$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230312e302f32342d3234203d3e203138303539.roa File: 3230322e37382e3230312e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: by/6RUZriAQlOafF0sZysUKMOVhmKl/bOvNAqKenMs8= Subject key identifier: 39:D9:69:44:D9:72:43:E9:C8:9B:B5:87:57:20:41:5E:A8:24:3A:71 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 3CC355EA5F2FA493DCAAC588E5725811CDA0906F Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230312e302f32342d3234203d3e203138303539.roa Signing time: Fri 25 Oct 2024 04:00:36 +0000 ROA not before: Fri 25 Oct 2024 03:55:36 +0000 ROA not after: Fri 24 Oct 2025 04:00:36 +0000 asID: 18059 IP address blocks: 202.78.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c3:55:ea:5f:2f:a4:93:dc:aa:c5:88:e5:72:58:11:cd:a0:90:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Oct 25 03:55:36 2024 GMT Not After : Oct 24 04:00:36 2025 GMT Subject: CN=39D96944D97243E9C89BB5875720415EA8243A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:11:82:91:12:e6:05:0d:34:b7:a7:ba:40:25: 81:d3:6a:5c:00:c6:12:f7:7a:32:a0:25:dd:c0:c3: 38:03:b7:30:37:dc:39:31:14:5b:49:64:0f:e3:26: 66:1e:04:c2:7d:32:78:0b:90:b0:8c:41:66:26:e2: 35:0f:9f:e9:a4:9e:0a:8d:c4:12:82:56:d6:e0:fc: ad:8d:0a:c3:fd:67:65:4f:7a:8a:82:fe:d1:99:27: 6f:21:b7:05:c9:7f:a1:e5:7f:1f:10:40:64:10:12: c5:b2:9e:30:50:be:a0:60:a1:a1:c7:b8:ed:3f:6d: 47:f6:3b:a1:53:a4:ae:a3:64:09:f7:4a:a6:56:2c: 8e:6c:44:97:d4:50:56:d1:94:75:62:4b:ec:89:e0: 60:95:4d:88:d8:ee:c5:2b:62:75:42:57:68:7a:7d: c0:03:87:e7:aa:69:8f:cb:5a:0b:9a:6b:a1:44:af: 06:1d:3b:0f:a3:78:c8:97:34:f8:3a:95:15:41:de: b0:64:57:67:57:9e:40:a5:bd:70:25:4b:21:4b:d7: fe:0f:7a:f6:74:f0:25:28:66:6f:78:d0:49:ef:7b: 4d:3c:e8:d0:96:b9:0d:0d:9d:18:64:28:37:f4:af: 35:4b:54:b7:bc:7b:98:ce:82:bd:d4:a3:dd:63:7d: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D9:69:44:D9:72:43:E9:C8:9B:B5:87:57:20:41:5E:A8:24:3A:71 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230312e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.78.201.0/24 Signature Algorithm: sha256WithRSAEncryption 43:99:35:a0:99:51:a0:b0:11:28:93:d6:64:4f:02:1d:3f:7f: fc:5d:d7:f0:01:63:dc:3c:3f:5e:c8:01:5a:09:e9:d5:dc:72: 23:21:2a:9e:44:62:57:cd:27:39:b5:93:1f:0b:94:4e:3a:85: 86:9c:1f:9f:78:45:fc:c0:67:b5:68:02:89:dc:fe:48:14:60: b7:fa:fd:78:11:ec:ef:55:68:95:cc:82:90:93:7f:c9:97:2a: d6:9b:d6:7a:95:a8:bd:b0:11:3a:1d:dd:02:2a:73:de:7d:0f: 41:ec:53:de:72:b2:3e:ea:1a:83:78:50:f9:fd:8d:86:c1:ea: 70:3b:2f:20:12:49:3f:b0:0a:79:7e:e6:44:fd:70:b6:b6:e4: 68:92:dc:b2:b2:a9:e3:7f:10:e9:60:7b:a9:df:e9:85:30:da: 43:e7:bf:70:95:a8:24:db:c4:c5:17:f7:99:6d:ff:16:1e:57: 04:bd:46:d3:05:68:36:15:9c:39:fa:af:ba:c5:66:19:1e:b8: c3:fa:2d:82:d4:5c:9d:ee:bc:55:41:ef:7b:28:23:01:a4:c7: f9:02:59:10:ca:e3:a8:92:53:5a:ed:6f:2d:12:d5:db:09:7f: 46:d5:a7:33:b5:76:48:93:12:52:ac:04:79:f4:61:a7:43:3f: 45:90:6e:69 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPMNV6l8vpJPcqsWI5XJYEc2gkG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNDEwMjUwMzU1MzZaFw0yNTEwMjQwNDAwMzZaMDMxMTAvBgNV BAMTKDM5RDk2OTQ0RDk3MjQzRTlDODlCQjU4NzU3MjA0MTVFQTgyNDNBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgEYKREuYFDTS3p7pAJYHTalwA xhL3ejKgJd3AwzgDtzA33DkxFFtJZA/jJmYeBMJ9MngLkLCMQWYm4jUPn+mkngqN xBKCVtbg/K2NCsP9Z2VPeoqC/tGZJ28htwXJf6Hlfx8QQGQQEsWynjBQvqBgoaHH uO0/bUf2O6FTpK6jZAn3SqZWLI5sRJfUUFbRlHViS+yJ4GCVTYjY7sUrYnVCV2h6 fcADh+eqaY/LWguaa6FErwYdOw+jeMiXNPg6lRVB3rBkV2dXnkClvXAlSyFL1/4P evZ08CUoZm940Enve0086NCWuQ0NnRhkKDf0rzVLVLe8e5jOgr3Uo91jfVHpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOdlpRNlyQ+nIm7WHVyBBXqgkOnEwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzczODJlMzIzMDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpOyTANBgkqhkiG 9w0BAQsFAAOCAQEAQ5k1oJlRoLARKJPWZE8CHT9//F3X8AFj3Dw/XsgBWgnp1dxy IyEqnkRiV80nObWTHwuUTjqFhpwfn3hF/MBntWgCidz+SBRgt/r9eBHs71VolcyC kJN/yZcq1pvWepWovbAROh3dAipz3n0PQexT3nKyPuoag3hQ+f2NhsHqcDsvIBJJ P7AKeX7mRP1wtrbkaJLcsrKp438Q6WB7qd/phTDaQ+e/cJWoJNvExRf3mW3/Fh5X BL1G0wVoNhWcOfqvusVmGR64w/otgtRcne68VUHveygjAaTH+QJZEMrjqJJTWu1v LRLV2wl/RtWnM7V2SJMSUqwEefRhp0M/RZBuaQ== -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org