$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa File: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (raw, json) Hash identifier: Cv86ALXCPLsytALa2/qp5B4iQkUJTK0vyA5SgXP3aEo= Subject key identifier: AB:A0:C9:32:D7:EF:11:AA:95:1F:86:67:B4:6D:82:A1:39:D7:B6:6D Certificate issuer: /CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Certificate serial: 3CB9C1E055E7B676CAE3B4ED92BE00FBBA25CDDC Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa Signing time: Sat 10 Aug 2024 14:00:01 +0000 ROA not before: Sat 10 Aug 2024 13:55:01 +0000 ROA not after: Sat 09 Aug 2025 14:00:01 +0000 asID: 131775 IP address blocks: 202.74.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b9:c1:e0:55:e7:b6:76:ca:e3:b4:ed:92:be:00:fb:ba:25:cd:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Validity Not Before: Aug 10 13:55:01 2024 GMT Not After : Aug 9 14:00:01 2025 GMT Subject: CN=ABA0C932D7EF11AA951F8667B46D82A139D7B66D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:05:7b:61:36:bf:d5:61:8e:be:47:ed:3f: 45:19:b2:f8:32:f6:3f:1c:d1:d0:9b:96:86:2e:3b: 8e:71:f3:3f:0f:d9:fa:f8:0d:7b:28:43:56:25:58: 7c:ac:81:a4:60:3b:f3:90:91:df:96:3f:63:25:2e: 13:52:39:9b:4a:f7:46:6b:7a:41:f1:ae:3d:bb:af: 0f:5f:a9:c6:83:50:d9:f5:7b:1b:5d:52:e8:46:f6: f9:2f:7a:0a:5a:22:cf:62:29:6e:fd:8d:39:0d:73: b1:ba:3b:bd:6a:17:92:cf:71:c3:75:b1:27:bc:88: 9e:e2:ad:f8:30:50:5f:27:68:ea:26:b0:ce:4f:d5: 4a:26:e9:84:c2:df:c6:22:95:e0:cc:03:3f:82:d8: 06:cc:0a:d1:4f:fc:a7:f0:7b:ec:74:9c:89:0b:77: 75:f4:da:44:0c:8d:5b:21:78:57:8c:9c:b7:31:5e: cc:e2:88:b3:d9:da:18:87:69:67:4b:7b:b7:c8:22: 76:d1:cc:e0:be:15:77:58:61:45:8f:f2:7b:d3:f6: 76:9d:7a:98:5c:a8:49:24:e7:a8:bf:4b:23:d0:46: e6:ce:fb:71:c7:7b:26:f6:3f:fb:e8:f6:ae:c9:2c: 26:d0:6c:da:6f:05:75:30:b3:52:f3:3d:53:c5:c9: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A0:C9:32:D7:EF:11:AA:95:1F:86:67:B4:6D:82:A1:39:D7:B6:6D X509v3 Authority Key Identifier: keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.74.238.0/23 Signature Algorithm: sha256WithRSAEncryption 91:a5:bd:70:7a:58:8e:2f:63:22:d7:2c:98:75:7d:1b:57:da: 0b:2b:46:bc:f0:c5:96:d3:35:13:fa:71:98:d7:bf:04:f4:fd: 19:6a:85:d3:fb:d0:8c:e1:bc:be:82:fa:49:ef:98:66:38:61: c9:b0:8a:fa:ca:1c:29:3c:08:2f:05:92:56:42:b2:d4:43:8f: b7:73:13:74:99:3e:db:18:e4:2e:9f:e1:ee:c5:dc:02:ce:c2: c7:58:48:25:1e:ce:7b:cd:91:68:1a:45:c9:f7:43:bc:d6:27: 41:72:ca:20:c7:a8:29:08:81:88:bb:a7:69:93:f7:88:14:46: 40:f3:d0:91:d2:c7:f8:1a:eb:fd:af:25:ce:3b:c4:3b:5f:91: 89:1b:04:0e:ad:ad:bd:95:c7:ff:8f:a8:bf:09:63:c3:d8:0c: 7c:79:15:59:72:2c:e7:58:6f:e6:0b:7d:4c:0f:ee:95:f9:93: a4:63:4a:98:b5:2c:68:74:35:22:5e:6f:1a:2e:45:f4:96:b8: e7:13:e7:b3:c7:83:4d:5a:59:b7:7b:4c:4e:5b:74:d1:66:c9: 63:d9:af:9f:7d:4d:13:79:f9:4f:4a:c8:0d:ef:22:c0:41:9d: 1c:88:33:3b:8a:4b:3f:d8:4f:d5:4f:2f:6c:fb:f6:bc:c1:3a: e6:47:34:7b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPLnB4FXntnbK47Ttkr4A+7olzdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VE NzZCNTA1NDAeFw0yNDA4MTAxMzU1MDFaFw0yNTA4MDkxNDAwMDFaMDMxMTAvBgNV BAMTKEFCQTBDOTMyRDdFRjExQUE5NTFGODY2N0I0NkQ4MkExMzlEN0I2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWQV7YTa/1WGOvkftP0UZsvgy 9j8c0dCbloYuO45x8z8P2fr4DXsoQ1YlWHysgaRgO/OQkd+WP2MlLhNSOZtK90Zr ekHxrj27rw9fqcaDUNn1extdUuhG9vkvegpaIs9iKW79jTkNc7G6O71qF5LPccN1 sSe8iJ7irfgwUF8naOomsM5P1Uom6YTC38YileDMAz+C2AbMCtFP/Kfwe+x0nIkL d3X02kQMjVsheFeMnLcxXsziiLPZ2hiHaWdLe7fIInbRzOC+FXdYYUWP8nvT9nad ephcqEkk56i/SyPQRubO+3HHeyb2P/vo9q7JLCbQbNpvBXUws1LzPVPFyZ3rAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUq6DJMtfvEaqVH4ZntG2CoTnXtm0wHwYDVR0j BBgwFoAUSc3KMIwonWiMZJwjA77LPtdrUFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZWI5OGNlZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC80OUNEQ0EzMDhD Mjg5RDY4OEM2NDlDMjMwM0JFQ0IzRUQ3NkI1MDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VENzZC NTA1NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYjk4Y2VkLWFmMTgtNGJmZi1h ZDcxLTczZDJiMGM5ZDhhOS8wLzMyMzAzMjJlMzczNDJlMzIzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzMxMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBykruMA0GCSqG SIb3DQEBCwUAA4IBAQCRpb1weliOL2Mi1yyYdX0bV9oLK0a88MWW0zUT+nGY178E 9P0ZaoXT+9CM4by+gvpJ75hmOGHJsIr6yhwpPAgvBZJWQrLUQ4+3cxN0mT7bGOQu n+HuxdwCzsLHWEglHs57zZFoGkXJ90O81idBcsogx6gpCIGIu6dpk/eIFEZA89CR 0sf4Guv9ryXOO8Q7X5GJGwQOra29lcf/j6i/CWPD2Ax8eRVZciznWG/mC31MD+6V +ZOkY0qYtSxodDUiXm8aLkX0lrjnE+ezx4NNWlm3e0xOW3TRZslj2a+ffU0TeflP SsgN7yLAQZ0ciDM7iks/2E/VTy9s+/a8wTrmRzR7 -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:49 2024 by rpki-client on console-ams.rpki-client.org