$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313430343233.roa File: 3136302e32322e36332e302f32342d3234203d3e20313430343233.roa (raw, json) Hash identifier: Gqj0qctUNvP3Z2GsaHEPHJIPTkcTKosfW+L7Wnqa9nA= Subject key identifier: B1:31:D3:A1:50:BA:0D:6B:95:5B:33:E2:BD:8A:77:76:A7:CA:9F:FC Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 30082B373974F4646C0EAFFCE6BEA673916A7701 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313430343233.roa Signing time: Mon 19 Aug 2024 19:59:22 +0000 ROA not before: Mon 19 Aug 2024 19:54:22 +0000 ROA not after: Mon 18 Aug 2025 19:59:22 +0000 asID: 140423 IP address blocks: 160.22.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:08:2b:37:39:74:f4:64:6c:0e:af:fc:e6:be:a6:73:91:6a:77:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Aug 19 19:54:22 2024 GMT Not After : Aug 18 19:59:22 2025 GMT Subject: CN=B131D3A150BA0D6B955B33E2BD8A7776A7CA9FFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:be:a2:a9:c6:c4:45:78:44:7d:6f:00:1e: ba:c5:b4:58:28:38:01:1a:ba:3e:a3:04:29:03:43: 5d:e7:c0:a3:2b:a6:e0:ff:3b:fb:25:ae:07:14:e7: a7:da:5a:7d:28:8c:9c:3b:86:32:5a:11:a4:4d:d5: 85:6c:01:7e:ff:46:b1:36:55:76:f3:97:4a:f4:c6: 8f:b7:e0:ec:d8:29:2a:9f:14:4b:52:71:db:c1:84: 95:e0:ae:2e:da:f1:1a:f3:2e:61:39:0b:af:43:3e: 3f:1d:dc:fd:f2:3f:15:c6:5e:78:26:8b:4d:19:44: 60:f2:0e:14:3b:f7:32:c1:84:fb:c4:c4:50:ee:3e: 33:c3:ee:5e:c7:94:e7:ea:cd:13:63:a3:a7:6d:46: 59:91:f0:16:10:96:16:f2:2a:13:16:b8:f1:1c:96: 89:77:b0:93:bd:0d:a1:28:b5:1d:f7:ec:3f:64:d2: 7f:22:39:2a:89:72:c2:74:c2:98:7f:9a:cb:5f:c8: 8a:7d:c4:36:fe:46:fe:d8:be:fc:9e:09:16:85:74: 51:a1:b1:3c:6b:db:e7:ff:da:68:97:1c:80:3f:e8: 86:ed:55:81:8a:1c:d9:b8:bd:f1:ae:ee:c4:79:ae: 10:66:cf:c8:22:13:7f:c9:b9:b8:65:c9:e9:19:da: 60:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:31:D3:A1:50:BA:0D:6B:95:5B:33:E2:BD:8A:77:76:A7:CA:9F:FC X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.63.0/24 Signature Algorithm: sha256WithRSAEncryption 90:60:73:a3:c5:7a:76:ef:9f:6d:e1:e7:6b:81:4e:f6:7d:5a: b5:ea:a2:fd:58:46:c4:d5:cb:1e:8e:70:72:71:7b:8e:6e:09: 1d:ad:73:0f:cb:eb:01:16:d0:81:8c:36:50:e5:33:47:fd:e5: 1c:a0:1f:9f:66:c5:c4:25:43:9a:b7:a0:fe:1f:9e:b9:9d:5a: 89:1c:61:3f:23:56:7c:57:53:5a:ff:8c:da:84:03:98:97:23: 48:0b:7e:ac:d5:cd:4d:4b:b7:80:77:7b:5a:fe:fd:d4:8a:58: de:3d:28:50:f6:af:31:32:5e:80:f6:de:0d:42:06:25:bd:fd: fb:2a:4e:6c:59:2b:b5:4d:1b:57:75:55:84:74:b1:07:cb:76: 63:af:bd:74:86:c9:84:08:bd:f8:0d:55:8c:c7:4c:7e:15:80: f9:2f:a5:4f:42:ce:a0:99:d3:45:e4:f6:d5:28:d8:2d:f0:af: 08:01:84:21:6d:18:48:5a:9c:36:cc:c2:10:b3:f8:ef:51:f0: 0e:22:d4:39:28:a7:f4:4f:20:8c:b4:d1:e5:4f:59:c3:0d:ab: 8d:10:9b:81:3e:8b:fe:7e:04:0e:0d:f7:c5:81:44:49:e7:a3: 77:91:43:78:89:d6:26:3e:cb:8b:c1:8b:ff:26:7f:aa:a9:b7: 72:17:25:c6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMAgrNzl09GRsDq/85r6mc5FqdwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNDA4MTkxOTU0MjJaFw0yNTA4MTgxOTU5MjJaMDMxMTAvBgNV BAMTKEIxMzFEM0ExNTBCQTBENkI5NTVCMzNFMkJEOEE3Nzc2QTdDQTlGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuE76iqcbERXhEfW8AHrrFtFgo OAEauj6jBCkDQ13nwKMrpuD/O/slrgcU56faWn0ojJw7hjJaEaRN1YVsAX7/RrE2 VXbzl0r0xo+34OzYKSqfFEtScdvBhJXgri7a8RrzLmE5C69DPj8d3P3yPxXGXngm i00ZRGDyDhQ79zLBhPvExFDuPjPD7l7HlOfqzRNjo6dtRlmR8BYQlhbyKhMWuPEc lol3sJO9DaEotR337D9k0n8iOSqJcsJ0wph/mstfyIp9xDb+Rv7YvvyeCRaFdFGh sTxr2+f/2miXHIA/6IbtVYGKHNm4vfGu7sR5rhBmz8giE3/JubhlyekZ2mBFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsTHToVC6DWuVWzPivYp3dqfKn/wwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYzY3N2ZkLWQ1NjktNGNjNS1h NTYzLTliMGYyNDhiMWFmMS8wLzMxMzYzMDJlMzIzMjJlMzYzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMDM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWPzANBgkqhkiG 9w0BAQsFAAOCAQEAkGBzo8V6du+fbeHna4FO9n1ateqi/VhGxNXLHo5wcnF7jm4J Ha1zD8vrARbQgYw2UOUzR/3lHKAfn2bFxCVDmreg/h+euZ1aiRxhPyNWfFdTWv+M 2oQDmJcjSAt+rNXNTUu3gHd7Wv791IpY3j0oUPavMTJegPbeDUIGJb39+ypObFkr tU0bV3VVhHSxB8t2Y6+9dIbJhAi9+A1VjMdMfhWA+S+lT0LOoJnTReT21SjYLfCv CAGEIW0YSFqcNszCELP471HwDiLUOSin9E8gjLTR5U9Zww2rjRCbgT6L/n4EDg33 xYFESeejd5FDeInWJj7Li8GL/yZ/qqm3chclxg== -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org