27:2d:81:32:22:31: 55:4a:f7:ea:e6:66:82:be:01:7b:5e:8f:bf:3f:bb: 05:56:eb:8c:35:3c:c7:ae:4c:0c:97:56:a4:05:5a: 43:1f:a5:f3:b0:6c:5e:3d:c2:bf:a8:e4:68:45:a5: 9e:03:57:d4:3f:39:8b:f5:b6:91:41:03:f3:fb:3d: 1c:71:e7:49:35:2a:0c:eb:dd:11:6d:4d:57:5a:e3: dc:21:3a:5a:67:f7:e7:a5:9c:d5:d4:9a:60:7f:ce: 83:82:32:8a:e7:b2:1d:3a:5a:27:42:1a:21:f7:8d: fc:dd:8b:fd:f3:8c:19:c6:75:68:1b:76:52:ac:0c: 89:0c:a5:3f:fa:f4:64:d6:1f:18:f3:80:3a:35:54: 0e:0f:93:61:75:44:61:34:f0:27:60:8c:34:2a:66: e5:b8:5d:6a:dc:bb:b6:f5:ee:6d:fb:b4:7e:b5:96: 90:69:91:5e:08:b2:3d:fa:7a:73:82:bc:a9:92:e7: 78:a8:09:3e:12:12:de:c5:bf:77:d3:66:03:89:f2: b6:81:a2:5c:fd:6b:8d:8e:ed:7e:e7:f8:e8:49:46: 41:9c:c7:3e:bc:4b:ce:7c:d6:8d:dd:4a:41:6c:b4: 00:e6:21:6d:b7:6e:65:b8:59:da:01:d8:25:6b:67: 0e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:16:00:CE:4A:2E:67:37:80:FE:F9:42:9D:B6:7F:3F:3A:07:61:BA X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.110.0/24 Signature Algorithm: sha256WithRSAEncryption 93:5a:af:ad:17:41:a0:bc:73:b5:7f:2d:15:73:05:79:fd:58: 78:79:5b:c0:82:fd:a0:2a:aa:f0:c0:66:d4:97:a8:b5:a0:06: 1e:39:b9:b1:ea:2c:27:4d:f0:11:0e:4c:bd:03:fa:01:2c:70: 07:00:33:b7:b5:5b:91:08:d2:33:80:1a:bd:75:aa:8c:e6:f0: 9a:5c:a9:d0:ec:fb:21:05:80:f6:5b:b0:aa:2e:86:70:11:d2: 46:30:17:bc:db:70:29:66:6f:4e:9b:29:cc:94:68:08:04:74: a3:2d:97:83:eb:79:82:64:b2:71:5c:36:a2:0d:2b:e5:73:55: 0a:76:c9:78:4c:b1:af:3b:80:05:ef:38:4f:d1:43:74:62:ad: 46:d0:0b:2e:17:74:be:e9:00:02:cd:7b:f4:e9:4f:61:1b:4f: 42:74:eb:bd:22:c8:c9:64:1a:5e:32:71:8c:c5:3c:7e:66:ba: c0:b8:b2:32:f5:50:e7:2a:1f:7f:f6:c0:ed:71:13:93:2e:4f: c3:31:34:9f:f4:ae:f4:07:b9:40:eb:2f:bb:3e:2f:ff:a1:54: a4:b5:69:a5:43:7c:e6:00:ae:ca:b4:d1:41:9d:a7:c4:d9:a2: f1:83:21:dc:e3:e3:3d:be:76:9a:dc:43:70:f9:9a:b4:3e:07: e2:76:b0:18 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUf+D+ka11WRzRxuAVLu6SQQhwDy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNDA0MDgwNDU1MDFaFw0yNTA0MDcwNTAwMDFaMDMxMTAvBgNV BAMTKDRBMTYwMENFNEEyRTY3Mzc4MEZFRjk0MjlEQjY3RjNGM0EwNzYxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSt0L4dsuAictgTIiMVVK9+rm ZoK+AXtej78/uwVW64w1PMeuTAyXVqQFWkMfpfOwbF49wr+o5GhFpZ4DV9Q/OYv1 tpFBA/P7PRxx50k1Kgzr3RFtTVda49whOlpn9+elnNXUmmB/zoOCMornsh06WidC GiH3jfzdi/3zjBnGdWgbdlKsDIkMpT/69GTWHxjzgDo1VA4Pk2F1RGE08CdgjDQq ZuW4XWrcu7b17m37tH61lpBpkV4Isj36enOCvKmS53ioCT4SEt7Fv3fTZgOJ8raB olz9a42O7X7n+OhJRkGcxz68S8581o3dSkFstADmIW23bmW4WdoB2CVrZw5xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUShYAzkouZzeA/vlCnbZ/PzoHYbowHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xluMA0GCSqG SIb3DQEBCwUAA4IBAQCTWq+tF0GgvHO1fy0VcwV5/Vh4eVvAgv2gKqrwwGbUl6i1 oAYeObmx6iwnTfARDky9A/oBLHAHADO3tVuRCNIzgBq9daqM5vCaXKnQ7PshBYD2 W7CqLoZwEdJGMBe823ApZm9OmynMlGgIBHSjLZeD63mCZLJxXDaiDSvlc1UKdsl4 TLGvO4AF7zhP0UN0Yq1G0AsuF3S+6QACzXv06U9hG09CdOu9IsjJZBpeMnGMxTx+ ZrrAuLIy9VDnKh9/9sDtcROTLk/DMTSf9K70B7lA6y+7Pi//oVSktWmlQ3zmAK7K tNFBnafE2aLxgyHc4+M9vnaa3ENw+Zq0PgfidrAY -----END CERTIFICATE-----Generated at Sun May 5 11:44:51 2024 by rpki-client on console-ams.rpki-client.org