$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32332d3233203d3e20313430343233.roa File: 3136302e32322e36322e302f32332d3233203d3e20313430343233.roa (raw, json) Hash identifier: Bcr7Ymz6XLJUcuByrFOes7cK8UBTtLU1HYiy8KnthEo= Subject key identifier: 50:2A:8E:4A:CA:36:26:5C:58:E9:42:68:39:4A:D9:DE:4A:3B:60:D5 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 56C8323FB46F11369CA2A00A32190ACE660CE90D Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32332d3233203d3e20313430343233.roa Signing time: Mon 19 Aug 2024 19:57:23 +0000 ROA not before: Mon 19 Aug 2024 19:52:23 +0000 ROA not after: Mon 18 Aug 2025 19:57:23 +0000 asID: 140423 IP address blocks: 160.22.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c8:32:3f:b4:6f:11:36:9c:a2:a0:0a:32:19:0a:ce:66:0c:e9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Aug 19 19:52:23 2024 GMT Not After : Aug 18 19:57:23 2025 GMT Subject: CN=502A8E4ACA36265C58E94268394AD9DE4A3B60D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c3:f6:53:a0:be:6b:7a:04:f6:56:97:c4:b5: fc:2a:4e:11:db:9d:6f:f7:81:71:bf:84:b0:a3:25: f1:38:44:2a:96:b5:b3:62:49:8c:be:9d:3d:9d:d9: dd:18:85:1f:1c:36:a0:ce:64:d1:78:ea:43:85:d0: f6:54:0b:59:8a:fc:3a:ab:8b:b5:76:17:d7:6a:ac: ee:82:e8:a2:69:eb:10:e0:1a:e7:11:76:aa:f6:88: 23:91:3d:79:5f:00:a6:4a:a0:84:3a:80:99:85:e9: 40:da:de:fe:5f:c9:fd:b4:0a:e6:58:73:e7:7c:c2: ce:f0:32:6d:0e:09:49:12:64:ea:e8:de:f3:94:05: 13:28:06:e6:2e:d3:63:fc:e8:a8:2b:10:74:b6:19: 5a:d7:3d:b5:2e:2c:0f:2a:68:76:7a:d0:d1:ce:18: f4:4d:e5:9c:cc:71:3e:75:7a:86:83:cc:f3:83:d4: 41:27:88:8e:40:35:9c:93:e5:ec:a8:5c:6b:c8:0e: 76:73:9b:4f:f3:b3:54:e4:e7:a0:d0:e7:f9:54:15: 04:9a:b5:65:ec:eb:a2:9d:cf:25:79:2d:46:be:78: 9e:1b:f2:1a:e2:1d:57:61:30:3a:d5:b3:70:c7:5a: 34:6e:a7:7e:e9:ab:66:40:34:19:ba:3d:28:90:6b: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2A:8E:4A:CA:36:26:5C:58:E9:42:68:39:4A:D9:DE:4A:3B:60:D5 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32332d3233203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.62.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:e8:3d:cf:ff:e5:c5:a5:aa:d0:45:1e:9a:d8:45:24:33:94: a2:44:39:ec:93:7d:61:1b:f4:69:10:09:2a:6e:4b:8f:e0:db: be:10:be:fd:15:2a:05:76:26:33:d3:2c:4c:9f:83:7a:40:6d: 79:09:82:6a:5b:87:63:64:f6:a0:0c:2c:a6:ac:0f:46:b5:a4: c4:31:db:6b:42:16:f9:c4:f9:ed:c2:35:f3:45:eb:df:57:d3: 5c:57:27:df:ef:3b:24:eb:93:85:2d:8d:3c:9b:c1:b5:d7:3c: b8:8c:37:27:98:1c:69:46:31:b0:25:d3:e2:4d:d2:f1:a7:52: 2a:5b:3e:7c:49:9a:d7:12:63:da:a6:58:c3:11:0e:40:c5:57: e8:80:9b:22:24:04:12:b2:00:22:3e:1a:f0:b2:ac:48:d6:06: c5:3e:03:5f:23:c6:7c:b5:c7:36:d2:97:8e:84:c3:e0:b6:47: e9:a1:3b:d6:81:81:72:56:00:15:ca:04:c4:63:3f:a9:53:fd: 14:8c:bf:dc:e4:3c:e6:77:07:bd:85:be:f3:14:c5:49:3a:30: 26:59:ad:8b:65:7e:a6:f3:c2:2f:15:01:90:a6:05:de:62:d2: 9f:51:f9:92:41:94:7b:4a:4c:a1:68:f1:2d:ca:65:53:a8:57: 12:a0:22:93 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVsgyP7RvETacoqAKMhkKzmYM6Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNDA4MTkxOTUyMjNaFw0yNTA4MTgxOTU3MjNaMDMxMTAvBgNV BAMTKDUwMkE4RTRBQ0EzNjI2NUM1OEU5NDI2ODM5NEFEOURFNEEzQjYwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfw/ZToL5regT2VpfEtfwqThHb nW/3gXG/hLCjJfE4RCqWtbNiSYy+nT2d2d0YhR8cNqDOZNF46kOF0PZUC1mK/Dqr i7V2F9dqrO6C6KJp6xDgGucRdqr2iCORPXlfAKZKoIQ6gJmF6UDa3v5fyf20CuZY c+d8ws7wMm0OCUkSZOro3vOUBRMoBuYu02P86KgrEHS2GVrXPbUuLA8qaHZ60NHO GPRN5ZzMcT51eoaDzPOD1EEniI5ANZyT5eyoXGvIDnZzm0/zs1Tk56DQ5/lUFQSa tWXs66KdzyV5LUa+eJ4b8hriHVdhMDrVs3DHWjRup37pq2ZANBm6PSiQay97AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUUCqOSso2JlxY6UJoOUrZ3ko7YNUwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYzY3N2ZkLWQ1NjktNGNjNS1h NTYzLTliMGYyNDhiMWFmMS8wLzMxMzYzMDJlMzIzMjJlMzYzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzQzMDM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWPjANBgkqhkiG 9w0BAQsFAAOCAQEAH+g9z//lxaWq0EUemthFJDOUokQ57JN9YRv0aRAJKm5Lj+Db vhC+/RUqBXYmM9MsTJ+DekBteQmCaluHY2T2oAwspqwPRrWkxDHba0IW+cT57cI1 80Xr31fTXFcn3+87JOuThS2NPJvBtdc8uIw3J5gcaUYxsCXT4k3S8adSKls+fEma 1xJj2qZYwxEOQMVX6ICbIiQEErIAIj4a8LKsSNYGxT4DXyPGfLXHNtKXjoTD4LZH 6aE71oGBclYAFcoExGM/qVP9FIy/3OQ85ncHvYW+8xTFSTowJlmti2V+pvPCLxUB kKYF3mLSn1H5kkGUe0pMoWjxLcplU6hXEqAikw== -----END CERTIFICATE-----Generated at Sat Nov 23 21:51:28 2024 by rpki-client on console-fra.rpki-client.org