$ rpki-client -vvf repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3230322e31302e35392e302f32342d3234203d3e20313336313139.roa File: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (raw, json) Hash identifier: RhfOeKNZ4j1KvALyW4SxaRw/kBv+Dgu0smuwmiknx1Y= Subject key identifier: D1:94:B1:B9:69:BD:52:68:D4:D8:50:FA:B5:C2:58:AC:32:EE:47:2E Certificate issuer: /CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Certificate serial: 55C65C38E76FC2CD1540D9D11F300A8D27BDE536 Authority key identifier: 21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3230322e31302e35392e302f32342d3234203d3e20313336313139.roa Signing time: Wed 18 Sep 2024 08:00:01 +0000 ROA not before: Wed 18 Sep 2024 07:55:01 +0000 ROA not after: Wed 17 Sep 2025 08:00:01 +0000 asID: 136119 IP address blocks: 202.10.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 22:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c6:5c:38:e7:6f:c2:cd:15:40:d9:d1:1f:30:0a:8d:27:bd:e5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Validity Not Before: Sep 18 07:55:01 2024 GMT Not After : Sep 17 08:00:01 2025 GMT Subject: CN=D194B1B969BD5268D4D850FAB5C258AC32EE472E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bb:6e:de:57:12:da:76:59:be:b5:bd:52:7d: d5:dc:16:00:1b:09:d8:36:7c:9e:17:f8:32:01:62: 14:f9:25:ef:64:eb:1b:68:a4:32:e1:0d:5b:ed:56: 78:e1:09:1f:bc:dd:12:4d:b0:7f:c3:0e:a5:17:40: 40:df:07:b5:65:22:15:04:82:75:93:59:13:b5:95: f5:cf:c2:36:5d:51:91:96:ec:69:30:b1:84:8f:04: f1:f6:5a:b0:73:7e:cb:22:55:ad:b0:05:16:93:b1: 12:50:45:ad:14:33:5c:8d:5e:b5:c1:79:a5:99:75: e7:e5:64:f7:58:b7:92:3b:e2:68:54:79:e4:6a:65: 2f:e4:92:da:98:5a:13:be:d9:32:b5:d3:26:cd:39: 4e:7a:55:7c:32:fb:a4:81:a9:5d:82:63:b4:c7:2d: e8:17:1b:dd:a4:14:17:4f:fc:b4:b1:d5:06:db:5b: 06:d1:8b:79:c5:6f:8f:01:12:0a:92:05:50:b9:3c: a4:2b:d6:e9:18:de:e0:17:fe:77:5d:23:6f:1e:3f: 77:b8:4c:24:ff:f8:05:fe:27:bc:13:75:1c:2f:11: 0f:0b:6a:8f:09:b1:ed:29:98:12:22:f1:cf:ab:99: 23:84:91:62:a2:d0:ab:d9:8b:96:70:dd:21:fe:21: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:94:B1:B9:69:BD:52:68:D4:D8:50:FA:B5:C2:58:AC:32:EE:47:2E X509v3 Authority Key Identifier: keyid:21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3230322e31302e35392e302f32342d3234203d3e20313336313139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.59.0/24 Signature Algorithm: sha256WithRSAEncryption 54:e8:94:c2:3c:2b:82:fb:ed:72:61:d4:ff:ce:86:ef:57:38: e0:d0:5b:b4:c6:f9:b9:98:91:9d:14:b1:39:63:d2:7b:3f:b0: 57:68:fa:b3:d1:4c:4b:dc:1e:fc:3f:ce:5b:ce:8e:4a:ec:25: cc:e3:fd:f0:c7:07:ab:f6:7b:1c:8a:6d:a0:46:ff:e3:3c:69: 47:54:d0:6a:1b:a2:89:f3:f8:06:a8:b3:de:1c:ba:2b:89:de: 94:c9:83:17:ae:93:94:d8:06:59:a2:f7:b6:91:25:5b:f1:7b: 44:e8:75:6a:51:3e:4b:0b:80:14:ce:f8:be:dd:50:fb:26:30: 58:94:da:ac:ba:6c:b7:9c:9f:42:26:bf:40:f4:8f:2a:33:5b: d0:28:10:71:95:1b:76:d4:7f:7e:91:ba:88:3d:04:29:95:09: e2:06:d1:e7:e8:b8:58:13:a1:7f:0e:6e:1b:37:38:23:cf:e9: 4d:90:84:d8:ea:15:0b:ac:5f:93:72:63:c6:e7:a8:5a:9b:21: fa:77:50:23:f7:20:6b:b1:e2:1b:ab:7a:88:2c:ef:5b:fe:2f: 72:0a:12:38:41:68:4a:eb:ee:a3:08:66:07:14:80:a1:2a:f6: 01:62:5d:b2:34:2a:9b:61:41:a5:67:69:fb:92:d8:87:10:5a: 7c:c7:37:da -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVcZcOOdvws0VQNnRHzAKjSe95TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNE RDAwOTExQjAeFw0yNDA5MTgwNzU1MDFaFw0yNTA5MTcwODAwMDFaMDMxMTAvBgNV BAMTKEQxOTRCMUI5NjlCRDUyNjhENEQ4NTBGQUI1QzI1OEFDMzJFRTQ3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpu27eVxLadlm+tb1SfdXcFgAb Cdg2fJ4X+DIBYhT5Je9k6xtopDLhDVvtVnjhCR+83RJNsH/DDqUXQEDfB7VlIhUE gnWTWRO1lfXPwjZdUZGW7GkwsYSPBPH2WrBzfssiVa2wBRaTsRJQRa0UM1yNXrXB eaWZdeflZPdYt5I74mhUeeRqZS/kktqYWhO+2TK10ybNOU56VXwy+6SBqV2CY7TH LegXG92kFBdP/LSx1QbbWwbRi3nFb48BEgqSBVC5PKQr1ukY3uAX/nddI28eP3e4 TCT/+AX+J7wTdRwvEQ8Lao8Jse0pmBIi8c+rmSOEkWKi0KvZi5Zw3SH+IXgvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU0ZSxuWm9UmjU2FD6tcJYrDLuRy4wHwYDVR0j BBgwFoAUIawiC3enfQUWvHO0wpyDY90AkRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGFiYzBiYS05MjIyLTRjNDUtODM0Mi1lYjg2NDNjNDk2N2QvMC8yMUFDMjIwQjc3 QTc3RDA1MTZCQzczQjRDMjlDODM2M0REMDA5MTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNERDAw OTExQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkYWJjMGJhLTkyMjItNGM0NS04 MzQyLWViODY0M2M0OTY3ZC8wLzMyMzAzMjJlMzEzMDJlMzUzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNjMxMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoKOzANBgkqhkiG 9w0BAQsFAAOCAQEAVOiUwjwrgvvtcmHU/86G71c44NBbtMb5uZiRnRSxOWPSez+w V2j6s9FMS9we/D/OW86OSuwlzOP98McHq/Z7HIptoEb/4zxpR1TQahuiifP4Bqiz 3hy6K4nelMmDF66TlNgGWaL3tpElW/F7ROh1alE+SwuAFM74vt1Q+yYwWJTarLps t5yfQia/QPSPKjNb0CgQcZUbdtR/fpG6iD0EKZUJ4gbR5+i4WBOhfw5uGzc4I8/p TZCE2OoVC6xfk3JjxueoWpsh+ndQI/cga7HiG6t6iCzvW/4vcgoSOEFoSuvuowhm BxSAoSr2AWJdsjQqm2FBpWdp+5LYhxBafMc32g== -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:20 2024 by rpki-client on console-ams.rpki-client.org