$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3230322e3137332e31362e302f32312d3234203d3e203234323130.roa File: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (raw, json) Hash identifier: bE661+O1P4yXvU0DhZoWEyQ/dU6h4QpYxixmc8KzOac= Subject key identifier: F7:16:BC:82:75:23:3B:88:F8:DE:A5:29:63:13:B7:E3:9D:DC:4B:D3 Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D Certificate serial: 7A43551D04BFDDC8173FECB31BDDC4F043C221BD Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3230322e3137332e31362e302f32312d3234203d3e203234323130.roa Signing time: Sat 10 Aug 2024 07:02:11 +0000 ROA not before: Sat 10 Aug 2024 06:57:11 +0000 ROA not after: Sat 09 Aug 2025 07:02:11 +0000 asID: 24210 IP address blocks: 202.173.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:43:55:1d:04:bf:dd:c8:17:3f:ec:b3:1b:dd:c4:f0:43:c2:21:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D Validity Not Before: Aug 10 06:57:11 2024 GMT Not After : Aug 9 07:02:11 2025 GMT Subject: CN=F716BC8275233B88F8DEA5296313B7E39DDC4BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:95:de:76:18:97:a0:a2:3f:68:f3:bc:2d: 01:53:54:75:e6:bd:4d:fc:0f:36:3c:4e:38:82:44: 23:15:cd:b5:57:a8:de:1b:7b:dc:ed:6b:16:7b:4a: 2e:eb:ea:9f:6a:dc:1f:65:5d:09:bd:9c:5e:78:d8: 54:55:35:15:27:f9:f8:59:0a:94:37:16:39:c0:9c: 99:1e:0e:65:c7:c3:93:8a:52:1d:9f:d7:9b:de:8e: eb:b5:e7:be:90:d4:f2:9e:47:fb:e3:d5:d0:8b:7d: f6:e7:4b:a7:a2:69:ac:22:13:e3:7f:3d:d7:35:d9: a9:bd:cc:ff:09:bf:b9:4d:b0:96:61:08:bb:93:d3: 75:90:31:51:aa:4d:84:58:49:de:07:52:39:cb:06: dd:f5:43:80:74:1c:27:1e:23:7a:6f:c1:17:63:7a: 84:b4:10:b4:d3:d5:13:11:5b:b2:67:a1:35:ab:6c: 45:5e:bb:2f:b5:b3:82:f3:c3:8c:79:24:ee:03:32: 33:d2:b4:88:54:44:3a:eb:2f:18:36:00:b3:82:7d: 9b:a2:e6:5c:dd:76:26:94:fa:5e:69:83:8f:14:2b: dd:64:08:d0:98:8b:a0:d2:05:f8:fd:00:48:38:61: d7:0f:74:d3:bd:ac:10:85:58:57:9e:a4:bd:85:47: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:16:BC:82:75:23:3B:88:F8:DE:A5:29:63:13:B7:E3:9D:DC:4B:D3 X509v3 Authority Key Identifier: keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3230322e3137332e31362e302f32312d3234203d3e203234323130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.16.0/21 Signature Algorithm: sha256WithRSAEncryption ac:7c:d5:d9:94:c0:09:be:53:8e:c6:41:bf:bb:0a:b7:af:4c: 8d:c6:c0:4d:ef:54:b3:52:e4:ba:56:16:b7:38:e7:f9:64:2d: 9a:40:59:e3:31:0f:b8:3e:80:87:f7:cd:56:ac:94:c4:71:0d: bd:cb:78:e1:f5:90:0c:bd:b0:c0:e1:ee:08:62:f0:6a:21:32: 43:0e:67:dd:d0:bd:a2:d4:ec:d4:c7:92:18:2c:af:80:5b:3c: c8:36:73:bf:83:5f:e6:6c:9f:75:19:7d:e9:75:db:ce:b5:75: 0e:4f:2c:34:06:29:1c:78:40:65:90:86:56:83:9e:62:e4:33: 2d:91:3a:28:c9:3a:20:80:99:61:c9:46:5c:e1:cf:2f:cb:a5: dd:02:6a:b2:ba:ac:0e:1a:e7:0d:46:80:72:35:37:23:96:7e: 8a:98:bf:a1:3f:07:d8:1e:07:48:5c:1f:69:27:03:5e:c4:f6: b2:71:de:54:85:55:88:c9:60:38:f6:a9:5e:06:17:e9:60:98: 53:a4:64:cc:ca:9b:a9:77:69:7c:39:53:2b:c5:fa:60:e6:be: 0c:f7:65:3f:ee:18:a9:be:da:0b:7c:9a:57:4f:7c:b4:f5:8f: 6e:8c:1e:00:d4:58:88:e1:1d:c0:4d:7d:16:c5:8d:d0:68:0e: d9:08:57:ae -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUekNVHQS/3cgXP+yzG93E8EPCIb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQw Nzg4NzQ1RDAeFw0yNDA4MTAwNjU3MTFaFw0yNTA4MDkwNzAyMTFaMDMxMTAvBgNV BAMTKEY3MTZCQzgyNzUyMzNCODhGOERFQTUyOTYzMTNCN0UzOUREQzRCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOA5XedhiXoKI/aPO8LQFTVHXm vU38DzY8TjiCRCMVzbVXqN4be9ztaxZ7Si7r6p9q3B9lXQm9nF542FRVNRUn+fhZ CpQ3FjnAnJkeDmXHw5OKUh2f15vejuu1576Q1PKeR/vj1dCLffbnS6eiaawiE+N/ Pdc12am9zP8Jv7lNsJZhCLuT03WQMVGqTYRYSd4HUjnLBt31Q4B0HCceI3pvwRdj eoS0ELTT1RMRW7JnoTWrbEVeuy+1s4Lzw4x5JO4DMjPStIhURDrrLxg2ALOCfZui 5lzddiaU+l5pg48UK91kCNCYi6DSBfj9AEg4YdcPdNO9rBCFWFeepL2FR6cBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9xa8gnUjO4j43qUpYxO3453cS9MwHwYDVR0j BBgwFoAUYwA//dBjEEiYeTBhvbLbjQeIdF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDE3YjgyOC0xN2ZhLTQ4YTItYTExMy0xNDlmOTQ2N2EzMjgvMC82MzAwM0ZGREQw NjMxMDQ4OTg3OTMwNjFCREIyREI4RDA3ODg3NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQwNzg4 NzQ1RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwMTdiODI4LTE3ZmEtNDhhMi1h MTEzLTE0OWY5NDY3YTMyOC8wLzMyMzAzMjJlMzEzNzMzMmUzMTM2MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDMyMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8qtEDANBgkqhkiG 9w0BAQsFAAOCAQEArHzV2ZTACb5TjsZBv7sKt69MjcbATe9Us1LkulYWtzjn+WQt mkBZ4zEPuD6Ah/fNVqyUxHENvct44fWQDL2wwOHuCGLwaiEyQw5n3dC9otTs1MeS GCyvgFs8yDZzv4Nf5myfdRl96XXbzrV1Dk8sNAYpHHhAZZCGVoOeYuQzLZE6KMk6 IICZYclGXOHPL8ul3QJqsrqsDhrnDUaAcjU3I5Z+ipi/oT8H2B4HSFwfaScDXsT2 snHeVIVViMlgOPapXgYX6WCYU6RkzMqbqXdpfDlTK8X6YOa+DPdlP+4Yqb7aC3ya V098tPWPboweANRYiOEdwE19FsWN0GgO2QhXrg== -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org