$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135302e302f32332d3234203d3e203338343936.roa File: 3232332e32372e3135302e302f32332d3234203d3e203338343936.roa (raw, json) Hash identifier: Hr9TcuoW+ubuSBUZSwt8kPCU/ExeZhsVX/j/qSAPUmA= Subject key identifier: E4:F1:52:F3:0A:54:3A:66:43:DA:92:5B:56:DB:56:5F:02:9F:B0:B3 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 5130DAF37EC9323B160373709BACB49B3D33DCE9 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135302e302f32332d3234203d3e203338343936.roa Signing time: Thu 30 May 2024 02:00:47 +0000 ROA not before: Thu 30 May 2024 01:55:47 +0000 ROA not after: Thu 29 May 2025 02:00:47 +0000 asID: 38496 IP address blocks: 223.27.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:30:da:f3:7e:c9:32:3b:16:03:73:70:9b:ac:b4:9b:3d:33:dc:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: May 30 01:55:47 2024 GMT Not After : May 29 02:00:47 2025 GMT Subject: CN=E4F152F30A543A6643DA925B56DB565F029FB0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:54:a6:c6:4e:f4:d9:21:cb:32:c6:bf:df: bb:b0:e2:8b:38:77:fe:0c:62:01:82:a0:75:0d:62: 95:9b:d9:65:70:69:b8:6a:ac:f3:25:15:11:57:f5: 1b:b9:be:36:8c:8c:f2:d8:b4:c4:f6:cf:22:14:2a: 65:71:cc:cb:30:3a:8f:66:48:d4:d7:e8:d8:79:24: 65:05:f8:b9:e3:f3:46:8d:b5:f5:7f:51:c5:da:fa: e8:cd:49:18:a1:9b:b8:2b:a1:53:77:e4:be:20:f4: 29:74:fd:4a:95:de:03:8b:4d:1d:f0:9e:a8:e6:b7: 82:9d:7b:fe:08:f7:02:b1:f2:fe:e5:51:e6:75:17: 2e:64:dd:9a:85:1a:db:21:a5:f0:5c:36:6f:de:51: 17:ee:4f:78:7b:7c:87:6f:9e:91:56:31:f4:ce:a7: d3:0d:56:5a:5f:ef:b7:ea:18:bd:c1:3b:1f:42:08: 33:db:c0:25:42:9d:35:85:85:05:a8:ee:85:fb:f9: ce:be:40:73:1b:13:c0:ef:3d:43:5f:0e:ca:62:9c: 63:6a:d9:ad:21:58:50:93:28:28:24:5f:84:98:18: b7:8c:fb:5b:0b:99:77:2f:1c:5f:ce:ed:e8:c7:19: c8:c9:5e:47:70:6a:74:e6:ee:51:af:06:74:9f:25: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F1:52:F3:0A:54:3A:66:43:DA:92:5B:56:DB:56:5F:02:9F:B0:B3 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135302e302f32332d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.27.150.0/23 Signature Algorithm: sha256WithRSAEncryption a0:c7:32:36:9e:a0:cb:13:e8:b3:03:76:1f:86:1c:23:da:e3: 56:9b:0d:a7:db:c7:c5:6d:9a:de:94:9f:71:1f:af:ed:3e:c8: 1c:2f:c8:c0:86:8a:23:62:9f:b5:76:20:51:ef:b7:e5:26:2c: 8e:65:ed:17:22:ee:f5:8d:a7:4c:de:c4:1a:3d:1a:c2:77:fa: 24:5b:22:90:d1:4e:25:c9:a4:9c:ac:28:b2:30:23:05:57:c9: c5:c1:ea:2c:c5:22:6b:b3:22:d1:cf:f0:c6:e8:a3:32:3f:2d: db:3b:6b:36:53:29:6d:96:6d:ae:a3:eb:53:09:61:91:4a:46: 16:5e:cb:92:0d:1a:66:7f:c2:96:28:72:42:4d:b4:6d:79:83: bf:e4:a6:d7:4a:65:1f:79:aa:93:ec:75:38:8e:59:9f:85:f0: 85:97:42:14:86:97:cc:c6:b6:cc:cc:2f:25:b6:00:f7:37:13: 96:d4:69:37:8d:6a:cc:f5:a9:3e:e0:b8:c5:44:02:f0:46:05: fb:54:24:ab:9d:c1:ae:4d:ce:6d:3e:16:11:95:b3:ff:b6:66: 80:67:90:ec:d9:74:28:55:02:a7:b0:1a:fc:42:f7:e6:cd:3e: a8:b7:e8:4b:ab:cd:54:58:7d:ed:13:f3:aa:e2:70:cf:d7:e0: e6:2d:68:8d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUTDa837JMjsWA3Nwm6y0mz0z3OkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDA1MzAwMTU1NDdaFw0yNTA1MjkwMjAwNDdaMDMxMTAvBgNV BAMTKEU0RjE1MkYzMEE1NDNBNjY0M0RBOTI1QjU2REI1NjVGMDI5RkIwQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiblSmxk702SHLMsa/37uw4os4 d/4MYgGCoHUNYpWb2WVwabhqrPMlFRFX9Ru5vjaMjPLYtMT2zyIUKmVxzMswOo9m SNTX6Nh5JGUF+Lnj80aNtfV/UcXa+ujNSRihm7groVN35L4g9Cl0/UqV3gOLTR3w nqjmt4Kde/4I9wKx8v7lUeZ1Fy5k3ZqFGtshpfBcNm/eURfuT3h7fIdvnpFWMfTO p9MNVlpf77fqGL3BOx9CCDPbwCVCnTWFhQWo7oX7+c6+QHMbE8DvPUNfDspinGNq 2a0hWFCTKCgkX4SYGLeM+1sLmXcvHF/O7ejHGcjJXkdwanTm7lGvBnSfJZqzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5PFS8wpUOmZD2pJbVttWXwKfsLMwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzIzMzJlMzIzNzJlMzEzNTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAd8bljANBgkqhkiG 9w0BAQsFAAOCAQEAoMcyNp6gyxPoswN2H4YcI9rjVpsNp9vHxW2a3pSfcR+v7T7I HC/IwIaKI2KftXYgUe+35SYsjmXtFyLu9Y2nTN7EGj0awnf6JFsikNFOJcmknKwo sjAjBVfJxcHqLMUia7Mi0c/wxuijMj8t2ztrNlMpbZZtrqPrUwlhkUpGFl7Lkg0a Zn/ClihyQk20bXmDv+Sm10plH3mqk+x1OI5Zn4XwhZdCFIaXzMa2zMwvJbYA9zcT ltRpN41qzPWpPuC4xUQC8EYF+1Qkq53Brk3ObT4WEZWz/7ZmgGeQ7Nl0KFUCp7Aa /EL35s0+qLfoS6vNVFh97RPzquJwz9fg5i1ojQ== -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org