$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e203338313433.roa File: 3230322e3136392e3234382e302f32342d3234203d3e203338313433.roa (raw, json) Hash identifier: L6pEG9OhAzYEAGOerzX9Qn4ANwT+1ekx5/wMVBDoACE= Subject key identifier: C5:93:24:EA:D3:93:B9:3D:97:C8:1F:0E:60:EF:05:42:B8:10:34:8E Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 1E2173AA112052FCA0262E8D416FDF288377FA24 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e203338313433.roa Signing time: Tue 18 Jun 2024 06:00:01 +0000 ROA not before: Tue 18 Jun 2024 05:55:01 +0000 ROA not after: Tue 17 Jun 2025 06:00:01 +0000 asID: 38143 IP address blocks: 202.169.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 13:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:21:73:aa:11:20:52:fc:a0:26:2e:8d:41:6f:df:28:83:77:fa:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Jun 18 05:55:01 2024 GMT Not After : Jun 17 06:00:01 2025 GMT Subject: CN=C59324EAD393B93D97C81F0E60EF0542B810348E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:64:40:52:12:9f:a6:ab:b4:0e:8d:3e:fc: 59:33:dd:89:5a:6e:df:da:04:9b:5e:e2:d3:bb:db: c6:8d:18:cc:3f:46:19:32:a6:28:1b:1a:31:fa:8a: a7:2e:ee:96:26:bc:0b:68:81:8a:70:73:1b:f1:06: b1:bd:a5:89:e9:6f:0c:af:1d:54:a8:e3:07:3d:39: 79:2b:3f:87:d9:1a:aa:df:ee:0b:31:cd:dd:d8:4d: b6:79:83:90:6d:ad:56:c3:2f:3d:47:95:25:73:d6: 7e:28:29:04:35:23:5e:cf:d9:b6:8c:c4:a3:43:35: 9a:9c:5c:f6:b8:4f:bb:5a:c9:09:53:86:7a:f7:8c: 8d:ad:ff:33:f4:be:e4:8f:ee:0a:97:6f:b5:d1:fd: 55:e2:49:0b:87:3d:2a:86:07:c8:5e:60:d3:b0:33: 65:5d:6a:d6:ee:15:6c:1b:3b:78:50:30:0e:98:6e: a6:51:64:76:a6:bb:6e:70:69:4f:3b:d2:67:11:c8: 73:2a:05:62:18:1b:5e:f4:68:c8:2b:80:1f:dd:0e: 5b:58:1c:3a:0c:6d:bb:ac:70:7b:43:47:aa:1e:53: d2:71:98:24:5a:22:81:f4:ad:d0:a5:53:f7:6b:9e: 21:c7:0e:88:0b:3d:01:a1:ca:f5:9e:53:32:06:0d: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:93:24:EA:D3:93:B9:3D:97:C8:1F:0E:60:EF:05:42:B8:10:34:8E X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e203338313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.248.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:16:23:59:06:78:78:fb:16:94:07:8c:1e:d5:c6:7f:f5:3c: 0d:c3:50:36:c0:7e:a7:0c:4e:66:2c:03:62:ef:20:68:f7:ce: 92:38:3c:51:ae:e1:d3:de:c7:87:60:54:62:ad:a5:0e:76:94: 23:eb:af:08:1b:00:da:b7:50:e0:59:89:b0:02:87:60:b9:2f: b6:93:95:74:2c:79:c8:ce:57:e2:25:21:64:d9:74:2b:4c:16: aa:4b:c7:cd:0e:64:3b:13:41:ba:26:ac:19:8e:70:13:4d:bd: e0:72:e1:6a:05:29:fe:b7:f5:be:11:dd:e9:0e:89:f3:20:aa: b4:8c:0f:9f:cd:4b:54:ae:04:72:cd:6f:8f:5f:45:c3:a4:f5: 2d:4c:46:6b:8a:7e:f5:70:23:51:93:d4:59:c7:4e:9f:8c:27: eb:88:06:1c:54:f8:38:4f:b8:7f:d5:64:12:0b:24:6b:64:7f: 54:75:bd:8b:97:fc:53:8b:b8:25:9f:74:41:68:50:d5:72:9f: 54:f4:3f:47:96:75:6c:3f:d3:f1:47:96:a6:ab:24:48:26:6f: 93:ce:04:19:b7:eb:aa:1c:83:8a:42:e3:7f:d2:54:81:c4:b7: b8:4d:a4:b1:56:58:af:b1:59:81:9c:72:8a:31:1b:f9:a5:3d: f2:15:1b:13 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHiFzqhEgUvygJi6NQW/fKIN3+iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNDA2MTgwNTU1MDFaFw0yNTA2MTcwNjAwMDFaMDMxMTAvBgNV BAMTKEM1OTMyNEVBRDM5M0I5M0Q5N0M4MUYwRTYwRUYwNTQyQjgxMDM0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9mRAUhKfpqu0Do0+/Fkz3Yla bt/aBJte4tO728aNGMw/RhkypigbGjH6iqcu7pYmvAtogYpwcxvxBrG9pYnpbwyv HVSo4wc9OXkrP4fZGqrf7gsxzd3YTbZ5g5BtrVbDLz1HlSVz1n4oKQQ1I17P2baM xKNDNZqcXPa4T7tayQlThnr3jI2t/zP0vuSP7gqXb7XR/VXiSQuHPSqGB8heYNOw M2VdatbuFWwbO3hQMA6YbqZRZHamu25waU870mcRyHMqBWIYG170aMgrgB/dDltY HDoMbbuscHtDR6oeU9JxmCRaIoH0rdClU/drniHHDogLPQGhyvWeUzIGDUkJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxZMk6tOTuT2XyB8OYO8FQrgQNI4wHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqn4MA0GCSqG SIb3DQEBCwUAA4IBAQBbFiNZBnh4+xaUB4we1cZ/9TwNw1A2wH6nDE5mLANi7yBo 986SODxRruHT3seHYFRiraUOdpQj668IGwDat1DgWYmwAodguS+2k5V0LHnIzlfi JSFk2XQrTBaqS8fNDmQ7E0G6JqwZjnATTb3gcuFqBSn+t/W+Ed3pDonzIKq0jA+f zUtUrgRyzW+PX0XDpPUtTEZrin71cCNRk9RZx06fjCfriAYcVPg4T7h/1WQSCyRr ZH9Udb2Ll/xTi7gln3RBaFDVcp9U9D9HlnVsP9PxR5amqyRIJm+TzgQZt+uqHIOK QuN/0lSBxLe4TaSxVlivsVmBnHKKMRv5pT3yFRsT -----END CERTIFICATE-----Generated at Tue Jun 18 14:01:19 2024 by rpki-client on console-ams.rpki-client.org