$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35392e302f32342d3234203d3e203437363932.roa File: 3230322e35312e35392e302f32342d3234203d3e203437363932.roa (raw, json) Hash identifier: 3QSWapYp9HOZ0lMVobww0XUkxzG54UBbtwZnrfbLHzY= Subject key identifier: E7:57:0D:F8:B9:C1:01:BF:E6:70:AA:4D:BE:63:8C:ED:0F:84:C4:37 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: C4E779557D5492F6DC927955AD0500B078AE49 Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35392e302f32342d3234203d3e203437363932.roa Signing time: Wed 24 Jul 2024 15:37:34 +0000 ROA not before: Wed 24 Jul 2024 15:32:34 +0000 ROA not after: Wed 23 Jul 2025 15:37:34 +0000 asID: 47692 IP address blocks: 202.51.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c4:e7:79:55:7d:54:92:f6:dc:92:79:55:ad:05:00:b0:78:ae:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Jul 24 15:32:34 2024 GMT Not After : Jul 23 15:37:34 2025 GMT Subject: CN=E7570DF8B9C101BFE670AA4DBE638CED0F84C437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:5e:3e:29:1b:af:31:9f:de:3f:e0:63:ad: e6:b4:68:e4:92:ee:f2:09:d8:41:bf:6e:f4:c5:c1: 7e:ef:8d:7e:59:dc:4e:f3:10:86:23:3a:49:3a:c2: e8:a1:bb:90:9a:71:6e:b9:cb:5c:3e:96:65:4b:4c: 81:5b:24:14:64:41:49:a1:f3:4f:da:b3:e3:7a:9f: 50:84:2f:e9:98:41:e7:9e:66:80:9d:52:aa:b6:8c: 19:c7:60:61:9c:9f:e6:70:3d:16:a3:c8:b6:59:e6: d6:9f:73:f1:14:e4:27:78:5b:fb:29:eb:1e:9c:ea: 6c:26:58:96:69:cf:9d:f7:8e:51:da:ca:ee:bf:cf: 4a:5c:82:bf:9d:fc:40:de:58:c9:d3:f1:0e:b1:c4: df:79:82:20:b3:f1:ff:db:21:ef:69:d3:b0:a8:76: 63:6f:76:c5:df:99:cb:34:46:67:2e:c6:a8:ff:9b: c5:84:9d:40:2f:ef:33:c6:dc:a3:79:4e:74:24:c5: b6:59:d9:4a:e3:6a:1a:be:63:df:e6:c6:c8:ab:1d: aa:a5:22:90:db:2e:83:a8:f1:6f:a5:20:a4:be:44: 34:88:e9:c2:6f:17:df:6d:28:5f:d9:aa:3e:41:d7: 3c:d1:da:4c:78:6a:c0:60:48:38:35:90:c9:79:14: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:57:0D:F8:B9:C1:01:BF:E6:70:AA:4D:BE:63:8C:ED:0F:84:C4:37 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35392e302f32342d3234203d3e203437363932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.59.0/24 Signature Algorithm: sha256WithRSAEncryption 22:01:c9:10:fe:6a:6d:ab:db:3f:5d:62:f4:1e:8d:48:77:2b: 09:4e:dc:93:75:8c:4e:d9:fa:51:80:6b:f5:e4:4d:9d:ae:2d: dd:62:0a:01:31:09:de:5b:3a:91:3a:c6:a5:ac:59:80:5e:4b: 53:98:cc:7a:01:e4:be:e8:6e:0b:7f:df:06:de:53:07:bf:bd: cb:92:8e:93:82:b7:ed:91:03:85:9b:5f:c6:96:01:32:9d:3d: 89:c8:e9:56:0d:38:4b:63:01:8b:69:6e:69:85:45:5e:24:f6: bd:a0:b2:d5:0e:f7:31:9c:b5:5c:69:c0:26:ef:81:57:8e:be: a2:b7:b6:f4:fb:e3:68:0b:12:69:e9:ed:89:2d:95:f0:65:80: 95:3b:1a:50:df:c2:08:7f:22:24:22:81:2b:97:33:b4:07:2d: 87:cf:14:2f:07:30:79:3d:3b:1a:05:02:5f:b2:95:48:8f:87: 69:37:da:af:80:74:25:7a:cd:3f:61:58:87:9f:24:89:9b:7c: 92:1c:c9:53:17:01:d1:92:0f:d2:8a:36:0a:0e:c5:0b:69:5a: 02:a6:cd:b7:0a:bb:80:58:55:fc:59:bd:9c:db:55:e6:fc:86: 1c:a0:f8:f5:c1:59:fc:3d:8a:8e:52:e7:cc:09:8a:74:7f:a6: 32:4f:42:72 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUAMTneVV9VJL23JJ5Va0FALB4rkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNDA3MjQxNTMyMzRaFw0yNTA3MjMxNTM3MzRaMDMxMTAvBgNV BAMTKEU3NTcwREY4QjlDMTAxQkZFNjcwQUE0REJFNjM4Q0VEMEY4NEM0MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktF4+KRuvMZ/eP+Bjrea0aOSS 7vIJ2EG/bvTFwX7vjX5Z3E7zEIYjOkk6wuihu5CacW65y1w+lmVLTIFbJBRkQUmh 80/as+N6n1CEL+mYQeeeZoCdUqq2jBnHYGGcn+ZwPRajyLZZ5tafc/EU5Cd4W/sp 6x6c6mwmWJZpz533jlHayu6/z0pcgr+d/EDeWMnT8Q6xxN95giCz8f/bIe9p07Co dmNvdsXfmcs0Rmcuxqj/m8WEnUAv7zPG3KN5TnQkxbZZ2Urjahq+Y9/mxsirHaql IpDbLoOo8W+lIKS+RDSI6cJvF99tKF/Zqj5B1zzR2kx4asBgSDg1kMl5FFGbAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU51cN+LnBAb/mcKpNvmOM7Q+ExDcwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzUzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzczNjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKMzswDQYJKoZIhvcN AQELBQADggEBACIByRD+am2r2z9dYvQejUh3KwlO3JN1jE7Z+lGAa/XkTZ2uLd1i CgExCd5bOpE6xqWsWYBeS1OYzHoB5L7obgt/3wbeUwe/vcuSjpOCt+2RA4WbX8aW ATKdPYnI6VYNOEtjAYtpbmmFRV4k9r2gstUO9zGctVxpwCbvgVeOvqK3tvT742gL Emnp7YktlfBlgJU7GlDfwgh/IiQigSuXM7QHLYfPFC8HMHk9OxoFAl+ylUiPh2k3 2q+AdCV6zT9hWIefJImbfJIcyVMXAdGSD9KKNgoOxQtpWgKmzbcKu4BYVfxZvZzb Veb8hhyg+PXBWfw9io5S58wJinR/pjJPQnI= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org