$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32352e302f32342d3234203d3e203338373738.roa File: 3230322e3134382e32352e302f32342d3234203d3e203338373738.roa (raw, json) Hash identifier: c73eusaVsQQ1/PbcWdi1Or+3EdeHyOPf4wy/7P6E+B0= Subject key identifier: 6F:96:C4:C0:6A:A5:FE:09:31:25:F9:C2:A3:1A:10:C0:42:78:1E:B1 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 7E22D9E71FC71D06C67C2AAB00B048F5650B2133 Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32352e302f32342d3234203d3e203338373738.roa Signing time: Mon 31 Jul 2023 00:03:52 +0000 ROA not before: Sun 30 Jul 2023 23:58:52 +0000 ROA not after: Mon 29 Jul 2024 00:03:52 +0000 asID: 38778 IP address blocks: 202.148.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 07:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:22:d9:e7:1f:c7:1d:06:c6:7c:2a:ab:00:b0:48:f5:65:0b:21:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jul 30 23:58:52 2023 GMT Not After : Jul 29 00:03:52 2024 GMT Subject: CN=6F96C4C06AA5FE093125F9C2A31A10C042781EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:4a:bd:54:cb:41:bd:b1:12:03:c3:70:db: 51:91:db:0b:57:59:9a:74:52:4e:24:a6:4f:9f:f7: 09:60:c6:d5:c0:2d:9d:3a:00:af:19:4c:d8:7f:69: c5:29:2f:80:68:16:bc:89:d9:63:fa:87:48:0f:d6: 41:f7:56:3d:8b:24:67:46:e5:b0:43:d7:02:52:e5: 59:2b:8c:e9:f5:6d:62:50:63:4f:c5:10:45:db:c3: c5:05:d9:42:4b:42:3d:f3:0b:2e:cf:46:22:31:4a: 99:21:ae:62:75:1c:09:33:c0:d1:8d:1f:2e:65:94: 2c:a7:c3:c6:53:f9:a0:c1:7b:28:0b:da:95:ff:bf: 49:36:75:c4:b8:a3:61:a5:ad:0b:f9:13:09:85:37: 9d:23:b0:b8:41:69:46:16:80:11:1f:5c:72:74:f4: 11:e2:d2:4e:5d:81:43:d8:00:7a:c5:30:e9:ad:f4: 5d:6c:b8:de:83:b5:f9:cc:9d:93:c7:b2:54:c8:60: 1d:ac:bf:60:db:ea:ae:a2:e7:03:e8:50:a8:b0:1a: 42:50:f6:5b:92:85:d6:ef:b1:8d:59:65:5a:be:0f: c4:15:2c:2a:f9:2d:76:6a:2c:58:b9:95:47:22:f4: 8d:77:37:4b:fc:d8:d4:2d:65:87:16:1b:ac:25:63: 62:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:96:C4:C0:6A:A5:FE:09:31:25:F9:C2:A3:1A:10:C0:42:78:1E:B1 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32352e302f32342d3234203d3e203338373738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.25.0/24 Signature Algorithm: sha256WithRSAEncryption a5:11:14:c8:0e:37:b4:35:bf:0f:fd:4b:f8:80:d5:2b:62:0a: cd:db:ac:5b:92:60:b5:8c:28:aa:cd:0f:88:70:0b:98:c0:c5: 6d:c5:d5:bd:70:67:f9:c0:76:8f:ea:f9:da:a7:e6:76:e2:29: 0d:7f:8b:e3:e7:da:bb:b0:75:0c:c9:9d:0b:2c:1c:f0:9c:78: c6:ba:84:01:d9:b5:bd:3b:ed:8b:9f:1f:98:aa:58:77:69:a4: e9:1d:c6:54:b7:83:4b:d2:2c:7c:4a:85:00:b4:4d:01:c5:07: ac:1d:a9:e5:45:1e:5f:fd:17:be:2e:45:1f:32:b7:72:ba:d7: d2:3a:dd:71:1f:8f:f2:65:9a:0a:d1:07:9c:6f:a7:44:2e:5c: 93:b5:5f:68:fe:80:ea:24:b8:a5:f9:31:0f:3e:ae:dc:7c:20: 45:a5:65:14:81:2e:63:5f:74:7a:d6:94:19:86:b2:17:27:7f: 8a:75:8d:cd:57:61:3c:a9:29:df:77:6d:a3:6a:45:1c:3c:dc: c5:17:62:85:60:90:a1:bc:91:45:03:3a:0e:9b:d5:88:53:0a: 5b:0d:69:99:f4:4e:a7:a5:74:5c:84:42:c9:6b:da:65:b6:34: 8b:e9:d9:4d:95:30:ca:e3:d3:67:43:0a:eb:f4:a7:28:63:2d: fa:c1:64:5f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfiLZ5x/HHQbGfCqrALBI9WULITMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yMzA3MzAyMzU4NTJaFw0yNDA3MjkwMDAzNTJaMDMxMTAvBgNV BAMTKDZGOTZDNEMwNkFBNUZFMDkzMTI1RjlDMkEzMUExMEMwNDI3ODFFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzkq9VMtBvbESA8Nw21GR2wtX WZp0Uk4kpk+f9wlgxtXALZ06AK8ZTNh/acUpL4BoFryJ2WP6h0gP1kH3Vj2LJGdG 5bBD1wJS5VkrjOn1bWJQY0/FEEXbw8UF2UJLQj3zCy7PRiIxSpkhrmJ1HAkzwNGN Hy5llCynw8ZT+aDBeygL2pX/v0k2dcS4o2GlrQv5EwmFN50jsLhBaUYWgBEfXHJ0 9BHi0k5dgUPYAHrFMOmt9F1suN6DtfnMnZPHslTIYB2sv2Db6q6i5wPoUKiwGkJQ 9luShdbvsY1ZZVq+D8QVLCr5LXZqLFi5lUci9I13N0v82NQtZYcWG6wlY2LFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUb5bEwGql/gkxJfnCoxoQwEJ4HrEwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqUGTANBgkqhkiG 9w0BAQsFAAOCAQEApREUyA43tDW/D/1L+IDVK2IKzdusW5JgtYwoqs0PiHALmMDF bcXVvXBn+cB2j+r52qfmduIpDX+L4+fau7B1DMmdCywc8Jx4xrqEAdm1vTvti58f mKpYd2mk6R3GVLeDS9IsfEqFALRNAcUHrB2p5UUeX/0Xvi5FHzK3crrX0jrdcR+P 8mWaCtEHnG+nRC5ck7VfaP6A6iS4pfkxDz6u3HwgRaVlFIEuY190etaUGYayFyd/ inWNzVdhPKkp33dto2pFHDzcxRdihWCQobyRRQM6DpvViFMKWw1pmfROp6V0XIRC yWvaZbY0i+nZTZUwyuPTZ0MK6/SnKGMt+sFkXw== -----END CERTIFICATE-----Generated at Wed Apr 24 05:34:42 2024 by rpki-client on console-ams.rpki-client.org