$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136312e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3136312e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: 2UnpU4AuI75iMoARi8f5r8oFliIuut1BjgsEAI4Eni4= Subject key identifier: 3D:7E:6A:C0:4F:A2:A5:8A:86:A7:BE:4D:F2:69:B4:1F:84:66:A4:90 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 5F6DAD335848842CD61A70C2352EC82AE871D352 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136312e302f32342d3234203d3e203138303539.roa Signing time: Fri 25 Oct 2024 04:00:36 +0000 ROA not before: Fri 25 Oct 2024 03:55:36 +0000 ROA not after: Fri 24 Oct 2025 04:00:36 +0000 asID: 18059 IP address blocks: 202.43.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6d:ad:33:58:48:84:2c:d6:1a:70:c2:35:2e:c8:2a:e8:71:d3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Oct 25 03:55:36 2024 GMT Not After : Oct 24 04:00:36 2025 GMT Subject: CN=3D7E6AC04FA2A58A86A7BE4DF269B41F8466A490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:5e:22:d8:a5:1d:16:39:b7:5c:80:8c:9b: b9:8a:d8:e2:7b:a1:28:1e:a2:59:ca:71:38:9e:b5: fd:d3:f7:1d:04:6d:b3:d5:c1:87:fc:ba:0b:bc:31: 1b:04:1d:cc:84:cb:6d:19:ba:1a:56:b8:6e:fe:a0: b9:6c:da:95:83:4e:29:f2:c9:cd:42:c3:42:2c:43: 6e:a7:51:24:0c:c4:15:44:24:f8:53:14:58:86:68: 10:a6:79:e3:b6:3f:dd:bc:02:34:35:64:ab:5d:76: a4:b3:b2:d2:d9:0c:9e:a0:42:ca:64:0b:b5:83:5a: 25:35:2c:61:68:56:8b:01:dc:fa:22:58:02:7d:31: 1b:b8:f4:b0:ba:c6:94:55:a4:83:1c:19:86:28:9b: b5:63:d8:61:60:da:c2:a3:07:d3:a6:ee:b4:b4:74: 02:a5:66:b2:56:38:83:c2:87:0e:ec:60:71:70:8e: 44:53:84:2f:33:b9:5b:73:a4:e2:8a:c7:87:3a:0a: 3e:bb:ac:21:12:b5:20:80:3b:0b:35:25:74:ed:eb: ac:31:41:f3:08:5f:ab:d8:21:43:ec:5a:bc:cf:2d: 68:49:c6:43:be:54:7c:66:96:f0:83:ac:fa:98:f1: 18:88:29:b9:87:f6:30:60:5b:0f:5e:12:ae:3a:f6: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7E:6A:C0:4F:A2:A5:8A:86:A7:BE:4D:F2:69:B4:1F:84:66:A4:90 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136312e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.161.0/24 Signature Algorithm: sha256WithRSAEncryption 22:89:eb:96:f4:ee:e3:91:3c:56:7b:46:30:f8:fd:45:50:41: b7:4c:3a:d7:5c:65:15:54:ff:aa:11:e0:1a:47:14:a9:fd:ee: 54:8c:e8:b8:ee:c6:ea:4b:68:82:3d:d4:2d:63:f8:82:d4:d7: 92:84:c9:2e:30:9d:4b:7c:50:62:18:4a:c3:c6:da:76:00:cf: 77:54:5f:19:90:38:f4:a7:c4:be:a2:40:8e:c9:29:46:ee:7b: f5:1e:c8:45:e6:48:d1:0c:83:94:75:b4:de:4f:e2:d8:6b:9b: 6f:6c:e7:b5:38:fe:19:13:0c:62:a0:7d:c1:52:1d:1e:f5:2c: 06:20:05:6a:19:cb:6b:df:59:a9:83:ab:3f:3d:b9:84:64:0c: a8:38:1f:0d:77:78:83:05:1c:28:d4:c8:b2:34:27:94:dc:a9: b5:a6:b2:ce:cc:5a:91:c1:e1:f5:7a:a1:01:02:c6:48:5d:15: 55:3a:37:b0:84:7f:9d:36:a4:39:18:22:e5:42:d5:6f:61:d3: 7f:f3:c2:24:3c:e4:0d:e6:f5:07:94:a4:9d:5c:50:1e:a9:6f: a9:6b:2d:74:f6:9c:c9:9a:f2:cf:c3:4c:41:9c:84:67:ca:bc: 6f:de:65:52:0c:d7:7f:80:15:4d:20:15:26:bc:f9:34:bf:b6: 3d:ef:b2:57 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUX22tM1hIhCzWGnDCNS7IKuhx01IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNDEwMjUwMzU1MzZaFw0yNTEwMjQwNDAwMzZaMDMxMTAvBgNV BAMTKDNEN0U2QUMwNEZBMkE1OEE4NkE3QkU0REYyNjlCNDFGODQ2NkE0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnc14i2KUdFjm3XICMm7mK2OJ7 oSgeolnKcTietf3T9x0EbbPVwYf8ugu8MRsEHcyEy20ZuhpWuG7+oLls2pWDTiny yc1Cw0IsQ26nUSQMxBVEJPhTFFiGaBCmeeO2P928AjQ1ZKtddqSzstLZDJ6gQspk C7WDWiU1LGFoVosB3PoiWAJ9MRu49LC6xpRVpIMcGYYom7Vj2GFg2sKjB9Om7rS0 dAKlZrJWOIPChw7sYHFwjkRThC8zuVtzpOKKx4c6Cj67rCEStSCAOws1JXTt66wx QfMIX6vYIUPsWrzPLWhJxkO+VHxmlvCDrPqY8RiIKbmH9jBgWw9eEq469mRtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPX5qwE+ipYqGp75N8mm0H4RmpJAwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoroTANBgkqhkiG 9w0BAQsFAAOCAQEAIonrlvTu45E8VntGMPj9RVBBt0w611xlFVT/qhHgGkcUqf3u VIzouO7G6ktogj3ULWP4gtTXkoTJLjCdS3xQYhhKw8badgDPd1RfGZA49KfEvqJA jskpRu579R7IReZI0QyDlHW03k/i2Gubb2zntTj+GRMMYqB9wVIdHvUsBiAFahnL a99ZqYOrPz25hGQMqDgfDXd4gwUcKNTIsjQnlNyptaayzsxakcHh9XqhAQLGSF0V VTo3sIR/nTakORgi5ULVb2HTf/PCJDzkDeb1B5SknVxQHqlvqWstdPacyZryz8NM QZyEZ8q8b95lUgzXf4AVTSAVJrz5NL+2Pe+yVw== -----END CERTIFICATE-----Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org