$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137392e302f32342d3234203d3e203338373638.roa File: 3230322e38372e3137392e302f32342d3234203d3e203338373638.roa (raw, json) Hash identifier: mt8KEsVi4U3sln/y43EekMg7qS3yMMemIQ6Qxv7LRVo= Subject key identifier: C0:A4:77:37:54:B6:5D:0B:09:AE:C4:7C:0B:4C:1F:42:C0:E1:59:65 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 67864AF1492672B428B6CD96E1D83F9DBE37E8AA Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137392e302f32342d3234203d3e203338373638.roa Signing time: Tue 22 Oct 2024 03:21:29 +0000 ROA not before: Tue 22 Oct 2024 03:16:29 +0000 ROA not after: Tue 21 Oct 2025 03:21:29 +0000 asID: 38768 IP address blocks: 202.87.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:86:4a:f1:49:26:72:b4:28:b6:cd:96:e1:d8:3f:9d:be:37:e8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Oct 22 03:16:29 2024 GMT Not After : Oct 21 03:21:29 2025 GMT Subject: CN=C0A4773754B65D0B09AEC47C0B4C1F42C0E15965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:db:1b:8e:3f:34:e6:d2:ef:f1:db:cf:9f: a3:36:a6:59:0c:ea:33:c5:82:8e:21:29:0d:06:e2: 6c:1c:ce:5a:56:52:54:82:77:21:28:56:fd:e5:2a: 1d:17:91:b5:6c:6e:bd:55:b0:83:c5:fe:8e:6d:c3: 1d:cc:21:84:e2:b3:99:cd:b7:ca:7f:c8:ce:2f:0d: aa:b6:21:33:47:e6:c4:2b:77:e8:df:dc:3b:e4:d0: f2:79:c9:4c:c3:47:30:e3:f6:bc:01:19:f9:79:c8: 9a:96:a3:cc:e0:d9:eb:66:f3:42:2a:9a:89:b7:39: 5d:c1:e4:55:2e:50:9c:29:93:86:4f:cc:fb:22:a8: 59:0d:d1:ab:09:c5:26:71:d8:0c:b7:af:05:91:c9: 52:7b:75:d7:ef:2c:b2:7b:9d:ac:36:28:63:28:c1: c4:f5:93:a0:35:c3:cf:73:cd:d4:b2:5c:07:ee:52: db:76:e8:c1:b3:f1:67:9e:b2:6f:f2:3d:e4:76:3b: 61:58:2c:8a:58:5c:89:0c:74:6a:8e:e5:a7:01:b1: db:10:05:66:22:86:ce:3e:07:75:3a:5d:ff:f3:65: d6:fb:6d:3d:29:c2:88:15:b9:4f:83:46:69:6e:61: 17:f3:07:27:93:d5:f9:36:88:07:42:50:43:88:fd: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A4:77:37:54:B6:5D:0B:09:AE:C4:7C:0B:4C:1F:42:C0:E1:59:65 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137392e302f32342d3234203d3e203338373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.179.0/24 Signature Algorithm: sha256WithRSAEncryption 05:15:0b:8d:af:06:25:9d:dc:ce:2b:85:ee:cf:7b:88:ff:7a: 60:16:89:e9:af:7d:94:5b:60:4e:70:70:09:27:74:77:8d:02: 7a:e4:ac:dd:ac:ef:6d:e2:86:fd:95:92:c9:82:42:13:6b:2a: 3e:e1:56:bd:71:57:27:b8:58:8d:b1:0e:39:52:76:92:85:b0: 01:93:a0:59:31:79:4c:25:3e:d4:84:23:df:ec:27:6f:95:27: b4:a9:10:d7:14:8d:e2:66:9b:d4:96:38:37:24:5c:89:3c:b4: 52:2c:4c:6c:02:d9:30:5a:50:46:15:85:90:ba:82:b7:dc:0e: 7d:37:f0:c4:c7:aa:f2:6b:63:09:4e:69:4e:b4:0f:ea:0a:cf: 57:f8:68:91:64:dc:3a:76:77:42:4b:ca:fd:e6:0e:db:0d:cf: b8:39:36:6b:7e:a1:54:53:28:6d:46:10:19:13:30:38:e4:ec: 44:af:1f:a9:06:a2:35:b7:ae:7b:c9:cb:76:75:d9:91:86:0f: b4:0d:da:87:7b:9a:b0:3b:f9:53:7c:e1:f7:a9:42:01:d4:b2: 0a:db:b9:24:d1:60:61:a7:6b:07:af:8d:27:0c:61:67:77:fb: 7a:16:ad:5e:c5:89:14:02:93:9f:62:3e:8b:3d:6a:de:39:35: f3:6c:99:11 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZ4ZK8UkmcrQots2W4dg/nb436KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDEwMjIwMzE2MjlaFw0yNTEwMjEwMzIxMjlaMDMxMTAvBgNV BAMTKEMwQTQ3NzM3NTRCNjVEMEIwOUFFQzQ3QzBCNEMxRjQyQzBFMTU5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpNsbjj805tLv8dvPn6M2plkM 6jPFgo4hKQ0G4mwczlpWUlSCdyEoVv3lKh0XkbVsbr1VsIPF/o5twx3MIYTis5nN t8p/yM4vDaq2ITNH5sQrd+jf3Dvk0PJ5yUzDRzDj9rwBGfl5yJqWo8zg2etm80Iq mom3OV3B5FUuUJwpk4ZPzPsiqFkN0asJxSZx2Ay3rwWRyVJ7ddfvLLJ7naw2KGMo wcT1k6A1w89zzdSyXAfuUtt26MGz8Weesm/yPeR2O2FYLIpYXIkMdGqO5acBsdsQ BWYihs4+B3U6Xf/zZdb7bT0pwogVuU+DRmluYRfzByeT1fk2iAdCUEOI/U8hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwKR3N1S2XQsJrsR8C0wfQsDhWWUwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzAzMjJlMzgzNzJlMzEzNzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpXszANBgkqhkiG 9w0BAQsFAAOCAQEABRULja8GJZ3cziuF7s97iP96YBaJ6a99lFtgTnBwCSd0d40C euSs3azvbeKG/ZWSyYJCE2sqPuFWvXFXJ7hYjbEOOVJ2koWwAZOgWTF5TCU+1IQj 3+wnb5UntKkQ1xSN4mab1JY4NyRciTy0UixMbALZMFpQRhWFkLqCt9wOfTfwxMeq 8mtjCU5pTrQP6grPV/hokWTcOnZ3QkvK/eYO2w3PuDk2a36hVFMobUYQGRMwOOTs RK8fqQaiNbeue8nLdnXZkYYPtA3ah3uasDv5U3zh96lCAdSyCtu5JNFgYadrB6+N JwxhZ3f7ehatXsWJFAKTn2I+iz1q3jk182yZEQ== -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org