$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32322d3234203d3e203338313433.roa File: 3230322e3136392e3234382e302f32322d3234203d3e203338313433.roa (raw, json) Hash identifier: ieREG17z1FJf5c79pcGMihrLYDZDNWROdZ7WxWoG+es= Subject key identifier: 10:C5:EA:77:D8:E2:AA:2A:14:33:7D:A1:E3:FC:D7:6B:7A:C7:7E:E9 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 0E823B24708EF75787DDE7A1635E43EF253E228D Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32322d3234203d3e203338313433.roa Signing time: Tue 18 Jun 2024 11:00:00 +0000 ROA not before: Tue 18 Jun 2024 10:55:00 +0000 ROA not after: Tue 17 Jun 2025 11:00:00 +0000 asID: 38143 IP address blocks: 202.169.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 13:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:82:3b:24:70:8e:f7:57:87:dd:e7:a1:63:5e:43:ef:25:3e:22:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Jun 18 10:55:00 2024 GMT Not After : Jun 17 11:00:00 2025 GMT Subject: CN=10C5EA77D8E2AA2A14337DA1E3FCD76B7AC77EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:8a:69:b9:50:7d:a5:00:77:ad:81:66:6d: 1f:e4:60:5d:90:37:b5:d5:d7:32:e6:cd:b1:31:37: 8e:a8:71:1a:d2:9e:36:fc:4e:2d:94:85:96:c5:d4: fe:a5:39:3a:b8:e2:fa:3c:66:9a:9c:c2:6d:78:a5: 84:db:b7:f3:ef:55:bd:e9:12:93:a3:77:04:22:63: 70:58:c9:46:9d:89:a0:dc:30:73:a0:a5:31:70:7a: 89:df:da:fe:c0:92:61:4c:af:23:89:63:76:11:d8: 7b:db:85:09:4c:21:ad:4f:ba:3b:51:f6:e0:36:f9: 06:96:11:e9:d2:ea:98:e8:3f:7c:b7:51:f6:62:a2: 25:80:83:a2:d5:4c:44:5c:bb:90:7b:c7:3f:a1:c1: c7:0f:a7:12:4b:66:e7:c2:2d:10:09:9e:9f:7c:e6: c4:f7:6b:fd:15:1f:ce:6d:8e:67:7e:f3:82:4c:d6: cd:fc:11:a6:9e:52:f1:60:e6:6c:d4:e9:56:58:2f: 45:68:18:14:20:7f:fb:a2:ed:b0:c3:f1:d1:5b:28: 15:f1:6a:35:4b:19:c8:1d:33:e9:b2:99:e0:13:c9: ba:28:0a:c0:dd:de:81:c8:81:98:9f:43:0e:c9:e9: a5:92:a9:49:07:b2:cc:3a:24:ac:36:40:36:27:17: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C5:EA:77:D8:E2:AA:2A:14:33:7D:A1:E3:FC:D7:6B:7A:C7:7E:E9 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32322d3234203d3e203338313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.248.0/22 Signature Algorithm: sha256WithRSAEncryption 49:df:fa:b1:19:1b:e0:41:8a:91:9b:f7:e8:e1:28:32:f6:32: a0:b8:76:8d:b5:a1:db:ab:e7:fc:ad:01:a7:80:98:e3:47:bf: 14:80:af:80:d3:9e:95:63:08:b5:2e:52:b7:21:24:ea:84:c7: 0f:36:13:92:e6:b6:3b:f1:63:2b:a1:3e:77:46:59:08:64:38: 95:bc:44:45:b7:ae:12:e9:f5:e1:50:cb:70:96:c5:fa:9c:45: b0:64:c3:df:0b:b3:0b:f7:db:ce:df:df:e6:3e:3b:74:73:d7: f5:b0:8c:a8:21:e4:50:a6:20:88:b8:2d:d5:3b:e4:eb:8f:7d: 67:61:a2:d9:44:38:da:c0:4a:20:ee:94:88:0d:4d:6b:2b:b6: f0:e8:8f:ae:f2:1e:ab:d5:e8:44:b8:a9:57:06:3a:76:6b:32: bf:13:d9:f1:68:68:75:21:52:81:d0:97:be:32:69:ab:42:ce: 28:b3:04:f2:e6:c3:1a:8f:90:d2:72:5b:37:90:a4:9b:dc:37: d7:0c:d7:18:f6:5b:a9:72:83:0c:06:9c:14:c0:75:21:ac:58: 7d:e3:76:b8:8c:ba:ef:8a:bc:dd:07:26:1d:90:84:60:d2:ac: 17:d3:9c:09:c4:03:24:6f:b0:6a:b7:9b:40:60:a0:d4:53:68: 2a:b1:1a:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDoI7JHCO91eH3eehY15D7yU+Io0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNDA2MTgxMDU1MDBaFw0yNTA2MTcxMTAwMDBaMDMxMTAvBgNV BAMTKDEwQzVFQTc3RDhFMkFBMkExNDMzN0RBMUUzRkNENzZCN0FDNzdFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAYppuVB9pQB3rYFmbR/kYF2Q N7XV1zLmzbExN46ocRrSnjb8Ti2UhZbF1P6lOTq44vo8Zpqcwm14pYTbt/PvVb3p EpOjdwQiY3BYyUadiaDcMHOgpTFweonf2v7AkmFMryOJY3YR2HvbhQlMIa1PujtR 9uA2+QaWEenS6pjoP3y3UfZioiWAg6LVTERcu5B7xz+hwccPpxJLZufCLRAJnp98 5sT3a/0VH85tjmd+84JM1s38EaaeUvFg5mzU6VZYL0VoGBQgf/ui7bDD8dFbKBXx ajVLGcgdM+mymeATybooCsDd3oHIgZifQw7J6aWSqUkHssw6JKw2QDYnF7RPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEMXqd9jiqioUM32h4/zXa3rHfukwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyqn4MA0GCSqG SIb3DQEBCwUAA4IBAQBJ3/qxGRvgQYqRm/fo4Sgy9jKguHaNtaHbq+f8rQGngJjj R78UgK+A056VYwi1LlK3ISTqhMcPNhOS5rY78WMroT53RlkIZDiVvERFt64S6fXh UMtwlsX6nEWwZMPfC7ML99vO39/mPjt0c9f1sIyoIeRQpiCIuC3VO+Trj31nYaLZ RDjawEog7pSIDU1rK7bw6I+u8h6r1ehEuKlXBjp2azK/E9nxaGh1IVKB0Je+Mmmr Qs4oswTy5sMaj5DScls3kKSb3DfXDNcY9lupcoMMBpwUwHUhrFh943a4jLrvirzd ByYdkIRg0qwX05wJxAMkb7Bqt5tAYKDUU2gqsRoS -----END CERTIFICATE-----Generated at Tue Jun 18 11:40:44 2024 by rpki-client on console-fra.rpki-client.org