$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/3230332e33342e3131382e302f32342d3234203d3e203338373735.roa File: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (raw, json) Hash identifier: +PraNjMo7UJUfRvMuuMh94X99iB0d3sDtRSjaFBvobw= Subject key identifier: 20:60:FB:06:5A:D3:4B:65:CA:57:B7:7F:7A:B1:06:C4:5C:3A:FA:CE Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 69EF44BCF3DD50BBEC5D6D84E591AF284273FCAB Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/3230332e33342e3131382e302f32342d3234203d3e203338373735.roa Signing time: Mon 01 Jul 2024 01:04:59 +0000 ROA not before: Mon 01 Jul 2024 00:59:59 +0000 ROA not after: Mon 30 Jun 2025 01:04:59 +0000 asID: 38775 IP address blocks: 203.34.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ef:44:bc:f3:dd:50:bb:ec:5d:6d:84:e5:91:af:28:42:73:fc:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Jul 1 00:59:59 2024 GMT Not After : Jun 30 01:04:59 2025 GMT Subject: CN=2060FB065AD34B65CA57B77F7AB106C45C3AFACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:14:ab:7a:20:2d:2c:52:81:41:e0:c4:d8: 92:18:4c:0e:74:6a:39:9b:2a:02:ae:59:22:fb:95: 7a:e7:7b:bf:2e:3f:fc:dd:50:70:50:41:d8:73:c0: da:75:3b:47:a1:09:c7:2f:13:23:a9:79:8e:07:69: 47:42:b4:6e:ca:8f:99:f7:2b:85:8c:77:4f:6a:21: 49:d1:53:75:26:5d:1c:01:42:9c:72:a9:60:a7:9a: 0e:f9:5f:eb:94:0c:58:f2:eb:f8:19:7e:71:71:43: 87:f2:34:94:04:77:c0:81:a4:63:25:3e:47:ae:e8: f3:fe:02:ef:8e:b8:6c:19:77:f8:12:fe:15:4b:0d: 82:5b:5b:2e:48:bb:b5:c7:9a:11:14:16:34:2c:09: 5f:7f:3b:bb:22:5d:fd:a5:39:9e:83:2d:8b:f7:14: 2e:18:81:cc:cb:72:a0:6d:92:59:8a:42:95:86:42: 2f:b0:d3:a2:fc:02:bb:31:94:a7:93:e3:b6:90:f2: 23:a4:b0:27:3d:60:21:20:87:66:9d:f6:4b:05:be: 7b:4c:25:e5:3d:e7:28:ee:d8:57:6e:9b:c2:31:04: cb:85:e4:b9:03:85:69:d2:3e:ef:b0:b4:ab:15:c7: 48:63:05:94:ad:f4:48:ae:23:1c:90:7e:ec:41:26: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:60:FB:06:5A:D3:4B:65:CA:57:B7:7F:7A:B1:06:C4:5C:3A:FA:CE X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/3230332e33342e3131382e302f32342d3234203d3e203338373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.34.118.0/24 Signature Algorithm: sha256WithRSAEncryption 31:07:1c:b1:90:56:e8:ef:14:3f:e5:0a:41:6d:55:92:1a:1b: 4b:4d:cb:13:92:74:ce:b6:0b:1a:ee:30:ba:8f:6b:78:4a:ef: 80:b7:6d:72:a2:ce:25:5a:c5:14:80:a0:1c:45:43:9b:9b:34: 1c:e1:88:7b:4f:9e:e5:51:ca:6f:cf:fe:99:de:8c:af:0f:ad: bc:d8:04:1b:d0:d7:cc:34:3c:47:71:1c:f5:da:ae:fd:35:08: 1d:f5:be:ff:07:f4:9a:1a:77:89:d3:99:50:96:30:da:59:03: 5f:f0:b3:e6:cb:26:f9:f0:39:77:31:8f:e5:0e:ab:91:93:96: 61:cf:1f:1e:6d:75:d9:fb:a1:53:c3:49:2e:84:0e:1f:4c:c1: 35:ca:98:01:74:85:59:de:92:2b:c4:da:41:93:27:b7:20:66: dd:c4:8c:81:71:6c:d7:f5:88:94:31:d3:c6:2a:51:9f:b0:c3: 87:8a:42:71:3e:e9:13:c7:89:98:29:b8:64:31:04:4e:e0:6b: 98:89:40:ac:38:58:95:f3:27:07:df:86:2f:df:94:e5:51:9c: a5:2d:e7:4a:70:9c:c2:3d:43:4b:70:92:e2:af:b3:58:97:23: 3c:eb:45:f4:78:41:3b:ee:90:5c:55:cc:db:a1:97:14:f7:89: 7c:07:02:29 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUae9EvPPdULvsXW2E5ZGvKEJz/KswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNDA3MDEwMDU5NTlaFw0yNTA2MzAwMTA0NTlaMDMxMTAvBgNV BAMTKDIwNjBGQjA2NUFEMzRCNjVDQTU3Qjc3RjdBQjEwNkM0NUMzQUZBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyABSreiAtLFKBQeDE2JIYTA50 ajmbKgKuWSL7lXrne78uP/zdUHBQQdhzwNp1O0ehCccvEyOpeY4HaUdCtG7Kj5n3 K4WMd09qIUnRU3UmXRwBQpxyqWCnmg75X+uUDFjy6/gZfnFxQ4fyNJQEd8CBpGMl Pkeu6PP+Au+OuGwZd/gS/hVLDYJbWy5Iu7XHmhEUFjQsCV9/O7siXf2lOZ6DLYv3 FC4YgczLcqBtklmKQpWGQi+w06L8ArsxlKeT47aQ8iOksCc9YCEgh2ad9ksFvntM JeU95yju2Fdum8IxBMuF5LkDhWnSPu+wtKsVx0hjBZSt9EiuIxyQfuxBJspDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUIGD7BlrTS2XKV7d/erEGxFw6+s4wHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MDUzZDk2LWRhMTctNDA5OS1i NzA3LWRhMGViMmJmMDdiYy8wLzMyMzAzMzJlMzMzNDJlMzEzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMsidjANBgkqhkiG 9w0BAQsFAAOCAQEAMQccsZBW6O8UP+UKQW1VkhobS03LE5J0zrYLGu4wuo9reErv gLdtcqLOJVrFFICgHEVDm5s0HOGIe0+e5VHKb8/+md6Mrw+tvNgEG9DXzDQ8R3Ec 9dqu/TUIHfW+/wf0mhp3idOZUJYw2lkDX/Cz5ssm+fA5dzGP5Q6rkZOWYc8fHm11 2fuhU8NJLoQOH0zBNcqYAXSFWd6SK8TaQZMntyBm3cSMgXFs1/WIlDHTxipRn7DD h4pCcT7pE8eJmCm4ZDEETuBrmIlArDhYlfMnB9+GL9+U5VGcpS3nSnCcwj1DS3CS 4q+zWJcjPOtF9HhBO+6QXFXM26GXFPeJfAcCKQ== -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org