$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3132322e3134342e302e302f32322d3234203d3e203338333230.roa File: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: 7667q65z5ALRHOPz7ZlyjDc7iiTkR7i4e2iT+KR7k3I= Subject key identifier: A7:C8:85:CE:06:FD:CF:8C:34:A9:D5:72:F7:34:1C:A8:7E:17:66:CC Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 102B9967FE5361EA6F064FF508CE0EECAC46ACBD Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3132322e3134342e302e302f32322d3234203d3e203338333230.roa Signing time: Sun 03 Nov 2024 06:00:00 +0000 ROA not before: Sun 03 Nov 2024 05:55:00 +0000 ROA not after: Sun 02 Nov 2025 06:00:00 +0000 asID: 38320 IP address blocks: 122.144.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:2b:99:67:fe:53:61:ea:6f:06:4f:f5:08:ce:0e:ec:ac:46:ac:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Nov 3 05:55:00 2024 GMT Not After : Nov 2 06:00:00 2025 GMT Subject: CN=A7C885CE06FDCF8C34A9D572F7341CA87E1766CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:e9:28:30:02:57:74:c1:71:43:38:87:24: 2c:66:8f:27:42:43:cb:95:4f:bb:60:33:1c:d4:00: d9:86:38:ad:9a:d8:03:f3:da:4b:b7:fd:64:be:47: c0:e8:7e:2d:08:60:7d:88:f2:15:06:16:c7:75:e5: 42:46:1f:d9:5b:73:6a:6d:ee:68:c9:58:fb:4c:c1: 4c:34:b8:cd:c3:d4:e6:67:68:d9:ed:ea:2c:6a:d4: 93:df:4f:f0:c8:8b:fc:96:31:e2:e3:50:73:02:c2: e6:df:80:3a:64:ae:54:9d:e0:c5:d0:9d:01:28:a1: 4c:18:29:af:8a:af:7c:89:e9:83:b0:9b:4d:2b:a8: 57:f0:44:e0:5f:f1:82:7a:00:4a:d7:34:3e:ae:74: b6:78:98:b6:e8:48:53:37:2b:e3:c9:ec:22:ee:cb: 9d:0c:25:b6:c7:7b:bd:5f:6b:3e:16:9f:6c:72:5c: e6:e6:b0:10:2c:bb:37:ea:f7:6c:6f:2e:33:d4:2f: cb:28:fa:72:84:bf:e9:6f:5a:49:95:9c:33:c2:80: 96:82:36:e0:fa:d1:13:0d:40:4c:a6:f6:fa:b6:4a: 2b:e6:ab:b1:59:5a:78:9a:34:6e:75:27:a3:93:ed: 21:ba:18:34:46:99:9e:84:2d:57:6d:a7:4b:99:57: 9f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C8:85:CE:06:FD:CF:8C:34:A9:D5:72:F7:34:1C:A8:7E:17:66:CC X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3132322e3134342e302e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.144.0.0/22 Signature Algorithm: sha256WithRSAEncryption cd:96:65:e3:60:cd:89:ac:70:ac:eb:dd:55:f4:c1:d6:80:71: 85:8e:63:94:7f:f4:75:d2:2d:02:57:5b:4d:2d:a1:3a:56:2f: 69:71:9d:d2:e0:ef:d3:81:7c:6c:0c:d6:48:f9:f0:56:43:9d: 83:fd:3d:6c:9e:0b:86:ab:ff:dc:d3:f7:b7:ec:86:8c:23:5c: f4:fe:50:38:e9:7a:09:cb:6d:e5:b0:2e:2a:fe:99:81:5b:1d: 97:eb:e3:cf:26:c3:d2:39:f5:92:f3:80:cf:3a:f3:6c:ef:d1: 76:50:3c:fc:41:e6:55:44:84:82:42:77:82:41:02:e1:90:3f: 79:b4:f1:8e:fa:41:b5:7b:d8:35:d3:d0:69:d5:b0:72:7d:b5: 27:99:bb:1e:c6:97:eb:c6:cd:9b:5c:b0:83:4e:f4:55:f7:08: 0d:81:f7:55:98:25:84:b6:85:5e:44:a2:2d:76:56:0c:a6:20: b6:a8:a2:32:cf:c8:55:2f:83:b7:c0:9a:8e:b6:4e:1f:4e:2b: 17:36:ff:51:fd:83:57:4d:e6:b6:ee:ac:cb:23:58:f3:a5:85: 08:0a:9a:3d:bf:59:3a:31:bb:7b:e0:54:78:cd:bb:8e:f3:b7: c2:3b:5a:d3:fd:f3:68:3b:66:07:1d:c4:b7:cb:a5:04:bf:55: 52:eb:f5:af -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUECuZZ/5TYepvBk/1CM4O7KxGrL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNDExMDMwNTU1MDBaFw0yNTExMDIwNjAwMDBaMDMxMTAvBgNV BAMTKEE3Qzg4NUNFMDZGRENGOEMzNEE5RDU3MkY3MzQxQ0E4N0UxNzY2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSukoMAJXdMFxQziHJCxmjydC Q8uVT7tgMxzUANmGOK2a2APz2ku3/WS+R8Dofi0IYH2I8hUGFsd15UJGH9lbc2pt 7mjJWPtMwUw0uM3D1OZnaNnt6ixq1JPfT/DIi/yWMeLjUHMCwubfgDpkrlSd4MXQ nQEooUwYKa+Kr3yJ6YOwm00rqFfwROBf8YJ6AErXND6udLZ4mLboSFM3K+PJ7CLu y50MJbbHe71faz4Wn2xyXObmsBAsuzfq92xvLjPUL8so+nKEv+lvWkmVnDPCgJaC NuD60RMNQEym9vq2Sivmq7FZWniaNG51J6OT7SG6GDRGmZ6ELVdtp0uZV59FAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUp8iFzgb9z4w0qdVy9zQcqH4XZswwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzIzMjJlMzEzNDM0MmUzMDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMzMzgzMzMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6kAAwDQYJKoZIhvcN AQELBQADggEBAM2WZeNgzYmscKzr3VX0wdaAcYWOY5R/9HXSLQJXW00toTpWL2lx ndLg79OBfGwM1kj58FZDnYP9PWyeC4ar/9zT97fshowjXPT+UDjpegnLbeWwLir+ mYFbHZfr488mw9I59ZLzgM8682zv0XZQPPxB5lVEhIJCd4JBAuGQP3m08Y76QbV7 2DXT0GnVsHJ9tSeZux7Gl+vGzZtcsINO9FX3CA2B91WYJYS2hV5Eoi12VgymILao ojLPyFUvg7fAmo62Th9OKxc2/1H9g1dN5rburMsjWPOlhQgKmj2/WToxu3vgVHjN u47zt8I7WtP982g7ZgcdxLfLpQS/VVLr9a8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org