$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139372e302f32342d3234203d3e203338313439.roa File: 3230322e3135322e3139372e302f32342d3234203d3e203338313439.roa (raw, json) Hash identifier: hznBZ3Wiv8H/2XLf49Vn+p+frHz+q15A9CreP+Bjw+A= Subject key identifier: C8:F0:33:3D:5D:1B:E1:70:2E:9D:08:B6:3D:27:0E:B1:13:02:03:A2 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 7A547CFE9CF2A16001C011D89443EB8E13DFA2C0 Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139372e302f32342d3234203d3e203338313439.roa Signing time: Tue 17 Sep 2024 00:54:00 +0000 ROA not before: Tue 17 Sep 2024 00:49:00 +0000 ROA not after: Tue 16 Sep 2025 00:54:00 +0000 asID: 38149 IP address blocks: 202.152.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:54:7c:fe:9c:f2:a1:60:01:c0:11:d8:94:43:eb:8e:13:df:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Sep 17 00:49:00 2024 GMT Not After : Sep 16 00:54:00 2025 GMT Subject: CN=C8F0333D5D1BE1702E9D08B63D270EB1130203A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:05:c1:cf:75:b4:59:58:f3:ee:55:56:ac: df:9c:c0:e8:22:84:9b:a6:0f:a0:9e:3b:ee:12:70: 74:86:21:c1:97:ff:f3:4f:1c:e5:60:25:3d:b4:1f: 32:73:69:e6:3a:58:93:6b:b5:4b:5c:ca:c0:c8:98: 7e:66:1f:da:25:40:81:cb:93:36:c3:3f:77:43:c2: bc:d2:6e:7a:cd:97:7d:96:57:50:e4:ba:b9:5f:bb: be:bf:89:ff:90:2d:0d:4b:aa:e4:aa:7f:df:84:09: 00:64:f1:a4:5b:9c:e0:e9:a6:3d:82:04:7d:93:37: 78:05:fe:4f:bc:7b:3b:28:5f:dc:9d:7a:51:e3:af: 44:65:fb:fc:56:59:d4:59:91:e1:21:70:55:ee:2d: 5f:f2:3e:cf:10:12:cf:3c:c4:e9:3a:6b:ff:72:9d: 64:83:b5:76:3b:6d:87:a1:73:3d:12:b2:91:87:cd: 26:9b:62:52:c3:29:7e:5d:62:e6:6d:70:20:23:6c: 48:78:84:76:c8:47:d6:20:80:dd:18:13:02:8d:14: 1e:27:dc:d9:7a:e3:c3:a1:03:bb:1c:82:c6:01:2b: ef:6a:e0:69:66:52:47:8d:38:11:6b:a7:5e:ac:4f: 62:b7:c2:91:d1:d3:c2:a4:f4:7b:53:b1:01:d3:bb: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F0:33:3D:5D:1B:E1:70:2E:9D:08:B6:3D:27:0E:B1:13:02:03:A2 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139372e302f32342d3234203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.197.0/24 Signature Algorithm: sha256WithRSAEncryption b9:df:77:f2:dd:6f:73:76:b8:75:8e:6d:cb:d2:8a:ee:af:7e: 5d:95:70:ce:de:db:49:c7:e5:8e:ee:92:80:85:af:8e:04:e3: bc:33:46:e1:a8:4b:e0:75:42:94:ce:5c:b2:cd:4b:62:78:2e: d2:06:14:13:1a:3e:60:fd:44:fe:6d:df:79:eb:6e:d1:81:98: 71:8f:6c:2d:a7:44:05:74:d3:68:94:ab:61:61:cd:2d:59:ff: 06:7f:56:fd:b6:6c:01:6c:f4:cb:91:78:8b:ec:97:ba:80:10: b3:05:c6:69:1c:86:a6:79:f7:93:c8:a8:1c:d7:4c:73:c7:c4: 76:55:43:76:3c:52:e3:c7:74:5f:00:e3:f8:d6:24:01:df:74: 63:a6:2d:75:9e:60:3b:93:c5:d4:27:01:1d:3d:71:9a:e9:72: ed:fa:e7:d3:be:ab:7b:99:91:b5:28:9b:5d:a6:38:33:14:26: ca:30:d9:96:03:41:87:eb:bf:94:72:db:17:c0:f6:79:31:ed: c3:60:1e:42:49:5c:e9:3c:a5:b7:67:51:2b:d8:39:38:10:d9: 09:16:18:db:79:3d:79:4a:cb:15:44:c0:ba:65:e8:3a:59:e1: 84:b3:de:92:55:46:f2:24:40:3b:d2:44:33:45:7d:71:02:5c: 64:91:a9:86 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUelR8/pzyoWABwBHYlEPrjhPfosAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNDA5MTcwMDQ5MDBaFw0yNTA5MTYwMDU0MDBaMDMxMTAvBgNV BAMTKEM4RjAzMzNENUQxQkUxNzAyRTlEMDhCNjNEMjcwRUIxMTMwMjAzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQQXBz3W0WVjz7lVWrN+cwOgi hJumD6CeO+4ScHSGIcGX//NPHOVgJT20HzJzaeY6WJNrtUtcysDImH5mH9olQIHL kzbDP3dDwrzSbnrNl32WV1Dkurlfu76/if+QLQ1LquSqf9+ECQBk8aRbnODppj2C BH2TN3gF/k+8ezsoX9ydelHjr0Rl+/xWWdRZkeEhcFXuLV/yPs8QEs88xOk6a/9y nWSDtXY7bYehcz0SspGHzSabYlLDKX5dYuZtcCAjbEh4hHbIR9YggN0YEwKNFB4n 3Nl648OhA7scgsYBK+9q4GlmUkeNOBFrp16sT2K3wpHR08Kk9HtTsQHTuxDlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyPAzPV0b4XAunQi2PScOsRMCA6IwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMTM5MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjFMA0GCSqG SIb3DQEBCwUAA4IBAQC533fy3W9zdrh1jm3L0orur35dlXDO3ttJx+WO7pKAha+O BOO8M0bhqEvgdUKUzlyyzUtieC7SBhQTGj5g/UT+bd95627RgZhxj2wtp0QFdNNo lKthYc0tWf8Gf1b9tmwBbPTLkXiL7Je6gBCzBcZpHIamefeTyKgc10xzx8R2VUN2 PFLjx3RfAOP41iQB33Rjpi11nmA7k8XUJwEdPXGa6XLt+ufTvqt7mZG1KJtdpjgz FCbKMNmWA0GH67+UctsXwPZ5Me3DYB5CSVzpPKW3Z1Er2Dk4ENkJFhjbeT15SssV RMC6Zeg6WeGEs96SVUbyJEA70kQzRX1xAlxkkamG -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org