$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e203234323036.roa File: 3131302e34342e3137322e302f32322d3232203d3e203234323036.roa (raw, json) Hash identifier: HTFYmHnVp1yBUnEya7CDVisRATEQAvG/zNuseZjoANM= Subject key identifier: C6:EA:17:D0:D0:45:A5:27:F4:68:06:FC:52:1F:BD:8E:2A:0C:5E:B7 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 59F60D3EDE1A8BB7926A6321E39E8065650D5590 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e203234323036.roa Signing time: Fri 23 Aug 2024 11:19:14 +0000 ROA not before: Fri 23 Aug 2024 11:14:14 +0000 ROA not after: Fri 22 Aug 2025 11:19:14 +0000 asID: 24206 IP address blocks: 110.44.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f6:0d:3e:de:1a:8b:b7:92:6a:63:21:e3:9e:80:65:65:0d:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 23 11:14:14 2024 GMT Not After : Aug 22 11:19:14 2025 GMT Subject: CN=C6EA17D0D045A527F46806FC521FBD8E2A0C5EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:cc:5b:d5:50:39:39:f8:5c:3b:cb:46:49: b3:32:57:80:e6:6b:44:7e:59:42:53:21:c9:d0:41: fa:83:6c:7c:f6:a7:38:52:b1:d1:26:97:87:de:db: 9d:da:72:3e:33:7b:9f:92:74:5b:f9:51:4b:ca:ee: 96:b8:63:79:6b:a1:8e:f3:7e:10:8f:26:b2:de:f9: 3e:35:80:f8:45:b9:c5:dd:c7:ae:71:0d:c9:d8:d2: 1d:69:b8:23:9b:df:58:21:2c:f4:34:6b:bf:9e:ff: ee:9b:7e:67:00:a9:24:2d:d1:43:47:60:9a:10:6b: ed:6a:00:89:aa:13:e6:1b:31:5a:1f:45:86:67:8e: 69:91:5d:04:b2:65:6d:3b:07:45:32:53:23:f1:3e: b9:68:72:47:4a:d8:aa:a4:9a:59:bf:7e:0a:db:1a: 8c:c8:31:1e:e6:91:f6:c4:d8:01:77:77:52:59:5e: f0:03:75:54:c2:70:ae:9d:da:37:fa:06:cc:78:ba: ac:b2:67:59:b2:b1:ca:33:7a:a6:4a:0a:cd:8a:f7: d4:9b:f7:c8:86:b2:87:dd:0a:a6:cb:47:aa:7c:02: f4:6e:7b:01:a6:50:11:94:71:e5:bf:1a:21:93:92: 31:e5:74:98:af:8c:92:f7:e3:01:9c:9f:f9:52:aa: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EA:17:D0:D0:45:A5:27:F4:68:06:FC:52:1F:BD:8E:2A:0C:5E:B7 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.44.172.0/22 Signature Algorithm: sha256WithRSAEncryption 32:8b:6c:71:30:ea:86:8a:3c:a4:fe:36:5b:9e:3c:ea:5a:10: 31:9b:85:2c:9d:8d:c8:28:12:a1:37:70:af:07:b5:12:83:db: 21:a0:6e:8e:c2:3c:aa:3a:0f:05:fc:cc:51:83:89:3a:54:e5: 92:fa:f6:18:b4:bb:c8:4c:c0:9f:0b:2d:aa:c3:a8:78:80:01: ab:7f:b2:d0:19:90:5b:05:c8:11:dc:90:64:25:fc:d6:07:45: 39:c7:e5:4e:83:98:f2:50:a2:32:8c:f1:a3:0e:d9:53:69:22: d3:9e:89:8e:fc:b1:33:f7:e9:89:86:69:84:4a:ea:69:a5:2b: 33:23:23:d9:7e:48:4d:6e:07:1b:f0:7d:36:10:46:ed:5d:87: 63:8a:14:f3:76:b8:61:ca:a2:b0:73:e4:39:cd:9f:6d:f7:30: 63:23:6a:60:2f:e2:9a:79:18:71:ee:74:dd:43:c0:57:46:8b: 89:d7:b8:d2:90:3a:b2:bd:81:3d:83:40:77:ac:9c:46:64:a1: b8:0d:a5:54:33:1a:c4:00:a9:b2:3d:16:ff:15:50:c7:53:b7: d0:12:84:50:32:c5:a8:24:37:b1:09:5e:78:f5:fa:a8:ae:92: 57:c8:ea:d8:d9:0c:00:4e:48:74:e2:47:db:06:f4:fe:2b:8c: 51:3e:ed:12 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWfYNPt4ai7eSamMh456AZWUNVZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNDA4MjMxMTE0MTRaFw0yNTA4MjIxMTE5MTRaMDMxMTAvBgNV BAMTKEM2RUExN0QwRDA0NUE1MjdGNDY4MDZGQzUyMUZCRDhFMkEwQzVFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPsxb1VA5OfhcO8tGSbMyV4Dm a0R+WUJTIcnQQfqDbHz2pzhSsdEml4fe253acj4ze5+SdFv5UUvK7pa4Y3lroY7z fhCPJrLe+T41gPhFucXdx65xDcnY0h1puCOb31ghLPQ0a7+e/+6bfmcAqSQt0UNH YJoQa+1qAImqE+YbMVofRYZnjmmRXQSyZW07B0UyUyPxPrlockdK2Kqkmlm/fgrb GozIMR7mkfbE2AF3d1JZXvADdVTCcK6d2jf6Bsx4uqyyZ1myscozeqZKCs2K99Sb 98iGsofdCqbLR6p8AvRuewGmUBGUceW/GiGTkjHldJivjJL34wGcn/lSqvI3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxuoX0NBFpSf0aAb8Uh+9jioMXrcwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNzMyMmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm4srDANBgkqhkiG 9w0BAQsFAAOCAQEAMotscTDqhoo8pP42W5486loQMZuFLJ2NyCgSoTdwrwe1EoPb IaBujsI8qjoPBfzMUYOJOlTlkvr2GLS7yEzAnwstqsOoeIABq3+y0BmQWwXIEdyQ ZCX81gdFOcflToOY8lCiMozxow7ZU2ki056JjvyxM/fpiYZphErqaaUrMyMj2X5I TW4HG/B9NhBG7V2HY4oU83a4YcqisHPkOc2fbfcwYyNqYC/imnkYce503UPAV0aL ide40pA6sr2BPYNAd6ycRmShuA2lVDMaxACpsj0W/xVQx1O30BKEUDLFqCQ3sQle ePX6qK6SV8jq2NkMAE5IdOJH2wb0/iuMUT7tEg== -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org