$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e302e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e302e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: lmdt7ZK6J5QSFwZx8m6uY5lU9VHXdTL/WX2ON+aBDfI= Subject key identifier: 1F:9C:EB:2F:A6:00:28:3A:FC:04:08:CE:4E:46:04:4C:60:48:5C:EA Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 5688815F5C553CACC7CD23BAFB09E9F35865CC00 Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e302e302f32342d3234203d3e2039373934.roa Signing time: Mon 01 Jul 2024 01:03:01 +0000 ROA not before: Mon 01 Jul 2024 00:58:01 +0000 ROA not after: Mon 30 Jun 2025 01:03:01 +0000 asID: 9794 IP address blocks: 202.148.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:88:81:5f:5c:55:3c:ac:c7:cd:23:ba:fb:09:e9:f3:58:65:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jul 1 00:58:01 2024 GMT Not After : Jun 30 01:03:01 2025 GMT Subject: CN=1F9CEB2FA600283AFC0408CE4E46044C60485CEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:33:71:23:26:39:a8:a9:fe:2d:da:7f:0b: cd:05:a3:6c:a4:98:92:cb:ae:61:4b:0d:8c:6b:d1: 47:53:7f:d2:52:1f:ad:31:c7:21:81:59:82:61:ec: ac:b7:bb:2d:48:b1:7f:8e:1f:57:fd:54:a6:db:67: 1d:0c:46:1c:14:32:50:6f:ac:62:8c:5c:e5:8c:f5: a9:e1:58:8e:21:9e:5d:00:e8:f6:13:25:90:4c:03: 41:e5:2f:eb:2c:28:64:8e:9e:b5:13:df:27:6a:71: 15:34:d1:6d:d6:f5:86:a0:57:32:6e:b1:6b:04:23: 42:cc:64:a3:82:cd:b3:67:62:c1:8a:fd:c8:69:47: 90:00:06:4c:b5:c7:51:94:e5:94:54:4d:93:a6:c5: fe:aa:da:5b:e6:4c:b6:ea:20:96:9c:e6:59:55:01: ca:2c:4c:b3:ec:db:6a:3b:1a:4b:1f:68:e3:7c:ae: 83:69:7b:2d:de:db:6f:2b:3c:34:f7:4a:ea:a4:81: 6f:2f:6c:4c:e7:a6:70:64:0f:4a:08:ce:da:72:e9: 91:13:4d:d7:75:0a:6c:94:69:d3:50:c5:75:aa:a6: 47:e2:70:4d:25:30:84:0d:de:a5:9b:d7:42:b9:78: 38:e7:37:43:60:91:ec:66:23:58:7b:19:5e:7f:ee: bc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9C:EB:2F:A6:00:28:3A:FC:04:08:CE:4E:46:04:4C:60:48:5C:EA X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e302e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.0.0/24 Signature Algorithm: sha256WithRSAEncryption b5:8b:e6:01:61:ac:a9:d4:5c:95:a3:55:e7:9f:d1:71:8c:be: db:ba:6b:02:78:02:da:8b:05:64:86:38:44:fa:e2:d1:77:53: 25:04:98:4f:0a:5a:7c:4d:3c:a6:bf:b6:d2:2c:59:ef:e5:53: 49:8a:68:2c:6a:4a:21:4e:7d:c6:8d:d2:33:b4:3f:ee:f9:35: 5c:8a:26:63:aa:a6:b6:d6:af:97:c8:25:64:c2:ab:7e:60:b3: f2:af:ca:bf:c1:3f:d8:b3:c3:57:3f:a9:12:1f:b2:3b:1b:a4: ac:2f:77:3c:35:23:09:32:c3:1a:bd:0e:7b:be:4f:53:f6:55: b8:6a:51:69:44:60:95:16:2a:63:d7:e1:44:98:b5:ba:3b:8e: 3e:4a:1a:cb:04:37:bd:8a:9d:4e:0a:3b:e5:51:95:4e:37:90: 72:b5:f0:de:67:76:5d:a3:26:76:c2:78:65:a7:aa:35:d1:d7: 46:a3:62:cc:d9:b2:92:b7:43:bd:19:02:1a:b6:31:c8:dc:64: c6:60:37:2d:51:4a:2d:a8:6a:d6:63:e3:b3:a8:0e:da:29:31: 6d:f4:ea:0d:ea:de:42:a4:f2:51:3b:aa:6e:92:29:63:e7:9e: 10:d8:0e:9e:08:b1:07:60:df:e7:cc:0b:de:25:1c:1f:d0:64: d4:3b:8a:75 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUVoiBX1xVPKzHzSO6+wnp81hlzAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNDA3MDEwMDU4MDFaFw0yNTA2MzAwMTAzMDFaMDMxMTAvBgNV BAMTKDFGOUNFQjJGQTYwMDI4M0FGQzA0MDhDRTRFNDYwNDRDNjA0ODVDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnDNxIyY5qKn+Ldp/C80Fo2yk mJLLrmFLDYxr0UdTf9JSH60xxyGBWYJh7Ky3uy1IsX+OH1f9VKbbZx0MRhwUMlBv rGKMXOWM9anhWI4hnl0A6PYTJZBMA0HlL+ssKGSOnrUT3ydqcRU00W3W9YagVzJu sWsEI0LMZKOCzbNnYsGK/chpR5AABky1x1GU5ZRUTZOmxf6q2lvmTLbqIJac5llV AcosTLPs22o7GksfaON8roNpey3e228rPDT3SuqkgW8vbEznpnBkD0oIztpy6ZET Tdd1CmyUadNQxXWqpkficE0lMIQN3qWb10K5eDjnN0NgkexmI1h7GV5/7rwPAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUH5zrL6YAKDr8BAjOTkYETGBIXOowHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0ZWNjNDAtNmI4NC00OWU4LWI2 MGItNmU5OTA0MTI4Y2E4LzAvMzIzMDMyMmUzMTM0MzgyZTMwMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlAAwDQYJKoZIhvcNAQEL BQADggEBALWL5gFhrKnUXJWjVeef0XGMvtu6awJ4AtqLBWSGOET64tF3UyUEmE8K WnxNPKa/ttIsWe/lU0mKaCxqSiFOfcaN0jO0P+75NVyKJmOqprbWr5fIJWTCq35g s/Kvyr/BP9izw1c/qRIfsjsbpKwvdzw1Iwkywxq9Dnu+T1P2VbhqUWlEYJUWKmPX 4USYtbo7jj5KGssEN72KnU4KO+VRlU43kHK18N5ndl2jJnbCeGWnqjXR10ajYszZ spK3Q70ZAhq2McjcZMZgNy1RSi2oatZj47OoDtopMW306g3q3kKk8lE7qm6SKWPn nhDYDp4IsQdg3+fMC94lHB/QZNQ7inU= -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org