$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa File: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (raw, json) Hash identifier: wzdzH/58S+87tPKZVlL87Fiu+GwWMpQTT7zP3FxBUFY= Subject key identifier: 72:42:1A:92:3E:49:0C:78:1A:51:B9:A2:10:04:D2:F3:B2:AC:BD:6A Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Certificate serial: 320400E873C4773C0D55D682CAB29D1DF1F0D7D3 Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa Signing time: Mon 01 Jul 2024 01:03:42 +0000 ROA not before: Mon 01 Jul 2024 00:58:42 +0000 ROA not after: Mon 30 Jun 2025 01:03:42 +0000 asID: 9657 IP address blocks: 202.138.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:04:00:e8:73:c4:77:3c:0d:55:d6:82:ca:b2:9d:1d:f1:f0:d7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Validity Not Before: Jul 1 00:58:42 2024 GMT Not After : Jun 30 01:03:42 2025 GMT Subject: CN=72421A923E490C781A51B9A21004D2F3B2ACBD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:06:1a:4f:19:54:56:06:36:f5:eb:e8:d0: 56:f0:a4:5e:23:8a:9c:71:23:ed:5e:b8:c7:cf:90: 94:df:3b:2c:de:b1:6e:49:b6:a9:1f:07:5b:c2:74: 58:70:70:49:9a:43:fd:57:30:20:22:01:66:00:58: 59:bd:c4:ac:9c:63:7f:9b:de:85:31:dc:d6:6a:a6: f3:b1:37:47:1b:8d:5c:06:ed:c4:fd:87:0d:e9:34: 0b:97:0e:39:8c:3b:a0:83:84:f6:2e:f8:e4:92:57: 3a:c4:7c:8b:2f:7d:f5:75:0a:9a:77:f7:f8:cb:9a: ec:d6:d1:37:9c:56:8d:ce:2c:6e:f2:18:8c:0b:66: a5:99:c1:a3:2a:43:40:47:ff:9c:71:a5:f5:03:3b: 5f:dc:b4:c5:98:e8:14:bc:e4:d2:3c:24:bc:16:b5: be:93:a4:3e:73:55:2c:c8:02:3b:37:67:42:14:18: e3:59:69:e8:94:b7:6d:68:0d:7f:2e:9a:49:ff:f4: 97:b6:0f:38:7a:8a:9f:ab:79:93:a1:7a:bc:14:01: 1b:4c:0f:9a:92:d0:85:12:54:ec:35:e7:c8:71:7d: dc:9f:64:35:6b:d6:8e:f4:00:73:3a:78:1f:34:34: 61:d2:d9:b1:c5:a0:5f:bb:ba:45:96:ed:9e:a8:dd: 0a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:42:1A:92:3E:49:0C:78:1A:51:B9:A2:10:04:D2:F3:B2:AC:BD:6A X509v3 Authority Key Identifier: keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.138.224.0/19 Signature Algorithm: sha256WithRSAEncryption 72:ae:08:3f:cd:74:fe:af:c9:84:3f:01:8d:dc:05:db:12:da: 29:12:f0:6a:17:ee:d2:29:ba:27:6d:c2:e7:df:ac:0c:42:ff: f6:72:01:bf:b4:86:99:fa:57:b3:9d:5b:b1:1d:12:89:35:23: 39:17:f1:70:72:de:6e:a0:87:91:97:72:dc:c9:7d:53:5e:ef: 0f:8c:32:73:56:7b:da:83:36:a2:dc:5d:5b:34:b0:30:2c:a9: d1:b9:6c:8b:a8:9c:2f:99:ce:2f:45:47:2a:42:bd:81:85:db: 9a:f7:ff:52:96:96:8f:91:a0:b3:02:62:e4:20:b8:43:be:6a: 9c:49:bf:7e:b0:d6:25:97:f9:f1:f7:cc:0a:9f:22:3b:9e:a5: a0:2b:93:cb:28:96:5f:ba:5a:62:03:ac:d7:6d:3b:0e:11:a6: 1f:50:2f:6a:5a:92:e2:80:2f:f0:bf:e1:7b:df:0b:23:f0:c9: ed:be:64:b0:9a:57:ea:33:0b:b8:0a:a8:1b:b6:6e:07:84:05: e3:fd:3f:67:c9:09:04:75:be:19:70:b2:da:59:d3:6e:b5:72: 09:66:66:52:55:dc:2f:8e:e7:07:98:0d:05:24:58:b8:75:af: f1:e2:c7:63:07:e2:6f:0d:0e:e5:2b:de:07:f5:40:1a:3a:7f: 36:76:c5:35 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMgQA6HPEdzwNVdaCyrKdHfHw19MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUy NjZGOEE2RDAeFw0yNDA3MDEwMDU4NDJaFw0yNTA2MzAwMTAzNDJaMDMxMTAvBgNV BAMTKDcyNDIxQTkyM0U0OTBDNzgxQTUxQjlBMjEwMDREMkYzQjJBQ0JENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/AYaTxlUVgY29evo0FbwpF4j ipxxI+1euMfPkJTfOyzesW5JtqkfB1vCdFhwcEmaQ/1XMCAiAWYAWFm9xKycY3+b 3oUx3NZqpvOxN0cbjVwG7cT9hw3pNAuXDjmMO6CDhPYu+OSSVzrEfIsvffV1Cpp3 9/jLmuzW0TecVo3OLG7yGIwLZqWZwaMqQ0BH/5xxpfUDO1/ctMWY6BS85NI8JLwW tb6TpD5zVSzIAjs3Z0IUGONZaeiUt21oDX8umkn/9Je2Dzh6ip+reZOherwUARtM D5qS0IUSVOw158hxfdyfZDVr1o70AHM6eB80NGHS2bHFoF+7ukWW7Z6o3QrbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUckIakj5JDHgaUbmiEATS87KsvWowHwYDVR0j BBgwFoAUp5/TB8N+jFWfZaWOyc6VviZvim0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGY2YmViOC1lNGU4LTRlMzktODI3NS0xYzZkNzdjM2VlZjgvMC9BNzlGRDMwN0Mz N0U4QzU1OUY2NUE1OEVDOUNFOTVCRTI2NkY4QTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUyNjZG OEE2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4ZjZiZWI4LWU0ZTgtNGUzOS04 Mjc1LTFjNmQ3N2MzZWVmOC8wLzMyMzAzMjJlMzEzMzM4MmUzMjMyMzQyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzOTM2MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqK4DANBgkqhkiG 9w0BAQsFAAOCAQEAcq4IP810/q/JhD8BjdwF2xLaKRLwahfu0im6J23C59+sDEL/ 9nIBv7SGmfpXs51bsR0SiTUjORfxcHLebqCHkZdy3Ml9U17vD4wyc1Z72oM2otxd WzSwMCyp0blsi6icL5nOL0VHKkK9gYXbmvf/UpaWj5GgswJi5CC4Q75qnEm/frDW JZf58ffMCp8iO56loCuTyyiWX7paYgOs1207DhGmH1AvalqS4oAv8L/he98LI/DJ 7b5ksJpX6jMLuAqoG7ZuB4QF4/0/Z8kJBHW+GXCy2lnTbrVyCWZmUlXcL47nB5gN BSRYuHWv8eLHYwfibw0O5SveB/VAGjp/NnbFNQ== -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org