$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e203437363932.roa File: 3230322e35312e35382e302f32332d3233203d3e203437363932.roa (raw, json) Hash identifier: n2AhFYkS9w5mTdj0uj26bwREB9kdObgD0xOA841RqYU= Subject key identifier: B5:91:30:CB:DD:62:3C:90:8B:DF:68:0F:D3:FB:72:1F:4D:43:8A:D1 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 03B30E260F08447E90F48F8EC2931FE214EF5286 Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e203437363932.roa Signing time: Wed 24 Jul 2024 15:36:05 +0000 ROA not before: Wed 24 Jul 2024 15:31:05 +0000 ROA not after: Wed 23 Jul 2025 15:36:05 +0000 asID: 47692 IP address blocks: 202.51.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b3:0e:26:0f:08:44:7e:90:f4:8f:8e:c2:93:1f:e2:14:ef:52:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Jul 24 15:31:05 2024 GMT Not After : Jul 23 15:36:05 2025 GMT Subject: CN=B59130CBDD623C908BDF680FD3FB721F4D438AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:ed:2b:4d:0f:22:b4:c2:c9:6a:cc:0e:65: bd:5c:d0:19:09:46:9a:58:a9:63:b9:3d:fb:70:27: bb:8f:f7:28:13:06:f2:3f:80:d6:7c:12:c3:7d:8c: 99:c4:7f:23:45:b0:94:76:41:67:92:b9:46:42:0f: 0e:8f:94:a5:72:64:28:c4:76:52:46:cf:f6:19:b3: 4e:90:06:00:56:c2:43:a1:cf:53:65:bb:57:73:e9: 5c:d0:0a:0e:5f:2c:bb:eb:1b:ae:ed:56:83:39:dc: 9b:84:5c:1c:76:b7:31:e8:ba:2a:df:13:33:63:20: 1a:5c:0b:3e:f6:0b:bc:20:54:7e:0d:02:96:6b:95: dd:f1:12:2e:1a:ac:df:67:6a:5c:c1:6d:40:42:9a: be:1a:54:1a:17:59:8a:70:76:4b:19:64:1a:d6:fc: a3:5b:2f:0a:83:fa:39:18:55:3f:b5:43:4c:7d:fb: 43:19:8d:ff:5f:a9:1c:d8:28:f9:6c:81:b7:a2:66: 69:50:4d:f7:e0:42:d4:c5:d3:40:70:96:86:b8:c6: 77:63:41:05:40:b7:19:8b:f4:f4:3a:4d:79:41:0a: e5:37:d6:b2:4b:17:a9:7e:00:bc:33:50:bb:7b:bb: 42:b0:ec:40:d4:b5:fc:88:5f:9e:ce:e6:95:5f:26: 0b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:91:30:CB:DD:62:3C:90:8B:DF:68:0F:D3:FB:72:1F:4D:43:8A:D1 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e203437363932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.58.0/23 Signature Algorithm: sha256WithRSAEncryption ad:8d:65:fc:9c:a8:a8:04:4e:3c:c9:13:7a:00:c2:4b:ca:90: b2:c8:e1:d3:3c:d9:a9:51:53:7b:86:03:8d:8f:e1:3f:73:b3: d2:05:14:39:03:ae:c1:08:a9:5c:3f:76:1e:a7:a7:81:61:46: 57:5a:50:4a:3a:c0:f4:a1:85:a8:3c:b2:20:7a:49:63:d5:5b: e8:8a:82:14:81:62:16:bf:54:1b:b2:52:0f:8a:82:8b:3c:43: a9:21:df:d2:58:75:49:fc:87:49:63:f9:dc:46:01:0b:e5:56: d5:73:bc:cd:cf:da:8b:f1:c8:af:75:71:31:86:55:b8:b7:63: 9a:29:b5:ae:84:a7:40:95:ef:91:4d:25:2e:dc:56:aa:5a:f0: 00:e2:21:f7:c5:b2:48:86:30:24:0f:4f:d5:bd:36:e6:44:de: db:bf:b5:c9:57:b6:72:8b:db:18:ba:40:9a:bb:46:63:8d:ae: 33:83:b6:27:3b:a2:50:85:92:fe:2e:ba:f0:78:3a:d0:37:da: 52:72:ff:d7:f4:97:80:03:91:e4:9b:31:64:64:79:3b:f4:42: 2b:c8:89:af:7b:7f:40:eb:33:4d:69:b0:a0:13:73:a5:fc:90: 02:97:e5:00:4b:21:2e:7a:03:e5:59:7d:f0:bb:c3:91:03:d6: 0a:b9:d5:20 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUA7MOJg8IRH6Q9I+OwpMf4hTvUoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNDA3MjQxNTMxMDVaFw0yNTA3MjMxNTM2MDVaMDMxMTAvBgNV BAMTKEI1OTEzMENCREQ2MjNDOTA4QkRGNjgwRkQzRkI3MjFGNEQ0MzhBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWO0rTQ8itMLJaswOZb1c0BkJ RppYqWO5PftwJ7uP9ygTBvI/gNZ8EsN9jJnEfyNFsJR2QWeSuUZCDw6PlKVyZCjE dlJGz/YZs06QBgBWwkOhz1Nlu1dz6VzQCg5fLLvrG67tVoM53JuEXBx2tzHouirf EzNjIBpcCz72C7wgVH4NApZrld3xEi4arN9nalzBbUBCmr4aVBoXWYpwdksZZBrW /KNbLwqD+jkYVT+1Q0x9+0MZjf9fqRzYKPlsgbeiZmlQTffgQtTF00Bwloa4xndj QQVAtxmL9PQ6TXlBCuU31rJLF6l+ALwzULt7u0Kw7EDUtfyIX57O5pVfJgsvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUtZEwy91iPJCL32gP0/tyH01DitEwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzUzODJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDM0MzczNjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKMzowDQYJKoZIhvcN AQELBQADggEBAK2NZfycqKgETjzJE3oAwkvKkLLI4dM82alRU3uGA42P4T9zs9IF FDkDrsEIqVw/dh6np4FhRldaUEo6wPShhag8siB6SWPVW+iKghSBYha/VBuyUg+K gos8Q6kh39JYdUn8h0lj+dxGAQvlVtVzvM3P2ovxyK91cTGGVbi3Y5opta6Ep0CV 75FNJS7cVqpa8ADiIffFskiGMCQPT9W9NuZE3tu/tclXtnKL2xi6QJq7RmONrjOD tic7olCFkv4uuvB4OtA32lJy/9f0l4ADkeSbMWRkeTv0QivIia97f0DrM01psKAT c6X8kAKX5QBLIS56A+VZffC7w5ED1gq51SA= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org