$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313439373138.roa File: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (raw, json) Hash identifier: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8= Subject key identifier: 00:DB:8B:C0:D2:4E:6B:A9:0C:B5:44:F1:FA:E9:38:13:61:32:42:2A Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 7D14CF41555C87D993956A2474040B5252CB00B3 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313439373138.roa Signing time: Tue 24 Dec 2024 12:42:10 +0000 ROA not before: Tue 24 Dec 2024 12:37:10 +0000 ROA not after: Tue 23 Dec 2025 12:42:10 +0000 asID: 149718 IP address blocks: 160.22.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 08:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:14:cf:41:55:5c:87:d9:93:95:6a:24:74:04:0b:52:52:cb:00:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Dec 24 12:37:10 2024 GMT Not After : Dec 23 12:42:10 2025 GMT Subject: CN=00DB8BC0D24E6BA90CB544F1FAE938136132422A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:7c:50:c7:75:fc:d7:6c:3a:6a:89:13:ab: 0d:ce:6a:43:b7:5f:74:a1:22:ef:31:89:6a:9e:71: 29:b1:60:6f:8e:d0:e0:88:02:22:fa:c8:11:55:9c: 6e:30:1e:49:9c:ce:2f:2a:58:92:3c:e4:90:3a:3e: a5:03:5d:73:aa:57:54:a9:20:ee:f6:58:69:b6:11: d4:72:b6:c5:19:33:8d:c9:c9:75:ad:af:7b:00:02: b4:38:b7:44:80:27:c0:66:d2:a9:f3:ea:bf:b3:aa: 4c:79:0b:96:71:96:e9:e3:35:a4:56:d9:05:a5:58: 33:81:da:5d:87:8c:5f:70:a6:6b:a0:52:9d:9f:55: e8:f7:4a:bb:46:83:ac:ec:c5:3b:18:dc:ae:30:a1: 0e:13:77:29:52:21:a6:0f:17:32:ab:93:c5:3e:93: cc:ab:80:96:d6:14:1c:da:20:29:f6:a3:dc:57:dc: 99:ff:cc:5f:67:d9:2c:6c:bb:bb:e6:5d:18:ff:76: 14:21:41:37:e1:a3:32:5d:dc:7e:82:41:e1:e7:23: b3:50:f6:b1:13:26:d0:14:4d:ca:f2:0c:a1:7f:61: a7:69:fe:9d:e5:ea:3c:0b:b2:db:2a:94:76:50:d6: 9c:25:cf:6f:8c:22:3e:f4:27:8a:82:6d:c1:db:40: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:8B:C0:D2:4E:6B:A9:0C:B5:44:F1:FA:E9:38:13:61:32:42:2A X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313439373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.63.0/24 Signature Algorithm: sha256WithRSAEncryption 95:b8:b1:ab:23:e8:d3:73:50:e3:76:3f:47:0e:0e:6a:6e:fd: 5d:a4:bf:ca:df:ba:68:7e:fb:7c:60:63:b9:b4:c1:1a:34:c7: 71:7f:08:49:47:30:b3:03:d3:f1:62:31:5b:22:3f:d1:4e:7f: 6c:8a:a3:08:72:3e:c1:4a:c6:16:ae:0b:7f:7e:c2:3a:b4:e2: cc:2a:89:ab:65:b0:ff:69:64:c1:08:fa:ab:e5:7e:8d:bd:0f: 69:8d:e1:e3:fb:41:00:dc:21:f9:af:9b:c0:81:70:cc:ec:7e: 85:fc:86:4a:5e:68:9f:43:9d:77:58:3b:3f:89:7b:70:84:91: d1:83:9e:16:88:4a:ed:e9:88:ec:13:08:11:b6:26:58:eb:a9: 79:f0:65:f8:f5:36:cc:db:5e:be:06:ee:7e:88:aa:0b:ed:57: 30:78:f7:95:21:bf:22:3c:f8:0e:3b:c6:00:ec:e0:1a:bc:a8: 34:84:36:e8:32:67:e4:3d:ec:39:dc:7a:f3:cf:e0:63:c1:61: df:01:34:a5:6d:8c:1a:da:e5:55:f2:31:15:a8:15:d7:ed:3d: 90:dc:ee:fd:f3:0f:e2:e7:1d:8c:86:34:9e:47:5a:12:b6:53: 6a:67:85:cb:c0:45:e6:fa:90:c1:22:d3:34:a6:fc:b0:23:4b: 5a:88:b1:d1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfRTPQVVch9mTlWokdAQLUlLLALMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNDEyMjQxMjM3MTBaFw0yNTEyMjMxMjQyMTBaMDMxMTAvBgNV BAMTKDAwREI4QkMwRDI0RTZCQTkwQ0I1NDRGMUZBRTkzODEzNjEzMjQyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRL3xQx3X812w6aokTqw3OakO3 X3ShIu8xiWqecSmxYG+O0OCIAiL6yBFVnG4wHkmczi8qWJI85JA6PqUDXXOqV1Sp IO72WGm2EdRytsUZM43JyXWtr3sAArQ4t0SAJ8Bm0qnz6r+zqkx5C5ZxlunjNaRW 2QWlWDOB2l2HjF9wpmugUp2fVej3SrtGg6zsxTsY3K4woQ4TdylSIaYPFzKrk8U+ k8yrgJbWFBzaICn2o9xX3Jn/zF9n2Sxsu7vmXRj/dhQhQTfhozJd3H6CQeHnI7NQ 9rETJtAUTcryDKF/Yadp/p3l6jwLstsqlHZQ1pwlz2+MIj70J4qCbcHbQOU5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUANuLwNJOa6kMtUTx+uk4E2EyQiowHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYzY3N2ZkLWQ1NjktNGNjNS1h NTYzLTliMGYyNDhiMWFmMS8wLzMxMzYzMDJlMzIzMjJlMzYzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM3MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWPzANBgkqhkiG 9w0BAQsFAAOCAQEAlbixqyPo03NQ43Y/Rw4Oam79XaS/yt+6aH77fGBjubTBGjTH cX8ISUcwswPT8WIxWyI/0U5/bIqjCHI+wUrGFq4Lf37COrTizCqJq2Ww/2lkwQj6 q+V+jb0PaY3h4/tBANwh+a+bwIFwzOx+hfyGSl5on0Odd1g7P4l7cISR0YOeFohK 7emI7BMIEbYmWOupefBl+PU2zNtevgbufoiqC+1XMHj3lSG/Ijz4DjvGAOzgGryo NIQ26DJn5D3sOdx688/gY8Fh3wE0pW2MGtrlVfIxFagV1+09kNzu/fMP4ucdjIY0 nkdaErZTameFy8BF5vqQwSLTNKb8sCNLWoix0Q== -----END CERTIFICATE-----Generated at Wed Feb 19 22:26:09 2025 by rpki-client