$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138362e302f32342d3234203d3e20313430343231.roa File: 3230322e38372e3138362e302f32342d3234203d3e20313430343231.roa (raw, json) Hash identifier: 6KQO3YFhPC45TAQkEMWTPOqwPgak8dIouZOqTpPj0Kk= Subject key identifier: 62:54:DF:5C:2F:74:2C:3C:5C:2E:82:E4:DA:E1:E6:D5:F4:F0:39:4E Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 28D48C7D170DF1606AF072450C437C9A8FD1BD3B Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138362e302f32342d3234203d3e20313430343231.roa Signing time: Tue 06 Aug 2024 09:57:18 +0000 ROA not before: Tue 06 Aug 2024 09:52:18 +0000 ROA not after: Tue 05 Aug 2025 09:57:18 +0000 asID: 140421 IP address blocks: 202.87.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d4:8c:7d:17:0d:f1:60:6a:f0:72:45:0c:43:7c:9a:8f:d1:bd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Aug 6 09:52:18 2024 GMT Not After : Aug 5 09:57:18 2025 GMT Subject: CN=6254DF5C2F742C3C5C2E82E4DAE1E6D5F4F0394E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:e8:c3:33:b9:4e:67:ad:b6:b1:49:52:dd: 3b:0c:cd:42:8b:ae:2b:f5:2e:bb:7d:51:07:dd:47: a8:4c:66:90:4b:ac:ca:99:e4:4c:31:93:cc:9e:52: 89:70:28:1d:8e:47:e6:25:4d:a4:5a:62:e9:03:8d: 39:75:70:2f:5a:2b:cc:bd:7a:00:44:63:a5:cb:b7: ab:be:e2:a2:27:e4:62:fe:8a:e3:62:b2:4f:b2:78: 85:0b:4b:8c:cd:55:2b:a8:79:ce:4a:58:c0:52:7d: e2:47:ce:17:d5:95:6f:11:ea:76:ed:63:09:36:b0: ed:50:7d:cc:33:6b:12:1f:30:bd:3a:d9:f0:10:70: 0c:07:6d:63:46:88:1f:7f:83:30:e8:a3:6a:a9:15: 11:e0:f6:2e:f2:30:8d:32:e5:70:f1:43:69:21:d8: 03:da:94:82:72:2c:71:2b:93:22:1b:25:91:b8:82: c5:3a:12:40:34:0b:d0:27:ed:66:1e:70:8a:94:9e: d7:a4:e1:e3:31:8d:aa:ec:95:46:c1:28:dd:d8:21: cc:5f:24:6a:0a:15:e3:02:b0:49:c3:23:5c:8e:b4: dc:49:2e:8d:cb:50:6d:ab:97:f0:a1:41:3a:bd:b4: 1f:53:fd:6a:dd:69:e8:6b:1e:1e:4b:37:e6:0c:b0: 62:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:54:DF:5C:2F:74:2C:3C:5C:2E:82:E4:DA:E1:E6:D5:F4:F0:39:4E X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138362e302f32342d3234203d3e20313430343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.186.0/24 Signature Algorithm: sha256WithRSAEncryption 18:77:0b:4a:3c:f6:bf:66:93:1d:c7:a1:81:14:66:3d:83:12: 31:6f:4c:4e:b4:4b:21:5a:13:b4:d2:5a:55:4c:4c:2b:40:b8: 14:dd:6c:3c:30:e8:af:af:bb:8e:aa:30:49:c4:39:7d:a5:0e: 28:f5:65:42:4d:1d:a0:4c:46:d5:26:6f:a3:55:07:e5:f4:a8: 7d:55:15:33:f7:22:a3:3c:fd:4e:cc:85:e9:11:aa:bf:43:97: d0:b5:16:34:38:ca:1d:48:3e:c8:68:96:ad:b7:74:7c:98:5f: cc:5d:2e:e6:df:24:54:b3:9f:ac:6e:48:79:8e:2e:b8:06:4d: 09:14:35:da:1c:dc:19:6d:b0:ef:16:a2:48:43:93:67:c2:66: fc:94:46:03:5f:66:5f:d9:48:4e:c2:b1:ee:26:3d:cf:f7:a7: 1a:1a:70:0f:8f:1d:0b:55:0a:34:c1:53:da:33:25:2d:20:97: 6a:1e:ef:2d:c4:b1:35:18:c0:d3:a5:da:f8:32:b7:d1:fc:d1: 93:5b:4d:a4:38:59:4a:23:8b:65:9f:0d:93:e2:48:bd:02:57: e1:14:02:d6:1f:e9:15:eb:30:45:46:e3:75:c8:e9:95:45:8a: 9e:39:d5:fa:93:22:c2:9a:1c:e0:0f:87:f9:2a:3f:d6:1d:d4: 71:83:75:30 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKNSMfRcN8WBq8HJFDEN8mo/RvTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDA4MDYwOTUyMThaFw0yNTA4MDUwOTU3MThaMDMxMTAvBgNV BAMTKDYyNTRERjVDMkY3NDJDM0M1QzJFODJFNERBRTFFNkQ1RjRGMDM5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwL+jDM7lOZ622sUlS3TsMzUKL riv1Lrt9UQfdR6hMZpBLrMqZ5Ewxk8yeUolwKB2OR+YlTaRaYukDjTl1cC9aK8y9 egBEY6XLt6u+4qIn5GL+iuNisk+yeIULS4zNVSuoec5KWMBSfeJHzhfVlW8R6nbt Ywk2sO1QfcwzaxIfML062fAQcAwHbWNGiB9/gzDoo2qpFRHg9i7yMI0y5XDxQ2kh 2APalIJyLHErkyIbJZG4gsU6EkA0C9An7WYecIqUntek4eMxjarslUbBKN3YIcxf JGoKFeMCsEnDI1yOtNxJLo3LUG2rl/ChQTq9tB9T/WrdaehrHh5LN+YMsGJRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYlTfXC90LDxcLoLk2uHm1fTwOU4wHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzAzMjJlMzgzNzJlMzEzODM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyle6MA0GCSqG SIb3DQEBCwUAA4IBAQAYdwtKPPa/ZpMdx6GBFGY9gxIxb0xOtEshWhO00lpVTEwr QLgU3Ww8MOivr7uOqjBJxDl9pQ4o9WVCTR2gTEbVJm+jVQfl9Kh9VRUz9yKjPP1O zIXpEaq/Q5fQtRY0OModSD7IaJatt3R8mF/MXS7m3yRUs5+sbkh5ji64Bk0JFDXa HNwZbbDvFqJIQ5Nnwmb8lEYDX2Zf2UhOwrHuJj3P96caGnAPjx0LVQo0wVPaMyUt IJdqHu8txLE1GMDTpdr4MrfR/NGTW02kOFlKI4tlnw2T4ki9AlfhFALWH+kV6zBF RuN1yOmVRYqeOdX6kyLCmhzgD4f5Kj/WHdRxg3Uw -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org