$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa File: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (raw, json) Hash identifier: +MtI3Paga95mLoPbEq+emS8LducTIoyRFm8yliuN86s= Subject key identifier: 3D:C4:27:78:0F:FF:A3:2A:B0:9C:94:A8:90:4A:58:0A:5D:34:10:30 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 7938F91137E7B6AAC21BE5CC2BE4677443FD44E2 Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa Signing time: Sat 02 Nov 2024 12:00:00 +0000 ROA not before: Sat 02 Nov 2024 11:55:00 +0000 ROA not after: Sat 01 Nov 2025 12:00:00 +0000 asID: 24536 IP address blocks: 202.146.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:38:f9:11:37:e7:b6:aa:c2:1b:e5:cc:2b:e4:67:74:43:fd:44:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Nov 2 11:55:00 2024 GMT Not After : Nov 1 12:00:00 2025 GMT Subject: CN=3DC427780FFFA32AB09C94A8904A580A5D341030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:c9:b8:38:c0:5e:4e:27:16:b3:b4:11:bf: ba:9e:cd:a4:14:ba:14:8c:b3:69:87:01:9b:1c:14: d5:34:88:c7:57:65:d2:a0:60:79:77:f8:29:4b:c1: d5:b6:bf:2b:17:84:a9:f9:9d:d8:15:36:1c:12:c5: 00:8b:80:24:13:d7:1f:88:1c:88:50:f3:f3:f3:b4: b9:60:4f:88:a1:7f:cc:70:b9:91:65:f9:c2:e0:5d: 1a:be:7b:63:44:f7:af:c8:15:1e:df:4a:d7:08:67: a0:86:4d:29:34:16:fe:70:fd:e4:12:57:ef:cd:08: 4d:45:ee:35:a4:d6:09:16:85:64:d5:fb:86:09:51: e7:26:cd:a3:40:b9:db:99:81:99:04:b1:9e:f3:46: 30:f2:b5:33:b2:0e:3e:95:c8:10:db:7a:b3:ef:d0: 7f:ad:1f:8a:6c:ab:29:cd:e0:45:c5:80:df:6c:cf: 64:9f:ab:87:15:7a:24:e7:9f:86:a8:15:d2:ac:89: 73:52:3f:90:8e:1a:96:01:95:2a:e6:9c:ee:fd:05: 74:91:ac:72:85:b0:2c:8e:97:fd:d0:13:d7:f9:5a: 41:5b:f2:71:c8:a8:f1:91:32:de:f6:11:f5:6e:06: ef:a7:ab:81:0f:34:49:25:9b:a8:4c:eb:8b:b1:78: d3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C4:27:78:0F:FF:A3:2A:B0:9C:94:A8:90:4A:58:0A:5D:34:10:30 X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.146.176.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:96:6e:a7:32:0c:9b:df:a4:96:7f:84:25:7a:ee:18:97:31: 34:fe:58:d7:1e:f3:f3:8d:4e:eb:49:73:d9:b8:24:03:0b:d9: c8:15:e2:26:a7:d4:1f:51:36:9e:4d:02:c1:53:85:07:34:1c: f8:0c:cb:b4:4c:34:6a:35:73:3d:cd:95:18:ed:bf:7d:1f:36: f8:69:5c:40:57:2e:11:4f:b5:5a:ff:52:17:f7:b2:78:f8:9d: 6d:9a:fe:70:57:3e:22:a8:38:bf:b8:65:e5:9c:22:91:a3:47: 4f:63:ad:a1:ee:9a:05:b4:f7:07:76:05:28:7e:bb:c2:a1:db: e4:0b:b8:db:f4:3d:40:c8:63:8b:8a:6e:04:2d:e8:ed:74:34: 48:56:65:89:c7:7f:8d:00:fe:ee:52:c5:f9:f2:e5:e0:95:7b: c9:b3:b2:31:31:23:2b:61:1f:a9:55:18:83:5d:f0:d9:6e:39: 18:7e:5f:da:80:7b:de:83:55:28:03:33:ad:56:f2:d3:97:9f: 28:be:de:4f:4a:02:dd:8e:d2:d7:cf:a0:8b:63:19:16:6b:de: 8b:eb:33:cc:ff:aa:84:de:0e:d5:bf:b6:8e:72:d8:67:92:60: 9d:d8:e7:fd:7a:88:12:c5:44:31:3c:d4:7c:f4:ff:ad:39:80: b2:e9:fc:ef -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeTj5ETfntqrCG+XMK+RndEP9ROIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNDExMDIxMTU1MDBaFw0yNTExMDExMjAwMDBaMDMxMTAvBgNV BAMTKDNEQzQyNzc4MEZGRkEzMkFCMDlDOTRBODkwNEE1ODBBNUQzNDEwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6U8m4OMBeTicWs7QRv7qezaQU uhSMs2mHAZscFNU0iMdXZdKgYHl3+ClLwdW2vysXhKn5ndgVNhwSxQCLgCQT1x+I HIhQ8/PztLlgT4ihf8xwuZFl+cLgXRq+e2NE96/IFR7fStcIZ6CGTSk0Fv5w/eQS V+/NCE1F7jWk1gkWhWTV+4YJUecmzaNAuduZgZkEsZ7zRjDytTOyDj6VyBDberPv 0H+tH4psqynN4EXFgN9sz2Sfq4cVeiTnn4aoFdKsiXNSP5COGpYBlSrmnO79BXSR rHKFsCyOl/3QE9f5WkFb8nHIqPGRMt72EfVuBu+nq4EPNEklm6hM64uxeNOdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPcQneA//oyqwnJSokEpYCl00EDAwHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3Nzc1ZGNmLTI4M2YtNDNjNS1h ZjYwLTA5ZTBkZWJhMDFhMi8wLzMyMzAzMjJlMzEzNDM2MmUzMTM3MzYyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzMjM0MzUzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDypKwMA0GCSqG SIb3DQEBCwUAA4IBAQBMlm6nMgyb36SWf4Qleu4YlzE0/ljXHvPzjU7rSXPZuCQD C9nIFeImp9QfUTaeTQLBU4UHNBz4DMu0TDRqNXM9zZUY7b99Hzb4aVxAVy4RT7Va /1IX97J4+J1tmv5wVz4iqDi/uGXlnCKRo0dPY62h7poFtPcHdgUofrvCodvkC7jb 9D1AyGOLim4ELejtdDRIVmWJx3+NAP7uUsX58uXglXvJs7IxMSMrYR+pVRiDXfDZ bjkYfl/agHveg1UoAzOtVvLTl58ovt5PSgLdjtLXz6CLYxkWa96L6zPM/6qE3g7V v7aOcthnkmCd2Of9eogSxUQxPNR89P+tOYCy6fzv -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net