$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/3136302e32322e32382e302f32332d3234203d3e20313532383031.roa File: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (raw, json) Hash identifier: ED2vOK9zeRK0rdqZ2eLv2tRE69XX1TK/iNLD2rQ69i4= Subject key identifier: 37:3C:26:AA:DE:75:49:69:56:8D:97:89:D5:71:7E:43:A8:57:AB:A5 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 12117ED2D3C9E5C40E3BF59215CFBA2602406303 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/3136302e32322e32382e302f32332d3234203d3e20313532383031.roa Signing time: Sun 09 Jun 2024 11:34:45 +0000 ROA not before: Sun 09 Jun 2024 11:29:45 +0000 ROA not after: Sun 08 Jun 2025 11:34:45 +0000 asID: 152801 IP address blocks: 160.22.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Sep 2024 12:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:11:7e:d2:d3:c9:e5:c4:0e:3b:f5:92:15:cf:ba:26:02:40:63:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Jun 9 11:29:45 2024 GMT Not After : Jun 8 11:34:45 2025 GMT Subject: CN=373C26AADE754969568D9789D5717E43A857ABA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:d9:17:e3:48:1d:73:bf:d8:88:75:a6:2b: 87:7f:3d:55:0b:06:d7:54:5a:e8:2e:3f:8b:82:5b: 87:97:75:04:0d:9f:28:1d:e5:0a:3d:23:33:7b:1a: 0d:1b:ed:5a:87:ab:5c:10:ba:60:78:7a:97:ee:30: df:f4:fe:25:1b:bb:d3:8c:68:91:ed:03:e2:8a:72: 6a:6a:ac:3b:d6:d3:2e:95:0d:56:2a:b6:c1:da:7b: 68:43:8c:0f:cd:72:b1:4e:4e:c9:43:0a:0b:e7:03: f5:de:65:10:0d:68:59:86:ef:bf:e4:a8:0c:5c:19: 8c:b6:51:0b:62:91:74:6a:24:43:49:bb:69:a2:50: 18:7e:c2:19:1c:f0:d7:1e:0f:2e:24:5c:8b:5b:bd: af:0f:37:0c:cb:76:cb:a4:b3:7c:56:12:e2:ea:a3: 2f:40:cd:23:4d:32:a1:65:9f:16:e4:d0:af:f3:00: d1:3f:ef:03:41:ba:19:43:26:e2:56:10:e5:19:0b: bd:f4:7f:e3:bc:cf:79:65:b6:35:fb:4f:8d:9d:38: f3:57:0b:a7:e6:05:99:be:4c:61:da:4b:73:ec:cc: 3d:cd:7d:c8:ca:9a:a4:7c:dd:fc:00:dc:1f:2b:25: 0d:6b:92:a9:ee:b8:5c:fc:ea:20:d2:85:5e:28:42: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3C:26:AA:DE:75:49:69:56:8D:97:89:D5:71:7E:43:A8:57:AB:A5 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/3136302e32322e32382e302f32332d3234203d3e20313532383031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.28.0/23 Signature Algorithm: sha256WithRSAEncryption 66:44:eb:78:d2:49:bd:cb:58:86:c3:63:f0:a2:07:66:35:a3: 94:81:80:bc:b8:64:23:63:cf:55:a6:eb:bc:6e:a9:bd:54:50: a9:d3:7f:be:9d:a5:05:73:c4:39:9d:78:5b:0a:d0:88:7c:f7: ca:b5:95:9d:b2:49:e2:6f:0d:12:e6:90:af:ff:72:c1:74:5b: d7:56:d9:9b:43:74:71:e4:bb:3b:6b:5e:8b:96:9b:b6:c8:7b: 44:ec:3e:e5:80:36:4d:34:2d:7a:b6:e0:ea:8d:64:5c:e0:42: 84:c8:d8:56:94:55:bd:50:93:12:80:a0:e7:0a:b6:78:84:6a: d5:da:ed:94:d1:90:2d:b9:69:68:ab:8b:ce:4e:ce:e1:3b:c0: 67:62:84:b6:8e:3d:bd:43:13:39:46:42:43:2c:45:0c:51:e5: 04:78:24:6e:0b:a2:fa:2a:03:fc:d4:4e:5f:d7:94:d2:45:8e: e1:c1:e4:ef:0b:9c:fa:31:1b:b6:e6:70:c9:dd:d2:fa:fb:a1: 31:78:9d:5c:dd:7d:f8:25:95:f4:40:f2:11:a4:07:58:7d:76: d9:c4:7f:6c:a0:66:5b:3e:2c:60:90:4f:66:df:13:bb:a5:27: 47:1e:44:1c:6e:2c:d2:fa:14:f8:78:42:d7:88:28:4a:13:b0: 65:d2:96:ad -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEhF+0tPJ5cQOO/WSFc+6JgJAYwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNDA2MDkxMTI5NDVaFw0yNTA2MDgxMTM0NDVaMDMxMTAvBgNV BAMTKDM3M0MyNkFBREU3NTQ5Njk1NjhEOTc4OUQ1NzE3RTQzQTg1N0FCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRNkX40gdc7/YiHWmK4d/PVUL BtdUWuguP4uCW4eXdQQNnygd5Qo9IzN7Gg0b7VqHq1wQumB4epfuMN/0/iUbu9OM aJHtA+KKcmpqrDvW0y6VDVYqtsHae2hDjA/NcrFOTslDCgvnA/XeZRANaFmG77/k qAxcGYy2UQtikXRqJENJu2miUBh+whkc8NceDy4kXItbva8PNwzLdsuks3xWEuLq oy9AzSNNMqFlnxbk0K/zANE/7wNBuhlDJuJWEOUZC730f+O8z3lltjX7T42dOPNX C6fmBZm+TGHaS3PszD3NfcjKmqR83fwA3B8rJQ1rkqnuuFz86iDShV4oQshxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUNzwmqt51SWlWjZeJ1XF+Q6hXq6UwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA5MTQyYzgyLWIwNDMtNDZlYi1i MGExLThlMTVmZDVkYWE3OS8wLzMxMzYzMDJlMzIzMjJlMzIzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWHDANBgkqhkiG 9w0BAQsFAAOCAQEAZkTreNJJvctYhsNj8KIHZjWjlIGAvLhkI2PPVabrvG6pvVRQ qdN/vp2lBXPEOZ14WwrQiHz3yrWVnbJJ4m8NEuaQr/9ywXRb11bZm0N0ceS7O2te i5abtsh7ROw+5YA2TTQterbg6o1kXOBChMjYVpRVvVCTEoCg5wq2eIRq1drtlNGQ LblpaKuLzk7O4TvAZ2KEto49vUMTOUZCQyxFDFHlBHgkbgui+ioD/NROX9eU0kWO 4cHk7wuc+jEbtuZwyd3S+vuhMXidXN19+CWV9EDyEaQHWH122cR/bKBmWz4sYJBP Zt8Tu6UnRx5EHG4s0voU+HhC14goShOwZdKWrQ== -----END CERTIFICATE-----Generated at Fri Sep 27 04:59:02 2024 by rpki-client on console-fra.rpki-client.org