$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa File: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (raw, json) Hash identifier: qCRdptVpMmdMqqtxJXdx1zB/jqR/u92GaANeBeT682g= Subject key identifier: 28:0A:11:7B:C6:C7:8E:50:22:24:18:F2:F9:F9:17:72:1C:44:0F:BA Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 50E8CE9A04EDB0402319BFB5AF82D61884E95795 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa Signing time: Tue 18 Jun 2024 11:00:00 +0000 ROA not before: Tue 18 Jun 2024 10:55:00 +0000 ROA not after: Tue 17 Jun 2025 11:00:00 +0000 asID: 38143 IP address blocks: 202.169.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 13:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e8:ce:9a:04:ed:b0:40:23:19:bf:b5:af:82:d6:18:84:e9:57:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Jun 18 10:55:00 2024 GMT Not After : Jun 17 11:00:00 2025 GMT Subject: CN=280A117BC6C78E50222418F2F9F917721C440FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:42:c7:ce:79:d7:a6:25:d0:41:ef:56:e4: 89:ef:56:8b:c2:ca:db:0f:e5:5c:25:b4:46:7a:cf: 1f:3e:27:cf:33:28:c2:03:b4:24:8b:14:83:a2:c6: 69:65:63:86:8e:0a:2d:70:b0:09:66:20:1a:da:07: 60:dd:bd:0e:e7:90:71:27:fb:cc:1a:64:02:09:ed: 5e:8a:3e:81:07:e0:2b:45:a2:51:70:6f:7d:ed:fb: 38:ec:13:e7:b4:d0:04:c4:24:67:64:15:fe:3a:81: d3:9e:bc:57:df:7b:80:d9:69:32:bb:2a:22:33:24: 45:d1:93:05:e2:7b:e9:a4:8a:1a:e3:09:0b:67:b0: be:58:1e:52:f6:83:0e:c6:15:1a:68:c5:87:c7:dd: 15:14:53:c0:5e:e5:1b:65:c1:8a:fc:9a:08:e8:13: af:1b:2d:a4:2c:85:bd:f8:65:3b:60:7f:2a:55:94: a6:41:48:68:ef:28:32:57:db:eb:1f:7a:df:a4:a6: 2d:35:99:81:af:b8:ea:b6:34:c8:12:fa:f9:c5:53: 94:2b:72:4a:3b:ff:5a:26:33:01:f5:c2:77:bd:03: 1d:12:fb:11:50:0c:df:03:a1:7e:79:a2:2f:7b:c0: 89:62:39:83:aa:e6:66:fd:42:12:d3:6f:2d:8a:e4: 1d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0A:11:7B:C6:C7:8E:50:22:24:18:F2:F9:F9:17:72:1C:44:0F:BA X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.240.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:a6:f2:48:a0:cf:b8:12:9d:0a:06:b6:5f:02:d6:08:44:e1: 69:7e:9c:c1:7a:6b:6f:4c:e4:02:9d:9e:55:fa:2d:b8:d6:13: 91:bb:da:8e:d2:c7:e2:66:8e:73:0c:9c:38:60:d7:20:d3:69: 15:20:d4:8b:d4:24:f1:d0:c9:7d:c1:3c:c4:d3:a8:56:25:76: ca:28:ba:52:a1:74:a1:70:0d:2a:4c:bd:3e:c2:3e:9e:b7:63: aa:ed:48:6a:a6:ea:f1:c7:a4:bc:d7:74:51:e9:a5:0d:7f:ec: 49:59:2a:bc:b4:b7:b3:ee:7d:45:35:3e:bd:22:38:f1:09:d6: 8f:fd:2c:0b:93:03:bb:d7:b8:3b:d0:64:af:4b:10:bd:b6:59: 03:f9:54:38:72:47:8f:51:15:ae:b0:04:7f:0c:4b:4a:10:dc: 89:b8:63:11:3a:e9:3f:f4:67:4a:e1:a1:65:c8:3a:f5:f9:b6: 56:e4:0e:32:8b:aa:0c:ec:65:ce:8f:07:6b:e5:fe:0c:1c:12: 6e:21:eb:98:c2:22:f0:17:64:46:b9:38:0b:b1:7f:d0:d4:ee: 06:d3:a0:3b:1a:a6:19:3e:c7:2e:87:36:06:93:50:0d:7f:9d: 5c:80:51:0a:f8:04:99:e1:49:2b:ea:ff:ef:55:48:46:e2:ad: 97:29:10:07 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUOjOmgTtsEAjGb+1r4LWGITpV5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNDA2MTgxMDU1MDBaFw0yNTA2MTcxMTAwMDBaMDMxMTAvBgNV BAMTKDI4MEExMTdCQzZDNzhFNTAyMjI0MThGMkY5RjkxNzcyMUM0NDBGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4ELHznnXpiXQQe9W5InvVovC ytsP5VwltEZ6zx8+J88zKMIDtCSLFIOixmllY4aOCi1wsAlmIBraB2DdvQ7nkHEn +8waZAIJ7V6KPoEH4CtFolFwb33t+zjsE+e00ATEJGdkFf46gdOevFffe4DZaTK7 KiIzJEXRkwXie+mkihrjCQtnsL5YHlL2gw7GFRpoxYfH3RUUU8Be5RtlwYr8mgjo E68bLaQshb34ZTtgfypVlKZBSGjvKDJX2+sfet+kpi01mYGvuOq2NMgS+vnFU5Qr cko7/1omMwH1wne9Ax0S+xFQDN8DoX55oi97wIliOYOq5mb9QhLTby2K5B15AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKAoRe8bHjlAiJBjy+fkXchxED7owHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzAyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyqnwMA0GCSqG SIb3DQEBCwUAA4IBAQA9pvJIoM+4Ep0KBrZfAtYIROFpfpzBemtvTOQCnZ5V+i24 1hORu9qO0sfiZo5zDJw4YNcg02kVINSL1CTx0Ml9wTzE06hWJXbKKLpSoXShcA0q TL0+wj6et2Oq7Uhqpurxx6S813RR6aUNf+xJWSq8tLez7n1FNT69IjjxCdaP/SwL kwO717g70GSvSxC9tlkD+VQ4ckePURWusAR/DEtKENyJuGMROuk/9GdK4aFlyDr1 +bZW5A4yi6oM7GXOjwdr5f4MHBJuIeuYwiLwF2RGuTgLsX/Q1O4G06A7GqYZPscu hzYGk1ANf51cgFEK+ASZ4Ukr6v/vVUhG4q2XKRAH -----END CERTIFICATE-----Generated at Tue Jun 18 11:40:44 2024 by rpki-client on console-fra.rpki-client.org