$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa File: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: 9tWn1tUw0lnAE7QTSe9gFD7FXQ8Wg/JsMqpIZEwXrcQ= Subject key identifier: E0:8F:16:7D:D2:0F:97:7D:A6:1F:35:2B:FC:61:0B:D0:0C:0D:8C:04 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 28B2AFD79129F58698EE7C4890769D19A59EF716 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa Signing time: Sat 14 Sep 2024 03:34:21 +0000 ROA not before: Sat 14 Sep 2024 03:29:21 +0000 ROA not after: Sat 13 Sep 2025 03:34:21 +0000 asID: 138077 IP address blocks: 203.84.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b2:af:d7:91:29:f5:86:98:ee:7c:48:90:76:9d:19:a5:9e:f7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Sep 14 03:29:21 2024 GMT Not After : Sep 13 03:34:21 2025 GMT Subject: CN=E08F167DD20F977DA61F352BFC610BD00C0D8C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:a5:6a:81:a5:ed:77:26:c6:d2:0b:da:0c: e3:a8:27:de:99:17:61:83:23:99:0a:fc:5f:3b:9b: 6f:2d:87:77:bf:f3:02:b3:a2:03:7b:f1:a6:68:d5: 13:25:0f:7d:85:51:49:57:7a:82:d6:89:7c:46:0a: e7:35:86:a2:1c:7c:8b:42:9a:d3:b6:32:b3:b4:c1: ee:49:67:25:6c:62:b1:f0:24:25:89:7e:ee:6b:7f: ca:31:6d:3b:e9:6e:68:11:82:3c:87:56:93:1c:cd: 8b:04:28:fe:c7:3b:69:20:b0:dd:60:fb:05:d3:93: 2e:f3:48:39:53:95:e4:8e:7d:82:9e:1d:85:1b:13: d7:1e:6a:fc:e7:a0:98:23:67:68:8f:4a:eb:93:05: c1:68:f1:ad:d7:2b:1c:f4:81:fa:65:57:b3:f3:87: ae:2b:bb:bf:15:28:bc:a0:e9:e0:83:c7:40:66:0e: a4:6a:ac:44:8d:fd:8c:02:9f:7b:a3:d2:fc:a5:57: 4f:94:b6:cb:d8:af:c9:2e:e4:a5:bb:3c:c4:0b:ef: 6d:18:28:3c:44:7e:44:f6:a4:23:61:1e:e0:ae:34: d4:95:dd:b5:a4:7b:b8:9e:dc:f0:cf:77:46:e7:c4: 25:d6:c5:23:27:91:ff:ca:8b:a5:4d:3a:77:d8:57: 36:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8F:16:7D:D2:0F:97:7D:A6:1F:35:2B:FC:61:0B:D0:0C:0D:8C:04 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.137.0/24 Signature Algorithm: sha256WithRSAEncryption bf:5a:ba:5c:16:42:9b:38:30:8f:1b:65:74:62:12:20:9e:99: 46:d6:5e:33:8e:b5:9a:3b:c1:70:5a:08:4f:fe:65:9c:6c:5e: d7:68:61:b5:28:99:ef:5b:c1:2e:48:69:a7:97:b1:d0:29:a8: 00:f9:e6:5f:46:e1:a2:af:1e:35:d2:d6:fd:c8:7a:4f:21:3f: 51:02:a7:35:16:ec:0f:59:77:28:4e:77:ea:1e:3d:ad:43:c1: 2e:53:08:0d:10:38:be:65:c1:70:b3:10:08:96:7e:ff:98:d4: 3f:54:3a:2b:5c:ba:d9:a9:6c:ac:e5:73:fa:1f:9f:d3:ed:86: 4e:69:e7:e7:97:5f:91:09:4d:e9:21:63:93:0d:c3:86:0d:03: 39:22:7b:0d:00:ff:27:40:1f:41:e7:ae:27:07:16:23:ec:18: ad:44:f9:48:76:fd:ee:6e:66:0d:fe:d2:4e:11:8c:b6:91:2d: ca:6c:3c:c7:93:cc:d0:0b:60:36:7d:21:12:8a:19:6b:bc:7c: 09:01:71:63:08:9a:f6:65:f6:24:42:68:b3:4a:30:b4:ea:b5: 5b:88:6a:ee:99:81:7b:1a:ed:00:38:e3:e6:2d:1d:29:b7:85: 40:5e:09:d5:e1:71:da:4c:da:84:73:24:75:cc:91:ec:d3:c9: ae:67:8c:f5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKLKv15Ep9YaY7nxIkHadGaWe9xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNDA5MTQwMzI5MjFaFw0yNTA5MTMwMzM0MjFaMDMxMTAvBgNV BAMTKEUwOEYxNjdERDIwRjk3N0RBNjFGMzUyQkZDNjEwQkQwMEMwRDhDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aKVqgaXtdybG0gvaDOOoJ96Z F2GDI5kK/F87m28th3e/8wKzogN78aZo1RMlD32FUUlXeoLWiXxGCuc1hqIcfItC mtO2MrO0we5JZyVsYrHwJCWJfu5rf8oxbTvpbmgRgjyHVpMczYsEKP7HO2kgsN1g +wXTky7zSDlTleSOfYKeHYUbE9ceavznoJgjZ2iPSuuTBcFo8a3XKxz0gfplV7Pz h64ru78VKLyg6eCDx0BmDqRqrESN/YwCn3uj0vylV0+UtsvYr8ku5KW7PMQL720Y KDxEfkT2pCNhHuCuNNSV3bWke7ie3PDPd0bnxCXWxSMnkf/Ki6VNOnfYVzbNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4I8WfdIPl32mHzUr/GEL0AwNjAQwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1SJMA0GCSqG SIb3DQEBCwUAA4IBAQC/WrpcFkKbODCPG2V0YhIgnplG1l4zjrWaO8FwWghP/mWc bF7XaGG1KJnvW8EuSGmnl7HQKagA+eZfRuGirx410tb9yHpPIT9RAqc1FuwPWXco TnfqHj2tQ8EuUwgNEDi+ZcFwsxAIln7/mNQ/VDorXLrZqWys5XP6H5/T7YZOaefn l1+RCU3pIWOTDcOGDQM5InsNAP8nQB9B564nBxYj7BitRPlIdv3ubmYN/tJOEYy2 kS3KbDzHk8zQC2A2fSESihlrvHwJAXFjCJr2ZfYkQmizSjC06rVbiGrumYF7Gu0A OOPmLR0pt4VAXgnV4XHaTNqEcyR1zJHs08muZ4z1 -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org