$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa File: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (raw, json) Hash identifier: etaBPciFEwBhaJvis2tVUGBI+EfK6LR3Mmz7DfvWUkY= Subject key identifier: A4:88:C2:55:D2:ED:B0:A3:8A:2B:DE:A8:6C:FF:85:DF:43:60:24:98 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 578BAB2709220B2FE0B8E0FCA510FE41FC1F0477 Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa Signing time: Wed 24 Apr 2024 06:00:02 +0000 ROA not before: Wed 24 Apr 2024 05:55:02 +0000 ROA not after: Wed 23 Apr 2025 06:00:02 +0000 asID: 201341 IP address blocks: 202.51.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 10:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:8b:ab:27:09:22:0b:2f:e0:b8:e0:fc:a5:10:fe:41:fc:1f:04:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Apr 24 05:55:02 2024 GMT Not After : Apr 23 06:00:02 2025 GMT Subject: CN=A488C255D2EDB0A38A2BDEA86CFF85DF43602498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:99:1f:e0:d4:fc:94:e7:54:23:10:50:5c: 66:80:6b:d0:a2:03:c4:1f:5d:29:ea:21:c3:07:23: 88:ee:37:94:95:ad:58:65:1f:d2:e1:60:22:9d:5b: 8e:db:5b:62:f5:2c:d3:d2:88:63:be:41:84:d3:23: 32:89:f1:71:7b:1e:95:cf:fd:4d:02:4e:8b:53:5a: cd:f7:74:5b:d6:5a:59:af:f5:3d:4b:fe:25:64:35: b9:34:50:d1:0d:72:f3:fc:c4:8f:13:14:97:ac:66: 45:ae:88:22:72:20:4f:11:d9:ac:91:99:d2:0d:bd: 7c:9c:88:6d:1f:20:ff:c6:1a:92:a0:6b:f8:a3:67: 90:e4:ac:83:56:79:4e:d1:32:85:cf:50:bf:1e:94: 93:2b:70:47:3a:fc:b2:34:8d:87:55:56:31:cc:24: a3:72:04:d0:eb:00:34:4c:f7:c1:0a:ba:8b:cc:37: 38:61:7c:bd:b6:49:b9:ae:83:8f:69:fd:4e:60:7f: 3b:02:46:cc:30:b9:c6:1f:d6:12:45:ed:cf:4f:12: 7f:ef:e1:af:ae:0b:65:7a:22:92:60:e8:ca:53:24: fc:f3:75:ae:45:9a:49:ad:8b:6e:c5:69:b0:7e:92: 21:da:f6:89:07:3c:be:10:4a:8a:21:8a:09:a5:85: ed:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:88:C2:55:D2:ED:B0:A3:8A:2B:DE:A8:6C:FF:85:DF:43:60:24:98 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.60.0/22 Signature Algorithm: sha256WithRSAEncryption 68:aa:dd:96:15:8c:b8:af:4a:9c:98:05:7a:51:3f:36:13:a8: 11:4b:36:47:ff:29:67:b6:c6:aa:02:69:ec:04:e1:d5:ba:17: 93:67:b7:49:f5:2b:a1:8e:78:8d:e1:3e:3f:be:01:67:dd:d8: 7d:51:08:9c:80:38:11:c2:ed:ad:01:52:76:b3:2c:58:e0:61: 77:c0:d0:ec:bd:be:ab:40:54:16:9b:e2:a1:ea:d9:54:9e:63: e3:16:66:f4:ab:12:68:57:ab:13:a3:25:fa:90:73:63:7c:bc: 0c:9e:58:2c:8e:bc:f2:2b:35:2f:57:9b:fe:96:33:e3:81:c9: 3c:e5:39:e6:ff:8a:66:b9:42:87:61:a6:2b:e2:41:89:91:70: 0b:52:9f:36:75:9f:b7:da:a3:71:ac:9d:f5:04:c6:fb:90:0b: 8b:3e:81:80:19:46:71:a0:01:4f:dc:91:a1:4d:fe:97:4b:af: 54:0e:45:d0:51:26:48:b5:46:dc:ec:59:52:4a:44:2b:f3:c3: 89:34:3f:56:b1:f0:ce:5b:63:a3:10:2e:86:39:99:d8:14:30: 0d:0c:d2:f0:6b:e6:32:3a:29:ce:66:23:fb:08:ea:5c:ea:7d: bd:05:e5:db:a2:be:db:02:bd:6a:7d:99:2e:43:6e:cd:5a:0b: 14:6b:3b:7a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUV4urJwkiCy/guOD8pRD+QfwfBHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNDA0MjQwNTU1MDJaFw0yNTA0MjMwNjAwMDJaMDMxMTAvBgNV BAMTKEE0ODhDMjU1RDJFREIwQTM4QTJCREVBODZDRkY4NURGNDM2MDI0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMl5kf4NT8lOdUIxBQXGaAa9Ci A8QfXSnqIcMHI4juN5SVrVhlH9LhYCKdW47bW2L1LNPSiGO+QYTTIzKJ8XF7HpXP /U0CTotTWs33dFvWWlmv9T1L/iVkNbk0UNENcvP8xI8TFJesZkWuiCJyIE8R2ayR mdINvXyciG0fIP/GGpKga/ijZ5DkrINWeU7RMoXPUL8elJMrcEc6/LI0jYdVVjHM JKNyBNDrADRM98EKuovMNzhhfL22Sbmug49p/U5gfzsCRswwucYf1hJF7c9PEn/v 4a+uC2V6IpJg6MpTJPzzda5Fmkmti27FabB+kiHa9okHPL4QSoohigmlhe1lAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUpIjCVdLtsKOKK96obP+F30NgJJgwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzYzMDJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsozPDANBgkqhkiG 9w0BAQsFAAOCAQEAaKrdlhWMuK9KnJgFelE/NhOoEUs2R/8pZ7bGqgJp7ATh1boX k2e3SfUroY54jeE+P74BZ93YfVEInIA4EcLtrQFSdrMsWOBhd8DQ7L2+q0BUFpvi oerZVJ5j4xZm9KsSaFerE6Ml+pBzY3y8DJ5YLI688is1L1eb/pYz44HJPOU55v+K ZrlCh2GmK+JBiZFwC1KfNnWft9qjcayd9QTG+5ALiz6BgBlGcaABT9yRoU3+l0uv VA5F0FEmSLVG3OxZUkpEK/PDiTQ/VrHwzltjoxAuhjmZ2BQwDQzS8GvmMjopzmYj +wjqXOp9vQXl26K+2wK9an2ZLkNuzVoLFGs7eg== -----END CERTIFICATE-----Generated at Fri May 17 03:49:31 2024 by rpki-client on console-fra.rpki-client.org