$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230332e3139312e34302e302f32312d3234203d3e203338343936.roa File: 3230332e3139312e34302e302f32312d3234203d3e203338343936.roa (raw, json) Hash identifier: +cKlmpJux0qudDNOqUxXR4pQUDX02jmLGLJ9NngkJ0k= Subject key identifier: 71:73:AD:D4:92:49:AA:40:E9:5D:23:25:82:0F:00:4A:20:BC:7B:ED Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 23B09DDD1130043EE9AAF2F640FFC47AA25B6025 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230332e3139312e34302e302f32312d3234203d3e203338343936.roa Signing time: Mon 31 Jul 2023 00:09:34 +0000 ROA not before: Mon 31 Jul 2023 00:04:34 +0000 ROA not after: Mon 29 Jul 2024 00:09:34 +0000 asID: 38496 IP address blocks: 203.191.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b0:9d:dd:11:30:04:3e:e9:aa:f2:f6:40:ff:c4:7a:a2:5b:60:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Jul 31 00:04:34 2023 GMT Not After : Jul 29 00:09:34 2024 GMT Subject: CN=7173ADD49249AA40E95D2325820F004A20BC7BED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:cb:3e:b5:6a:59:57:58:be:71:fa:3c:1d: 8c:2d:8e:10:94:cc:9c:bd:6f:91:03:53:b0:d8:d9: ae:0e:61:48:93:8c:83:7b:02:ac:bb:f6:c1:e0:9e: 53:db:ad:8f:26:59:98:0b:30:cb:8b:41:18:28:76: 50:0c:4c:51:7f:bd:fa:43:a7:e5:aa:4d:d2:48:64: 5e:da:15:60:1a:37:b8:99:15:6b:3c:06:e8:45:4a: 13:eb:e7:60:8a:2a:ac:73:45:35:15:6f:53:b3:de: 03:e7:7d:f8:d2:46:c3:ca:15:4c:96:ab:7b:e0:a9: 6e:a3:9c:74:35:a4:65:26:db:e1:8e:91:6a:a0:71: ba:75:de:c4:7c:a2:ad:c5:09:94:6d:be:f8:80:2c: 9b:1d:e6:32:6e:e6:a6:29:1c:4e:04:72:f1:77:5e: 6a:87:31:30:dc:e9:9a:b4:2d:49:2f:98:16:25:15: ab:3f:1d:df:eb:04:fa:13:c2:ab:62:cf:1d:f3:b5: a7:0b:72:46:57:ee:9d:a7:c6:99:b5:19:b2:a9:c2: 55:89:15:22:9d:e1:91:f6:4c:c5:2a:e0:29:4a:9e: 69:4f:d7:74:04:d1:f6:81:1b:3f:8b:38:d5:94:45: 49:20:f5:c8:0f:de:b3:56:4f:a9:75:67:4f:66:a3: 86:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:73:AD:D4:92:49:AA:40:E9:5D:23:25:82:0F:00:4A:20:BC:7B:ED X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230332e3139312e34302e302f32312d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.191.40.0/21 Signature Algorithm: sha256WithRSAEncryption 21:09:d2:fe:eb:c1:10:51:ae:82:7a:6c:59:e9:07:6b:6d:21: 0b:0a:e6:3c:5a:6e:9f:41:18:7e:6d:3f:84:bb:9b:53:b2:57: 50:28:53:b0:9c:ea:b3:ae:49:f9:89:25:b5:ca:0d:16:72:3f: cc:7e:36:4f:11:31:c2:40:4a:bb:46:36:e0:10:c9:ad:33:b5: 60:bc:86:0b:f3:f8:8b:26:5f:a5:b3:6f:47:da:d6:6c:54:be: d5:76:84:b7:b1:d4:4c:57:c8:27:dc:77:72:cd:84:f8:ca:aa: 44:8b:71:7b:8f:d5:b4:0e:b4:41:04:e4:5a:d3:70:af:b0:8b: 94:30:d0:a7:4d:9a:25:ec:d4:cc:a5:02:23:4c:49:d7:e3:62: 7d:a8:41:9e:ba:0f:63:ea:c7:6a:ac:50:40:bd:42:ef:44:81: f1:c2:a9:24:ab:98:47:5b:55:94:54:df:3e:4a:5c:b2:3e:e8: 7f:d3:02:1f:28:c5:11:ee:e8:11:24:10:00:fc:48:06:ec:f2: a1:10:86:8c:7b:47:92:2e:b5:2a:9d:98:1e:b4:50:bc:93:66: d4:76:0e:c2:54:6c:33:93:d3:5b:a7:15:bb:7a:53:9f:6f:f2: fa:6b:ca:1a:21:39:73:de:78:bb:47:75:b2:31:8b:cf:d8:3c: a2:de:1c:dd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUI7Cd3REwBD7pqvL2QP/EeqJbYCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yMzA3MzEwMDA0MzRaFw0yNDA3MjkwMDA5MzRaMDMxMTAvBgNV BAMTKDcxNzNBREQ0OTI0OUFBNDBFOTVEMjMyNTgyMEYwMDRBMjBCQzdCRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYss+tWpZV1i+cfo8HYwtjhCU zJy9b5EDU7DY2a4OYUiTjIN7Aqy79sHgnlPbrY8mWZgLMMuLQRgodlAMTFF/vfpD p+WqTdJIZF7aFWAaN7iZFWs8BuhFShPr52CKKqxzRTUVb1Oz3gPnffjSRsPKFUyW q3vgqW6jnHQ1pGUm2+GOkWqgcbp13sR8oq3FCZRtvviALJsd5jJu5qYpHE4EcvF3 XmqHMTDc6Zq0LUkvmBYlFas/Hd/rBPoTwqtizx3ztacLckZX7p2nxpm1GbKpwlWJ FSKd4ZH2TMUq4ClKnmlP13QE0faBGz+LONWURUkg9cgP3rNWT6l1Z09mo4a1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcXOt1JJJqkDpXSMlgg8ASiC8e+0wHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzAzMzJlMzEzOTMxMmUzNDMwMmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8u/KDANBgkqhkiG 9w0BAQsFAAOCAQEAIQnS/uvBEFGugnpsWekHa20hCwrmPFpun0EYfm0/hLubU7JX UChTsJzqs65J+YkltcoNFnI/zH42TxExwkBKu0Y24BDJrTO1YLyGC/P4iyZfpbNv R9rWbFS+1XaEt7HUTFfIJ9x3cs2E+MqqRItxe4/VtA60QQTkWtNwr7CLlDDQp02a JezUzKUCI0xJ1+NifahBnroPY+rHaqxQQL1C70SB8cKpJKuYR1tVlFTfPkpcsj7o f9MCHyjFEe7oESQQAPxIBuzyoRCGjHtHki61Kp2YHrRQvJNm1HYOwlRsM5PTW6cV u3pTn2/y+mvKGiE5c954u0d1sjGLz9g8ot4c3Q== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:29 2024 by rpki-client on console-fra.rpki-client.org