$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230312e302f32342d3234203d3e203338313439.roa File: 3230322e3135322e3230312e302f32342d3234203d3e203338313439.roa (raw, json) Hash identifier: hfR+5aN9OjZo/ZCrK7j9HpS3mgUcunz3caoDcRZJHzQ= Subject key identifier: 48:6A:B7:39:D7:3A:AC:B6:B6:5B:E8:67:D5:4A:72:1F:BB:6B:A9:D9 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 6E1B49960D5297105CA361BB5B055A973AC14446 Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230312e302f32342d3234203d3e203338313439.roa Signing time: Tue 17 Sep 2024 01:02:43 +0000 ROA not before: Tue 17 Sep 2024 00:57:43 +0000 ROA not after: Tue 16 Sep 2025 01:02:43 +0000 asID: 38149 IP address blocks: 202.152.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1b:49:96:0d:52:97:10:5c:a3:61:bb:5b:05:5a:97:3a:c1:44:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Sep 17 00:57:43 2024 GMT Not After : Sep 16 01:02:43 2025 GMT Subject: CN=486AB739D73AACB6B65BE867D54A721FBB6BA9D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:c4:9a:77:21:38:4f:ae:8f:a7:cf:a3:2a: 47:ab:52:c3:c6:52:1d:8c:55:ca:3e:5a:b3:5a:56: 10:a8:4e:cb:49:aa:10:32:89:ad:7a:94:4d:39:a7: 57:d7:1e:1a:74:ea:28:a2:27:4d:20:57:ec:f2:35: d6:f7:d6:f5:1a:de:0f:01:52:9e:31:04:04:60:e5: c9:94:fa:1d:06:9f:cd:74:47:64:ce:16:d8:9e:a6: b7:c7:74:11:58:fc:6f:3c:d2:09:84:94:24:84:db: 1a:33:6a:50:a0:7f:ac:e9:91:5a:24:0f:48:88:c2: 1e:78:57:bf:f8:ac:c9:29:89:71:42:72:bf:f9:20: 6b:50:79:24:40:2c:39:d6:11:e3:92:87:a4:ad:fa: b6:82:02:65:3b:06:8e:dc:21:13:b9:c3:1b:b5:f9: ea:51:6c:f4:ec:c1:b7:6f:4f:97:ab:bb:6f:cd:e2: 97:c1:64:a5:27:a7:dc:49:60:d3:24:15:2f:8a:a4: e5:99:ac:e3:a2:0b:8f:21:85:25:eb:95:1f:a9:af: 6b:78:f3:1a:b6:d8:f2:0d:aa:ac:d3:e2:01:54:b6: 77:36:b1:08:9f:dc:29:ca:3b:0f:41:f5:f1:57:dd: 80:8f:6c:c0:7a:72:3a:11:e9:a2:2c:d2:04:91:46: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6A:B7:39:D7:3A:AC:B6:B6:5B:E8:67:D5:4A:72:1F:BB:6B:A9:D9 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230312e302f32342d3234203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.201.0/24 Signature Algorithm: sha256WithRSAEncryption 95:89:e2:33:44:44:69:47:c6:e0:79:c2:a7:56:46:01:5a:5c: ed:3b:a8:2b:b2:48:c3:9c:14:3a:8b:36:ee:5f:4b:15:89:94: 84:8f:12:3d:c2:99:cf:17:45:b5:2b:02:92:af:cf:1f:5e:18: 0c:af:23:80:54:72:f5:29:73:0d:d9:47:be:47:b9:a6:25:d5: 17:3c:a0:70:80:dc:73:de:c4:b4:d3:1b:d2:c7:e5:16:51:3d: ce:2c:f3:00:73:a8:a5:d4:35:5b:33:0a:54:35:94:b2:42:3e: 07:f4:04:88:d3:53:24:0b:e4:01:1e:d4:19:ef:07:e7:de:46: 1d:cd:95:92:dc:dd:20:88:87:db:c9:de:6d:26:8d:40:eb:2a: 51:e9:f3:ad:19:9f:3f:77:73:21:52:b3:6c:95:52:9c:c1:3b: 35:05:99:d9:8a:06:cd:5d:9d:6c:a7:ba:8d:6f:73:da:7c:90: af:17:07:4f:56:c8:22:74:71:3b:09:a6:73:3e:8c:af:83:57: fc:fc:42:8e:30:7b:76:5e:4b:8c:31:df:dc:a7:39:77:38:ce: 58:66:f8:c7:40:54:0f:30:b0:20:9f:58:6f:be:80:6d:9f:b5: d5:1c:ed:3f:b5:42:a2:4e:f1:53:c5:8e:88:60:b1:24:b1:6f: 3c:1a:a5:88 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbhtJlg1SlxBco2G7WwValzrBREYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNDA5MTcwMDU3NDNaFw0yNTA5MTYwMTAyNDNaMDMxMTAvBgNV BAMTKDQ4NkFCNzM5RDczQUFDQjZCNjVCRTg2N0Q1NEE3MjFGQkI2QkE5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdT8SadyE4T66Pp8+jKkerUsPG Uh2MVco+WrNaVhCoTstJqhAyia16lE05p1fXHhp06iiiJ00gV+zyNdb31vUa3g8B Up4xBARg5cmU+h0Gn810R2TOFtieprfHdBFY/G880gmElCSE2xozalCgf6zpkVok D0iIwh54V7/4rMkpiXFCcr/5IGtQeSRALDnWEeOSh6St+raCAmU7Bo7cIRO5wxu1 +epRbPTswbdvT5eru2/N4pfBZKUnp9xJYNMkFS+KpOWZrOOiC48hhSXrlR+pr2t4 8xq22PINqqzT4gFUtnc2sQif3CnKOw9B9fFX3YCPbMB6cjoR6aIs0gSRRm9RAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSGq3Odc6rLa2W+hn1UpyH7trqdkwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMwMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjJMA0GCSqG SIb3DQEBCwUAA4IBAQCVieIzRERpR8bgecKnVkYBWlztO6grskjDnBQ6izbuX0sV iZSEjxI9wpnPF0W1KwKSr88fXhgMryOAVHL1KXMN2Ue+R7mmJdUXPKBwgNxz3sS0 0xvSx+UWUT3OLPMAc6il1DVbMwpUNZSyQj4H9ASI01MkC+QBHtQZ7wfn3kYdzZWS 3N0giIfbyd5tJo1A6ypR6fOtGZ8/d3MhUrNslVKcwTs1BZnZigbNXZ1sp7qNb3Pa fJCvFwdPVsgidHE7CaZzPoyvg1f8/EKOMHt2XkuMMd/cpzl3OM5YZvjHQFQPMLAg n1hvvoBtn7XVHO0/tUKiTvFTxY6IYLEksW88GqWI -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org