$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e32302e3135342e302f32332d3234203d3e20313336303532.roa File: 3135372e32302e3135342e302f32332d3234203d3e20313336303532.roa (raw, json) Hash identifier: +Pb/b5qXfq7+EBvm8++L3HvAbWeoHe61vi3EC6bD6ug= Subject key identifier: CA:B8:4A:ED:3A:87:CB:03:BD:1F:3A:47:88:70:06:11:1A:02:C2:AB Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0F4740B917C01F671A293CA0391DFF6E82D3BD97 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e32302e3135342e302f32332d3234203d3e20313336303532.roa Signing time: Thu 14 Mar 2024 03:45:39 +0000 ROA not before: Thu 14 Mar 2024 03:40:39 +0000 ROA not after: Thu 13 Mar 2025 03:45:39 +0000 asID: 136052 IP address blocks: 157.20.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 21:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:47:40:b9:17:c0:1f:67:1a:29:3c:a0:39:1d:ff:6e:82:d3:bd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 14 03:40:39 2024 GMT Not After : Mar 13 03:45:39 2025 GMT Subject: CN=CAB84AED3A87CB03BD1F3A47887006111A02C2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:2a:c7:ef:eb:7b:ee:c8:be:b7:70:49:08: d3:a3:cf:38:11:3f:31:1a:c4:68:fb:92:60:76:8e: d4:f3:fa:a3:ee:b5:eb:69:d1:fc:66:a3:b0:ee:88: e9:fd:a8:e0:09:da:0b:2f:99:52:4c:da:46:91:b5: e3:81:5e:9f:a2:d4:95:ca:0e:7c:89:b3:e2:85:60: a7:ed:55:33:cf:d4:ee:7d:e0:31:60:da:8c:f8:c1: 13:e8:46:3c:26:54:7f:cf:de:c2:2b:35:31:df:1d: 2a:7e:35:51:96:37:c2:1c:15:d2:72:28:c8:d3:6d: 14:e8:c5:0c:bd:4b:ff:bd:04:0d:61:bd:27:1f:d1: 10:64:f0:83:06:f0:f8:c0:36:33:73:85:af:d8:b2: f1:db:68:ce:61:b0:c5:0d:2d:c9:a7:ce:f8:22:41: 06:90:c9:fc:b1:02:a9:27:a0:33:6e:4f:3b:d1:f5: eb:45:93:61:30:f8:b1:39:3a:28:4f:e1:4d:80:ba: 0d:6a:ca:0d:40:2e:5f:c1:67:c6:64:d8:93:3b:4f: bc:6f:ce:e6:6d:13:af:e4:64:48:e9:8c:63:53:78: 9c:80:c9:d1:d9:17:c8:b6:d3:14:25:26:3e:9c:a4: d9:4e:cf:67:e3:8f:50:ef:bf:4e:29:0c:d4:29:c3: b7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B8:4A:ED:3A:87:CB:03:BD:1F:3A:47:88:70:06:11:1A:02:C2:AB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e32302e3135342e302f32332d3234203d3e20313336303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.154.0/23 Signature Algorithm: sha256WithRSAEncryption 12:84:4f:f8:c7:b7:47:c3:06:8a:a3:65:34:79:4d:a6:d0:c1: 4a:95:3e:07:de:11:30:51:4d:0c:0e:4e:bb:64:1a:45:e9:35: c0:f1:e3:12:0f:59:36:9b:dd:04:34:6e:bd:09:96:19:e8:87: 7e:71:8f:f9:2e:dc:cf:59:56:f6:93:ab:9f:fb:13:e4:6f:84: d1:d2:3a:17:65:50:25:ce:bb:82:c8:88:92:28:30:e9:b4:74: a8:76:1a:2a:fa:72:78:24:22:cb:5f:14:cf:7a:2d:f5:64:85: 32:4d:18:25:12:f4:d4:86:b7:85:03:a9:22:92:fe:f4:7d:72: 13:54:71:bb:18:a5:a6:4a:6d:89:c6:b7:12:fa:9f:41:6d:28: c4:c1:5c:0d:24:08:11:bf:2e:0c:fd:20:85:99:bb:99:3c:6d: 1d:39:a2:78:14:37:37:70:b3:b3:b4:c4:42:f8:28:ab:40:62: ac:74:09:cd:37:6d:e6:2d:01:d4:e6:3a:74:5e:c0:41:5f:cb: b5:83:a7:3e:d5:20:de:46:d5:07:d1:d1:ca:89:d2:e5:bc:ab: a6:cf:f2:f8:89:31:68:ee:f5:c4:be:3a:af:85:6d:24:bf:91: a7:2e:2f:cd:8d:c0:96:bd:48:c9:6f:a8:ca:ce:f8:35:8a:b2: 9b:91:19:0d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUD0dAuRfAH2caKTygOR3/boLTvZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMxNDAzNDAzOVoX DTI1MDMxMzAzNDUzOVowMzExMC8GA1UEAxMoQ0FCODRBRUQzQTg3Q0IwM0JEMUYz QTQ3ODg3MDA2MTExQTAyQzJBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKY3Ksfv63vuyL63cEkI06PPOBE/MRrEaPuSYHaO1PP6o+6162nR/GajsO6I 6f2o4AnaCy+ZUkzaRpG144Fen6LUlcoOfImz4oVgp+1VM8/U7n3gMWDajPjBE+hG PCZUf8/ewis1Md8dKn41UZY3whwV0nIoyNNtFOjFDL1L/70EDWG9Jx/REGTwgwbw +MA2M3OFr9iy8dtozmGwxQ0tyafO+CJBBpDJ/LECqSegM25PO9H160WTYTD4sTk6 KE/hTYC6DWrKDUAuX8FnxmTYkztPvG/O5m0Tr+RkSOmMY1N4nIDJ0dkXyLbTFCUm Ppyk2U7PZ+OPUO+/TikM1CnDtycCAwEAAaOCAgEwggH9MB0GA1UdDgQWBBTKuErt OofLA70fOkeIcAYRGgLCqzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNTM3MmUz MjMwMmUzMTM1MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzMDM1MzIu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAGdFJowDQYJKoZIhvcNAQELBQADggEBABKET/jHt0fDBoqjZTR5 TabQwUqVPgfeETBRTQwOTrtkGkXpNcDx4xIPWTab3QQ0br0Jlhnoh35xj/ku3M9Z VvaTq5/7E+RvhNHSOhdlUCXOu4LIiJIoMOm0dKh2Gir6cngkIstfFM96LfVkhTJN GCUS9NSGt4UDqSKS/vR9chNUcbsYpaZKbYnGtxL6n0FtKMTBXA0kCBG/Lgz9IIWZ u5k8bR05ongUNzdws7O0xEL4KKtAYqx0Cc03beYtAdTmOnRewEFfy7WDpz7VIN5G 1QfR0cqJ0uW8q6bP8viJMWju9cS+Oq+FbSS/kacuL82NwJa9SMlvqMrO+DWKspuR GQ0= -----END CERTIFICATE-----Generated at Wed May 1 19:11:09 2024 by rpki-client on console-fra.rpki-client.org