$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233382e302f32342d3234203d3e203138303539.roa File: 3230332e3133342e3233382e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: rqD3cRsG+Ca/49kK9yKZg33M5/km08TPJp1nnN2niI8= Subject key identifier: B6:A1:87:21:A4:AA:B0:C8:0D:DE:A3:3C:0A:69:AB:05:B9:33:42:C0 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 0372E60A74DB7E03705326816513B6CB55AC44DA Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233382e302f32342d3234203d3e203138303539.roa Signing time: Fri 25 Oct 2024 05:00:01 +0000 ROA not before: Fri 25 Oct 2024 04:55:01 +0000 ROA not after: Fri 24 Oct 2025 05:00:01 +0000 asID: 18059 IP address blocks: 203.134.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 12:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:72:e6:0a:74:db:7e:03:70:53:26:81:65:13:b6:cb:55:ac:44:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Oct 25 04:55:01 2024 GMT Not After : Oct 24 05:00:01 2025 GMT Subject: CN=B6A18721A4AAB0C80DDEA33C0A69AB05B93342C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:55:ef:2f:07:0e:e2:8a:35:99:de:d8:01: 61:94:d8:08:61:2e:0f:16:f4:58:c3:1e:44:cd:43: 46:cd:c1:29:44:4f:15:09:79:ae:35:9e:95:60:c5: ca:d8:65:10:f0:57:93:97:99:be:77:f9:9c:ec:4a: 7a:8b:bf:51:fa:c6:7b:2e:da:86:1a:29:f3:39:2c: 11:f8:db:8a:c0:66:26:55:1a:f5:01:9e:16:e3:25: 5c:1f:77:ac:85:fe:6c:1a:f0:37:2b:ae:49:86:5f: c3:2e:23:2d:ca:02:ba:1d:d9:49:d4:12:72:e2:fc: 61:a9:b4:42:86:62:2e:33:74:fe:51:7f:13:3c:cd: 61:31:de:8f:ff:28:5d:18:97:3d:ad:0b:cc:0a:f9: f3:1a:e8:e1:36:d8:46:5a:74:09:df:28:a2:5a:59: a7:91:9f:8b:29:67:ca:8f:78:e7:32:d7:a2:40:00: f5:4e:3d:ef:53:84:73:59:38:f1:ad:af:2e:9a:a2: 87:6f:ea:e2:2a:b7:e9:48:40:f7:06:d4:b4:1b:7a: 3e:aa:0a:2e:3f:17:2f:6b:65:d5:51:4b:37:69:79: cd:45:74:05:5d:77:1a:e0:ac:c0:f1:b4:41:f3:42: cf:b5:4a:21:15:4b:cd:c6:a6:24:78:09:32:12:b2: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A1:87:21:A4:AA:B0:C8:0D:DE:A3:3C:0A:69:AB:05:B9:33:42:C0 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233382e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.134.238.0/24 Signature Algorithm: sha256WithRSAEncryption 56:23:6b:17:55:83:54:da:db:a7:16:33:52:81:67:4b:43:c6: 3a:b9:d6:42:02:86:6e:88:c4:69:99:7d:ae:f2:9e:2c:ba:c6: 5c:51:04:05:c0:fc:7a:2e:c3:bc:c4:24:1c:6f:a4:3a:14:bd: e9:b5:d1:da:44:8e:54:cb:ea:ae:42:fb:27:f6:96:4a:d6:85: b9:18:ba:f7:73:7f:d4:9c:e0:46:6c:59:83:4f:c3:6f:9e:21: 56:8b:1b:f0:64:84:df:73:ea:42:ae:35:8e:98:ed:e9:e7:dd: e7:83:46:1b:69:b7:d9:d8:a4:c1:98:98:d8:c3:30:3b:81:64: 03:5c:61:5d:8d:b2:de:17:d2:a3:be:e7:90:e2:ce:c7:76:d0: 4f:b5:09:63:d0:28:e6:d4:62:22:77:8d:f9:fa:92:6f:5b:75: 60:77:24:ce:57:92:e7:83:52:60:31:92:26:87:1e:32:22:ca: 67:d1:1a:f4:6e:86:76:4e:9a:9e:49:b3:cf:01:7b:40:9f:44: 2f:5d:eb:f9:af:4b:b4:42:a9:30:38:47:bb:fb:f9:de:14:d8: 5d:c5:80:53:78:60:98:d4:8d:93:64:53:3e:fb:f8:34:af:cd: 0d:db:69:dd:4f:26:68:81:8b:e0:0a:db:29:16:ad:ed:e6:87: 04:ed:0e:1a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUA3LmCnTbfgNwUyaBZRO2y1WsRNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNDEwMjUwNDU1MDFaFw0yNTEwMjQwNTAwMDFaMDMxMTAvBgNV BAMTKEI2QTE4NzIxQTRBQUIwQzgwRERFQTMzQzBBNjlBQjA1QjkzMzQyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx41XvLwcO4oo1md7YAWGU2Ahh Lg8W9FjDHkTNQ0bNwSlETxUJea41npVgxcrYZRDwV5OXmb53+ZzsSnqLv1H6xnsu 2oYaKfM5LBH424rAZiZVGvUBnhbjJVwfd6yF/mwa8DcrrkmGX8MuIy3KArod2UnU EnLi/GGptEKGYi4zdP5RfxM8zWEx3o//KF0Ylz2tC8wK+fMa6OE22EZadAnfKKJa WaeRn4spZ8qPeOcy16JAAPVOPe9ThHNZOPGtry6aoodv6uIqt+lIQPcG1LQbej6q Ci4/Fy9rZdVRSzdpec1FdAVddxrgrMDxtEHzQs+1SiEVS83GpiR4CTISsmhjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtqGHIaSqsMgN3qM8CmmrBbkzQsAwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzMzM0MmUzMjMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4buMA0GCSqG SIb3DQEBCwUAA4IBAQBWI2sXVYNU2tunFjNSgWdLQ8Y6udZCAoZuiMRpmX2u8p4s usZcUQQFwPx6LsO8xCQcb6Q6FL3ptdHaRI5Uy+quQvsn9pZK1oW5GLr3c3/UnOBG bFmDT8NvniFWixvwZITfc+pCrjWOmO3p593ng0YbabfZ2KTBmJjYwzA7gWQDXGFd jbLeF9KjvueQ4s7HdtBPtQlj0Cjm1GIid435+pJvW3VgdyTOV5Lng1JgMZImhx4y Ispn0Rr0boZ2TpqeSbPPAXtAn0QvXev5r0u0QqkwOEe7+/neFNhdxYBTeGCY1I2T ZFM++/g0r80N22ndTyZogYvgCtspFq3t5ocE7Q4a -----END CERTIFICATE-----Generated at Tue Mar 11 05:02:45 2025 by rpki-client