$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134302e302f32342d3234203d3e203234323036.roa File: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (raw, json) Hash identifier: tsk8yK4KqvJi7ogL1Fgl2IoF/vS9e+lT+cqgt4OR0O0= Subject key identifier: F6:55:93:30:FE:F5:FD:B2:65:DB:5C:BE:67:9B:B3:AF:D2:B5:43:76 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 6804993EA188625C8880943E3EB7071EAE1CF1E5 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134302e302f32342d3234203d3e203234323036.roa Signing time: Fri 30 Aug 2024 16:00:00 +0000 ROA not before: Fri 30 Aug 2024 15:55:00 +0000 ROA not after: Fri 29 Aug 2025 16:00:00 +0000 asID: 24206 IP address blocks: 203.84.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:04:99:3e:a1:88:62:5c:88:80:94:3e:3e:b7:07:1e:ae:1c:f1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 30 15:55:00 2024 GMT Not After : Aug 29 16:00:00 2025 GMT Subject: CN=F6559330FEF5FDB265DB5CBE679BB3AFD2B54376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:a9:a0:be:12:43:1a:2a:f2:f5:28:93:3d: 45:1c:6e:fd:9a:0a:48:9f:33:a7:7d:76:cb:27:cf: 81:8a:b2:5d:dd:62:c6:5f:0c:6f:bc:2b:4a:7a:0c: 0b:14:8d:3a:53:88:79:c7:09:e0:a9:bb:6e:30:e3: 81:98:ed:93:e3:f8:49:23:34:6d:11:40:2f:d1:d8: 12:be:1f:e0:81:8e:cc:86:f5:91:8a:9a:53:ff:3d: f8:4a:02:76:a6:8f:05:5f:c9:75:82:53:dc:9c:33: 30:48:0e:7d:81:4b:f5:22:cc:ac:a9:f4:bf:43:b6: 7f:28:9a:e0:f9:3d:bd:d8:79:c3:c1:3f:34:a0:d5: 81:80:ba:38:9b:28:bf:7a:55:1c:9b:84:77:23:e1: 2a:f1:d6:07:ab:64:ec:51:3b:97:75:32:cc:50:95: a3:9f:17:21:1f:85:59:c9:e4:cc:63:1a:81:9c:cc: b7:61:72:bf:85:4d:cc:0e:d1:30:ad:a3:ea:c0:20: 8f:09:cf:83:9d:95:17:07:34:7f:63:1e:1a:95:36: 0d:09:9d:1e:8f:e4:5f:ca:cf:25:58:85:c2:b7:f5: 66:77:88:ed:d4:93:2d:a2:ac:60:f4:80:ca:bf:b4: 87:a3:0f:da:ff:0f:db:a5:ec:57:97:00:16:6b:b2: ff:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:55:93:30:FE:F5:FD:B2:65:DB:5C:BE:67:9B:B3:AF:D2:B5:43:76 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134302e302f32342d3234203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.140.0/24 Signature Algorithm: sha256WithRSAEncryption 36:4c:3c:1e:9e:97:a4:6a:3d:51:63:21:c6:9e:52:39:5b:73: 47:65:93:1d:cf:99:22:ba:84:b5:e5:2b:84:c4:30:b1:d8:1e: e3:e0:b2:13:d5:40:51:dd:38:53:de:cd:e1:91:24:52:38:24: ec:d1:01:6e:cc:aa:b8:36:d0:ac:ae:18:75:81:81:7c:53:95: 4c:c9:f6:12:e1:12:ac:91:e7:cf:71:f1:ec:7c:de:81:e5:c9: 70:08:85:d4:b1:41:31:41:1a:0f:db:68:72:6a:15:f3:75:f3: 32:a1:a5:9a:18:34:83:a1:04:46:f6:02:5e:ab:6d:2a:d5:e1: a7:6b:a9:55:9c:42:ba:54:00:6f:1a:13:35:da:e5:53:42:ca: 39:4e:b5:ab:3f:51:4d:ba:d0:b2:03:00:6b:40:74:24:81:0e: 97:59:56:62:bf:77:aa:68:4b:83:b4:f8:b8:54:5f:c8:34:6c: c7:2b:d6:9e:bb:e5:2e:fe:5d:e5:10:62:65:31:4e:2a:74:ed: cb:f5:8d:25:0d:83:42:18:5b:73:87:36:84:a8:9b:54:74:a7: c6:2f:43:7c:cf:32:bd:c3:c3:7e:9d:bb:1a:2a:07:fd:b3:06: 5b:0f:70:bb:ee:77:ae:76:e3:33:8e:cf:d3:0f:1d:3f:55:38: 79:4f:5d:dc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaASZPqGIYlyIgJQ+PrcHHq4c8eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNDA4MzAxNTU1MDBaFw0yNTA4MjkxNjAwMDBaMDMxMTAvBgNV BAMTKEY2NTU5MzMwRkVGNUZEQjI2NURCNUNCRTY3OUJCM0FGRDJCNTQzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DKmgvhJDGiry9SiTPUUcbv2a CkifM6d9dssnz4GKsl3dYsZfDG+8K0p6DAsUjTpTiHnHCeCpu24w44GY7ZPj+Ekj NG0RQC/R2BK+H+CBjsyG9ZGKmlP/PfhKAnamjwVfyXWCU9ycMzBIDn2BS/UizKyp 9L9Dtn8omuD5Pb3YecPBPzSg1YGAujibKL96VRybhHcj4Srx1gerZOxRO5d1MsxQ laOfFyEfhVnJ5MxjGoGczLdhcr+FTcwO0TCto+rAII8Jz4OdlRcHNH9jHhqVNg0J nR6P5F/KzyVYhcK39WZ3iO3Uky2irGD0gMq/tIejD9r/D9ul7FeXABZrsv/hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9lWTMP71/bJl21y+Z5uzr9K1Q3YwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtUjDANBgkqhkiG 9w0BAQsFAAOCAQEANkw8Hp6XpGo9UWMhxp5SOVtzR2WTHc+ZIrqEteUrhMQwsdge 4+CyE9VAUd04U97N4ZEkUjgk7NEBbsyquDbQrK4YdYGBfFOVTMn2EuESrJHnz3Hx 7HzegeXJcAiF1LFBMUEaD9tocmoV83XzMqGlmhg0g6EERvYCXqttKtXhp2upVZxC ulQAbxoTNdrlU0LKOU61qz9RTbrQsgMAa0B0JIEOl1lWYr93qmhLg7T4uFRfyDRs xyvWnrvlLv5d5RBiZTFOKnTty/WNJQ2DQhhbc4c2hKibVHSnxi9DfM8yvcPDfp27 GioH/bMGWw9wu+53rnbjM47P0w8dP1U4eU9d3A== -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org