$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137352e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3137352e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: df41lxU/L6A15rYZzAO2hAien6c2IHOiZ3Rri2Ik2KA= Subject key identifier: EB:6D:B6:95:FE:16:BC:47:FB:97:41:B3:71:80:FE:02:4D:D7:E3:67 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 1E8D26C41BF8CE97D6A627FF67024A70FD264D3D Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137352e302f32342d3234203d3e203138303539.roa Signing time: Fri 25 Oct 2024 04:00:33 +0000 ROA not before: Fri 25 Oct 2024 03:55:33 +0000 ROA not after: Fri 24 Oct 2025 04:00:33 +0000 asID: 18059 IP address blocks: 202.43.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8d:26:c4:1b:f8:ce:97:d6:a6:27:ff:67:02:4a:70:fd:26:4d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Oct 25 03:55:33 2024 GMT Not After : Oct 24 04:00:33 2025 GMT Subject: CN=EB6DB695FE16BC47FB9741B37180FE024DD7E367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:c1:e0:29:c5:fb:18:6b:91:ce:e3:84:68: 60:de:af:ec:28:6a:fc:57:94:4d:46:81:83:16:48: 06:22:bb:5d:66:ff:24:b2:de:fe:fe:f3:24:5e:c0: b3:3d:af:72:07:ec:29:68:23:54:d7:bf:9a:0a:6f: 8e:0d:ac:c8:7f:5b:7c:17:dd:14:9b:c9:56:27:fb: a5:f9:c8:58:68:4b:53:7b:20:f4:24:fa:6f:b8:77: 6a:cf:f1:d1:36:84:92:20:cb:da:fb:f8:33:91:3c: c5:35:89:e9:e3:91:a5:4b:2d:ac:f0:52:b5:10:0a: ce:0b:31:16:40:d9:1d:d9:95:68:00:b7:b8:7d:37: 2a:7d:8b:4c:c2:10:05:63:74:d1:9c:c8:c8:72:25: 36:1e:af:ed:28:25:5c:98:35:9a:a9:d4:c8:d5:e7: ab:fc:f8:f1:4a:20:7a:db:9d:51:43:a3:d4:5c:c6: 6f:ae:f0:6c:41:a4:23:dc:7d:66:ca:82:d1:eb:f9: 24:d1:db:e8:09:ce:58:d2:e6:9e:c4:24:7a:dd:8b: ab:07:71:d0:fd:f5:2f:f1:d8:de:a3:6a:a0:47:ab: 2c:65:d5:15:70:04:2a:36:c5:26:14:43:68:59:10: bd:73:6b:19:7e:a6:4d:98:df:3c:21:58:93:52:e7: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6D:B6:95:FE:16:BC:47:FB:97:41:B3:71:80:FE:02:4D:D7:E3:67 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137352e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.175.0/24 Signature Algorithm: sha256WithRSAEncryption 29:5a:c5:8d:9f:2d:75:bd:2d:38:fa:4f:6a:9e:7d:c7:8f:b8: 40:71:34:2a:8d:35:a9:92:40:ba:46:4b:2b:8a:2b:65:6b:88: 8a:89:c6:4c:d9:44:9c:72:b9:8d:d7:d3:99:8f:d9:fc:d7:5e: 22:4c:5d:60:9b:9f:5d:17:27:c1:45:f7:46:65:eb:00:c3:12: 70:af:77:63:04:53:45:b6:a9:9e:50:35:fc:72:09:19:78:45: 87:0c:42:48:3d:04:6c:e4:b6:1e:26:3c:61:80:c9:a8:40:46: b8:5a:40:47:f4:01:4c:67:63:1b:e3:cf:82:42:53:e1:2d:3a: fd:be:d9:34:0d:ea:e9:e3:94:8c:d9:ec:aa:18:12:f9:21:c1: e0:62:50:fd:a2:ab:df:a7:90:95:06:ea:fb:ee:e7:c4:26:e2: cf:ae:e4:f3:68:ee:a6:b7:c5:7f:71:dc:5d:d3:cd:de:39:37: 1a:34:87:05:02:cf:47:7c:72:15:4f:d1:a1:e8:91:a8:06:d1: 36:af:54:86:f5:7b:59:c3:aa:f6:e9:fb:f5:5b:bb:98:25:10: 2d:1d:e4:fb:eb:ad:87:d1:a9:44:81:ba:f3:82:e5:bc:43:4d: 52:d6:8d:29:40:b2:ad:0a:27:e1:97:33:7c:40:85:02:e6:9d: 62:6c:25:d5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHo0mxBv4zpfWpif/ZwJKcP0mTT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNDEwMjUwMzU1MzNaFw0yNTEwMjQwNDAwMzNaMDMxMTAvBgNV BAMTKEVCNkRCNjk1RkUxNkJDNDdGQjk3NDFCMzcxODBGRTAyNEREN0UzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrcHgKcX7GGuRzuOEaGDer+wo avxXlE1GgYMWSAYiu11m/ySy3v7+8yRewLM9r3IH7CloI1TXv5oKb44NrMh/W3wX 3RSbyVYn+6X5yFhoS1N7IPQk+m+4d2rP8dE2hJIgy9r7+DORPMU1ienjkaVLLazw UrUQCs4LMRZA2R3ZlWgAt7h9Nyp9i0zCEAVjdNGcyMhyJTYer+0oJVyYNZqp1MjV 56v8+PFKIHrbnVFDo9Rcxm+u8GxBpCPcfWbKgtHr+STR2+gJzljS5p7EJHrdi6sH cdD99S/x2N6jaqBHqyxl1RVwBCo2xSYUQ2hZEL1zaxl+pk2Y3zwhWJNS59QjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6222lf4WvEf7l0GzcYD+Ak3X42cwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorrzANBgkqhkiG 9w0BAQsFAAOCAQEAKVrFjZ8tdb0tOPpPap59x4+4QHE0Ko01qZJAukZLK4orZWuI ionGTNlEnHK5jdfTmY/Z/NdeIkxdYJufXRcnwUX3RmXrAMMScK93YwRTRbapnlA1 /HIJGXhFhwxCSD0EbOS2HiY8YYDJqEBGuFpAR/QBTGdjG+PPgkJT4S06/b7ZNA3q 6eOUjNnsqhgS+SHB4GJQ/aKr36eQlQbq++7nxCbiz67k82juprfFf3HcXdPN3jk3 GjSHBQLPR3xyFU/RoeiRqAbRNq9UhvV7WcOq9un79Vu7mCUQLR3k++uth9GpRIG6 84LlvENNUtaNKUCyrQon4ZczfECFAuadYmwl1Q== -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org