$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32392e302f32342d3234203d3e203234353235.roa File: 3230332e3135332e32392e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: oh9ooPLc3jSvVK4We0mHafExWiVL9lPXgHhAzfJtgI8= Subject key identifier: 2C:70:A6:38:A1:19:0E:1F:E4:3B:1A:C5:07:0F:D8:2F:4A:07:19:02 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 4ADB16C089BD585932C0D65888731242A42263EE Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32392e302f32342d3234203d3e203234353235.roa Signing time: Sat 01 Jun 2024 07:00:01 +0000 ROA not before: Sat 01 Jun 2024 06:55:01 +0000 ROA not after: Sat 31 May 2025 07:00:01 +0000 asID: 24525 IP address blocks: 203.153.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:db:16:c0:89:bd:58:59:32:c0:d6:58:88:73:12:42:a4:22:63:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Jun 1 06:55:01 2024 GMT Not After : May 31 07:00:01 2025 GMT Subject: CN=2C70A638A1190E1FE43B1AC5070FD82F4A071902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:84:34:c5:ad:bf:39:0b:a1:6d:dc:65:48: 90:5c:db:16:65:02:cf:a5:51:16:37:dc:cb:92:3b: 29:87:81:80:24:1d:f8:a1:19:c8:af:8b:7c:0e:e7: 3f:e4:f2:ba:e9:a9:06:ee:5b:0c:d9:c7:4b:38:d4: c8:5f:56:00:98:56:56:26:0e:72:30:b1:de:13:af: 1a:d1:58:0d:b6:4f:e2:62:47:6b:b9:21:ea:6c:ab: b7:e3:c2:7a:91:19:f4:c2:da:92:61:2f:6c:b7:83: 28:28:d4:65:8e:90:41:06:1e:e7:f5:02:1a:3a:3d: a9:65:2d:d6:8b:a7:60:ab:ce:73:be:80:65:72:ca: 60:90:2d:51:c9:ee:1d:d3:fc:b9:b8:0b:a9:d3:e2: 19:9f:03:20:51:b1:13:9b:48:21:31:29:f3:3a:46: 23:32:6b:eb:fc:0f:db:37:5b:b8:c6:40:06:24:ff: 5c:e7:d9:f8:f1:e9:e4:3e:ad:b5:c6:a8:9b:b8:df: 22:e7:03:01:7a:d8:c4:6c:03:5a:57:81:86:49:bc: e3:3c:63:e2:22:e8:42:1b:87:4b:8b:28:24:af:b4: 5f:e3:cf:77:29:99:98:d4:30:23:88:5e:48:89:d6: 26:b7:17:49:f3:14:e8:0f:51:42:97:5b:f2:61:a1: 9d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:70:A6:38:A1:19:0E:1F:E4:3B:1A:C5:07:0F:D8:2F:4A:07:19:02 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32392e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.29.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:db:a9:e2:46:2e:f4:e3:d5:1e:42:12:18:84:f0:79:67:6e: 4d:0b:04:db:d6:de:99:a8:2d:cf:43:87:5d:18:88:73:77:dc: f0:d9:75:95:66:db:83:d6:67:86:97:83:3a:9d:db:c2:ed:ac: bc:3b:43:f0:ae:27:78:7d:ef:30:4a:27:f3:37:91:db:30:67: 48:73:69:74:5b:6d:62:d0:1b:d0:64:29:cb:a0:3b:62:7a:a5: 79:f9:e4:4d:d3:c9:27:e1:42:61:a3:34:96:0e:1d:be:34:9b: 54:c2:2b:77:e6:df:5b:22:d5:fe:3f:5f:5b:f9:07:48:cc:49: c7:b9:21:b7:b4:e8:d2:f9:b1:d8:2c:58:f8:3f:57:5d:66:eb: b9:27:9f:e1:ae:47:89:98:07:64:76:4f:fb:6e:33:53:fd:2b: 50:90:ac:ea:16:f5:ac:f0:d3:0f:42:37:0e:25:dc:4a:79:12: e7:4d:53:16:3b:5b:8a:ce:a4:18:54:30:4e:77:80:7a:78:07: 93:29:9c:7b:f0:28:2d:df:fe:e8:03:9c:93:46:1a:fa:30:01: 60:cf:09:66:b2:11:2c:40:48:84:11:4a:79:95:49:14:c3:95: c5:ff:1e:49:fb:fd:2c:e2:a1:df:ad:53:4b:c0:3c:4b:b2:f8: 5c:f0:6a:3c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUStsWwIm9WFkywNZYiHMSQqQiY+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNDA2MDEwNjU1MDFaFw0yNTA1MzEwNzAwMDFaMDMxMTAvBgNV BAMTKDJDNzBBNjM4QTExOTBFMUZFNDNCMUFDNTA3MEZEODJGNEEwNzE5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Q4Q0xa2/OQuhbdxlSJBc2xZl As+lURY33MuSOymHgYAkHfihGcivi3wO5z/k8rrpqQbuWwzZx0s41MhfVgCYVlYm DnIwsd4TrxrRWA22T+JiR2u5Iepsq7fjwnqRGfTC2pJhL2y3gygo1GWOkEEGHuf1 Aho6PallLdaLp2CrznO+gGVyymCQLVHJ7h3T/Lm4C6nT4hmfAyBRsRObSCExKfM6 RiMya+v8D9s3W7jGQAYk/1zn2fjx6eQ+rbXGqJu43yLnAwF62MRsA1pXgYZJvOM8 Y+Ii6EIbh0uLKCSvtF/jz3cpmZjUMCOIXkiJ1ia3F0nzFOgPUUKXW/JhoZ0HAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULHCmOKEZDh/kOxrFBw/YL0oHGQIwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMyMzAzMzJlMzEzNTMzMmUzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuZHTANBgkqhkiG 9w0BAQsFAAOCAQEAX9up4kYu9OPVHkISGITweWduTQsE29bemagtz0OHXRiIc3fc 8Nl1lWbbg9ZnhpeDOp3bwu2svDtD8K4neH3vMEon8zeR2zBnSHNpdFttYtAb0GQp y6A7YnqlefnkTdPJJ+FCYaM0lg4dvjSbVMIrd+bfWyLV/j9fW/kHSMxJx7kht7To 0vmx2CxY+D9XXWbruSef4a5HiZgHZHZP+24zU/0rUJCs6hb1rPDTD0I3DiXcSnkS 501TFjtbis6kGFQwTneAengHkymce/AoLd/+6AOck0Ya+jABYM8JZrIRLEBIhBFK eZVJFMOVxf8eSfv9LOKh361TS8A8S7L4XPBqPA== -----END CERTIFICATE-----Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org