$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138332e302f32342d3234203d3e203338373638.roa File: 3230322e38372e3138332e302f32342d3234203d3e203338373638.roa (raw, json) Hash identifier: oN3oOrUb9JXk87BX19km5XOx19iY7I4UDhQuqHR2uLU= Subject key identifier: 86:8F:97:03:A7:3A:B1:E5:F4:FC:20:BA:BA:1C:E7:0B:9B:48:88:D8 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 4990C62B37CF1B417679090005186081ED932200 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138332e302f32342d3234203d3e203338373638.roa Signing time: Thu 20 Jul 2023 03:01:09 +0000 ROA not before: Thu 20 Jul 2023 02:56:09 +0000 ROA not after: Thu 18 Jul 2024 03:01:09 +0000 asID: 38768 IP address blocks: 202.87.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 14:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:90:c6:2b:37:cf:1b:41:76:79:09:00:05:18:60:81:ed:93:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Jul 20 02:56:09 2023 GMT Not After : Jul 18 03:01:09 2024 GMT Subject: CN=868F9703A73AB1E5F4FC20BABA1CE70B9B4888D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:df:f8:a5:18:65:d1:64:69:e8:72:b5:49: 1c:0b:83:d3:b0:7c:f1:9b:1c:64:30:ef:41:e6:eb: d8:5c:fd:1e:20:db:bc:30:98:8f:d0:73:46:3f:a8: da:d3:04:bb:bf:6b:ae:10:1a:b2:d6:c9:f2:2a:5d: 89:75:76:bd:12:f3:ef:67:b8:76:82:69:fc:aa:f8: 05:98:b0:1f:bc:1c:a6:6a:da:1b:93:00:5a:59:31: 4f:34:96:83:49:94:5c:b9:f0:2e:b9:1c:6b:9a:4b: 13:2f:0f:e9:90:66:37:63:a3:fc:3b:c0:e9:0f:07: fa:27:4c:5b:76:87:4c:a1:04:fb:5a:00:5a:fd:f0: 72:b6:3a:ea:ef:ac:96:77:fc:4e:00:1f:3d:9f:de: 97:5a:f0:61:68:49:7e:19:3c:ec:09:2c:3b:a3:35: bd:b8:fe:41:ea:bf:32:83:8a:ab:98:8b:64:17:41: d4:9b:29:7c:a3:f3:c9:de:63:00:2e:22:6c:1d:b6: 73:41:cf:bf:22:d3:2d:d4:0c:d5:70:b5:00:3f:62: d4:a5:d0:59:ab:13:1e:44:8a:a1:26:8b:04:e8:3a: 16:aa:44:25:b7:43:97:4b:3e:fe:16:bd:ed:57:8a: 5e:8c:89:db:79:c6:63:a9:59:cf:9f:b3:33:67:ab: e5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8F:97:03:A7:3A:B1:E5:F4:FC:20:BA:BA:1C:E7:0B:9B:48:88:D8 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138332e302f32342d3234203d3e203338373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.183.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:83:39:16:bc:f8:68:78:3c:21:3e:f5:6a:3a:66:0c:b6:88: 6e:ca:44:d1:6f:2b:a4:59:80:7a:09:a9:5f:74:ea:9b:aa:fa: fd:96:0e:f3:38:70:7c:16:48:04:75:2a:ce:96:70:17:19:d2: d4:8b:d9:2f:b4:dc:97:01:4f:fd:72:55:2f:aa:ed:ca:d1:49: 75:fb:b7:dc:f5:c0:ff:c9:46:3a:f0:74:11:7b:ac:e7:d3:c5: 69:d7:33:79:d0:90:0b:60:7f:71:c9:8d:35:b8:a0:42:c5:2e: 1b:d0:3b:dc:d3:c8:17:5e:74:c2:f6:da:50:74:52:61:ea:d4: 4c:5d:00:12:44:36:13:9a:ac:af:02:6a:cd:c0:a9:34:0f:c5: 27:c0:6c:da:46:f1:33:c8:44:ad:d5:5b:b8:2f:1d:50:a9:75: de:b1:56:66:cb:79:1b:fd:86:1d:9a:88:ca:67:44:09:14:9f: 73:5e:5a:a3:18:5d:8e:4b:7b:7f:cb:51:1f:8a:00:96:7f:90: c5:b5:27:26:38:84:e3:cf:b4:03:55:37:1c:cc:88:68:a9:a1: 28:e4:d4:1f:9c:f1:df:eb:ac:25:58:8f:b6:b1:c4:9a:f6:c3: 50:66:ba:1b:f3:c7:29:62:47:b0:21:07:94:eb:b4:04:89:9b: d1:b0:80:e9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSZDGKzfPG0F2eQkABRhgge2TIgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yMzA3MjAwMjU2MDlaFw0yNDA3MTgwMzAxMDlaMDMxMTAvBgNV BAMTKDg2OEY5NzAzQTczQUIxRTVGNEZDMjBCQUJBMUNFNzBCOUI0ODg4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8d/4pRhl0WRp6HK1SRwLg9Ow fPGbHGQw70Hm69hc/R4g27wwmI/Qc0Y/qNrTBLu/a64QGrLWyfIqXYl1dr0S8+9n uHaCafyq+AWYsB+8HKZq2huTAFpZMU80loNJlFy58C65HGuaSxMvD+mQZjdjo/w7 wOkPB/onTFt2h0yhBPtaAFr98HK2OurvrJZ3/E4AHz2f3pda8GFoSX4ZPOwJLDuj Nb24/kHqvzKDiquYi2QXQdSbKXyj88neYwAuImwdtnNBz78i0y3UDNVwtQA/YtSl 0FmrEx5EiqEmiwToOhaqRCW3Q5dLPv4Wve1Xil6Midt5xmOpWc+fszNnq+WBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUho+XA6c6seX0/CC6uhznC5tIiNgwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzAzMjJlMzgzNzJlMzEzODMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpXtzANBgkqhkiG 9w0BAQsFAAOCAQEATYM5Frz4aHg8IT71ajpmDLaIbspE0W8rpFmAegmpX3Tqm6r6 /ZYO8zhwfBZIBHUqzpZwFxnS1IvZL7TclwFP/XJVL6rtytFJdfu33PXA/8lGOvB0 EXus59PFadczedCQC2B/ccmNNbigQsUuG9A73NPIF150wvbaUHRSYerUTF0AEkQ2 E5qsrwJqzcCpNA/FJ8Bs2kbxM8hErdVbuC8dUKl13rFWZst5G/2GHZqIymdECRSf c15aoxhdjkt7f8tRH4oAln+QxbUnJjiE48+0A1U3HMyIaKmhKOTUH5zx3+usJViP trHEmvbDUGa6G/PHKWJHsCEHlOu0BImb0bCA6Q== -----END CERTIFICATE-----Generated at Thu May 2 14:31:46 2024 by rpki-client on console-fra.rpki-client.org