$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31362e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e31362e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: S4e+WRd54n6p4T8J/fs4Db1VhZ39gBbZneFfwWDmsR8= Subject key identifier: 46:00:3A:6C:DE:02:80:17:59:D1:CE:79:8D:0E:C9:3F:4F:6B:D4:A9 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 3A97B2A2AD5D7A9A80FD617C95F57ED3EAEC20DD Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31362e302f32342d3234203d3e2039373934.roa Signing time: Mon 31 Jul 2023 00:03:53 +0000 ROA not before: Sun 30 Jul 2023 23:58:53 +0000 ROA not after: Mon 29 Jul 2024 00:03:53 +0000 asID: 9794 IP address blocks: 202.148.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:97:b2:a2:ad:5d:7a:9a:80:fd:61:7c:95:f5:7e:d3:ea:ec:20:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jul 30 23:58:53 2023 GMT Not After : Jul 29 00:03:53 2024 GMT Subject: CN=46003A6CDE02801759D1CE798D0EC93F4F6BD4A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:70:90:dc:83:14:40:20:25:f1:b4:84:54:91: f4:f5:e1:32:c3:d6:ad:31:ad:5d:77:b1:a8:d0:3f: e0:4d:7b:58:39:9b:1c:82:6c:bb:5f:d9:46:61:15: 73:cb:57:e3:4e:64:01:6c:82:13:bc:67:88:5e:ad: 35:77:df:ab:95:a3:c3:fa:25:73:a1:40:2f:30:c9: 99:cd:95:68:42:d0:02:67:cc:79:5c:39:85:e0:81: e3:52:f1:61:98:c4:80:24:d5:61:24:36:39:64:33: 94:7a:3c:ee:0e:75:60:cd:c9:53:15:0a:e9:ba:1f: 33:db:a6:68:23:b1:85:3b:ba:32:be:27:d7:09:fa: a0:a0:e0:27:c3:34:bc:54:a4:4b:40:1b:cd:f2:e2: 0a:cd:34:4b:45:0b:dc:b8:59:79:6e:6e:24:4e:f3: 2c:d3:f3:ec:ab:34:4d:f1:1f:6a:9d:0e:ac:06:f7: 94:2f:5f:0d:db:b2:ce:a6:58:64:4c:ec:26:09:f6: ad:2e:49:19:65:28:db:4c:bb:5d:fc:18:10:44:6f: c2:b7:d5:74:48:a9:c2:e9:73:66:c8:0f:8f:27:2d: 77:58:0f:e8:dc:84:db:ea:f2:d0:38:35:a9:89:d3: 53:7f:52:da:23:af:76:21:05:db:2b:e1:4d:e8:06: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:00:3A:6C:DE:02:80:17:59:D1:CE:79:8D:0E:C9:3F:4F:6B:D4:A9 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31362e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.16.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:be:15:2a:b9:2f:5d:6a:55:ed:3e:12:1e:15:92:38:b2:de: f0:37:64:28:f5:9d:56:61:1c:f1:14:b1:74:5b:f2:ae:3d:9b: ce:dc:90:9b:de:d1:52:1e:93:d0:9b:ed:68:47:38:04:96:63: 7e:40:60:2c:ec:db:96:10:c6:ce:cb:fc:9b:ba:99:94:5c:a9: ac:01:28:fa:f5:4f:37:78:8b:8c:60:df:68:32:ef:92:2e:b2: e4:4a:48:1e:fb:e6:20:a3:c6:05:da:ce:20:50:bc:e5:f7:9b: 21:07:8b:38:90:78:96:00:aa:a3:5d:93:0a:9b:8a:21:f4:76: 40:20:df:b8:d9:55:81:19:1b:70:54:ee:e1:ba:44:57:b8:3c: b0:40:db:62:05:f3:87:19:25:6f:4b:43:7f:fd:ef:6a:46:03: 70:b7:d1:99:16:8e:a5:cd:f9:e3:48:1d:37:0d:2f:87:13:a3: 44:c7:e1:af:7d:e9:2f:fd:a3:d1:6d:bf:7c:04:b2:60:44:6c: 5a:04:e4:36:01:41:a1:17:da:c4:a6:2f:f5:29:a5:46:cd:29: 79:92:ab:4a:50:5c:e6:33:cc:4d:ed:4a:4e:4c:b8:0c:83:d1: e0:dd:e9:94:8e:63:f2:62:8f:fa:2d:a9:4a:25:93:2f:a5:71: a5:b9:c1:69 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUOpeyoq1depqA/WF8lfV+0+rsIN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yMzA3MzAyMzU4NTNaFw0yNDA3MjkwMDAzNTNaMDMxMTAvBgNV BAMTKDQ2MDAzQTZDREUwMjgwMTc1OUQxQ0U3OThEMEVDOTNGNEY2QkQ0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDScJDcgxRAICXxtIRUkfT14TLD 1q0xrV13sajQP+BNe1g5mxyCbLtf2UZhFXPLV+NOZAFsghO8Z4herTV336uVo8P6 JXOhQC8wyZnNlWhC0AJnzHlcOYXggeNS8WGYxIAk1WEkNjlkM5R6PO4OdWDNyVMV Cum6HzPbpmgjsYU7ujK+J9cJ+qCg4CfDNLxUpEtAG83y4grNNEtFC9y4WXlubiRO 8yzT8+yrNE3xH2qdDqwG95QvXw3bss6mWGRM7CYJ9q0uSRllKNtMu138GBBEb8K3 1XRIqcLpc2bID48nLXdYD+jchNvq8tA4NamJ01N/Utojr3YhBdsr4U3oBq5RAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQURgA6bN4CgBdZ0c55jQ7JP09r1KkwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlBAwDQYJKoZIhvcN AQELBQADggEBABy+FSq5L11qVe0+Eh4Vkjiy3vA3ZCj1nVZhHPEUsXRb8q49m87c kJve0VIek9Cb7WhHOASWY35AYCzs25YQxs7L/Ju6mZRcqawBKPr1Tzd4i4xg32gy 75IusuRKSB775iCjxgXaziBQvOX3myEHiziQeJYAqqNdkwqbiiH0dkAg37jZVYEZ G3BU7uG6RFe4PLBA22IF84cZJW9LQ3/972pGA3C30ZkWjqXN+eNIHTcNL4cTo0TH 4a996S/9o9Ftv3wEsmBEbFoE5DYBQaEX2sSmL/UppUbNKXmSq0pQXOYzzE3tSk5M uAyD0eDd6ZSOY/Jij/otqUolky+lcaW5wWk= -----END CERTIFICATE-----Generated at Tue Apr 30 18:54:28 2024 by rpki-client on console-fra.rpki-client.org