$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134382e302f32342d3234203d3e203338343936.roa File: 3232332e32372e3134382e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: zFku9ncyJtOsilAGnH62xvIdJ1R1Os4NUqVV/wg+2pE= Subject key identifier: 14:64:26:A6:64:3F:56:A4:5B:4E:1A:8E:A5:55:42:83:5E:73:F6:08 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 336E52E18D04868EEE9D734C27BEAF266293A5D4 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134382e302f32342d3234203d3e203338343936.roa Signing time: Fri 24 May 2024 05:02:18 +0000 ROA not before: Fri 24 May 2024 04:57:18 +0000 ROA not after: Fri 23 May 2025 05:02:18 +0000 asID: 38496 IP address blocks: 223.27.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 08:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6e:52:e1:8d:04:86:8e:ee:9d:73:4c:27:be:af:26:62:93:a5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: May 24 04:57:18 2024 GMT Not After : May 23 05:02:18 2025 GMT Subject: CN=146426A6643F56A45B4E1A8EA55542835E73F608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:7a:0f:56:1a:ff:72:1f:ad:b9:ce:b4:aa: 04:e6:b9:db:86:02:32:14:e6:18:74:52:d4:f2:4a: c9:fc:63:50:f7:b4:c9:57:53:8a:b1:bc:11:2b:f7: 37:e5:6b:56:d8:9a:ac:a7:20:9b:ad:06:f8:61:be: 2f:73:22:08:a0:a9:8e:29:c4:37:21:f0:b0:4f:59: 04:eb:8c:82:b9:1b:06:61:cd:ce:ff:06:03:a5:61: 0b:85:14:2d:25:27:b2:1b:03:e7:18:6d:37:ea:ed: 68:71:08:3a:37:6c:52:34:a7:dc:7e:ec:e8:50:a1: 8b:8e:4b:d8:44:b3:e6:ca:9d:43:df:f5:2b:83:75: de:be:9c:44:53:e8:ee:c3:31:55:56:eb:ad:91:a4: f6:60:f1:8e:e0:64:0d:c1:c8:75:59:fe:1e:61:da: 5b:65:b2:50:d1:5d:da:04:fe:59:e3:d9:53:52:9d: 99:47:69:3c:d3:87:a0:49:f6:10:6c:69:5e:26:07: 56:44:f2:a5:c3:c9:3b:1f:6d:bd:5b:f2:63:f0:81: ed:b5:be:52:e4:6a:fc:d9:41:9e:ca:d0:de:28:2d: e9:34:ef:1e:bc:ce:aa:07:b2:97:45:5a:4c:9d:f0: 86:25:ac:7f:f5:0c:b3:2b:d9:b2:53:95:87:65:43: 66:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:64:26:A6:64:3F:56:A4:5B:4E:1A:8E:A5:55:42:83:5E:73:F6:08 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134382e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.27.148.0/24 Signature Algorithm: sha256WithRSAEncryption 07:e9:f1:8c:50:4e:42:21:25:7d:59:f8:74:92:b3:b0:fb:8c: 4d:1a:ad:1a:5e:b3:1e:11:ee:e4:83:a0:ed:4f:2c:84:81:5f: 01:35:29:d0:f9:90:7c:3a:d5:27:0d:0f:99:76:0f:60:d1:00: 45:06:28:a7:5f:7d:da:a6:3b:bc:e0:c6:c4:85:26:9a:5e:78: ca:6d:36:b0:77:33:5e:53:dc:71:5f:d0:97:ca:b0:cd:9a:a0: 6d:04:5b:2a:db:fb:fd:68:52:b3:81:26:71:38:09:ee:2b:12: 6c:ba:c1:51:4c:a5:3b:ef:78:c6:c9:f8:77:05:bc:5a:47:50: 5a:8b:67:13:dc:ac:de:49:2e:af:b5:30:68:de:5f:e5:21:8c: 84:47:15:34:f4:ed:0f:6c:ae:e1:b1:30:07:af:8a:db:2b:f3: 76:5a:32:71:c7:14:fd:32:a5:f9:40:53:9e:12:cf:97:fd:48: b9:c4:8c:2c:7c:79:7e:e6:9d:c2:42:3f:c4:2c:09:8f:56:93: 75:14:30:fd:87:b2:14:0a:2f:01:68:4e:de:42:45:bf:94:ba: d4:78:a2:31:71:25:d1:51:b8:86:bf:57:f9:93:a6:0a:02:69: 19:b0:8b:b4:71:96:80:02:82:3f:6a:5c:0e:fa:63:82:14:ea: 6e:b4:d7:b0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUM25S4Y0Eho7unXNMJ76vJmKTpdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDA1MjQwNDU3MThaFw0yNTA1MjMwNTAyMThaMDMxMTAvBgNV BAMTKDE0NjQyNkE2NjQzRjU2QTQ1QjRFMUE4RUE1NTU0MjgzNUU3M0Y2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzHoPVhr/ch+tuc60qgTmuduG AjIU5hh0UtTySsn8Y1D3tMlXU4qxvBEr9zfla1bYmqynIJutBvhhvi9zIgigqY4p xDch8LBPWQTrjIK5GwZhzc7/BgOlYQuFFC0lJ7IbA+cYbTfq7WhxCDo3bFI0p9x+ 7OhQoYuOS9hEs+bKnUPf9SuDdd6+nERT6O7DMVVW662RpPZg8Y7gZA3ByHVZ/h5h 2ltlslDRXdoE/lnj2VNSnZlHaTzTh6BJ9hBsaV4mB1ZE8qXDyTsfbb1b8mPwge21 vlLkavzZQZ7K0N4oLek07x68zqoHspdFWkyd8IYlrH/1DLMr2bJTlYdlQ2bjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFGQmpmQ/VqRbThqOpVVCg15z9ggwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzIzMzJlMzIzNzJlMzEzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8blDANBgkqhkiG 9w0BAQsFAAOCAQEAB+nxjFBOQiElfVn4dJKzsPuMTRqtGl6zHhHu5IOg7U8shIFf ATUp0PmQfDrVJw0PmXYPYNEARQYop1992qY7vODGxIUmml54ym02sHczXlPccV/Q l8qwzZqgbQRbKtv7/WhSs4EmcTgJ7isSbLrBUUylO+94xsn4dwW8WkdQWotnE9ys 3kkur7UwaN5f5SGMhEcVNPTtD2yu4bEwB6+K2yvzdloycccU/TKl+UBTnhLPl/1I ucSMLHx5fuadwkI/xCwJj1aTdRQw/YeyFAovAWhO3kJFv5S61HiiMXEl0VG4hr9X +ZOmCgJpGbCLtHGWgAKCP2pcDvpjghTqbrTXsA== -----END CERTIFICATE-----Generated at Sun Apr 6 10:58:01 2025 by rpki-client