$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e20313333383039.roa File: 3230322e35312e35382e302f32342d3234203d3e20313333383039.roa (raw, json) Hash identifier: cqeQwHrHLnmtE9TbQ4Wl2rA2Jr2qCQd6H1k09S8SWJY= Subject key identifier: 78:65:63:A8:28:B0:05:46:85:0E:70:05:77:A1:D0:A9:4D:F1:9D:F5 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 12E3C964282A27C9A39F1D9A7D418D94183DAE49 Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e20313333383039.roa Signing time: Mon 22 Apr 2024 10:02:11 +0000 ROA not before: Mon 22 Apr 2024 09:57:11 +0000 ROA not after: Mon 21 Apr 2025 10:02:11 +0000 asID: 133809 IP address blocks: 202.51.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e3:c9:64:28:2a:27:c9:a3:9f:1d:9a:7d:41:8d:94:18:3d:ae:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Apr 22 09:57:11 2024 GMT Not After : Apr 21 10:02:11 2025 GMT Subject: CN=786563A828B00546850E700577A1D0A94DF19DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:f5:81:4d:a3:af:90:47:29:e1:47:31:19: b3:08:bf:f8:ac:47:e1:88:d1:1f:16:36:9f:2a:4d: 67:ae:7c:63:8a:00:96:cf:f4:bb:f2:48:d0:55:f1: 43:82:b9:3e:98:1c:98:55:c1:a0:0f:61:21:b0:d1: 8d:01:17:ba:c0:25:f1:f0:84:14:8c:02:43:6f:10: 50:0b:e2:c2:16:6e:80:81:ee:a8:eb:b5:3a:e9:5b: 39:57:c5:39:5d:08:19:e4:5c:fe:c6:fd:bb:e6:e1: b0:44:15:31:9b:a6:6f:b9:a5:12:86:0e:bc:37:e2: 99:6a:f9:7c:61:7e:88:3e:da:13:31:97:f6:9d:72: 4b:4e:a7:28:3d:5a:f1:b6:b8:86:b5:8b:03:39:6d: 57:25:d4:ba:a5:a6:fa:49:07:b8:c7:ea:df:1b:3d: 13:9f:c6:f9:ba:68:55:9f:72:24:9c:d3:6d:c1:1c: 9b:7e:a9:81:be:be:02:29:d5:9f:8a:43:08:93:57: 74:ce:6d:7d:38:9b:b9:3f:ef:71:3b:02:08:04:92: 4e:32:ee:3f:92:67:ff:1f:f7:b5:34:37:7b:5f:e0: ff:6e:f8:60:f1:24:7c:d6:42:21:0f:93:b8:46:7b: d3:44:77:a7:1c:20:a3:a9:9b:06:06:4a:6d:ae:9c: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:65:63:A8:28:B0:05:46:85:0E:70:05:77:A1:D0:A9:4D:F1:9D:F5 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e20313333383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.58.0/24 Signature Algorithm: sha256WithRSAEncryption 61:fb:f3:85:00:fe:e8:96:22:9f:26:c7:1a:1b:fa:98:ac:6f: 04:b9:08:2a:57:37:f5:82:46:52:d8:44:d0:d7:de:2d:56:2a: b0:af:92:47:1a:c8:c9:82:09:3f:41:d7:67:9c:cd:13:a3:55: 8f:1e:d4:a7:87:8a:c2:05:f6:43:48:4b:69:16:c5:36:ef:a0: 99:02:b9:45:17:44:c9:76:69:b3:d7:a5:1c:fc:d1:ec:a4:11: f6:a7:c4:5a:8f:d4:26:e1:81:fc:49:57:c8:ca:43:52:c6:77: 1e:47:51:20:39:40:1c:cc:d7:5c:97:1f:ca:f6:15:29:cd:13: 58:09:4e:d7:2f:de:2b:57:e9:15:be:44:74:0b:f5:c5:4f:5f: 16:34:c2:d0:7c:ce:ec:fe:99:7b:f4:79:91:66:51:dc:73:da: 8e:28:7e:38:c6:6a:1c:c7:50:50:39:61:d4:9a:27:9f:ec:3e: b8:0d:8d:2e:e4:ec:7c:87:5c:1b:60:59:4e:d1:e1:09:48:85: 43:5d:79:bc:80:cf:a5:26:b6:e1:d7:83:29:52:1a:d9:bc:3c: e4:eb:36:fa:78:22:47:05:0e:a0:a1:05:66:ad:a7:d3:22:11: ae:b0:b2:e6:0e:28:8e:86:99:90:a7:6d:28:cd:ea:50:69:e1: b4:84:07:bf -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEuPJZCgqJ8mjnx2afUGNlBg9rkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNDA0MjIwOTU3MTFaFw0yNTA0MjExMDAyMTFaMDMxMTAvBgNV BAMTKDc4NjU2M0E4MjhCMDA1NDY4NTBFNzAwNTc3QTFEMEE5NERGMTlERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqPWBTaOvkEcp4UcxGbMIv/is R+GI0R8WNp8qTWeufGOKAJbP9LvySNBV8UOCuT6YHJhVwaAPYSGw0Y0BF7rAJfHw hBSMAkNvEFAL4sIWboCB7qjrtTrpWzlXxTldCBnkXP7G/bvm4bBEFTGbpm+5pRKG Drw34plq+Xxhfog+2hMxl/adcktOpyg9WvG2uIa1iwM5bVcl1LqlpvpJB7jH6t8b PROfxvm6aFWfciSc023BHJt+qYG+vgIp1Z+KQwiTV3TObX04m7k/73E7AggEkk4y 7j+SZ/8f97U0N3tf4P9u+GDxJHzWQiEPk7hGe9NEd6ccIKOpmwYGSm2unHPlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUeGVjqCiwBUaFDnAFd6HQqU3xnfUwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzUzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMozOjANBgkqhkiG 9w0BAQsFAAOCAQEAYfvzhQD+6JYinybHGhv6mKxvBLkIKlc39YJGUthE0NfeLVYq sK+SRxrIyYIJP0HXZ5zNE6NVjx7Up4eKwgX2Q0hLaRbFNu+gmQK5RRdEyXZps9el HPzR7KQR9qfEWo/UJuGB/ElXyMpDUsZ3HkdRIDlAHMzXXJcfyvYVKc0TWAlO1y/e K1fpFb5EdAv1xU9fFjTC0HzO7P6Ze/R5kWZR3HPajih+OMZqHMdQUDlh1Jonn+w+ uA2NLuTsfIdcG2BZTtHhCUiFQ115vIDPpSa24deDKVIa2bw85Os2+ngiRwUOoKEF Zq2n0yIRrrCy5g4ojoaZkKdtKM3qUGnhtIQHvw== -----END CERTIFICATE-----Generated at Sat Jun 1 19:26:35 2024 by rpki-client on console-fra.rpki-client.org