$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32322d3234203d3e203233363739.roa File: 34332e3233302e3132382e302f32322d3234203d3e203233363739.roa (raw, json) Hash identifier: cM41Tn45FLBrYXDkVS/N6UFIkkMYVLE1GWoG1vVM5O0= Subject key identifier: 22:81:AF:B7:A4:51:53:AF:13:BE:DA:8B:48:10:1C:A0:26:58:2D:F6 Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E Certificate serial: 48E29B9AE14094C70298D8A7D7C3332640820084 Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32322d3234203d3e203233363739.roa Signing time: Tue 11 Jun 2024 04:00:01 +0000 ROA not before: Tue 11 Jun 2024 03:55:01 +0000 ROA not after: Tue 10 Jun 2025 04:00:01 +0000 asID: 23679 IP address blocks: 43.230.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 07:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e2:9b:9a:e1:40:94:c7:02:98:d8:a7:d7:c3:33:26:40:82:00:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E Validity Not Before: Jun 11 03:55:01 2024 GMT Not After : Jun 10 04:00:01 2025 GMT Subject: CN=2281AFB7A45153AF13BEDA8B48101CA026582DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:25:ef:2b:44:0d:ee:be:52:8a:6c:21:d1: 60:4f:47:bb:8a:4a:dc:c3:4c:e1:d7:d6:72:63:f3: 97:10:77:e4:61:04:e3:7f:6e:d5:db:90:82:18:92: 6e:9a:4f:09:7d:38:18:42:e6:dc:d6:43:88:41:73: ce:3d:b1:83:e4:54:96:ff:46:1c:3d:47:3f:79:cc: b8:2e:b5:88:72:c7:3f:8f:d9:ee:72:0b:4d:6f:07: 07:be:39:1e:a2:c2:4c:87:9a:e7:67:bf:49:5d:2e: c5:d7:55:f9:71:b1:22:fd:9e:23:0b:eb:f6:44:d0: 0c:2f:75:b3:16:a7:6b:38:47:eb:d6:74:de:92:02: 03:7d:3c:be:2e:ce:25:76:7a:b8:3d:e5:60:ba:ff: 16:b8:07:db:93:ee:33:51:a7:26:a1:45:86:43:7b: 1b:29:ef:f3:77:d2:78:5e:95:1a:9c:35:31:0a:1e: 3c:bc:2f:75:bb:ea:b5:90:aa:2e:bf:45:80:4f:ea: db:c0:53:66:b6:ec:ba:5a:c7:92:0c:4f:ad:bc:5e: e4:ee:bd:48:39:86:26:70:0f:87:9d:06:2f:00:8a: 1c:6b:a2:dc:4a:52:f8:01:f5:42:c0:c9:c4:d2:d9: fb:67:30:3b:46:42:76:9b:3a:38:b9:ca:cb:24:92: 23:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:81:AF:B7:A4:51:53:AF:13:BE:DA:8B:48:10:1C:A0:26:58:2D:F6 X509v3 Authority Key Identifier: keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32322d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.128.0/22 Signature Algorithm: sha256WithRSAEncryption 41:79:1b:88:f8:f7:2a:6a:58:cc:33:22:dd:e7:ca:cd:7f:83: 8f:0e:b5:af:a8:71:11:de:15:43:a2:7e:e1:ce:5e:a7:22:19: 64:bf:7e:49:31:ff:36:b7:d9:f4:b1:58:70:5b:6c:a7:27:8d: 72:9b:58:a7:b1:79:29:7a:3b:0d:4a:29:ed:06:27:b7:a4:ff: 1b:40:e8:80:90:d2:ce:c9:f0:f7:e9:8a:41:14:de:a7:8b:ec: 71:29:6e:49:60:37:30:90:20:17:a9:19:61:02:b0:c4:75:81: f5:b6:58:c0:80:36:a8:3c:8a:7f:1d:3f:9a:57:3b:42:86:c3: e7:9b:f1:c6:ba:53:c6:0f:65:e5:30:fc:41:83:3c:0c:6f:d1: 71:64:90:33:72:f7:fd:40:e0:12:fa:16:f5:ff:c6:15:6c:24: a7:85:18:b4:f1:12:b6:ba:33:9f:98:dd:b9:bf:27:8b:fb:96: bc:4b:29:96:2c:a1:4c:59:4c:2e:0f:09:3f:89:44:10:5b:04: 98:3d:08:2e:86:a5:8b:f2:bb:5d:5f:85:96:2e:f3:b0:8c:38: 0d:fa:22:d0:41:5b:b2:ee:b5:da:1f:c1:66:b4:c2:b2:93:e7: f4:66:23:62:2b:63:5a:e9:51:63:96:75:4c:20:dd:9c:f4:fb: 57:0b:8a:c7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSOKbmuFAlMcCmNin18MzJkCCAIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC NTlCRjkxRTAeFw0yNDA2MTEwMzU1MDFaFw0yNTA2MTAwNDAwMDFaMDMxMTAvBgNV BAMTKDIyODFBRkI3QTQ1MTUzQUYxM0JFREE4QjQ4MTAxQ0EwMjY1ODJERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0CXvK0QN7r5Simwh0WBPR7uK StzDTOHX1nJj85cQd+RhBON/btXbkIIYkm6aTwl9OBhC5tzWQ4hBc849sYPkVJb/ Rhw9Rz95zLgutYhyxz+P2e5yC01vBwe+OR6iwkyHmudnv0ldLsXXVflxsSL9niML 6/ZE0AwvdbMWp2s4R+vWdN6SAgN9PL4uziV2erg95WC6/xa4B9uT7jNRpyahRYZD exsp7/N30nhelRqcNTEKHjy8L3W76rWQqi6/RYBP6tvAU2a27Lpax5IMT628XuTu vUg5hiZwD4edBi8AihxrotxKUvgB9ULAycTS2ftnMDtGQnabOji5ysskkiNTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUIoGvt6RRU68TvtqLSBAcoCZYLfYwHwYDVR0j BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC RjkxRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzM0MzMyZTMyMzMzMDJlMzEzMjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAivmgDANBgkqhkiG 9w0BAQsFAAOCAQEAQXkbiPj3KmpYzDMi3efKzX+Djw61r6hxEd4VQ6J+4c5epyIZ ZL9+STH/NrfZ9LFYcFtspyeNcptYp7F5KXo7DUop7QYnt6T/G0DogJDSzsnw9+mK QRTep4vscSluSWA3MJAgF6kZYQKwxHWB9bZYwIA2qDyKfx0/mlc7QobD55vxxrpT xg9l5TD8QYM8DG/RcWSQM3L3/UDgEvoW9f/GFWwkp4UYtPEStrozn5jdub8ni/uW vEspliyhTFlMLg8JP4lEEFsEmD0ILoali/K7XV+Fli7zsIw4Dfoi0EFbsu612h/B ZrTCspPn9GYjYitjWulRY5Z1TCDdnPT7VwuKxw== -----END CERTIFICATE-----Generated at Sun Jun 16 09:16:19 2024 by rpki-client on console-ams.rpki-client.org