$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa File: 3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: Kijw7csOwZCX15rSccvm35lsmFFXSpLeFeZt40ifoec= Subject key identifier: A1:B2:09:1B:0A:61:83:FF:7C:1A:23:22:1F:71:11:25:5B:B8:AF:51 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 6AF8C6F6D6C57571D0AE270B39CB6EE2F1377991 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa Signing time: Fri 25 Oct 2024 05:00:02 +0000 ROA not before: Fri 25 Oct 2024 04:55:02 +0000 ROA not after: Fri 24 Oct 2025 05:00:02 +0000 asID: 18059 IP address blocks: 203.134.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f8:c6:f6:d6:c5:75:71:d0:ae:27:0b:39:cb:6e:e2:f1:37:79:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Oct 25 04:55:02 2024 GMT Not After : Oct 24 05:00:02 2025 GMT Subject: CN=A1B2091B0A6183FF7C1A23221F7111255BB8AF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:aa:56:c9:69:39:41:ed:c3:1e:1f:4d:04: 57:7a:48:ae:9d:9f:92:fd:d9:c7:d4:16:b7:95:df: e7:6b:fc:62:9d:0c:6a:67:4f:5b:48:ed:29:b9:70: df:70:b0:28:eb:a1:eb:89:1e:6c:25:08:22:c9:79: 5f:fb:bd:bd:7f:ed:6a:cf:c7:f8:e5:57:4e:d4:34: cd:da:3a:11:3f:cc:a4:39:79:fb:b9:5a:e0:2c:d3: 9c:c0:a6:3d:35:52:f5:5f:6c:42:5c:ad:ff:5a:b1: 46:fa:e8:56:eb:1d:dc:1b:7f:64:16:e1:4a:ba:f4: 8b:d6:b7:51:e0:e9:03:5f:bb:5c:91:06:33:45:ee: a6:4a:3d:b8:b3:50:6b:12:c0:c3:fa:23:d6:1a:64: ae:ff:65:66:42:1d:ef:cd:0f:ca:fd:54:6b:56:6b: cc:c6:be:67:1f:35:14:38:67:2c:10:61:53:be:70: b7:a7:df:c1:53:d9:0c:a1:77:ef:f0:62:2d:df:f1: d8:b2:4a:4f:8f:3b:13:48:cc:60:a1:2c:05:02:3e: 61:71:fb:84:eb:36:68:a0:f7:41:57:0d:dd:e5:f1: 45:d6:c9:7a:fc:51:5b:26:f4:59:b5:44:fd:fc:08: b5:58:7a:89:66:a5:87:99:28:01:7a:93:bc:a2:a9: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B2:09:1B:0A:61:83:FF:7C:1A:23:22:1F:71:11:25:5B:B8:AF:51 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.134.233.0/24 Signature Algorithm: sha256WithRSAEncryption 72:1a:02:2d:b6:2c:a1:d8:7e:b2:ee:a5:42:80:fe:0d:96:0f: 1e:1d:50:ac:da:cf:06:83:5e:36:5c:d5:3b:e0:eb:75:a3:2d: c6:66:ae:eb:09:96:8c:0e:94:af:7e:b4:eb:e0:63:83:2d:98: f7:0d:ba:32:15:d1:eb:51:92:f4:ae:d5:bd:32:cb:e6:b6:d8: 15:54:d4:08:39:76:74:fe:c2:69:48:fe:8d:b6:a8:93:ee:a4: 1f:30:df:e5:d3:2b:7b:e4:98:4c:d8:f4:cc:1f:74:26:40:05: d2:97:02:2a:c7:dd:34:9d:21:46:81:75:d0:59:76:b6:2d:07: 63:d2:9a:ac:53:70:e1:98:9c:42:15:9c:06:4e:3f:0f:14:00: 93:53:fb:67:8b:69:fa:f3:23:36:06:8b:cc:eb:70:70:4e:66: 0f:a8:01:66:96:c3:b7:d6:39:3a:1d:12:a7:46:ed:a0:da:16: d3:e0:5a:58:e2:e9:4f:30:c1:83:5e:1f:e0:d9:b4:43:49:51: dc:fb:eb:e7:f0:88:19:c7:e5:8c:d5:4c:49:20:9f:62:6a:aa: bc:78:af:0a:02:41:6b:aa:af:02:e4:37:a5:71:04:a8:50:ca: 98:ea:38:ae:23:3f:fe:49:de:46:b2:90:32:8e:2a:19:d7:e5: 06:92:11:ce -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUavjG9tbFdXHQricLOctu4vE3eZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNDEwMjUwNDU1MDJaFw0yNTEwMjQwNTAwMDJaMDMxMTAvBgNV BAMTKEExQjIwOTFCMEE2MTgzRkY3QzFBMjMyMjFGNzExMTI1NUJCOEFGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUQqpWyWk5Qe3DHh9NBFd6SK6d n5L92cfUFreV3+dr/GKdDGpnT1tI7Sm5cN9wsCjroeuJHmwlCCLJeV/7vb1/7WrP x/jlV07UNM3aOhE/zKQ5efu5WuAs05zApj01UvVfbEJcrf9asUb66FbrHdwbf2QW 4Uq69IvWt1Hg6QNfu1yRBjNF7qZKPbizUGsSwMP6I9YaZK7/ZWZCHe/ND8r9VGtW a8zGvmcfNRQ4ZywQYVO+cLen38FT2Qyhd+/wYi3f8diySk+POxNIzGChLAUCPmFx +4TrNmig90FXDd3l8UXWyXr8UVsm9Fm1RP38CLVYeolmpYeZKAF6k7yiqW37AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUobIJGwphg/98GiMiH3ERJVu4r1EwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzMzM0MmUzMjMzMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4bpMA0GCSqG SIb3DQEBCwUAA4IBAQByGgIttiyh2H6y7qVCgP4Nlg8eHVCs2s8Gg142XNU74Ot1 oy3GZq7rCZaMDpSvfrTr4GODLZj3DboyFdHrUZL0rtW9MsvmttgVVNQIOXZ0/sJp SP6NtqiT7qQfMN/l0yt75JhM2PTMH3QmQAXSlwIqx900nSFGgXXQWXa2LQdj0pqs U3DhmJxCFZwGTj8PFACTU/tni2n68yM2BovM63BwTmYPqAFmlsO31jk6HRKnRu2g 2hbT4FpY4ulPMMGDXh/g2bRDSVHc++vn8IgZx+WM1UxJIJ9iaqq8eK8KAkFrqq8C 5DelcQSoUMqY6jiuIz/+Sd5GspAyjioZ1+UGkhHO -----END CERTIFICATE-----Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org