$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/3230332e38312e3138342e302f32312d3234203d3e203234353338.roa File: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (raw, json) Hash identifier: MMjEYaklE81WaDCrUueGQmjdNC6x98nzJuWl2kfKoDE= Subject key identifier: 5A:48:3D:FB:42:E0:AA:69:56:E8:9C:4B:7C:F1:DC:32:2B:9B:B7:EB Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 17211AA3606ED3548CE0CB98A213FA18ED4B5FF6 Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/3230332e38312e3138342e302f32312d3234203d3e203234353338.roa Signing time: Thu 07 Nov 2024 07:00:00 +0000 ROA not before: Thu 07 Nov 2024 06:55:00 +0000 ROA not after: Thu 06 Nov 2025 07:00:00 +0000 asID: 24538 IP address blocks: 203.81.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:21:1a:a3:60:6e:d3:54:8c:e0:cb:98:a2:13:fa:18:ed:4b:5f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Nov 7 06:55:00 2024 GMT Not After : Nov 6 07:00:00 2025 GMT Subject: CN=5A483DFB42E0AA6956E89C4B7CF1DC322B9BB7EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:ff:91:d0:bf:ea:e7:6e:be:60:cd:f8:ef: e8:c4:93:99:04:91:dd:12:bc:85:ae:19:ef:50:d5: 86:13:cc:1c:a2:d2:22:f2:0f:fd:59:4c:fa:dd:f3: 71:d9:2c:9f:30:d4:15:78:2e:77:c0:82:dd:b8:a3: a5:ce:e4:b7:2e:03:a2:64:3b:b8:45:22:ab:72:5a: 2c:18:21:85:07:59:f9:3d:8b:85:6d:7b:ea:17:04: 39:6e:fe:e2:8d:d2:bd:6d:e4:44:89:8f:2f:15:a1: fc:a7:80:15:97:a1:7c:dd:39:50:b2:68:62:3e:97: e9:f1:f6:40:80:89:dd:6a:b0:1d:a1:06:54:1a:6f: 1e:01:a1:f4:6b:b9:c0:5c:cb:b2:6f:90:68:3e:d1: 25:b4:28:a7:da:99:6f:e5:9c:c2:bc:49:41:09:9f: ee:ee:d7:a7:6d:64:0a:66:b8:2e:23:6b:ef:30:b3: 75:49:19:a7:19:f6:bb:b1:75:aa:c2:64:44:9b:d8: 7a:39:73:d9:ad:93:90:e7:85:dc:ae:3d:b7:fd:80: 9c:e2:46:81:aa:90:23:a9:c6:36:af:82:6c:5a:7d: f2:d4:4c:f4:ea:c8:a5:27:2f:e4:a0:7f:01:64:dc: cd:91:39:b9:bd:16:54:da:7e:d0:0e:99:d7:cc:c4: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:48:3D:FB:42:E0:AA:69:56:E8:9C:4B:7C:F1:DC:32:2B:9B:B7:EB X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/3230332e38312e3138342e302f32312d3234203d3e203234353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.81.184.0/21 Signature Algorithm: sha256WithRSAEncryption ad:9a:11:88:e6:69:b9:c1:a6:5d:7b:8b:9c:9a:27:d8:43:83: 3d:9e:91:20:f2:94:0b:0c:35:79:2b:4c:ac:a8:b6:42:4c:17: 45:98:a7:f2:cb:d0:46:1b:50:34:f1:bb:52:8a:be:fb:68:43: 00:55:c4:1f:7f:f2:98:b5:82:45:21:34:34:aa:47:94:52:0c: 97:18:19:1e:72:99:9c:ce:cf:d9:68:da:df:36:f3:f9:23:72: f6:13:03:f9:e2:d7:e9:e7:83:2e:e4:75:22:80:16:3f:9d:c4: 33:aa:1a:43:ad:72:fb:92:4d:4c:6b:25:2d:c6:77:04:e9:41: 51:e8:e1:8e:53:b3:d7:66:07:a5:48:4e:f2:40:61:57:a0:66: 79:cc:ad:b7:62:39:29:4d:ce:e7:68:2e:f0:b3:4f:5c:19:bd: c8:93:e1:e8:fa:54:b9:6b:ac:86:d5:46:4c:08:99:3f:c2:1f: a2:36:3e:82:2c:fc:03:e6:29:0b:cc:0a:8e:fd:33:ba:f8:67: f7:0f:6a:8a:7d:4d:4f:f7:8a:d1:43:ea:26:fd:55:1f:12:32: a9:19:12:2a:bf:93:20:b5:0f:12:ca:3e:76:4b:3b:27:7b:02: 4a:69:7c:e0:7a:c7:6b:c0:ad:57:85:6e:5f:9f:47:21:7b:2b: c6:ba:9e:76 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFyEao2Bu01SM4MuYohP6GO1LX/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNDExMDcwNjU1MDBaFw0yNTExMDYwNzAwMDBaMDMxMTAvBgNV BAMTKDVBNDgzREZCNDJFMEFBNjk1NkU4OUM0QjdDRjFEQzMyMkI5QkI3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcv+R0L/q526+YM347+jEk5kE kd0SvIWuGe9Q1YYTzByi0iLyD/1ZTPrd83HZLJ8w1BV4LnfAgt24o6XO5LcuA6Jk O7hFIqtyWiwYIYUHWfk9i4Vte+oXBDlu/uKN0r1t5ESJjy8VofyngBWXoXzdOVCy aGI+l+nx9kCAid1qsB2hBlQabx4BofRrucBcy7JvkGg+0SW0KKfamW/lnMK8SUEJ n+7u16dtZApmuC4ja+8ws3VJGacZ9ruxdarCZESb2Ho5c9mtk5DnhdyuPbf9gJzi RoGqkCOpxjavgmxaffLUTPTqyKUnL+SgfwFk3M2RObm9FlTaftAOmdfMxOODAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWkg9+0LgqmlW6JxLfPHcMiubt+swHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYTI5YTc1LWM1YjktNDc1Yi05 ZDk2LTZkMWExNWVhZTI0ZC8wLzMyMzAzMzJlMzgzMTJlMzEzODM0MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8tRuDANBgkqhkiG 9w0BAQsFAAOCAQEArZoRiOZpucGmXXuLnJon2EODPZ6RIPKUCww1eStMrKi2QkwX RZin8svQRhtQNPG7Uoq++2hDAFXEH3/ymLWCRSE0NKpHlFIMlxgZHnKZnM7P2Wja 3zbz+SNy9hMD+eLX6eeDLuR1IoAWP53EM6oaQ61y+5JNTGslLcZ3BOlBUejhjlOz 12YHpUhO8kBhV6Bmecytt2I5KU3O52gu8LNPXBm9yJPh6PpUuWushtVGTAiZP8If ojY+giz8A+YpC8wKjv0zuvhn9w9qin1NT/eK0UPqJv1VHxIyqRkSKr+TILUPEso+ dks7J3sCSml84HrHa8CtV4VuX59HIXsrxrqedg== -----END CERTIFICATE-----Generated at Mon Nov 25 10:49:34 2024 by rpki-client on console-fra.rpki-client.org