$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138352e302f32342d3234203d3e203338343936.roa File: 3230322e38372e3138352e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: MZrcj9LKNIjal8co9c4jBJvJvs/OJ+0HXlNGWmfjEuk= Subject key identifier: 68:89:3F:D0:28:4B:02:02:53:E8:CC:45:D1:5C:F4:69:40:57:BD:CA Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 5A29D75441FEBA1857A4535DC30A05DFE9803957 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138352e302f32342d3234203d3e203338343936.roa Signing time: Sat 06 Apr 2024 04:02:03 +0000 ROA not before: Sat 06 Apr 2024 03:57:03 +0000 ROA not after: Sat 05 Apr 2025 04:02:03 +0000 asID: 38496 IP address blocks: 202.87.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:29:d7:54:41:fe:ba:18:57:a4:53:5d:c3:0a:05:df:e9:80:39:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Apr 6 03:57:03 2024 GMT Not After : Apr 5 04:02:03 2025 GMT Subject: CN=68893FD0284B020253E8CC45D15CF4694057BDCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cb:3c:7e:a5:d7:6f:4e:ef:68:84:aa:6a:38: 7a:60:0e:99:e8:ba:a1:f4:bd:23:f9:cd:37:23:48: 37:a5:db:36:29:24:10:77:15:23:b3:71:37:a2:3d: d1:2d:fb:bc:5b:b6:e8:d8:c9:be:22:34:41:6b:2b: b4:40:48:17:bc:ab:52:cd:77:e4:c5:78:0c:f2:e4: bd:e0:f2:c1:88:f5:d0:65:c8:14:16:1a:0b:e0:ee: 4c:75:bd:ae:04:ca:ac:ab:ad:7f:0b:15:f8:f6:76: 3b:5a:ee:ea:8c:f6:5d:bf:3c:f2:25:21:dd:ce:c5: d3:74:40:aa:2d:60:86:3d:46:ae:3f:e5:da:b0:41: b3:d2:07:76:45:a1:45:c9:9a:92:bf:a5:4f:d4:0d: 74:7f:e7:96:24:29:27:71:f5:f3:38:68:cc:c3:b6: fe:9f:56:54:27:29:08:bd:72:dd:15:66:6f:e5:65: d8:17:0b:43:ff:b0:25:c8:de:ae:cb:24:50:b2:50: 61:dd:d3:65:96:d4:bf:6b:97:a4:46:8e:0c:83:b5: cb:22:d2:14:9c:76:dd:da:3e:fd:41:6c:ee:10:18: b4:55:70:a9:b2:87:1d:c0:83:b9:8a:46:1f:95:18: 17:03:7a:57:a3:5e:57:13:12:4e:14:50:14:13:9f: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:89:3F:D0:28:4B:02:02:53:E8:CC:45:D1:5C:F4:69:40:57:BD:CA X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138352e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.185.0/24 Signature Algorithm: sha256WithRSAEncryption 27:51:c7:52:90:c7:4b:60:a1:45:4b:8f:0c:38:99:12:e6:d7: 1f:70:ed:26:c0:f9:b5:5a:26:f0:14:a9:92:a8:16:3d:80:9d: 98:44:19:fe:19:a9:d4:f5:a1:4c:3d:6b:85:15:ee:d2:e3:3e: 4a:fb:d5:62:0b:08:35:58:ac:b8:0e:3e:0a:80:75:55:a8:95: d5:ce:a6:40:3d:fa:9a:db:b9:0d:02:b7:d2:57:35:bd:c6:b2: 0d:96:d3:b9:b1:35:91:89:a8:a1:08:51:b0:89:8d:5b:a7:15: de:0d:a6:ab:d0:0e:94:a8:78:5a:c0:e8:6c:8f:ba:80:ff:31: 7f:84:b0:7a:ef:5b:44:85:6b:bf:05:dd:9c:8b:88:96:46:ed: e2:73:f5:33:ec:cc:f9:70:66:1d:c2:ac:3a:70:7a:91:67:45: 9a:81:29:4b:cf:a6:6a:da:f0:48:98:09:70:40:44:78:1b:1e: 19:53:50:48:2a:ce:49:af:09:47:16:12:c7:41:62:7c:c1:3c: e2:a3:5e:24:89:76:c5:b8:60:5a:d0:b9:91:bb:55:d9:67:04: 6e:f6:1e:ad:94:99:c6:d7:0b:35:dd:01:3b:54:12:fd:51:ec: 41:3c:6d:15:7f:ce:c5:f1:47:d2:b9:bc:21:78:7b:e9:1b:4a: e7:09:de:ca -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWinXVEH+uhhXpFNdwwoF3+mAOVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDA0MDYwMzU3MDNaFw0yNTA0MDUwNDAyMDNaMDMxMTAvBgNV BAMTKDY4ODkzRkQwMjg0QjAyMDI1M0U4Q0M0NUQxNUNGNDY5NDA1N0JEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzyzx+pddvTu9ohKpqOHpgDpno uqH0vSP5zTcjSDel2zYpJBB3FSOzcTeiPdEt+7xbtujYyb4iNEFrK7RASBe8q1LN d+TFeAzy5L3g8sGI9dBlyBQWGgvg7kx1va4EyqyrrX8LFfj2djta7uqM9l2/PPIl Id3OxdN0QKotYIY9Rq4/5dqwQbPSB3ZFoUXJmpK/pU/UDXR/55YkKSdx9fM4aMzD tv6fVlQnKQi9ct0VZm/lZdgXC0P/sCXI3q7LJFCyUGHd02WW1L9rl6RGjgyDtcsi 0hScdt3aPv1BbO4QGLRVcKmyhx3Ag7mKRh+VGBcDelejXlcTEk4UUBQTnzlLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUaIk/0ChLAgJT6MxF0Vz0aUBXvcowHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzAzMjJlMzgzNzJlMzEzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpXuTANBgkqhkiG 9w0BAQsFAAOCAQEAJ1HHUpDHS2ChRUuPDDiZEubXH3DtJsD5tVom8BSpkqgWPYCd mEQZ/hmp1PWhTD1rhRXu0uM+SvvVYgsINVisuA4+CoB1VaiV1c6mQD36mtu5DQK3 0lc1vcayDZbTubE1kYmooQhRsImNW6cV3g2mq9AOlKh4WsDobI+6gP8xf4Sweu9b RIVrvwXdnIuIlkbt4nP1M+zM+XBmHcKsOnB6kWdFmoEpS8+matrwSJgJcEBEeBse GVNQSCrOSa8JRxYSx0FifME84qNeJIl2xbhgWtC5kbtV2WcEbvYerZSZxtcLNd0B O1QS/VHsQTxtFX/OxfFH0rm8IXh76RtK5wneyg== -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org