$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa File: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (raw, json) Hash identifier: uPu0wuy6UOQWyTCnLdU35DaPTumOPH52lrnFjE78TJ8= Subject key identifier: 94:70:31:EC:14:36:8D:B1:81:50:FB:C9:99:D6:51:B5:0F:FD:20:E8 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 48E6A4247E01E469000E0BE832B3E14F01C3B9A8 Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa Signing time: Fri 09 Feb 2024 04:00:00 +0000 ROA not before: Fri 09 Feb 2024 03:55:00 +0000 ROA not after: Fri 07 Feb 2025 04:00:00 +0000 asID: 9340 IP address blocks: 202.153.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e6:a4:24:7e:01:e4:69:00:0e:0b:e8:32:b3:e1:4f:01:c3:b9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Feb 9 03:55:00 2024 GMT Not After : Feb 7 04:00:00 2025 GMT Subject: CN=947031EC14368DB18150FBC999D651B50FFD20E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:ba:94:2b:e8:e0:f7:4d:00:90:6a:17:ad: c5:7b:5c:6c:ad:2e:18:39:ef:13:81:78:ad:11:64: 95:74:b0:a1:fc:c5:cd:22:8a:d1:50:8b:c5:5d:5c: 98:d9:05:b3:ab:3a:a0:70:fa:70:af:b6:90:c5:05: da:2e:e0:1e:23:1a:e2:c7:7f:3e:fa:d5:7b:b3:da: c9:83:19:16:10:13:a6:ed:57:3d:c9:22:66:e2:62: c4:f7:3e:58:7c:7b:0b:8d:f9:1e:2d:78:f3:ae:90: c9:6f:b2:c2:d4:17:81:5e:c7:1f:f8:40:c6:2f:a3: 58:fa:7a:f6:67:b4:c4:c4:f9:28:51:f2:16:f8:0a: 9f:23:e0:fa:db:b3:5a:fe:ee:47:f3:9a:28:99:e5: 86:67:a0:47:45:6e:05:75:d9:52:ff:67:b0:4b:ba: 46:a2:f4:34:29:05:d6:2c:1e:71:89:ae:f6:0a:09: de:5c:6f:bc:79:4e:f9:f0:65:e2:e9:a1:fa:1d:d1: 8c:7d:47:bf:82:4f:f6:f1:9b:d5:a4:b6:26:a6:c7: 28:ce:e0:44:41:0c:48:d1:ac:7a:1c:76:2f:aa:2e: 73:2a:f1:b8:04:0b:32:c6:10:49:a4:f5:e1:53:b4: 59:77:1a:2a:ab:8e:c3:1f:da:2b:4a:51:6f:60:2b: e7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:70:31:EC:14:36:8D:B1:81:50:FB:C9:99:D6:51:B5:0F:FD:20:E8 X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.153.224.0/19 Signature Algorithm: sha256WithRSAEncryption 2b:fb:10:09:83:e6:88:55:93:bd:b2:ec:2f:91:e3:c2:30:0e: 0f:a6:0c:d7:4f:ad:16:d7:90:a5:61:15:32:49:4c:1c:ae:c6: 53:57:29:d2:e8:59:9a:d3:95:f8:1d:df:fc:33:36:c9:15:09: 0b:f8:b4:b0:4b:dc:9a:58:5f:4a:c5:9f:31:51:f0:7b:04:11: c7:7c:d3:75:19:6d:3e:46:55:61:c6:79:cb:00:00:11:3e:64: 2a:ea:4d:0d:89:5e:56:a3:6a:7b:93:e9:6f:50:4c:d8:e5:a0: a6:f0:dc:a6:a2:94:25:4c:c0:7c:d2:a7:dc:03:2e:0a:b3:92: 08:33:6e:1e:59:2b:ae:fb:30:a8:ed:2a:e8:ca:7d:bc:d0:01: af:b4:67:b6:92:ae:3b:d7:71:6b:10:ed:7a:9e:3a:68:c1:a3: db:22:d3:19:4a:51:df:43:00:6e:58:bc:fd:51:2f:1a:77:af: 12:c7:62:6a:cc:6c:b6:f6:71:74:83:7f:6c:63:bc:c4:f0:48: 1c:e4:0f:f2:cb:ce:2d:27:21:f5:bf:11:4a:35:f8:f3:8d:0a: 0f:d8:dd:b9:20:f5:77:4d:d8:e9:d7:a7:ab:be:f3:5f:5e:ba: e3:47:2a:c0:60:1d:49:4c:5f:a7:d5:c6:60:a5:cd:c3:cc:46: 11:3b:e2:b3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSOakJH4B5GkADgvoMrPhTwHDuagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNDAyMDkwMzU1MDBaFw0yNTAyMDcwNDAwMDBaMDMxMTAvBgNV BAMTKDk0NzAzMUVDMTQzNjhEQjE4MTUwRkJDOTk5RDY1MUI1MEZGRDIwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXrqUK+jg900AkGoXrcV7XGyt Lhg57xOBeK0RZJV0sKH8xc0iitFQi8VdXJjZBbOrOqBw+nCvtpDFBdou4B4jGuLH fz761Xuz2smDGRYQE6btVz3JImbiYsT3Plh8ewuN+R4tePOukMlvssLUF4Fexx/4 QMYvo1j6evZntMTE+ShR8hb4Cp8j4Prbs1r+7kfzmiiZ5YZnoEdFbgV12VL/Z7BL ukai9DQpBdYsHnGJrvYKCd5cb7x5TvnwZeLpofod0Yx9R7+CT/bxm9WktiamxyjO 4ERBDEjRrHocdi+qLnMq8bgECzLGEEmk9eFTtFl3GiqrjsMf2itKUW9gK+cfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUlHAx7BQ2jbGBUPvJmdZRtQ/9IOgwHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YjFlNTdlLWEwZjEtNDY3Zi1h NDZmLTU1YTMxNTdiMGQ2NS8wLzMyMzAzMjJlMzEzNTMzMmUzMjMyMzQyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzOTMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqZ4DANBgkqhkiG 9w0BAQsFAAOCAQEAK/sQCYPmiFWTvbLsL5HjwjAOD6YM10+tFteQpWEVMklMHK7G U1cp0uhZmtOV+B3f/DM2yRUJC/i0sEvcmlhfSsWfMVHwewQRx3zTdRltPkZVYcZ5 ywAAET5kKupNDYleVqNqe5Ppb1BM2OWgpvDcpqKUJUzAfNKn3AMuCrOSCDNuHlkr rvswqO0q6Mp9vNABr7RntpKuO9dxaxDtep46aMGj2yLTGUpR30MAbli8/VEvGnev EsdiasxstvZxdIN/bGO8xPBIHOQP8svOLSch9b8RSjX4840KD9jduSD1d03Y6den q77zX16640cqwGAdSUxfp9XGYKXNw8xGETvisw== -----END CERTIFICATE-----Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org