$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36342e302f32322d3234203d3e203338333230.roa File: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: KpqbYmcjQNPoyEyWPmApyUX2sjIR3e5pjHG/k5aTK3Y= Subject key identifier: 62:00:BD:F9:DB:57:0E:F5:7C:FC:42:89:17:A4:F3:30:83:26:64:12 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 43CD7BB23E0DCD729819C9026B4E3863B7C10B05 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36342e302f32322d3234203d3e203338333230.roa Signing time: Mon 26 Feb 2024 05:02:43 +0000 ROA not before: Mon 26 Feb 2024 04:57:43 +0000 ROA not after: Mon 24 Feb 2025 05:02:43 +0000 asID: 38320 IP address blocks: 119.110.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cd:7b:b2:3e:0d:cd:72:98:19:c9:02:6b:4e:38:63:b7:c1:0b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Feb 26 04:57:43 2024 GMT Not After : Feb 24 05:02:43 2025 GMT Subject: CN=6200BDF9DB570EF57CFC428917A4F33083266412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:8b:5b:c5:eb:91:0a:a6:da:0a:ab:65:ff: a1:71:ae:11:6b:aa:a6:a1:69:19:f7:1b:df:b9:d0: da:4e:e2:9a:5b:8f:a4:3e:1d:10:38:25:80:0d:77: 0e:62:0d:5a:d1:94:53:75:a8:13:af:bc:bb:f2:00: 80:0d:43:97:eb:72:5f:99:77:e9:fe:f4:3a:c7:2c: 72:39:2c:b3:7a:25:01:f4:04:72:75:ba:2e:4e:c5: ee:f6:4c:e2:2a:5a:26:e1:67:e9:61:79:5f:1c:49: e2:df:67:7d:9c:07:b9:8e:52:41:78:cc:be:a6:6a: d6:0b:b4:25:30:ff:c5:a2:ac:a3:da:59:74:d5:e3: f6:68:ee:e5:ce:37:74:32:70:3f:6e:a8:f5:1d:26: 06:2e:fa:86:69:a5:d3:e8:ce:20:05:b9:3b:04:cb: 18:b5:07:99:f3:09:97:e0:a8:42:27:96:b9:3b:6c: e1:41:ad:a1:27:1d:d4:b2:86:16:03:37:e3:40:26: c4:4d:a1:31:7f:d6:f4:0f:c7:5f:ab:b8:28:e3:bc: 9d:47:d6:56:00:3f:50:d5:c1:6d:6d:42:9c:2c:ae: c4:35:5f:10:fa:53:77:bb:f2:0e:77:f6:fa:9b:d9: 33:8e:4c:cc:28:b6:67:01:49:62:fd:4f:73:a5:d4: f1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:00:BD:F9:DB:57:0E:F5:7C:FC:42:89:17:A4:F3:30:83:26:64:12 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36342e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.64.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:8d:f4:fd:2c:92:4e:a7:f0:1c:05:9b:e4:31:ed:32:d8:53: d1:e4:da:30:dc:3a:de:57:ac:65:1b:53:11:49:30:4b:9e:fe: 50:ac:c5:18:0e:f7:9c:80:97:69:c7:4e:6f:ab:8d:21:40:84: 36:a1:f6:0b:10:9d:14:30:d8:c8:59:40:2c:14:e9:ea:82:0d: 58:09:82:6c:80:cd:26:cc:ab:1e:40:84:96:94:13:8e:92:f3: 7e:cd:39:d0:29:92:8b:90:d3:d2:ad:62:3f:c1:fe:d2:af:1f: 4b:2e:2d:a8:48:1f:f4:55:1f:0f:5d:c5:a2:b8:6b:bb:fb:3d: f9:bf:94:5a:c7:5d:6b:16:c6:c9:08:6d:d2:3c:53:a5:0f:20: 65:4f:bc:52:5d:91:e6:5e:0f:2a:f7:6f:56:4e:ac:6a:bf:cd: a2:f1:3b:14:aa:a7:10:52:80:a7:f9:8e:b7:5a:a0:f8:39:aa: da:21:7a:d4:fd:c2:5e:46:a5:00:bb:5d:60:d6:f3:fa:3a:86: d1:bb:22:35:64:23:ff:be:b8:fb:40:3f:98:94:13:62:4a:9f: c1:1a:98:88:2a:28:01:22:eb:9e:d5:1b:c7:07:b0:45:31:7e: 2d:bb:02:b8:34:58:67:97:43:1e:c4:47:fd:a7:4c:d2:71:fb: cd:a6:0e:e9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ817sj4NzXKYGckCa044Y7fBCwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNDAyMjYwNDU3NDNaFw0yNTAyMjQwNTAyNDNaMDMxMTAvBgNV BAMTKDYyMDBCREY5REI1NzBFRjU3Q0ZDNDI4OTE3QTRGMzMwODMyNjY0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI44tbxeuRCqbaCqtl/6FxrhFr qqahaRn3G9+50NpO4ppbj6Q+HRA4JYANdw5iDVrRlFN1qBOvvLvyAIANQ5frcl+Z d+n+9DrHLHI5LLN6JQH0BHJ1ui5Oxe72TOIqWibhZ+lheV8cSeLfZ32cB7mOUkF4 zL6matYLtCUw/8WirKPaWXTV4/Zo7uXON3QycD9uqPUdJgYu+oZppdPoziAFuTsE yxi1B5nzCZfgqEInlrk7bOFBraEnHdSyhhYDN+NAJsRNoTF/1vQPx1+ruCjjvJ1H 1lYAP1DVwW1tQpwsrsQ1XxD6U3e78g539vqb2TOOTMwotmcBSWL9T3Ol1PFXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUYgC9+dtXDvV8/EKJF6TzMIMmZBIwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzEzOTJlMzEzMTMwMmUzNjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnduQDANBgkqhkiG 9w0BAQsFAAOCAQEALI30/SySTqfwHAWb5DHtMthT0eTaMNw63lesZRtTEUkwS57+ UKzFGA73nICXacdOb6uNIUCENqH2CxCdFDDYyFlALBTp6oINWAmCbIDNJsyrHkCE lpQTjpLzfs050CmSi5DT0q1iP8H+0q8fSy4tqEgf9FUfD13Forhru/s9+b+UWsdd axbGyQht0jxTpQ8gZU+8Ul2R5l4PKvdvVk6sar/NovE7FKqnEFKAp/mOt1qg+Dmq 2iF61P3CXkalALtdYNbz+jqG0bsiNWQj/764+0A/mJQTYkqfwRqYiCooASLrntUb xwewRTF+LbsCuDRYZ5dDHsRH/adM0nH7zaYO6Q== -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org