$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa File: 3230322e3134382e31332e302f32342d3234203d3e203338373738.roa (raw, json) Hash identifier: Y0lVW49rFP5/3jKy+A+QvYTD9cg/wLZpxdgodSxigL0= Subject key identifier: 56:47:08:B3:2D:F6:0A:2C:15:33:89:FE:00:DF:54:01:E5:2A:DC:75 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 5F3B1618F20C3A69A330BE9CD7925B99D7893364 Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa Signing time: Mon 01 Jul 2024 01:02:59 +0000 ROA not before: Mon 01 Jul 2024 00:57:59 +0000 ROA not after: Mon 30 Jun 2025 01:02:59 +0000 asID: 38778 IP address blocks: 202.148.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3b:16:18:f2:0c:3a:69:a3:30:be:9c:d7:92:5b:99:d7:89:33:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jul 1 00:57:59 2024 GMT Not After : Jun 30 01:02:59 2025 GMT Subject: CN=564708B32DF60A2C153389FE00DF5401E52ADC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:e6:a8:6e:0c:9b:ad:d9:c8:50:b7:15:7a: f4:b9:51:8e:4b:17:3b:fa:63:aa:33:83:d6:73:97: e3:ae:42:2f:1f:d2:86:fd:2d:c4:cd:66:00:06:21: a5:13:2d:f3:be:93:7e:2c:71:22:d5:d0:b8:52:d2: 3c:0f:06:0f:f3:70:06:b8:76:5a:5c:8e:80:58:a8: 00:36:ef:5d:b9:3a:e4:0e:01:8e:cf:91:68:6c:a4: c6:ce:5a:5c:e9:56:6f:ea:c7:5b:4d:a1:6f:64:f4: 0f:1c:7c:ed:cc:89:2f:45:80:08:6c:64:7a:91:66: df:82:19:8a:7b:5d:e0:8b:e2:5c:50:53:04:ad:54: a1:48:9d:e8:1d:97:05:b2:b2:97:b0:07:76:f6:37: 42:bf:64:00:12:97:8f:8a:fe:9f:c6:b4:ef:89:46: 5e:3f:e7:0f:26:df:55:e4:f2:c0:0e:e9:8c:e8:08: 44:0d:c9:02:5c:03:7c:01:da:e3:53:88:94:8d:2c: 01:bd:c2:2a:fa:52:09:bb:51:b5:01:14:bd:23:c4: ce:bc:57:22:19:c3:89:b9:65:cc:32:ac:c1:10:4a: 8a:76:e9:7d:88:8f:35:d2:bb:76:d9:6c:7f:e7:1c: d0:31:ba:3e:bf:8f:c8:94:cd:e8:01:e2:f1:5b:7e: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:47:08:B3:2D:F6:0A:2C:15:33:89:FE:00:DF:54:01:E5:2A:DC:75 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.13.0/24 Signature Algorithm: sha256WithRSAEncryption 20:a1:7b:fe:50:a5:ea:0c:76:a2:60:7d:e8:10:31:5d:6d:4a: ca:2e:8e:1a:2f:a6:4e:5d:a9:24:7a:10:fd:00:e1:32:ee:97: 22:0e:50:20:bb:d9:c7:26:ff:c0:08:46:6d:49:b1:3b:13:79: 2a:c6:b8:5e:80:17:fd:67:53:ec:37:6c:95:6a:7f:f7:0e:ff: b3:64:17:1e:71:c3:0e:71:8d:75:70:00:0f:9f:a2:38:71:f2: ae:17:a8:0f:78:0b:d6:b4:18:a5:2c:91:d9:e7:7c:5d:36:3c: ff:b5:86:98:d4:85:62:8c:8e:f8:f2:b7:95:51:29:2a:60:01: 22:a7:5f:f7:eb:10:44:fc:07:45:8c:62:47:e0:72:9b:8d:4b: 0b:c4:ab:39:6d:97:5c:37:f3:ce:72:81:3d:49:ae:ee:17:99: 94:40:9b:30:b8:60:cd:ae:95:f1:cd:b8:f3:f8:5d:a9:5f:8a: e1:02:09:7f:ae:47:5c:02:4f:d7:3f:ed:f7:85:da:70:d9:2b: 97:b3:d9:22:40:e0:40:f3:1d:b2:59:d4:8f:66:05:a8:d3:a4: 1e:fd:4c:7e:75:04:66:02:b0:93:07:49:82:6a:fd:df:36:8b: ed:af:2a:6a:a0:89:27:27:a4:46:d3:60:4a:9a:c7:30:00:76: 7c:9d:48:f2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXzsWGPIMOmmjML6c15JbmdeJM2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNDA3MDEwMDU3NTlaFw0yNTA2MzAwMTAyNTlaMDMxMTAvBgNV BAMTKDU2NDcwOEIzMkRGNjBBMkMxNTMzODlGRTAwREY1NDAxRTUyQURDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvg+aobgybrdnIULcVevS5UY5L Fzv6Y6ozg9Zzl+OuQi8f0ob9LcTNZgAGIaUTLfO+k34scSLV0LhS0jwPBg/zcAa4 dlpcjoBYqAA27125OuQOAY7PkWhspMbOWlzpVm/qx1tNoW9k9A8cfO3MiS9FgAhs ZHqRZt+CGYp7XeCL4lxQUwStVKFInegdlwWyspewB3b2N0K/ZAASl4+K/p/GtO+J Rl4/5w8m31Xk8sAO6YzoCEQNyQJcA3wB2uNTiJSNLAG9wir6Ugm7UbUBFL0jxM68 VyIZw4m5ZcwyrMEQSop26X2IjzXSu3bZbH/nHNAxuj6/j8iUzegB4vFbfs+FAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVkcIsy32CiwVM4n+AN9UAeUq3HUwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqUDTANBgkqhkiG 9w0BAQsFAAOCAQEAIKF7/lCl6gx2omB96BAxXW1Kyi6OGi+mTl2pJHoQ/QDhMu6X Ig5QILvZxyb/wAhGbUmxOxN5Ksa4XoAX/WdT7DdslWp/9w7/s2QXHnHDDnGNdXAA D5+iOHHyrheoD3gL1rQYpSyR2ed8XTY8/7WGmNSFYoyO+PK3lVEpKmABIqdf9+sQ RPwHRYxiR+Bym41LC8SrOW2XXDfzznKBPUmu7heZlECbMLhgza6V8c248/hdqV+K 4QIJf65HXAJP1z/t94XacNkrl7PZIkDgQPMdslnUj2YFqNOkHv1MfnUEZgKwkwdJ gmr93zaL7a8qaqCJJyekRtNgSprHMAB2fJ1I8g== -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org