$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa File: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (raw, json) Hash identifier: BQ2fa3tRJqarlHgYruw+A6R9wXvh6pTHkcR6lilGkLA= Subject key identifier: B4:E2:20:EF:03:7B:E2:FC:CC:04:88:35:83:22:D0:B8:A9:CC:79:20 Certificate issuer: /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053 Certificate serial: 2C5656A6BB3611D48406B1160405459D131D1A0B Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa Signing time: Mon 26 Feb 2024 01:56:32 +0000 ROA not before: Mon 26 Feb 2024 01:51:32 +0000 ROA not after: Mon 24 Feb 2025 01:56:32 +0000 asID: 38165 IP address blocks: 114.30.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:56:56:a6:bb:36:11:d4:84:06:b1:16:04:05:45:9d:13:1d:1a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053 Validity Not Before: Feb 26 01:51:32 2024 GMT Not After : Feb 24 01:56:32 2025 GMT Subject: CN=B4E220EF037BE2FCCC0488358322D0B8A9CC7920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0a:86:29:d5:48:65:d8:16:20:f9:57:5f:93: a4:8c:50:d8:f4:0f:fc:c1:84:1f:9c:e6:71:2c:1c: d2:27:e9:1a:71:d7:2f:d4:2c:a9:c6:42:4a:98:82: 60:f6:04:a4:cc:ca:3c:fd:4e:21:45:25:e8:e5:3f: 2e:9c:4a:5d:cf:88:21:b7:d2:1f:7c:36:02:3f:35: eb:27:c8:d7:92:64:27:50:f6:b6:07:9d:35:d4:5d: 0e:34:06:3d:27:69:b2:b6:f5:19:24:d2:0a:58:18: e5:34:c7:a6:c9:3e:a8:f4:99:cc:b5:7c:48:f9:2b: b4:32:c8:bc:89:a5:e5:d2:35:95:95:e6:cd:af:ad: c7:b8:28:d8:c0:c8:b0:24:1f:07:2f:37:c1:75:b7: 17:90:45:86:f8:79:56:5a:ab:cd:71:f5:2a:66:b0: e9:c2:b6:16:be:7c:68:9b:70:7c:45:24:c7:d4:7a: 91:95:c0:61:a7:1a:fa:5f:5c:57:ba:d1:d2:4e:f3: 53:16:c7:ac:25:02:9a:58:8e:32:17:a3:c4:55:76: 5d:de:89:75:9e:f3:2e:7a:56:fa:1f:80:81:61:c4: 5d:98:54:42:34:92:d2:5d:30:b0:a1:a1:d2:9d:43: 17:02:9e:f7:21:8f:59:5b:c1:d9:4f:32:07:db:41: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E2:20:EF:03:7B:E2:FC:CC:04:88:35:83:22:D0:B8:A9:CC:79:20 X509v3 Authority Key Identifier: keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.30.94.0/24 Signature Algorithm: sha256WithRSAEncryption 52:53:7c:67:87:d9:8e:45:8a:29:44:21:5a:46:12:3b:fd:7d: dc:07:a6:63:4f:06:c2:99:61:ca:70:95:d0:5f:55:87:3d:31: 7d:ab:2a:af:8e:c9:b2:49:43:23:c6:2c:2b:24:5f:65:2a:e6: c0:04:a8:80:1d:47:9b:64:52:56:4c:1f:f2:9c:2a:ae:89:92: 4d:0d:8d:de:91:70:92:ea:4c:ed:eb:5d:d6:76:24:90:e7:d7: d6:20:b3:2e:e6:60:bc:17:7f:ca:15:ed:e7:64:f2:30:08:e3: c5:53:e0:cb:6e:71:25:8d:ea:42:5d:9f:b4:18:ca:24:0e:92: 2e:3b:a3:54:3a:f5:e1:b2:3c:d4:3a:ec:b2:28:18:9c:5c:6e: dc:80:14:3e:16:2f:3c:e8:34:d1:18:41:aa:47:0d:40:8e:dc: 2d:01:f7:c8:bc:97:56:a0:7a:4a:1b:a6:61:22:7f:7e:76:c0: 4c:bb:23:d4:8c:41:5f:4e:66:ed:ef:63:f6:b1:78:0f:4c:d8: 44:24:6e:5c:30:78:49:c8:90:1f:35:6b:65:35:8b:40:e5:b4: de:77:2b:af:a7:22:04:58:ee:b9:b5:49:14:c7:5a:a7:f3:5a: bf:de:1d:5c:8e:6c:d2:11:55:68:6f:ea:5a:78:45:fb:19:45: 2b:dc:a6:d2 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULFZWprs2EdSEBrEWBAVFnRMdGgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5 NzlEMTA1MzAeFw0yNDAyMjYwMTUxMzJaFw0yNTAyMjQwMTU2MzJaMDMxMTAvBgNV BAMTKEI0RTIyMEVGMDM3QkUyRkNDQzA0ODgzNTgzMjJEMEI4QTlDQzc5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsCoYp1Uhl2BYg+Vdfk6SMUNj0 D/zBhB+c5nEsHNIn6Rpx1y/ULKnGQkqYgmD2BKTMyjz9TiFFJejlPy6cSl3PiCG3 0h98NgI/NesnyNeSZCdQ9rYHnTXUXQ40Bj0nabK29Rkk0gpYGOU0x6bJPqj0mcy1 fEj5K7QyyLyJpeXSNZWV5s2vrce4KNjAyLAkHwcvN8F1txeQRYb4eVZaq81x9Spm sOnCtha+fGibcHxFJMfUepGVwGGnGvpfXFe60dJO81MWx6wlAppYjjIXo8RVdl3e iXWe8y56VvofgIFhxF2YVEI0ktJdMLChodKdQxcCnvchj1lbwdlPMgfbQbsBAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUtOIg7wN74vzMBIg1gyLQuKnMeSAwHwYDVR0j BBgwFoAU8sIkFL8I/Aiwrr9E+vhahZedEFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQ0OGMxMS1mOGQzLTQ1N2QtOGUyMi04NDg4N2FiMjJhMzAvMC9GMkMyMjQxNEJG MDhGQzA4QjBBRUJGNDRGQUY4NUE4NTk3OUQxMDUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5NzlE MTA1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04 ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzEzNDJlMzMzMDJlMzkzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAByHl4wDQYJKoZIhvcN AQELBQADggEBAFJTfGeH2Y5FiilEIVpGEjv9fdwHpmNPBsKZYcpwldBfVYc9MX2r Kq+OybJJQyPGLCskX2Uq5sAEqIAdR5tkUlZMH/KcKq6Jkk0Njd6RcJLqTO3rXdZ2 JJDn19Ygsy7mYLwXf8oV7edk8jAI48VT4MtucSWN6kJdn7QYyiQOki47o1Q69eGy PNQ67LIoGJxcbtyAFD4WLzzoNNEYQapHDUCO3C0B98i8l1agekobpmEif352wEy7 I9SMQV9OZu3vY/axeA9M2EQkblwweEnIkB81a2U1i0DltN53K6+nIgRY7rm1SRTH WqfzWr/eHVyObNIRVWhv6lp4RfsZRSvcptI= -----END CERTIFICATE-----Generated at Fri May 31 10:00:19 2024 by rpki-client on console-ams.rpki-client.org