$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36302e302f32322d3232203d3e203338373535.roa File: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (raw, json) Hash identifier: l/rrbEpNeb1GQ2wJ0vFCmJ1Zty4z+52/HZ1JBvBf910= Subject key identifier: D7:CB:33:8D:9F:21:3B:67:B1:D4:9C:4B:62:F8:27:DB:2A:82:8D:F9 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 203E2485F60146700C9A1302819926FA5D0762CB Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36302e302f32322d3232203d3e203338373535.roa Signing time: Thu 01 Aug 2024 11:24:52 +0000 ROA not before: Thu 01 Aug 2024 11:19:52 +0000 ROA not after: Thu 31 Jul 2025 11:24:52 +0000 asID: 38755 IP address blocks: 203.123.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3e:24:85:f6:01:46:70:0c:9a:13:02:81:99:26:fa:5d:07:62:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Aug 1 11:19:52 2024 GMT Not After : Jul 31 11:24:52 2025 GMT Subject: CN=D7CB338D9F213B67B1D49C4B62F827DB2A828DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:7c:0b:50:d9:6a:9e:7b:a3:64:cb:fe:0b: fc:36:33:0c:0f:44:eb:81:ae:9b:79:d2:92:36:da: a3:a6:42:97:de:4a:ff:88:65:f6:44:5a:33:ed:e8: 10:58:dc:36:68:a2:3f:72:a9:0b:db:06:97:a6:c3: 6b:04:8a:a2:5a:74:9c:f9:9a:6b:fe:1e:34:c5:3b: ab:c3:74:4f:3d:60:19:4e:20:b5:1e:a6:41:15:c8: 2e:ee:a4:ae:02:06:24:6e:ca:4a:85:b6:93:9c:5f: 92:09:18:9c:de:c5:30:53:78:b8:73:fe:f3:f0:ab: 76:c4:20:e6:3a:69:2c:9b:9b:53:a5:21:95:a0:14: 7f:e1:db:8b:d2:6a:a8:64:8b:6f:ec:2f:65:48:ff: 32:31:6b:9b:9c:8f:ed:1a:69:a9:ab:d2:5b:a1:19: aa:d4:91:0b:91:10:20:c3:02:e6:a6:2e:74:6e:ba: d0:be:bb:6a:bc:ed:22:64:6f:4e:a4:c7:4d:66:dd: 43:ae:6a:8e:4f:98:fa:fe:80:79:2e:b8:d5:fb:3f: 12:91:55:cc:26:e2:67:27:f4:25:5e:5c:9a:89:e7: 6a:f0:f3:78:2a:c9:2f:8f:95:d0:c7:c3:78:bc:19: ef:1b:d6:98:ae:0e:c9:ee:2c:58:bd:ba:42:a9:75: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CB:33:8D:9F:21:3B:67:B1:D4:9C:4B:62:F8:27:DB:2A:82:8D:F9 X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36302e302f32322d3232203d3e203338373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.123.60.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:00:8c:1d:8f:0f:55:e4:d0:7d:68:c9:32:e8:e1:2f:0f:6f: 5d:60:88:f9:78:af:19:17:50:e2:d1:d8:59:61:3a:63:ae:26: 49:19:33:da:b9:fc:a0:72:6f:87:fe:b0:5a:86:d8:71:32:e9: 2a:98:f1:bd:20:1e:a2:ca:76:67:8e:17:ec:03:6f:92:17:95: cc:7c:c5:ca:f7:40:e5:8a:20:b5:fd:59:97:0f:35:9e:32:9b: 52:2e:59:cd:2b:08:e0:6a:ea:82:3e:19:35:66:e8:e1:5d:26: d5:15:07:a0:02:72:f8:55:7d:b5:ce:6e:54:e3:d6:64:d7:52: 23:dc:2f:f5:16:a1:a6:fa:d1:e1:3b:3c:ab:7b:4e:a2:0c:38: fd:22:b3:c1:93:f8:9b:db:d0:66:06:eb:88:ef:fe:d8:18:4e: de:9b:9d:fa:05:6c:d1:08:a2:00:96:fe:7a:09:ba:e9:87:68: 8f:07:10:04:0e:2f:8f:9c:97:5d:7a:39:b8:50:6c:7a:eb:95: 5b:d6:5d:e3:c4:09:e0:fd:a9:a9:f2:28:13:8d:20:f2:2f:db: a3:34:6d:5d:95:db:9d:71:63:7b:fd:1e:8c:3c:8f:58:54:ad: 78:8d:33:17:4e:a1:2c:6c:dd:19:26:31:39:a0:23:ac:d5:03: 5a:6d:16:1b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUID4khfYBRnAMmhMCgZkm+l0HYsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNDA4MDExMTE5NTJaFw0yNTA3MzExMTI0NTJaMDMxMTAvBgNV BAMTKEQ3Q0IzMzhEOUYyMTNCNjdCMUQ0OUM0QjYyRjgyN0RCMkE4MjhERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdN3wLUNlqnnujZMv+C/w2MwwP ROuBrpt50pI22qOmQpfeSv+IZfZEWjPt6BBY3DZooj9yqQvbBpemw2sEiqJadJz5 mmv+HjTFO6vDdE89YBlOILUepkEVyC7upK4CBiRuykqFtpOcX5IJGJzexTBTeLhz /vPwq3bEIOY6aSybm1OlIZWgFH/h24vSaqhki2/sL2VI/zIxa5ucj+0aaamr0luh GarUkQuRECDDAuamLnRuutC+u2q87SJkb06kx01m3UOuao5PmPr+gHkuuNX7PxKR Vcwm4mcn9CVeXJqJ52rw83gqyS+PldDHw3i8Ge8b1piuDsnuLFi9ukKpdT3LAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU18szjZ8hO2ex1JxLYvgn2yqCjfkwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhYjM5MDJiLTc0NTktNDg1NC1h NWY1LTA5ZjE1ZDhjODdkMy8wLzMyMzAzMzJlMzEzMjMzMmUzNjMwMmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzMzODM3MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAst7PDANBgkqhkiG 9w0BAQsFAAOCAQEAXgCMHY8PVeTQfWjJMujhLw9vXWCI+XivGRdQ4tHYWWE6Y64m SRkz2rn8oHJvh/6wWobYcTLpKpjxvSAeosp2Z44X7ANvkheVzHzFyvdA5Yogtf1Z lw81njKbUi5ZzSsI4Grqgj4ZNWbo4V0m1RUHoAJy+FV9tc5uVOPWZNdSI9wv9Rah pvrR4Ts8q3tOogw4/SKzwZP4m9vQZgbriO/+2BhO3pud+gVs0QiiAJb+egm66Ydo jwcQBA4vj5yXXXo5uFBseuuVW9Zd48QJ4P2pqfIoE40g8i/bozRtXZXbnXFje/0e jDyPWFSteI0zF06hLGzdGSYxOaAjrNUDWm0WGw== -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org