$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35372e302f32342d3234203d3e203437363932.roa File: 3230322e35312e35372e302f32342d3234203d3e203437363932.roa (raw, json) Hash identifier: dN5tEfqiDd9XPSNdGuiguzIx1jTeWlC+AqlHtokXIBc= Subject key identifier: 3E:E2:37:54:9C:44:38:C9:F5:F7:E9:7D:37:C5:D7:EF:E3:FF:8A:70 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 2F615632767D0454275F578B1F4D1D3E0A635B7C Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35372e302f32342d3234203d3e203437363932.roa Signing time: Wed 24 Jul 2024 15:35:13 +0000 ROA not before: Wed 24 Jul 2024 15:30:13 +0000 ROA not after: Wed 23 Jul 2025 15:35:13 +0000 asID: 47692 IP address blocks: 202.51.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:61:56:32:76:7d:04:54:27:5f:57:8b:1f:4d:1d:3e:0a:63:5b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Jul 24 15:30:13 2024 GMT Not After : Jul 23 15:35:13 2025 GMT Subject: CN=3EE237549C4438C9F5F7E97D37C5D7EFE3FF8A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e4:d9:ab:29:10:4f:e4:80:11:5b:f6:c2:af: fd:6f:59:12:71:ef:2b:ac:0d:99:31:15:f5:8d:63: 19:cd:3c:c0:18:4e:49:87:a8:69:28:ef:10:12:f5: 8a:2e:e4:e2:5f:33:b8:c1:24:ae:8f:69:ca:18:d1: 27:15:49:52:25:1d:c6:80:45:12:ab:84:e5:f1:95: ee:2b:66:36:0b:2a:58:25:fd:51:71:5f:6c:71:92: e4:e1:f2:8c:e5:27:86:ec:bc:1d:70:bc:41:68:ed: cc:32:41:ec:fd:01:0c:84:05:7b:fc:73:d3:2c:1e: fc:5c:fe:f6:c2:0c:e2:c1:c2:1c:b9:b1:58:2f:50: d8:bf:35:ca:22:92:aa:5a:81:d2:db:ec:a5:3b:68: a5:d6:e7:13:96:46:43:a8:f7:bb:e8:06:5c:d5:d0: 08:8b:19:67:92:ec:2c:49:7f:0c:4b:a5:2c:a2:b3: 63:91:31:ba:75:e4:22:64:27:d7:f7:bd:83:57:5d: 3b:2c:29:a1:fd:9b:34:f4:bc:a9:bf:36:65:2a:ce: 8e:ce:27:72:aa:5c:b3:15:38:ea:c7:8a:55:32:6c: 0c:ed:31:8c:07:ba:2b:e9:32:ed:dc:18:64:79:7b: 7c:b5:00:81:58:b0:de:3a:94:f8:f8:28:94:9b:a5: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E2:37:54:9C:44:38:C9:F5:F7:E9:7D:37:C5:D7:EF:E3:FF:8A:70 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35372e302f32342d3234203d3e203437363932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.57.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:6e:e9:39:5f:03:32:1c:89:38:aa:e2:a7:aa:21:50:c9:02: 26:f5:16:6d:7c:67:45:0e:5e:2b:96:69:1c:33:41:d6:e5:ea: e3:dd:cd:2a:a4:a1:45:5c:85:30:17:24:85:f2:4d:d6:b4:ca: 3c:57:38:2b:60:ef:bd:89:a0:46:8a:07:05:ea:24:21:0c:a8: 21:d4:c6:69:71:48:14:dd:01:09:66:83:b7:51:3b:da:74:e8: 1e:54:da:3a:89:85:35:63:7e:e1:24:ab:9e:9e:5e:2f:83:07: 9d:9b:85:58:34:2a:80:bd:55:28:75:d4:82:b0:0c:d4:8b:60: bc:36:72:df:04:85:bb:17:24:8c:c4:9e:5c:48:f4:f6:a8:b6: 3e:88:fd:fe:de:fc:14:71:7b:c9:18:2d:a7:db:d3:ab:9c:95: a9:d0:13:c6:8d:7b:07:ba:f1:bc:dd:ae:bc:aa:21:59:e5:a0: af:1f:a9:d8:a5:e9:ef:db:54:19:f6:e7:a9:b0:82:ec:30:d6: ae:46:05:c4:16:b2:c0:4c:12:17:37:46:4b:9b:8a:5a:b0:3e: 2b:37:06:29:31:92:2e:6c:d5:1c:35:bb:8a:49:14:88:fe:cb: e7:5f:f8:1f:3c:ed:54:99:45:f9:a7:df:46:c9:13:7c:b6:d5: d4:94:55:23 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUL2FWMnZ9BFQnX1eLH00dPgpjW3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNDA3MjQxNTMwMTNaFw0yNTA3MjMxNTM1MTNaMDMxMTAvBgNV BAMTKDNFRTIzNzU0OUM0NDM4QzlGNUY3RTk3RDM3QzVEN0VGRTNGRjhBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5NmrKRBP5IARW/bCr/1vWRJx 7yusDZkxFfWNYxnNPMAYTkmHqGko7xAS9You5OJfM7jBJK6PacoY0ScVSVIlHcaA RRKrhOXxle4rZjYLKlgl/VFxX2xxkuTh8ozlJ4bsvB1wvEFo7cwyQez9AQyEBXv8 c9MsHvxc/vbCDOLBwhy5sVgvUNi/NcoikqpagdLb7KU7aKXW5xOWRkOo97voBlzV 0AiLGWeS7CxJfwxLpSyis2ORMbp15CJkJ9f3vYNXXTssKaH9mzT0vKm/NmUqzo7O J3KqXLMVOOrHilUybAztMYwHuivpMu3cGGR5e3y1AIFYsN46lPj4KJSbpchVAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUPuI3VJxEOMn19+l9N8XX7+P/inAwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzUzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzczNjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKMzkwDQYJKoZIhvcN AQELBQADggEBAFtu6TlfAzIciTiq4qeqIVDJAib1Fm18Z0UOXiuWaRwzQdbl6uPd zSqkoUVchTAXJIXyTda0yjxXOCtg772JoEaKBwXqJCEMqCHUxmlxSBTdAQlmg7dR O9p06B5U2jqJhTVjfuEkq56eXi+DB52bhVg0KoC9VSh11IKwDNSLYLw2ct8EhbsX JIzEnlxI9Paotj6I/f7e/BRxe8kYLafb06uclanQE8aNewe68bzdrryqIVnloK8f qdil6e/bVBn256mwguww1q5GBcQWssBMEhc3RkubilqwPis3Bikxki5s1Rw1u4pJ FIj+y+df+B887VSZRfmn30bJE3y21dSUVSM= -----END CERTIFICATE-----Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org