$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa File: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (raw, json) Hash identifier: LpfpsRHdtzDbS8mVC806nMN0DKSFJFJPb+lmJ69PmFM= Subject key identifier: 75:58:55:82:E8:E2:76:BE:CA:A4:2B:91:E0:DA:CA:AD:62:15:1C:00 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 3DE2C97F6D063BE5A972E8BD4BB3C6F4E0B729E8 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa Signing time: Tue 18 Jun 2024 06:00:01 +0000 ROA not before: Tue 18 Jun 2024 05:55:01 +0000 ROA not after: Tue 17 Jun 2025 06:00:01 +0000 asID: 38143 IP address blocks: 202.169.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 14:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e2:c9:7f:6d:06:3b:e5:a9:72:e8:bd:4b:b3:c6:f4:e0:b7:29:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Jun 18 05:55:01 2024 GMT Not After : Jun 17 06:00:01 2025 GMT Subject: CN=75585582E8E276BECAA42B91E0DACAAD62151C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:49:ac:0a:b6:87:c6:0b:81:09:9d:dd:5d: a3:d5:44:e7:f2:d1:fd:1a:08:76:eb:82:ab:78:21: 30:58:c7:75:a0:46:94:6c:c6:df:b8:e0:a0:76:25: 0c:a7:94:4d:9f:9d:b3:34:97:d4:9f:f2:35:49:84: d9:2f:b2:0e:19:ea:2c:e2:ed:69:a3:b8:92:7a:99: b2:39:95:39:08:cc:53:a5:2e:2c:12:18:e6:79:ac: 47:f9:05:f5:a5:8a:d8:f5:15:22:8e:45:f4:df:a6: be:46:0c:0f:7e:07:c1:2a:57:77:1a:34:42:11:ef: 2f:e6:30:94:86:78:45:18:f0:76:74:b1:14:3d:8a: a0:1d:d3:af:91:61:78:64:27:54:2f:40:db:d4:4f: 08:ed:fd:ab:e8:3d:88:54:01:83:58:f6:3b:7c:0b: 46:75:61:57:bd:b4:20:00:6b:86:f8:5b:74:94:35: f2:1c:25:5e:fb:a6:3d:9b:3f:84:7f:07:29:de:f1: 2a:5b:5e:b1:7d:54:0b:0c:13:69:2e:8d:59:7f:af: 48:fd:c5:c2:21:1d:89:24:7d:e1:77:01:3a:f8:fb: b4:01:86:7a:36:37:7f:1c:cd:0b:38:21:13:8f:58: 46:7c:eb:d1:5a:a7:68:45:aa:06:20:d0:4d:76:e0: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:58:55:82:E8:E2:76:BE:CA:A4:2B:91:E0:DA:CA:AD:62:15:1C:00 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.247.0/24 Signature Algorithm: sha256WithRSAEncryption 37:a7:0d:7b:98:ec:34:f2:f8:bb:22:db:18:4d:c1:37:04:c0: 91:19:86:37:ec:f0:02:08:83:77:36:79:71:6d:9f:66:88:7f: a5:6e:09:d9:fb:19:2a:67:ab:78:2e:b6:f0:7f:5c:33:13:d1: 70:df:74:66:c5:44:13:d0:b2:dc:4d:f6:a5:98:6e:0d:d8:60: 50:bf:cf:bf:04:f6:10:cb:31:70:d5:5d:04:55:31:b7:cf:b2: f5:bd:ca:1b:77:74:bd:8a:78:6e:42:f5:71:91:e6:1d:23:23: ff:eb:af:d9:c7:38:c3:e3:45:e7:25:76:f7:06:d8:d8:fb:13: 81:4a:c4:ef:f3:41:bb:09:69:b9:1c:43:37:6a:26:2b:05:46: db:c0:68:60:86:91:e5:51:7d:d9:c1:1a:e5:5f:aa:03:cb:ed: d4:e6:4a:bc:41:98:04:92:1c:e3:34:33:70:6a:04:4c:3b:78: 25:de:1d:b0:95:ad:f4:f9:79:c3:23:0e:4d:ca:9c:42:97:40: 67:74:b6:14:fd:42:cc:b5:c2:84:c9:f1:4c:c5:24:8a:84:e7: ec:4e:de:9d:6e:18:43:eb:00:91:c6:57:c4:77:60:83:81:2d: 67:4e:f8:1c:6a:50:be:93:c7:2d:7e:0c:7d:1b:94:63:97:62: 57:45:94:41 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPeLJf20GO+Wpcui9S7PG9OC3KegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNDA2MTgwNTU1MDFaFw0yNTA2MTcwNjAwMDFaMDMxMTAvBgNV BAMTKDc1NTg1NTgyRThFMjc2QkVDQUE0MkI5MUUwREFDQUFENjIxNTFDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3UmsCraHxguBCZ3dXaPVROfy 0f0aCHbrgqt4ITBYx3WgRpRsxt+44KB2JQynlE2fnbM0l9Sf8jVJhNkvsg4Z6izi 7WmjuJJ6mbI5lTkIzFOlLiwSGOZ5rEf5BfWlitj1FSKORfTfpr5GDA9+B8EqV3ca NEIR7y/mMJSGeEUY8HZ0sRQ9iqAd06+RYXhkJ1QvQNvUTwjt/avoPYhUAYNY9jt8 C0Z1YVe9tCAAa4b4W3SUNfIcJV77pj2bP4R/Byne8SpbXrF9VAsME2kujVl/r0j9 xcIhHYkkfeF3ATr4+7QBhno2N38czQs4IROPWEZ869Fap2hFqgYg0E124ERNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdVhVgujidr7KpCuR4NrKrWIVHAAwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqn3MA0GCSqG SIb3DQEBCwUAA4IBAQA3pw17mOw08vi7ItsYTcE3BMCRGYY37PACCIN3NnlxbZ9m iH+lbgnZ+xkqZ6t4Lrbwf1wzE9Fw33RmxUQT0LLcTfalmG4N2GBQv8+/BPYQyzFw 1V0EVTG3z7L1vcobd3S9inhuQvVxkeYdIyP/66/ZxzjD40XnJXb3BtjY+xOBSsTv 80G7CWm5HEM3aiYrBUbbwGhghpHlUX3ZwRrlX6oDy+3U5kq8QZgEkhzjNDNwagRM O3gl3h2wla30+XnDIw5NypxCl0BndLYU/ULMtcKEyfFMxSSKhOfsTt6dbhhD6wCR xlfEd2CDgS1nTvgcalC+k8ctfgx9G5Rjl2JXRZRB -----END CERTIFICATE-----Generated at Mon Apr 21 05:42:09 2025 by rpki-client