$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230342e302f32342d3234203d3e203338313439.roa File: 3230322e3135322e3230342e302f32342d3234203d3e203338313439.roa (raw, json) Hash identifier: ngHws4nbH41ZSObqvtr4W6ur+zL7kdIdOy0aSzBDlbQ= Subject key identifier: CD:01:1A:D3:CB:D5:CD:E2:83:40:42:D3:BD:DF:6F:47:41:FB:75:4C Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 5B33FA5A4312605F63DA9B65DC97483C5158E308 Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230342e302f32342d3234203d3e203338313439.roa Signing time: Tue 17 Sep 2024 01:03:48 +0000 ROA not before: Tue 17 Sep 2024 00:58:48 +0000 ROA not after: Tue 16 Sep 2025 01:03:48 +0000 asID: 38149 IP address blocks: 202.152.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:33:fa:5a:43:12:60:5f:63:da:9b:65:dc:97:48:3c:51:58:e3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Sep 17 00:58:48 2024 GMT Not After : Sep 16 01:03:48 2025 GMT Subject: CN=CD011AD3CBD5CDE2834042D3BDDF6F4741FB754C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:bb:f7:3c:ec:9a:4f:2a:09:5d:d5:8f:0b: 6d:43:ff:ba:96:dd:6a:e0:4b:48:9d:c1:9c:41:d0: 9b:5d:42:b3:2e:d2:01:21:96:5e:27:8b:67:e1:c0: 3f:7f:3f:df:b1:76:c7:84:06:61:5d:e3:6d:a4:3f: 56:e6:56:99:29:c7:2e:f0:85:95:7f:12:f3:42:38: 0c:79:cd:b1:d9:e8:22:ba:66:82:fb:fd:06:32:f3: 6c:9a:47:55:46:a9:7b:8b:63:d5:28:91:f7:62:b1: 3b:9e:fd:2d:44:f7:68:55:5e:5e:44:84:c3:f9:e3: df:ca:cc:3b:32:a1:16:6f:66:37:c2:9d:d1:e3:55: 2f:6d:3b:94:bb:e2:cc:01:f6:02:6a:ce:ff:e1:a2: c6:22:f9:f7:8f:83:f5:66:b6:9d:e0:e3:0d:8e:d5: 08:56:c8:cd:7e:4e:fc:71:65:74:6c:dd:d8:e4:7a: 91:cd:b9:bd:f9:9e:ba:6e:6c:fe:fa:d4:02:a7:c4: f1:44:99:9b:0b:83:2f:c5:74:f0:5a:c6:df:3e:76: 08:ee:82:99:23:1d:d4:bb:03:cb:2f:6b:57:e0:62: 41:71:a2:72:85:c4:78:3a:d4:a3:33:9a:1b:92:ba: 48:b7:0a:20:fa:61:3f:38:ed:ef:44:aa:68:7b:fe: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:01:1A:D3:CB:D5:CD:E2:83:40:42:D3:BD:DF:6F:47:41:FB:75:4C X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230342e302f32342d3234203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.204.0/24 Signature Algorithm: sha256WithRSAEncryption 31:bf:4f:fe:97:4f:23:87:8b:a6:b8:53:cd:bc:b3:3a:c3:6d: 36:f7:40:7d:fd:9a:71:1c:65:13:72:ac:23:eb:00:b8:02:d5: 16:45:00:60:17:aa:d7:c8:d2:ec:8d:8c:27:8a:90:79:72:ed: fb:9e:a0:ed:8d:35:d5:c8:d6:73:1a:5b:d7:76:94:c9:b4:f8: 3f:37:1f:d6:b7:21:a9:aa:a8:5a:36:9d:d8:df:1e:3c:28:40: f4:29:84:96:38:0b:20:4e:63:9f:d0:4f:c8:6a:87:2e:b7:af: cd:8b:0f:18:0f:3a:46:04:bd:53:1d:e2:1a:45:2f:ea:63:5c: 15:54:83:89:25:38:b7:b4:90:34:e2:97:f3:3e:f8:78:72:53: f4:1d:41:94:cb:4a:2e:c7:f1:a3:5e:61:8f:07:84:15:20:2b: f0:97:43:0a:a1:74:80:2f:67:3d:8d:a8:3d:09:b7:58:d7:cd: 46:02:94:85:ea:76:d1:0b:43:92:91:58:ce:5a:57:8e:3c:83: 9b:af:74:26:20:ae:09:db:c2:b9:19:30:80:1b:aa:6c:05:f9: bc:08:89:1d:2a:94:01:72:c3:a6:fd:91:a2:d3:07:34:6b:63: cc:4c:46:18:4c:9b:72:1e:22:59:2a:35:98:7d:ba:25:88:f0: 42:ae:f1:18 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWzP6WkMSYF9j2ptl3JdIPFFY4wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNDA5MTcwMDU4NDhaFw0yNTA5MTYwMTAzNDhaMDMxMTAvBgNV BAMTKENEMDExQUQzQ0JENUNERTI4MzQwNDJEM0JEREY2RjQ3NDFGQjc1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/Lv3POyaTyoJXdWPC21D/7qW 3WrgS0idwZxB0JtdQrMu0gEhll4ni2fhwD9/P9+xdseEBmFd422kP1bmVpkpxy7w hZV/EvNCOAx5zbHZ6CK6ZoL7/QYy82yaR1VGqXuLY9UokfdisTue/S1E92hVXl5E hMP549/KzDsyoRZvZjfCndHjVS9tO5S74swB9gJqzv/hosYi+fePg/Vmtp3g4w2O 1QhWyM1+TvxxZXRs3djkepHNub35nrpubP761AKnxPFEmZsLgy/FdPBaxt8+dgju gpkjHdS7A8sva1fgYkFxonKFxHg61KMzmhuSuki3CiD6YT847e9Eqmh7/u43AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzQEa08vVzeKDQELTvd9vR0H7dUwwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjMMA0GCSqG SIb3DQEBCwUAA4IBAQAxv0/+l08jh4umuFPNvLM6w20290B9/ZpxHGUTcqwj6wC4 AtUWRQBgF6rXyNLsjYwnipB5cu37nqDtjTXVyNZzGlvXdpTJtPg/Nx/WtyGpqqha Np3Y3x48KED0KYSWOAsgTmOf0E/Iaocut6/Niw8YDzpGBL1THeIaRS/qY1wVVIOJ JTi3tJA04pfzPvh4clP0HUGUy0oux/GjXmGPB4QVICvwl0MKoXSAL2c9jag9CbdY 181GApSF6nbRC0OSkVjOWleOPIObr3QmIK4J28K5GTCAG6psBfm8CIkdKpQBcsOm /ZGi0wc0a2PMTEYYTJtyHiJZKjWYfboliPBCrvEY -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org