$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa File: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (raw, json) Hash identifier: hc7daumv65Slk8AjbErj2hqEo3YbfF+XWd2yZgb1iHM= Subject key identifier: C2:A3:DB:36:4C:F8:72:B0:EC:ED:7D:4C:C7:0B:F1:D5:75:BF:07:70 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 26F93FB878CB9858B2CB1A637510974A19DD8AE6 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa Signing time: Sat 16 Mar 2024 08:00:01 +0000 ROA not before: Sat 16 Mar 2024 07:55:01 +0000 ROA not after: Sat 15 Mar 2025 08:00:01 +0000 asID: 45289 IP address blocks: 120.89.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f9:3f:b8:78:cb:98:58:b2:cb:1a:63:75:10:97:4a:19:dd:8a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Mar 16 07:55:01 2024 GMT Not After : Mar 15 08:00:01 2025 GMT Subject: CN=C2A3DB364CF872B0ECED7D4CC70BF1D575BF0770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:93:56:4c:f7:17:13:58:36:f8:91:49:52: f9:86:f1:ee:eb:5d:f0:2b:0f:5e:0a:bb:31:82:e9: 91:c0:b3:f7:3b:87:4c:42:e3:e7:be:bb:25:6b:1a: 0e:80:9b:6d:9c:67:e0:c3:55:28:ab:f4:f7:ef:cb: 2e:47:16:da:62:e9:ee:d4:0c:e7:3d:50:de:eb:e6: 2a:d7:24:f2:81:f1:87:51:94:72:3c:63:37:91:ff: bc:a3:db:b4:76:b2:1a:e6:64:aa:b4:18:07:5e:bb: 89:85:c6:68:99:c0:1e:54:a9:01:59:11:d0:4c:6e: 93:99:01:88:6f:33:31:97:09:2d:cc:95:21:78:24: 77:da:f5:c7:36:27:8a:a4:a3:14:c5:be:bc:63:47: 58:c1:ef:27:37:54:03:82:ee:f1:76:a8:8a:ce:bc: 73:07:7c:1f:ae:ed:dd:06:49:b9:bb:85:e9:13:a6: 9a:d1:26:4f:3e:01:19:60:d9:39:0b:55:61:ee:c1: f6:96:8a:d8:6e:d9:08:f7:50:11:68:84:0f:c2:58: 2c:48:bd:e7:02:9b:cb:0a:7c:7f:76:41:8d:c3:2e: 6a:48:61:7f:79:c1:43:58:d9:ff:ff:b7:db:9f:5f: 81:a8:b1:2e:49:e9:cd:77:86:85:98:66:f6:32:3d: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:DB:36:4C:F8:72:B0:EC:ED:7D:4C:C7:0B:F1:D5:75:BF:07:70 X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.89.89.0/24 Signature Algorithm: sha256WithRSAEncryption 98:7e:40:c8:71:fa:c1:f3:2e:bf:bd:f2:29:9a:02:1f:f1:cb: 72:4e:20:22:7f:95:0b:b5:70:cf:30:ee:66:b6:0d:61:63:f9: 78:90:36:a8:aa:26:04:48:e6:3a:e6:3e:21:8a:77:b7:0d:64: 96:16:d5:bd:37:d0:db:c3:ec:4b:01:98:e0:a5:39:f3:4d:e7: 35:72:c0:8f:bd:e0:a2:69:43:76:d4:36:04:01:12:62:95:48: e7:81:0d:6b:4a:00:c4:1f:e4:fe:34:a0:ad:fd:f1:7c:c3:b4: 5f:4f:6d:49:02:ce:f5:40:af:a4:01:30:ed:67:36:62:68:ea: da:6d:9b:c5:5d:11:e6:cf:4a:d1:59:66:cb:9e:9e:bb:4a:53: ab:7b:88:10:da:8d:05:75:da:41:97:b2:8e:2a:e6:6a:cd:0a: db:68:ab:e0:96:4a:a1:f1:1e:40:68:a0:ff:5e:3a:e6:10:e4: e8:49:2b:a3:51:16:91:d3:88:ce:03:8e:f5:e8:de:8e:3d:69: 18:a2:5b:35:d6:d6:9d:de:bb:fe:1a:61:08:5f:06:01:ae:ac: 7e:bb:68:0f:86:e0:7f:fb:4e:7c:2e:92:02:0e:c5:00:e4:b3: 14:10:80:a3:c4:ff:f5:30:3f:ff:4b:0e:c9:08:f9:9f:05:c7: 6a:ef:bf:a1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJvk/uHjLmFiyyxpjdRCXShndiuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNDAzMTYwNzU1MDFaFw0yNTAzMTUwODAwMDFaMDMxMTAvBgNV BAMTKEMyQTNEQjM2NENGODcyQjBFQ0VEN0Q0Q0M3MEJGMUQ1NzVCRjA3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQJNWTPcXE1g2+JFJUvmG8e7r XfArD14KuzGC6ZHAs/c7h0xC4+e+uyVrGg6Am22cZ+DDVSir9Pfvyy5HFtpi6e7U DOc9UN7r5irXJPKB8YdRlHI8YzeR/7yj27R2shrmZKq0GAdeu4mFxmiZwB5UqQFZ EdBMbpOZAYhvMzGXCS3MlSF4JHfa9cc2J4qkoxTFvrxjR1jB7yc3VAOC7vF2qIrO vHMHfB+u7d0GSbm7hekTpprRJk8+ARlg2TkLVWHuwfaWithu2Qj3UBFohA/CWCxI vecCm8sKfH92QY3DLmpIYX95wUNY2f//t9ufX4GosS5J6c13hoWYZvYyPZtZAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUwqPbNkz4crDs7X1Mxwvx1XW/B3AwHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h NjJiLWUzZDUwY2M3OTQ0Mi8wLzMxMzIzMDJlMzgzOTJlMzgzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB4WVkwDQYJKoZIhvcN AQELBQADggEBAJh+QMhx+sHzLr+98imaAh/xy3JOICJ/lQu1cM8w7ma2DWFj+XiQ NqiqJgRI5jrmPiGKd7cNZJYW1b030NvD7EsBmOClOfNN5zVywI+94KJpQ3bUNgQB EmKVSOeBDWtKAMQf5P40oK398XzDtF9PbUkCzvVAr6QBMO1nNmJo6tptm8VdEebP StFZZsuenrtKU6t7iBDajQV12kGXso4q5mrNCttoq+CWSqHxHkBooP9eOuYQ5OhJ K6NRFpHTiM4DjvXo3o49aRiiWzXW1p3eu/4aYQhfBgGurH67aA+G4H/7TnwukgIO xQDksxQQgKPE//UwP/9LDskI+Z8Fx2rvv6E= -----END CERTIFICATE-----Generated at Mon Jun 24 01:27:24 2024 by rpki-client on console-ams.rpki-client.org