$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa File: 3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa (raw, json) Hash identifier: 1KmibM3y/8YVaojZ5stWsgm+UWLcuC2kBqibHnl6GaE= Subject key identifier: DA:11:81:DB:FD:74:67:BA:3C:A3:A6:98:0B:A4:6B:83:8F:77:71:D4 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 5791A10EEE5B0C4377C71A868368422236C2EF78 Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa Signing time: Mon 31 Jul 2023 00:03:45 +0000 ROA not before: Sun 30 Jul 2023 23:58:45 +0000 ROA not after: Mon 29 Jul 2024 00:03:45 +0000 asID: 38778 IP address blocks: 203.201.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Apr 2024 21:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:91:a1:0e:ee:5b:0c:43:77:c7:1a:86:83:68:42:22:36:c2:ef:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jul 30 23:58:45 2023 GMT Not After : Jul 29 00:03:45 2024 GMT Subject: CN=DA1181DBFD7467BA3CA3A6980BA46B838F7771D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:f1:dc:02:1b:f7:cc:04:73:9d:7f:07:ac: b4:a1:74:35:5e:69:98:84:04:14:bc:c0:9c:d3:db: 8f:77:e9:28:96:0d:c7:e1:d4:c2:83:3b:ff:b7:29: be:12:f6:7a:e9:9f:e9:48:a3:5a:06:ba:eb:13:e7: 96:57:82:d3:44:53:5a:03:83:3e:82:4e:00:de:05: d3:04:16:2b:35:cc:13:26:c5:f5:42:a8:89:5a:f7: 8b:be:f2:cf:7c:28:be:80:a1:e1:b5:9c:3d:41:3b: e3:e5:86:27:e1:25:94:30:5e:41:31:de:04:0e:c3: ee:22:17:2c:77:49:e0:60:ee:ec:75:93:15:67:47: 63:9f:2d:d2:43:54:25:50:df:ba:83:e9:2f:54:e6: 9b:f7:f3:c7:6d:aa:4c:f8:0a:40:3e:b8:e2:85:90: af:d9:5b:27:f6:32:9d:c0:92:97:36:e2:f1:52:8b: 95:e0:43:74:ed:f9:31:eb:51:fc:32:47:0e:5b:30: ae:eb:e4:a1:89:99:42:fd:13:0e:0a:b6:32:33:02: f8:a1:98:2b:26:9e:53:19:61:8b:8f:e5:3c:97:46: bc:ee:f3:45:33:35:4d:07:d6:98:96:8a:cf:9b:97: 2b:4e:c3:ec:f1:17:1f:32:7f:9c:16:54:6e:42:36: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:11:81:DB:FD:74:67:BA:3C:A3:A6:98:0B:A4:6B:83:8F:77:71:D4 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.175.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ac:11:ab:0f:7c:eb:eb:c8:6e:8c:0b:ff:8e:f3:35:ed:78: 4e:f4:c1:d2:ad:1e:7b:87:0a:9c:65:56:56:60:bf:46:d0:aa: bd:c0:a9:64:de:7b:40:2b:61:31:90:2d:86:7b:c4:3a:5e:3c: b0:6b:c7:78:3f:ac:15:36:23:ee:c4:ee:61:97:1a:48:14:14: fc:94:07:7c:e0:e2:31:09:f4:1f:7c:da:a6:4f:6b:03:ee:62: ca:5e:c0:06:65:9f:7a:50:d2:04:de:e0:e2:64:fb:b4:11:86: ae:cc:8f:87:2e:65:ab:d0:70:de:e6:9b:89:ce:ab:13:0c:2e: b1:e8:4f:d7:46:48:1b:66:bd:b3:5f:aa:96:98:00:9f:db:9c: 63:fc:74:55:db:e8:96:a4:cd:fc:cb:a8:fd:c9:b8:1d:54:45: 73:2f:64:ee:29:fe:87:9b:f6:6a:0b:b9:75:a7:33:10:21:bb: 4e:cf:36:f9:98:a2:45:48:74:7e:b8:5a:fd:2e:07:2b:dd:42: cb:a5:ce:cb:f4:95:93:29:60:d9:6e:de:a9:5c:02:51:36:44: ff:f0:98:f5:80:b8:9a:6c:32:8c:a8:1d:9a:57:57:76:01:88: 54:f8:74:ef:be:10:79:c5:d4:bf:e8:33:e6:9a:67:8b:12:3d: f3:a9:d9:71 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUV5GhDu5bDEN3xxqGg2hCIjbC73gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yMzA3MzAyMzU4NDVaFw0yNDA3MjkwMDAzNDVaMDMxMTAvBgNV BAMTKERBMTE4MURCRkQ3NDY3QkEzQ0EzQTY5ODBCQTQ2QjgzOEY3NzcxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIfHcAhv3zARznX8HrLShdDVe aZiEBBS8wJzT24936SiWDcfh1MKDO/+3Kb4S9nrpn+lIo1oGuusT55ZXgtNEU1oD gz6CTgDeBdMEFis1zBMmxfVCqIla94u+8s98KL6AoeG1nD1BO+PlhifhJZQwXkEx 3gQOw+4iFyx3SeBg7ux1kxVnR2OfLdJDVCVQ37qD6S9U5pv388dtqkz4CkA+uOKF kK/ZWyf2Mp3Akpc24vFSi5XgQ3Tt+THrUfwyRw5bMK7r5KGJmUL9Ew4KtjIzAvih mCsmnlMZYYuP5TyXRrzu80UzNU0H1piWis+blytOw+zxFx8yf5wWVG5CNu6TAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2hGB2/10Z7o8o6aYC6Rrg493cdQwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy8mvMA0GCSqG SIb3DQEBCwUAA4IBAQBArBGrD3zr68hujAv/jvM17XhO9MHSrR57hwqcZVZWYL9G 0Kq9wKlk3ntAK2ExkC2Ge8Q6Xjywa8d4P6wVNiPuxO5hlxpIFBT8lAd84OIxCfQf fNqmT2sD7mLKXsAGZZ96UNIE3uDiZPu0EYauzI+HLmWr0HDe5puJzqsTDC6x6E/X RkgbZr2zX6qWmACf25xj/HRV2+iWpM38y6j9ybgdVEVzL2TuKf6Hm/ZqC7l1pzMQ IbtOzzb5mKJFSHR+uFr9Lgcr3ULLpc7L9JWTKWDZbt6pXAJRNkT/8Jj1gLiabDKM qB2aV1d2AYhU+HTvvhB5xdS/6DPmmmeLEj3zqdlx -----END CERTIFICATE-----Generated at Wed Apr 17 04:44:51 2024 by rpki-client on console-ams.rpki-client.org