$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa File: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (raw, json) Hash identifier: s4p0R6jnvM1HaeeZgnWeQHxKjFbb3EDJyhAbGKjtnCA= Subject key identifier: 3F:8D:F5:3C:3E:7B:36:92:41:0F:81:56:EC:96:B8:CD:F5:E4:62:1F Certificate issuer: /CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Certificate serial: 539EA4A2BC38D89F0FF834F0C5D49984F449572F Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa Signing time: Sat 10 Aug 2024 15:00:01 +0000 ROA not before: Sat 10 Aug 2024 14:55:01 +0000 ROA not after: Sat 09 Aug 2025 15:00:01 +0000 asID: 131775 IP address blocks: 202.74.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9e:a4:a2:bc:38:d8:9f:0f:f8:34:f0:c5:d4:99:84:f4:49:57:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Validity Not Before: Aug 10 14:55:01 2024 GMT Not After : Aug 9 15:00:01 2025 GMT Subject: CN=3F8DF53C3E7B3692410F8156EC96B8CDF5E4621F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:78:45:1c:15:bc:31:69:b5:e1:9e:9e:76: e7:3f:c5:ec:a1:6d:ce:43:6e:ef:89:23:49:b8:df: 7c:42:f0:5b:d2:b3:a5:a0:05:9c:ea:4d:ba:21:b5: f6:95:c9:af:86:46:4b:0a:70:18:75:77:ed:e2:57: d0:61:74:b4:56:53:ed:3f:5d:d0:7b:20:be:ee:a1: 26:be:04:5b:fa:1d:b6:b2:09:b8:64:61:6a:88:6f: a9:96:b4:ba:47:e5:2f:86:ea:b7:c0:a4:6c:86:f7: e3:4f:83:58:42:25:f7:30:eb:21:67:10:3c:fd:b2: 9a:c1:00:14:40:08:95:75:ee:d9:82:1f:0d:76:6a: f0:1a:7e:93:da:66:de:1f:18:cd:c1:08:66:19:ec: f0:4a:13:75:b2:88:27:b6:27:ec:77:39:37:77:67: e7:d5:d4:33:0b:75:41:7a:4e:84:42:0e:38:e4:d7: c6:09:12:2d:28:40:ae:05:9d:ef:e1:d2:9a:0a:fc: b6:67:fa:98:8d:58:c7:3d:f6:2b:1b:1d:5a:92:6f: a4:96:9e:1d:27:92:bb:0f:e9:c8:84:e6:f3:8e:d5: 91:01:45:e1:71:4d:0b:9e:9f:77:1f:99:3a:e0:c9: 2e:2a:c7:c3:2e:51:ac:f0:1a:03:68:0f:fe:0a:d3: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8D:F5:3C:3E:7B:36:92:41:0F:81:56:EC:96:B8:CD:F5:E4:62:1F X509v3 Authority Key Identifier: keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.74.236.0/22 Signature Algorithm: sha256WithRSAEncryption 12:8f:69:b7:67:6a:21:72:cd:b9:12:9c:28:e4:25:da:3f:ac: 4a:34:b7:77:13:c7:fe:b3:f3:c1:5c:ed:14:c8:8d:82:5c:8e: 95:5a:cd:c8:5d:41:af:d4:53:9c:55:1c:2d:5e:7b:0d:49:20: 84:ba:43:0a:ca:54:0d:24:f3:e5:c2:8c:23:30:b8:3e:cb:34: 1c:33:57:05:00:f4:bb:c6:9b:b0:e3:b1:64:f7:a7:97:78:76: 52:f9:14:cf:5f:fe:83:cb:cb:08:6b:e7:9b:65:54:81:ef:3d: 1f:d0:43:79:b0:a0:67:c1:3c:fc:29:1d:13:eb:d6:e4:62:8e: 85:32:13:fb:88:a8:28:3d:ac:f1:fd:83:6e:3a:8d:cd:d9:ff: a7:fe:91:ae:d0:c7:74:fd:e1:6b:a4:b5:70:20:41:e9:79:32: ec:ad:e3:82:8f:82:c9:c0:cf:c5:b1:68:63:cd:82:87:bc:9f: bc:12:9e:ed:9d:d6:35:cf:06:1c:d3:67:72:75:c7:6c:58:83: 0a:9b:85:e9:3a:a4:6a:35:5d:af:0b:bd:d9:6f:00:1c:8f:d8: fb:e4:17:06:0d:cf:66:ad:d0:30:92:ec:ba:1e:76:a9:0d:ce: 37:0a:a8:d3:c0:92:d3:cf:d5:7c:70:d1:34:2b:22:52:f4:b5: 67:99:91:29 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUU56korw42J8P+DTwxdSZhPRJVy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VE NzZCNTA1NDAeFw0yNDA4MTAxNDU1MDFaFw0yNTA4MDkxNTAwMDFaMDMxMTAvBgNV BAMTKDNGOERGNTNDM0U3QjM2OTI0MTBGODE1NkVDOTZCOENERjVFNDYyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rXhFHBW8MWm14Z6educ/xeyh bc5Dbu+JI0m433xC8FvSs6WgBZzqTbohtfaVya+GRksKcBh1d+3iV9BhdLRWU+0/ XdB7IL7uoSa+BFv6HbayCbhkYWqIb6mWtLpH5S+G6rfApGyG9+NPg1hCJfcw6yFn EDz9sprBABRACJV17tmCHw12avAafpPaZt4fGM3BCGYZ7PBKE3WyiCe2J+x3OTd3 Z+fV1DMLdUF6ToRCDjjk18YJEi0oQK4Fne/h0poK/LZn+piNWMc99isbHVqSb6SW nh0nkrsP6ciE5vOO1ZEBReFxTQuen3cfmTrgyS4qx8MuUazwGgNoD/4K026fAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUP431PD57NpJBD4FW7Ja4zfXkYh8wHwYDVR0j BBgwFoAUSc3KMIwonWiMZJwjA77LPtdrUFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZWI5OGNlZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC80OUNEQ0EzMDhD Mjg5RDY4OEM2NDlDMjMwM0JFQ0IzRUQ3NkI1MDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VENzZC NTA1NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYjk4Y2VkLWFmMTgtNGJmZi1h ZDcxLTczZDJiMGM5ZDhhOS8wLzMyMzAzMjJlMzczNDJlMzIzMzM2MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzEzMzMxMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCykrsMA0GCSqG SIb3DQEBCwUAA4IBAQASj2m3Z2ohcs25Epwo5CXaP6xKNLd3E8f+s/PBXO0UyI2C XI6VWs3IXUGv1FOcVRwtXnsNSSCEukMKylQNJPPlwowjMLg+yzQcM1cFAPS7xpuw 47Fk96eXeHZS+RTPX/6Dy8sIa+ebZVSB7z0f0EN5sKBnwTz8KR0T69bkYo6FMhP7 iKgoPazx/YNuOo3N2f+n/pGu0Md0/eFrpLVwIEHpeTLsreOCj4LJwM/FsWhjzYKH vJ+8Ep7tndY1zwYc02dydcdsWIMKm4XpOqRqNV2vC73ZbwAcj9j75BcGDc9mrdAw kuy6HnapDc43CqjTwJLTz9V8cNE0KyJS9LVnmZEp -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:49 2024 by rpki-client on console-ams.rpki-client.org