$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e20313437313037.roa File: 3230322e38312e36322e302f32342d3234203d3e20313437313037.roa (raw, json) Hash identifier: 4ZDnl1p3L8qIeqjqxt+S7WVoEkXLE+BBkWx6dm9fJgo= Subject key identifier: DD:A8:E0:07:E0:35:F0:10:F1:E4:4C:A2:EC:91:38:16:EE:34:FB:B9 Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Certificate serial: 4B53C157593EBBE37B271DFF80C7D311EC407720 Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e20313437313037.roa Signing time: Wed 26 Jun 2024 08:00:01 +0000 ROA not before: Wed 26 Jun 2024 07:55:01 +0000 ROA not after: Wed 25 Jun 2025 08:00:01 +0000 asID: 147107 IP address blocks: 202.81.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 13:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:53:c1:57:59:3e:bb:e3:7b:27:1d:ff:80:c7:d3:11:ec:40:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Validity Not Before: Jun 26 07:55:01 2024 GMT Not After : Jun 25 08:00:01 2025 GMT Subject: CN=DDA8E007E035F010F1E44CA2EC913816EE34FBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6e:07:a2:93:bb:b3:16:78:d6:2b:77:d4:eb: e7:57:9c:42:f8:f2:ac:a1:71:ba:c2:81:fb:42:0c: f1:d7:29:dc:2d:ac:93:13:3b:ee:8e:48:32:ca:5e: 57:03:4a:19:ff:3d:dc:39:9e:ff:30:67:99:84:c2: 4e:19:4b:3d:e4:b1:e0:9b:aa:7f:e3:d0:f6:fd:b4: 54:2a:4c:4a:06:0d:7e:bb:a2:53:a2:f0:b3:66:77: 35:fc:98:01:25:80:b3:60:10:6f:8e:9f:9c:15:7e: 2f:43:39:9f:cc:42:96:90:53:3d:35:ac:ee:d9:0f: 9e:7c:52:db:f9:1d:29:55:47:ff:91:f7:36:22:fb: d4:54:7a:77:19:81:07:87:01:0b:8f:b5:f1:4d:b8: 08:bb:48:d6:44:69:9e:46:9b:ea:e2:b2:c3:2c:5e: c0:8b:f8:dd:53:82:5b:2e:72:94:5c:55:1b:a6:42: 44:cb:a5:22:3b:ac:f9:f1:3d:21:f3:6e:a5:32:7e: 8d:3e:4c:46:8f:ba:a0:67:ea:1a:c2:4c:55:0c:26: 94:b9:de:a8:8c:36:88:3f:5a:2e:0b:e3:0f:41:ff: 93:38:39:7f:10:ff:cc:7b:05:41:01:be:5c:5c:e9: d7:57:05:4b:28:c4:1b:ff:c7:40:47:79:ed:28:72: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A8:E0:07:E0:35:F0:10:F1:E4:4C:A2:EC:91:38:16:EE:34:FB:B9 X509v3 Authority Key Identifier: keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e20313437313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.81.62.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:c1:67:09:44:cb:19:69:be:37:78:9c:9f:fc:6c:87:8e:db: 87:a9:da:39:1f:68:b8:e6:36:48:fa:33:b6:56:9b:81:90:4c: cb:dd:a7:a4:9f:af:38:cc:8a:0e:57:e0:4c:07:df:42:9b:ad: 51:79:44:02:72:38:59:a0:85:6d:5e:77:36:ed:ef:84:8b:83: c3:19:8d:4a:1b:dc:36:0c:36:41:53:02:37:7c:bc:c8:99:fc: a7:58:17:2a:7f:ae:a0:ed:3a:3a:f6:ce:5e:54:af:93:f1:04: 06:bd:7d:69:16:70:e9:bf:5f:3a:c5:9f:d6:64:c1:10:85:4e: a9:d2:9f:f9:bd:05:1f:1d:ce:8e:62:5c:f1:87:fb:11:2f:26: b5:e5:37:79:09:9c:71:cf:e4:a5:f3:73:85:e2:bc:f7:b7:da: 07:6d:91:77:88:cd:a3:3f:12:ba:c8:d1:f7:01:b3:bd:c3:be: 75:58:be:7e:77:0b:94:25:0c:84:f6:9c:74:38:38:11:e5:e4: 15:de:6e:ee:c7:eb:72:4a:1e:2b:7e:e0:ab:63:1a:78:44:62: 62:da:6e:0d:29:74:dd:f2:d4:ad:49:cf:f9:7a:98:c2:47:ee: 11:0b:38:fa:00:2c:b2:7a:c1:2e:3b:24:e3:bc:f4:79:e2:09: 6a:19:19:56 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUS1PBV1k+u+N7Jx3/gMfTEexAdyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB MEJGQzQ0MTAeFw0yNDA2MjYwNzU1MDFaFw0yNTA2MjUwODAwMDFaMDMxMTAvBgNV BAMTKEREQThFMDA3RTAzNUYwMTBGMUU0NENBMkVDOTEzODE2RUUzNEZCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbgeik7uzFnjWK3fU6+dXnEL4 8qyhcbrCgftCDPHXKdwtrJMTO+6OSDLKXlcDShn/Pdw5nv8wZ5mEwk4ZSz3kseCb qn/j0Pb9tFQqTEoGDX67olOi8LNmdzX8mAElgLNgEG+On5wVfi9DOZ/MQpaQUz01 rO7ZD558Utv5HSlVR/+R9zYi+9RUencZgQeHAQuPtfFNuAi7SNZEaZ5Gm+rissMs XsCL+N1TglsucpRcVRumQkTLpSI7rPnxPSHzbqUyfo0+TEaPuqBn6hrCTFUMJpS5 3qiMNog/Wi4L4w9B/5M4OX8Q/8x7BUEBvlxc6ddXBUsoxBv/x0BHee0ocnJZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU3ajgB+A18BDx5Eyi7JE4Fu40+7kwHwYDVR0j BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4 NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG QzQ0MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzYzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzNzMxMzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpRPjANBgkqhkiG 9w0BAQsFAAOCAQEAT8FnCUTLGWm+N3icn/xsh47bh6naOR9ouOY2SPoztlabgZBM y92npJ+vOMyKDlfgTAffQputUXlEAnI4WaCFbV53Nu3vhIuDwxmNShvcNgw2QVMC N3y8yJn8p1gXKn+uoO06OvbOXlSvk/EEBr19aRZw6b9fOsWf1mTBEIVOqdKf+b0F Hx3OjmJc8Yf7ES8mteU3eQmccc/kpfNzheK897faB22Rd4jNoz8SusjR9wGzvcO+ dVi+fncLlCUMhPacdDg4EeXkFd5u7sfrckoeK37gq2MaeERiYtpuDSl03fLUrUnP +XqYwkfuEQs4+gAssnrBLjsk47z0eeIJahkZVg== -----END CERTIFICATE-----Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org