$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32342d3234203d3e203436303538.roa File: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (raw, json) Hash identifier: P/nYNmWNztuZ1w885Ocy0s0FIiCKtv6xWs3rUQLjCnQ= Subject key identifier: 56:A8:B2:01:50:E6:E4:10:65:00:F8:9E:00:37:FB:B0:7D:37:E0:99 Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345 Certificate serial: 39B6AB852A5CA5ADEF5E0B2A3A90B6E7CD678AA6 Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32342d3234203d3e203436303538.roa Signing time: Sat 18 May 2024 06:07:44 +0000 ROA not before: Sat 18 May 2024 06:02:44 +0000 ROA not after: Sat 17 May 2025 06:07:44 +0000 asID: 46058 IP address blocks: 202.52.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b6:ab:85:2a:5c:a5:ad:ef:5e:0b:2a:3a:90:b6:e7:cd:67:8a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345 Validity Not Before: May 18 06:02:44 2024 GMT Not After : May 17 06:07:44 2025 GMT Subject: CN=56A8B20150E6E4106500F89E0037FBB07D37E099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:69:da:7b:a2:ae:ae:8e:61:f5:1a:d6:e7: ed:e7:e4:58:a9:6a:49:f8:0b:d5:3d:82:fa:c7:0c: df:3c:5c:12:2c:69:95:39:33:fa:91:e9:5e:92:70: 87:cd:3e:64:48:95:2b:00:b5:a1:c3:e9:0e:0b:a6: d3:9b:79:ed:83:a9:dd:5e:61:b7:2e:bc:36:80:5f: a1:5c:a2:85:cd:d0:32:c0:f8:ea:eb:7a:5d:cc:57: e0:52:4a:ab:01:a6:17:06:4b:5f:a5:0b:4c:aa:ec: 72:76:eb:ca:49:08:5f:cd:45:14:6d:78:c5:fb:3c: 58:fe:40:b4:e2:f8:73:a2:f8:77:1d:7b:d4:f5:05: fd:60:bb:47:f6:16:c1:d0:6c:84:61:a7:48:2f:0e: 6d:b3:e2:df:4e:b0:ce:20:9b:be:c0:05:e1:35:f3: bb:97:79:01:ce:89:cc:b1:a7:35:86:f4:40:6b:08: ef:a0:5e:5d:cb:3e:d9:c1:62:2b:36:58:91:23:40: 08:a5:58:00:ce:e7:a1:94:a2:8d:e1:fa:59:85:a3: 53:20:6d:3e:a4:a1:b9:78:55:fc:40:0a:00:31:a5: b4:ae:70:5c:18:b7:2c:c0:f3:3b:29:ab:cc:ca:ed: ac:5c:9b:46:93:30:76:8b:0d:22:4b:1f:0d:cd:5d: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A8:B2:01:50:E6:E4:10:65:00:F8:9E:00:37:FB:B0:7D:37:E0:99 X509v3 Authority Key Identifier: keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32342d3234203d3e203436303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.58.0/24 Signature Algorithm: sha256WithRSAEncryption 36:d6:bf:87:05:0b:49:80:fb:ea:63:5d:93:2c:26:26:b2:2a: 37:eb:f9:12:aa:f2:78:9e:cd:66:31:75:d2:8f:f5:28:fc:78: e7:66:5e:16:bb:86:76:48:5a:70:df:bf:e8:c1:23:0d:44:15: 64:d6:4e:6a:67:50:22:32:de:e8:ad:29:59:dd:ee:89:45:c5: 50:17:11:19:a8:cc:5d:32:1d:c4:89:16:9f:dc:89:1b:26:43: d9:8d:ca:f0:79:74:fa:c7:80:80:54:80:3d:7d:66:16:34:99: e5:f3:7a:df:92:34:e1:ba:87:b5:e1:43:a3:82:27:ce:6b:5c: b2:1d:d0:37:66:35:49:a1:b6:88:45:fe:84:87:5f:96:82:f0: 75:aa:45:00:48:83:c8:cb:26:dd:53:a1:32:1b:95:f5:7a:ee: 28:55:43:81:05:47:85:14:36:51:77:bf:11:5c:60:14:44:65: 95:e1:87:83:ce:84:21:ab:b1:dc:4f:37:3d:0f:90:e8:1c:ed: 84:2d:0b:6c:19:61:54:f3:da:f3:f1:44:4a:64:09:d2:a1:92: 11:a1:74:39:73:3e:2e:ac:ff:37:7b:2b:d8:b3:2d:e8:75:02: 64:97:ed:8c:6d:43:c6:64:fa:92:7c:f1:7d:98:c4:78:65:45: 71:af:6f:34 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUObarhSpcpa3vXgsqOpC2581niqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2 RDk1QzM0NTAeFw0yNDA1MTgwNjAyNDRaFw0yNTA1MTcwNjA3NDRaMDMxMTAvBgNV BAMTKDU2QThCMjAxNTBFNkU0MTA2NTAwRjg5RTAwMzdGQkIwN0QzN0UwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pWnae6Kuro5h9RrW5+3n5Fip akn4C9U9gvrHDN88XBIsaZU5M/qR6V6ScIfNPmRIlSsAtaHD6Q4LptObee2Dqd1e YbcuvDaAX6FcooXN0DLA+Orrel3MV+BSSqsBphcGS1+lC0yq7HJ268pJCF/NRRRt eMX7PFj+QLTi+HOi+Hcde9T1Bf1gu0f2FsHQbIRhp0gvDm2z4t9OsM4gm77ABeE1 87uXeQHOicyxpzWG9EBrCO+gXl3LPtnBYis2WJEjQAilWADO56GUoo3h+lmFo1Mg bT6kobl4VfxACgAxpbSucFwYtyzA8zspq8zK7axcm0aTMHaLDSJLHw3NXei9AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUVqiyAVDm5BBlAPieADf7sH034JkwHwYDVR0j BBgwFoAULlVIO5BiRNLaNX8BT5r6YG2Vw0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMC8yRTU1NDgzQjkw NjI0NEQyREEzNTdGMDE0RjlBRkE2MDZEOTVDMzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2RDk1 QzM0NS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EyZTIzZGM0LTRmZDUtNDNlMi1i YjZhLTRmZGMzODdlYmM1OC8wLzMyMzAzMjJlMzUzMjJlMzUzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzYzMDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNDowDQYJKoZIhvcN AQELBQADggEBADbWv4cFC0mA++pjXZMsJiayKjfr+RKq8niezWYxddKP9Sj8eOdm Xha7hnZIWnDfv+jBIw1EFWTWTmpnUCIy3uitKVnd7olFxVAXERmozF0yHcSJFp/c iRsmQ9mNyvB5dPrHgIBUgD19ZhY0meXzet+SNOG6h7XhQ6OCJ85rXLId0DdmNUmh tohF/oSHX5aC8HWqRQBIg8jLJt1ToTIblfV67ihVQ4EFR4UUNlF3vxFcYBREZZXh h4POhCGrsdxPNz0PkOgc7YQtC2wZYVTz2vPxREpkCdKhkhGhdDlzPi6s/zd7K9iz Leh1AmSX7YxtQ8Zk+pJ88X2YxHhlRXGvbzQ= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org