$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/3230322e39342e38332e302f32342d3234203d3e203535363732.roa File: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (raw, json) Hash identifier: Ixm7ifW1MV0NJkzYpRAOaXDcBc0UAsgPk2HmJSCGIc4= Subject key identifier: D3:DE:30:12:16:72:EA:98:90:52:9A:9F:28:6D:D5:1A:C8:C9:7B:E4 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 790D17CC4DB3FC09485FBE067EFF86EE10164C21 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/3230322e39342e38332e302f32342d3234203d3e203535363732.roa Signing time: Mon 01 Jul 2024 01:03:23 +0000 ROA not before: Mon 01 Jul 2024 00:58:23 +0000 ROA not after: Mon 30 Jun 2025 01:03:23 +0000 asID: 55672 IP address blocks: 202.94.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0d:17:cc:4d:b3:fc:09:48:5f:be:06:7e:ff:86:ee:10:16:4c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Jul 1 00:58:23 2024 GMT Not After : Jun 30 01:03:23 2025 GMT Subject: CN=D3DE30121672EA9890529A9F286DD51AC8C97BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:3a:0f:73:4f:00:2e:64:90:71:8b:83:ab: 5f:76:a2:ff:47:49:f4:b0:62:99:1d:c8:0c:b4:f6: 15:3c:6a:e7:7d:fd:f9:1a:6f:d4:95:ec:61:96:de: eb:f1:7b:bd:bd:f3:14:64:4b:14:c6:ad:9a:bc:c0: 89:29:6b:5d:d2:05:5a:88:4d:6f:f9:33:cb:a1:00: f0:36:ab:71:f0:40:d7:d6:2f:ed:57:ff:af:33:65: 86:b9:e5:c9:9e:30:b5:c1:13:b3:76:9a:0b:7b:54: d4:dd:93:fb:27:e1:43:3b:69:dd:0d:0f:5f:e9:36: 73:f5:d1:cb:86:83:f1:d4:43:39:a5:5e:03:27:56: ed:5e:ff:a6:6f:2c:5a:a6:6e:e2:d2:a6:ad:d8:cb: 3b:bf:b0:05:1a:86:bd:fe:c1:3f:60:41:23:eb:3e: 37:a8:01:d3:6a:ab:3c:cf:b2:e7:3d:ea:5e:9d:a8: 5c:e9:f4:0c:b4:11:f3:ed:29:a7:7f:6d:10:ac:dd: 45:08:9e:d5:42:6a:cf:28:2c:54:6a:36:72:43:fa: d0:31:57:44:29:e6:6d:93:bf:9b:f2:dd:8a:e9:53: 2d:5d:87:ec:cf:69:22:12:7b:27:53:09:20:5b:ba: 1c:c3:2a:b8:f5:db:d3:e9:6e:f0:36:47:8a:ae:a6: 1b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DE:30:12:16:72:EA:98:90:52:9A:9F:28:6D:D5:1A:C8:C9:7B:E4 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/3230322e39342e38332e302f32342d3234203d3e203535363732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.94.83.0/24 Signature Algorithm: sha256WithRSAEncryption b2:61:2f:fd:4c:9b:88:7d:7b:2d:72:10:86:31:60:34:43:e7: 2c:35:fa:80:ef:93:c7:c0:5e:7e:83:42:fe:74:88:61:fb:dc: a0:f0:0b:8b:c9:e3:72:10:a2:2b:f1:ea:d3:6b:f0:56:e7:d3: 11:c2:01:90:e5:bc:34:4d:df:0c:df:78:50:09:28:b1:95:01: d3:85:f7:2f:e1:f9:1b:46:22:15:cf:d3:c9:da:dd:64:3b:61: 39:17:9f:d4:58:b4:88:a1:d7:ea:be:eb:33:72:7d:23:ca:00: 98:d7:77:62:d5:53:78:4c:91:73:69:83:b2:cb:e9:b4:3b:93: 5c:bd:1c:b7:da:d4:37:0b:2d:a2:14:a5:13:69:76:4d:63:a9: 29:73:d5:82:f1:e5:bc:a5:a8:6d:04:98:3a:78:f9:c7:1d:69: bd:4d:17:a1:ad:4d:dc:2a:58:db:23:9c:2e:9d:9b:cf:ff:79: 6d:65:96:ee:14:27:47:d0:a0:00:bb:18:ab:90:8a:c8:be:5e: 77:cf:7e:fa:5c:26:a0:c4:3c:ab:fe:a7:b5:66:a8:89:3a:5b: f4:e8:74:a3:da:b0:5d:67:00:8e:78:4d:7e:38:63:40:a1:88: b2:14:a9:81:15:b7:d1:4a:44:f3:1b:a4:04:21:e3:80:c4:52: 8f:d6:05:c4 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUeQ0XzE2z/AlIX74Gfv+G7hAWTCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNDA3MDEwMDU4MjNaFw0yNTA2MzAwMTAzMjNaMDMxMTAvBgNV BAMTKEQzREUzMDEyMTY3MkVBOTg5MDUyOUE5RjI4NkRENTFBQzhDOTdCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jzoPc08ALmSQcYuDq192ov9H SfSwYpkdyAy09hU8aud9/fkab9SV7GGW3uvxe7298xRkSxTGrZq8wIkpa13SBVqI TW/5M8uhAPA2q3HwQNfWL+1X/68zZYa55cmeMLXBE7N2mgt7VNTdk/sn4UM7ad0N D1/pNnP10cuGg/HUQzmlXgMnVu1e/6ZvLFqmbuLSpq3Yyzu/sAUahr3+wT9gQSPr PjeoAdNqqzzPsuc96l6dqFzp9Ay0EfPtKad/bRCs3UUIntVCas8oLFRqNnJD+tAx V0Qp5m2Tv5vy3YrpUy1dh+zPaSISeydTCSBbuhzDKrj129PpbvA2R4quphshAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU094wEhZy6piQUpqfKG3VGsjJe+QwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4YjQ0MWFkLWYxYWEtNDhkMy05 ZWRiLWI5YTVkNWNlOWJhOC8wLzMyMzAzMjJlMzkzNDJlMzgzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXlMwDQYJKoZIhvcN AQELBQADggEBALJhL/1Mm4h9ey1yEIYxYDRD5yw1+oDvk8fAXn6DQv50iGH73KDw C4vJ43IQoivx6tNr8Fbn0xHCAZDlvDRN3wzfeFAJKLGVAdOF9y/h+RtGIhXP08na 3WQ7YTkXn9RYtIih1+q+6zNyfSPKAJjXd2LVU3hMkXNpg7LL6bQ7k1y9HLfa1DcL LaIUpRNpdk1jqSlz1YLx5bylqG0EmDp4+ccdab1NF6GtTdwqWNsjnC6dm8//eW1l lu4UJ0fQoAC7GKuQisi+XnfPfvpcJqDEPKv+p7VmqIk6W/TodKPasF1nAI54TX44 Y0ChiLIUqYEVt9FKRPMbpAQh44DEUo/WBcQ= -----END CERTIFICATE-----Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org