$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3230322e35322e35322e302f32342d3234203d3e203436303537.roa File: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (raw, json) Hash identifier: wsSQ1ZH2PCic7BEYRkwFgMPjnpXYZ3ohhVuKfoCoA7s= Subject key identifier: 0E:C1:E5:3C:AD:20:06:B3:55:D2:52:F5:50:17:48:70:F8:6B:95:FF Certificate issuer: /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Certificate serial: 3C837D03CC5793487CD065BDF4000A6016F1B29C Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3230322e35322e35322e302f32342d3234203d3e203436303537.roa Signing time: Wed 09 Oct 2024 15:00:00 +0000 ROA not before: Wed 09 Oct 2024 14:55:00 +0000 ROA not after: Wed 08 Oct 2025 15:00:00 +0000 asID: 46057 IP address blocks: 202.52.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:83:7d:03:cc:57:93:48:7c:d0:65:bd:f4:00:0a:60:16:f1:b2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Validity Not Before: Oct 9 14:55:00 2024 GMT Not After : Oct 8 15:00:00 2025 GMT Subject: CN=0EC1E53CAD2006B355D252F550174870F86B95FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e3:43:5b:19:8d:48:b9:ab:05:4a:48:91:85: 7e:15:0e:b7:cf:c7:e1:ff:17:c8:33:d4:f8:34:8d: 56:6e:66:0e:c0:ca:4f:a5:d0:e2:33:61:a7:10:fc: 08:80:c4:d2:46:7a:87:f3:31:96:de:01:87:fb:e8: a8:b7:33:6a:93:0a:ae:c5:a1:d3:86:80:27:53:ff: 83:f6:d3:4e:f5:11:71:65:e1:49:e2:0c:ea:3e:47: 48:91:ea:d3:a2:64:03:ea:2f:64:07:11:ea:be:79: 57:93:13:13:ba:3c:f8:8b:6d:ec:8e:8c:3e:22:ea: 28:dd:8b:ec:53:90:d9:f7:6a:7f:f5:f6:54:48:2b: 4b:3c:69:f2:a2:82:65:5e:7b:8d:87:7a:72:ad:80: eb:9d:1d:4d:21:92:4d:10:db:db:06:f5:23:0c:24: 31:db:b2:e6:2a:d3:2b:f8:6f:83:74:06:ac:a9:4b: 34:ea:b6:23:b2:45:d6:ac:a0:35:3f:f8:a0:89:6d: a1:56:e9:50:4e:3a:cf:e5:79:91:0f:bf:94:a3:4f: 0f:bc:db:74:b0:93:d1:b6:bb:4f:07:f8:b3:fd:7b: 43:3e:a3:8c:09:df:68:5c:15:87:b7:c7:7d:cb:62: a8:9d:13:8f:ee:f7:18:1f:9a:12:27:76:41:1e:32: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C1:E5:3C:AD:20:06:B3:55:D2:52:F5:50:17:48:70:F8:6B:95:FF X509v3 Authority Key Identifier: keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3230322e35322e35322e302f32342d3234203d3e203436303537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.52.0/24 Signature Algorithm: sha256WithRSAEncryption 56:07:39:8f:9d:67:f7:9b:ba:bd:b2:c2:a2:03:15:ee:61:5d: 93:63:47:fc:b7:08:4c:6f:6a:4d:4e:ac:20:cc:e4:4a:96:01: a1:25:3e:63:08:88:7a:a0:21:0a:d3:3b:2a:e5:70:f7:f7:7b: 89:c6:5a:83:63:f6:8e:cc:ca:ed:0f:94:43:65:f2:98:d3:a3: a7:92:b3:dd:8b:5f:88:9d:79:17:0b:9e:b9:d9:ee:05:07:32: ee:47:9a:66:34:69:a8:84:47:d9:fc:d1:75:d1:9e:fa:f3:2a: c1:5a:bc:ec:be:d2:75:76:65:9e:0d:d1:95:8d:95:78:1f:3c: 09:fd:2b:d9:d8:6e:86:56:99:ea:ff:e4:06:6e:f3:85:ad:30: b3:f3:5e:56:99:0a:12:d8:77:44:a6:1e:dc:dd:e1:41:0e:8b: 0f:e2:6f:bb:f8:c4:ea:a8:a6:f3:e4:dc:a8:fb:c7:87:08:ee: 83:c5:d2:11:d2:40:89:06:fd:84:70:58:a1:dd:d3:b5:d1:f1: d5:97:37:a1:7e:84:91:86:ab:61:d6:a2:78:4a:d1:0c:58:eb: 6f:07:f3:29:07:64:7b:a4:a2:64:ad:27:86:8f:fc:c5:0c:3a: 24:3f:18:90:75:ea:50:9f:fe:6f:0a:71:c3:fa:a7:91:9c:0b: 80:e7:b1:e9 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUPIN9A8xXk0h80GW99AAKYBbxspwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1 MTVCODgzRTAeFw0yNDEwMDkxNDU1MDBaFw0yNTEwMDgxNTAwMDBaMDMxMTAvBgNV BAMTKDBFQzFFNTNDQUQyMDA2QjM1NUQyNTJGNTUwMTc0ODcwRjg2Qjk1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU40NbGY1IuasFSkiRhX4VDrfP x+H/F8gz1Pg0jVZuZg7Ayk+l0OIzYacQ/AiAxNJGeofzMZbeAYf76Ki3M2qTCq7F odOGgCdT/4P20071EXFl4UniDOo+R0iR6tOiZAPqL2QHEeq+eVeTExO6PPiLbeyO jD4i6ijdi+xTkNn3an/19lRIK0s8afKigmVee42HenKtgOudHU0hkk0Q29sG9SMM JDHbsuYq0yv4b4N0BqypSzTqtiOyRdasoDU/+KCJbaFW6VBOOs/leZEPv5SjTw+8 23Swk9G2u08H+LP9e0M+o4wJ32hcFYe3x33LYqidE4/u9xgfmhIndkEeMqobAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUDsHlPK0gBrNV0lL1UBdIcPhrlf8wHwYDVR0j BBgwFoAUcXsfR2lu76dJi+tWPZfr2FFbiD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzVkN2RlZi01ZWI5LTQwNTQtYTNhYi1kN2VjZjQ4NjM3OWEvMC83MTdCMUY0NzY5 NkVFRkE3NDk4QkVCNTYzRDk3RUJEODUxNUI4ODNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1MTVC ODgzRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3NWQ3ZGVmLTVlYjktNDA1NC1h M2FiLWQ3ZWNmNDg2Mzc5YS8wLzMyMzAzMjJlMzUzMjJlMzUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzYzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNDQwDQYJKoZIhvcN AQELBQADggEBAFYHOY+dZ/ebur2ywqIDFe5hXZNjR/y3CExvak1OrCDM5EqWAaEl PmMIiHqgIQrTOyrlcPf3e4nGWoNj9o7Myu0PlENl8pjTo6eSs92LX4ideRcLnrnZ 7gUHMu5HmmY0aaiER9n80XXRnvrzKsFavOy+0nV2ZZ4N0ZWNlXgfPAn9K9nYboZW mer/5AZu84WtMLPzXlaZChLYd0SmHtzd4UEOiw/ib7v4xOqopvPk3Kj7x4cI7oPF 0hHSQIkG/YRwWKHd07XR8dWXN6F+hJGGq2HWonhK0QxY628H8ykHZHukomStJ4aP /MUMOiQ/GJB16lCf/m8KccP6p5GcC4Dnsek= -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:57 2024 by rpki-client on console-ams.rpki-client.org