$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138352e302f32342d3234203d3e203633383237.roa File: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (raw, json) Hash identifier: d6Eei0Mi3Z0MIL/gTjyKioJhC1+Xma/Y2mDdx7nO/5M= Subject key identifier: 5D:A1:3A:84:D6:A5:77:1E:0A:E4:30:D2:C2:7B:4F:3D:0F:87:51:52 Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Certificate serial: 0C3E3037A4D8DAFC7E117CD15EEDE5E573DFEA05 Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138352e302f32342d3234203d3e203633383237.roa Signing time: Wed 20 Nov 2024 07:03:08 +0000 ROA not before: Wed 20 Nov 2024 06:58:08 +0000 ROA not after: Wed 19 Nov 2025 07:03:08 +0000 asID: 63827 IP address blocks: 43.243.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3e:30:37:a4:d8:da:fc:7e:11:7c:d1:5e:ed:e5:e5:73:df:ea:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Validity Not Before: Nov 20 06:58:08 2024 GMT Not After : Nov 19 07:03:08 2025 GMT Subject: CN=5DA13A84D6A5771E0AE430D2C27B4F3D0F875152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:26:2f:90:19:3b:22:d0:90:1a:5c:f7:ed: 6b:2e:c5:1b:7e:75:f6:d6:b0:49:a1:25:23:24:9b: 9c:a2:91:36:0d:9d:73:e7:fd:37:08:64:64:b0:73: 01:d1:45:2e:fd:e7:c8:b3:a1:5f:d6:70:4a:26:9b: 88:a2:ff:28:41:8a:25:67:2a:f1:ce:55:d9:89:d4: 1f:7b:04:7d:8b:cb:65:8c:77:0f:24:f1:a1:19:86: 56:0e:40:49:f2:e2:8c:2a:15:f7:23:61:b7:65:0a: 63:2e:90:1c:3e:fb:ce:cd:c3:31:4d:af:e5:82:17: 66:11:57:b6:df:3e:16:df:d4:ab:cf:26:5e:9e:10: 2e:9b:11:b8:ba:0e:a1:73:4d:19:37:ec:a4:2c:1c: 68:76:74:a8:c3:a9:f4:91:24:7f:b6:bd:7d:cd:a0: 8e:83:05:0a:90:04:eb:2f:d6:14:e9:4e:14:f4:81: d6:29:6f:42:51:91:66:56:60:ab:2a:ab:e8:d4:91: 56:7f:6d:6e:ed:d0:63:17:03:8e:0f:cd:5f:ae:ff: 3a:3b:0a:d5:f9:08:a9:76:ba:5f:d8:9c:8a:b5:df: b1:f0:a4:c4:7e:3f:42:4e:79:45:5b:6e:ca:79:a9: 49:e6:e8:b9:fd:3e:19:22:38:47:df:b7:a9:0f:4a: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A1:3A:84:D6:A5:77:1E:0A:E4:30:D2:C2:7B:4F:3D:0F:87:51:52 X509v3 Authority Key Identifier: keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138352e302f32342d3234203d3e203633383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.243.185.0/24 Signature Algorithm: sha256WithRSAEncryption 39:0b:ca:42:bd:f6:ff:aa:90:0e:1c:6e:57:b5:e9:be:c8:c9: ab:ba:6b:01:58:15:31:c6:51:be:f8:52:77:6e:73:91:1a:58: 4a:99:b3:ba:62:47:51:63:6e:e2:f6:03:3c:c8:45:2b:f7:2d: 77:b8:85:bf:86:5e:ac:02:75:5c:2f:dc:f4:65:84:60:34:cd: 3e:91:89:6d:dd:38:20:23:46:a2:c1:2f:f0:64:b0:6c:40:33: 23:cd:38:99:fd:f5:60:09:d5:76:cb:76:72:75:58:64:64:10: 5a:e8:34:27:bc:09:3d:fc:4a:50:05:86:94:b2:a0:db:1b:ed: 14:76:3d:ca:9e:14:3e:e1:b4:e1:b7:e7:c3:5e:ee:14:79:4d: ec:a7:71:e8:ef:32:62:3a:a7:01:d6:87:d6:28:2a:64:8f:92: 77:e3:23:ce:0f:d6:c8:86:86:31:6b:6e:8a:85:30:bd:49:8b: 46:4b:64:69:df:c3:06:c0:86:66:2f:bb:c9:b6:29:87:03:1f: 04:2f:1f:59:af:5b:a1:8f:ae:84:06:77:df:d3:a9:5c:d9:ca: 92:ea:69:8e:fd:7d:bf:19:65:89:c5:f0:2e:dd:5f:bb:35:ef: 7b:45:78:3a:5d:11:2f:a5:66:e5:12:42:70:9f:75:79:34:b0: ae:a0:e9:3a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDD4wN6TY2vx+EXzRXu3l5XPf6gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNB MDMzNzg0QjAeFw0yNDExMjAwNjU4MDhaFw0yNTExMTkwNzAzMDhaMDMxMTAvBgNV BAMTKDVEQTEzQTg0RDZBNTc3MUUwQUU0MzBEMkMyN0I0RjNEMEY4NzUxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSSyYvkBk7ItCQGlz37WsuxRt+ dfbWsEmhJSMkm5yikTYNnXPn/TcIZGSwcwHRRS7958izoV/WcEomm4ii/yhBiiVn KvHOVdmJ1B97BH2Ly2WMdw8k8aEZhlYOQEny4owqFfcjYbdlCmMukBw++87NwzFN r+WCF2YRV7bfPhbf1KvPJl6eEC6bEbi6DqFzTRk37KQsHGh2dKjDqfSRJH+2vX3N oI6DBQqQBOsv1hTpThT0gdYpb0JRkWZWYKsqq+jUkVZ/bW7t0GMXA44PzV+u/zo7 CtX5CKl2ul/YnIq137HwpMR+P0JOeUVbbsp5qUnm6Ln9PhkiOEfft6kPSqfxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXaE6hNaldx4K5DDSwntPPQ+HUVIwHwYDVR0j BBgwFoAU9ptjfqlN5MyRUL39Uye+A6AzeEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWE2ODcxMi0xZDlhLTQxNDMtODJmMS0xYzgyYzMzMTY1ZWEvMC9GNjlCNjM3RUE5 NERFNENDOTE1MEJERkQ1MzI3QkUwM0EwMzM3ODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNBMDMz Nzg0Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04 MmYxLTFjODJjMzMxNjVlYS8wLzM0MzMyZTMyMzQzMzJlMzEzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMzM4MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvzuTANBgkqhkiG 9w0BAQsFAAOCAQEAOQvKQr32/6qQDhxuV7XpvsjJq7prAVgVMcZRvvhSd25zkRpY SpmzumJHUWNu4vYDPMhFK/ctd7iFv4ZerAJ1XC/c9GWEYDTNPpGJbd04ICNGosEv 8GSwbEAzI804mf31YAnVdst2cnVYZGQQWug0J7wJPfxKUAWGlLKg2xvtFHY9yp4U PuG04bfnw17uFHlN7Kdx6O8yYjqnAdaH1igqZI+Sd+Mjzg/WyIaGMWtuioUwvUmL Rktkad/DBsCGZi+7ybYphwMfBC8fWa9boY+uhAZ339OpXNnKkuppjv19vxllicXw Lt1fuzXve0V4Ol0RL6Vm5RJCcJ91eTSwrqDpOg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org