$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa File: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (raw, json) Hash identifier: dsk9oUmj2NcQkANMtOVLGJ4sGBjbKRE5eNrZlMTBCDc= Subject key identifier: 68:9B:F7:88:FE:23:5E:2C:41:30:FB:78:93:0E:85:29:1E:B5:45:D9 Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 65D454227A7440EFBB2F7CA29452E000D05C4773 Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa Signing time: Sat 02 Mar 2024 11:02:03 +0000 ROA not before: Sat 02 Mar 2024 10:57:03 +0000 ROA not after: Sat 01 Mar 2025 11:02:03 +0000 asID: 58478 IP address blocks: 202.182.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d4:54:22:7a:74:40:ef:bb:2f:7c:a2:94:52:e0:00:d0:5c:47:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Mar 2 10:57:03 2024 GMT Not After : Mar 1 11:02:03 2025 GMT Subject: CN=689BF788FE235E2C4130FB78930E85291EB545D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e8:23:ea:36:b3:83:a8:cc:29:75:de:fe:7a: c8:72:19:ed:05:15:1c:90:ee:9e:3d:65:57:14:a3: 36:95:77:72:4a:3c:7b:51:51:a3:1c:ae:2c:65:6d: 01:d2:cc:13:e3:9e:ff:ee:62:0f:03:45:76:ea:4d: 5f:03:dc:da:35:b3:62:8a:dc:fd:7a:f4:73:64:a5: 13:0f:94:da:cf:8f:a2:76:b7:36:47:2f:e1:0a:0d: 07:6c:3d:d9:c9:de:cb:61:67:c3:15:a4:4e:c7:b4: c1:87:f0:06:c5:a3:91:17:c0:84:d6:d4:d9:5a:c9: 2f:4f:b3:7f:92:9b:85:f2:34:39:1c:41:2d:c2:ed: c2:18:25:0e:e1:3d:94:3f:b9:10:be:14:ec:93:93: a1:34:b6:12:4c:30:b7:63:ab:99:2e:ab:16:4a:db: 73:48:c6:c9:5c:95:c0:dc:8b:06:27:e7:ef:19:c0: e2:8b:da:51:71:dc:69:c2:44:85:91:a3:90:21:93: 3b:e8:1a:40:cf:27:3c:17:aa:77:bd:3a:59:47:77: 2a:48:40:8f:93:c2:b1:a0:68:04:ee:ef:57:c4:d3: 2c:04:31:64:f1:0f:95:ea:a6:61:9d:57:79:61:5e: 1a:70:34:5b:d1:0b:a1:70:8a:27:50:3f:50:0a:40: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:F7:88:FE:23:5E:2C:41:30:FB:78:93:0E:85:29:1E:B5:45:D9 X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.182.177.0/24 Signature Algorithm: sha256WithRSAEncryption 82:0c:b1:3d:be:2b:88:b2:d0:ca:b9:53:9d:92:6e:c1:82:33: 2b:48:08:9a:15:f4:2c:ac:bc:f6:5e:1c:d9:2e:85:81:d7:4a: 12:a4:70:83:6f:5a:25:71:39:f2:29:81:a5:f4:20:73:2d:89: bb:c1:d6:54:69:06:d4:de:53:4c:03:13:09:c2:44:32:d9:0d: dc:74:26:83:aa:45:58:11:fc:4e:6c:49:45:d3:66:5a:3d:43: b3:18:05:d7:55:01:e8:31:ad:f8:f3:66:32:fd:4c:6d:0d:dd: 41:40:47:15:28:94:81:7f:3c:4b:87:d3:d2:3c:9e:c2:4a:05: 59:9b:5c:22:ba:f6:d5:c2:9d:96:0d:4a:9e:ba:44:0f:df:b3: 96:cd:fb:01:72:14:e3:c0:1e:ef:7e:15:02:77:4a:83:70:89: f7:a6:99:8a:6f:50:1b:83:e0:40:22:e6:1a:b4:90:2b:75:43: 7a:90:31:a6:a7:86:88:2c:a1:32:78:37:f5:ab:89:64:3a:a3: 57:4a:3c:e6:fc:51:45:28:aa:0b:15:82:8c:dd:aa:ea:6a:ee: e2:64:db:21:aa:20:4f:11:85:92:62:b4:87:ea:84:43:ce:da: dd:84:c8:44:d9:17:cf:72:37:fb:b0:c5:56:4f:78:14:38:b7: 26:e9:fe:0d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZdRUInp0QO+7L3yilFLgANBcR3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNDAzMDIxMDU3MDNaFw0yNTAzMDExMTAyMDNaMDMxMTAvBgNV BAMTKDY4OUJGNzg4RkUyMzVFMkM0MTMwRkI3ODkzMEU4NTI5MUVCNTQ1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw6CPqNrODqMwpdd7+eshyGe0F FRyQ7p49ZVcUozaVd3JKPHtRUaMcrixlbQHSzBPjnv/uYg8DRXbqTV8D3No1s2KK 3P169HNkpRMPlNrPj6J2tzZHL+EKDQdsPdnJ3sthZ8MVpE7HtMGH8AbFo5EXwITW 1NlayS9Ps3+Sm4XyNDkcQS3C7cIYJQ7hPZQ/uRC+FOyTk6E0thJMMLdjq5kuqxZK 23NIxslclcDciwYn5+8ZwOKL2lFx3GnCRIWRo5AhkzvoGkDPJzwXqne9OllHdypI QI+TwrGgaATu71fE0ywEMWTxD5XqpmGdV3lhXhpwNFvRC6FwiidQP1AKQP3RAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaJv3iP4jXixBMPt4kw6FKR61RdkwHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMjJlMzEzODMyMmUzMTM3MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyraxMA0GCSqG SIb3DQEBCwUAA4IBAQCCDLE9viuIstDKuVOdkm7BgjMrSAiaFfQsrLz2XhzZLoWB 10oSpHCDb1olcTnyKYGl9CBzLYm7wdZUaQbU3lNMAxMJwkQy2Q3cdCaDqkVYEfxO bElF02ZaPUOzGAXXVQHoMa3482Yy/UxtDd1BQEcVKJSBfzxLh9PSPJ7CSgVZm1wi uvbVwp2WDUqeukQP37OWzfsBchTjwB7vfhUCd0qDcIn3ppmKb1Abg+BAIuYatJAr dUN6kDGmp4aILKEyeDf1q4lkOqNXSjzm/FFFKKoLFYKM3arqau7iZNshqiBPEYWS YrSH6oRDztrdhMhE2RfPcjf7sMVWT3gUOLcm6f4N -----END CERTIFICATE-----Generated at Sun Jun 2 09:14:18 2024 by rpki-client on console-ams.rpki-client.org