$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa File: 3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: NDdy5iSoZ43rypmDbAuV3O2u3Pl0qZ4Rrnakma1V3oA= Subject key identifier: DF:90:51:BA:64:A7:82:A2:97:5C:D4:5A:F8:B6:11:75:18:12:1B:D7 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 52CC37888F1FD8C16E8FB347F77E4C8B88EB1E3C Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa Signing time: Mon 01 Jul 2024 01:03:01 +0000 ROA not before: Mon 01 Jul 2024 00:58:01 +0000 ROA not after: Mon 30 Jun 2025 01:03:01 +0000 asID: 9794 IP address blocks: 203.201.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cc:37:88:8f:1f:d8:c1:6e:8f:b3:47:f7:7e:4c:8b:88:eb:1e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jul 1 00:58:01 2024 GMT Not After : Jun 30 01:03:01 2025 GMT Subject: CN=DF9051BA64A782A2975CD45AF8B6117518121BD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e8:97:0e:38:b3:3e:d1:22:e1:55:a3:b0:ac: b6:76:72:08:52:06:f8:4a:13:f2:af:9a:11:67:11: ee:27:69:db:da:7a:44:2f:41:4b:68:e9:96:d4:94: fe:f2:ef:de:7f:07:18:59:e4:08:94:84:32:dd:43: db:09:04:f3:45:3c:07:b9:23:d5:dd:66:74:04:31: a2:01:bc:56:6c:44:52:5b:2c:f8:4c:99:3d:34:50: 40:ba:c0:04:5f:9c:79:52:f9:ea:62:dd:43:54:7b: 8d:74:ed:92:8f:e4:55:af:f2:6b:80:1c:3a:57:02: 06:54:07:75:f0:09:3e:57:0a:0c:46:4f:7d:6b:df: ec:d9:83:48:6b:5b:cb:00:86:45:6c:d5:b8:0e:76: 56:f9:1c:5f:56:23:c9:a0:4a:5c:34:c0:4b:bf:8e: c1:c5:bd:16:74:e4:1d:0a:e1:e1:ca:2d:f1:bf:c7: 5e:72:6e:d3:bc:74:dd:19:64:07:83:89:c3:e3:cc: fd:03:17:0f:89:3a:3d:2e:33:bd:ff:bf:b9:9e:c0: b1:b8:41:3c:06:bb:29:42:95:d8:64:8d:a4:af:39: 71:83:e6:f6:9a:f2:a7:55:0a:e1:be:cf:54:3f:47: 1f:29:69:ca:d6:7a:ba:39:e6:5f:73:e0:82:16:93: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:90:51:BA:64:A7:82:A2:97:5C:D4:5A:F8:B6:11:75:18:12:1B:D7 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.160.0/24 Signature Algorithm: sha256WithRSAEncryption ac:30:cc:1d:b3:bf:a9:4b:2e:8c:85:a7:f7:2a:4e:76:de:e5: e6:8b:64:29:dd:45:40:24:68:49:af:03:92:82:19:30:3d:ed: 12:72:9b:f7:a6:18:2a:ac:8a:8e:fd:16:ef:38:2a:9b:40:53: fd:2e:50:e9:61:e2:9e:4c:b7:13:69:21:ba:c2:f6:1c:92:1c: b6:00:c9:d2:22:6d:e0:5c:7a:33:9f:65:19:b1:4f:98:c3:35: f0:02:d9:b3:0f:30:dd:d4:f9:69:70:37:48:13:75:cf:30:dc: 9f:7a:b9:c9:20:47:87:39:ad:93:47:d3:ef:34:d2:a4:56:43: 72:67:04:37:25:b3:b5:56:e3:d3:ab:96:22:08:22:4f:c5:27: d4:56:f5:5b:d6:eb:27:d2:dc:d4:42:d6:8a:6b:93:47:c6:0d: a9:ac:e1:b3:8c:44:de:16:35:4e:75:cc:70:85:f0:68:9f:bb: 06:41:8d:26:07:3a:7f:42:38:9c:63:d8:09:6f:e3:7d:27:f0: 43:d3:29:7c:ca:25:55:26:3c:24:f8:2e:cd:07:9f:ad:80:e6: 7e:5c:b7:13:7c:09:30:ec:b6:d3:7a:52:2d:92:04:52:ee:30: 4f:ad:f1:50:29:62:37:ce:61:77:5c:42:59:f3:e8:e8:13:73: 9d:53:8e:05 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUsw3iI8f2MFuj7NH935Mi4jrHjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNDA3MDEwMDU4MDFaFw0yNTA2MzAwMTAzMDFaMDMxMTAvBgNV BAMTKERGOTA1MUJBNjRBNzgyQTI5NzVDRDQ1QUY4QjYxMTc1MTgxMjFCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm6JcOOLM+0SLhVaOwrLZ2cghS BvhKE/KvmhFnEe4nadvaekQvQUto6ZbUlP7y795/BxhZ5AiUhDLdQ9sJBPNFPAe5 I9XdZnQEMaIBvFZsRFJbLPhMmT00UEC6wARfnHlS+epi3UNUe4107ZKP5FWv8muA HDpXAgZUB3XwCT5XCgxGT31r3+zZg0hrW8sAhkVs1bgOdlb5HF9WI8mgSlw0wEu/ jsHFvRZ05B0K4eHKLfG/x15ybtO8dN0ZZAeDicPjzP0DFw+JOj0uM73/v7mewLG4 QTwGuylCldhkjaSvOXGD5vaa8qdVCuG+z1Q/Rx8pacrWero55l9z4IIWk9E3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU35BRumSngqKXXNRa+LYRdRgSG9cwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM2MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMvJoDANBgkqhkiG 9w0BAQsFAAOCAQEArDDMHbO/qUsujIWn9ypOdt7l5otkKd1FQCRoSa8DkoIZMD3t EnKb96YYKqyKjv0W7zgqm0BT/S5Q6WHinky3E2khusL2HJIctgDJ0iJt4Fx6M59l GbFPmMM18ALZsw8w3dT5aXA3SBN1zzDcn3q5ySBHhzmtk0fT7zTSpFZDcmcENyWz tVbj06uWIggiT8Un1Fb1W9brJ9Lc1ELWimuTR8YNqazhs4xE3hY1TnXMcIXwaJ+7 BkGNJgc6f0I4nGPYCW/jfSfwQ9MpfMolVSY8JPguzQefrYDmfly3E3wJMOy203pS LZIEUu4wT63xUCliN85hd1xCWfPo6BNznVOOBQ== -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org