$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32342e302f32342d3234203d3e20313532383030.roa File: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (raw, json) Hash identifier: ACNBkKr7zhAeXvXwZZLW9qIPFLxCT0Ploz7dXJTXEoQ= Subject key identifier: 72:40:C1:A2:8C:04:28:8C:F3:73:D5:53:35:45:7E:2C:06:EA:A0:98 Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 6B53833973700C3DAB319AECFE91099637FB37D3 Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32342e302f32342d3234203d3e20313532383030.roa Signing time: Tue 25 Jun 2024 14:13:33 +0000 ROA not before: Tue 25 Jun 2024 14:08:33 +0000 ROA not after: Tue 24 Jun 2025 14:13:33 +0000 asID: 152800 IP address blocks: 160.22.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:53:83:39:73:70:0c:3d:ab:31:9a:ec:fe:91:09:96:37:fb:37:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Jun 25 14:08:33 2024 GMT Not After : Jun 24 14:13:33 2025 GMT Subject: CN=7240C1A28C04288CF373D55335457E2C06EAA098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:75:ff:b2:2e:ae:27:0d:26:f7:63:02:08: 26:bd:f3:4c:9f:8d:98:62:f1:6e:d8:4c:61:f0:70: 40:52:d9:80:1f:3a:bd:eb:0b:88:26:71:97:40:12: ab:34:c2:d4:e3:f7:1f:30:54:67:46:a4:80:2d:53: d1:a7:e8:04:b6:84:b5:a2:f2:2e:5b:b4:45:bf:e1: 06:95:21:09:be:87:d0:ec:4d:95:67:22:af:ed:16: 61:b5:59:ca:b9:0c:bb:c4:d6:61:f2:db:40:85:0e: 95:97:22:f0:ba:17:f2:72:83:48:cb:8d:0b:74:84: c7:37:9b:cd:58:96:b4:20:4c:39:4b:bf:ac:43:a2: 84:3e:0d:64:35:76:1c:25:88:d5:ce:eb:16:b7:0a: c7:77:74:5b:71:1c:77:3e:70:a1:bb:2c:e5:fb:4b: 22:da:22:3c:94:a6:68:3d:3a:2a:dd:e8:5d:85:c6: 9a:82:87:4d:e6:b3:f6:a8:5a:7b:b5:ce:21:7f:ce: 87:d8:f5:81:8d:c3:9c:01:be:16:5d:b3:7c:4f:8b: 78:c1:05:7a:9a:52:07:1c:26:da:7b:11:4d:28:a2: a9:67:c7:86:05:b1:c8:fb:a4:c0:62:73:a1:8b:d0: 9d:0f:ab:4e:94:99:0e:55:2f:1e:3e:25:01:0b:35: 0c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:40:C1:A2:8C:04:28:8C:F3:73:D5:53:35:45:7E:2C:06:EA:A0:98 X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32342e302f32342d3234203d3e20313532383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.24.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:a0:2f:ab:c8:d3:5b:7d:fe:92:a5:1f:e2:03:78:ba:f5:49: f5:18:fe:ab:f1:b3:14:46:9f:85:c4:57:a6:35:92:91:7e:d3: 65:2d:29:6c:6e:e1:89:99:7b:5c:97:ba:88:17:2f:ce:b6:01: 20:99:22:00:0c:2d:7c:d4:3d:ec:0a:f4:da:36:54:f3:ca:45: 74:7d:d4:58:5f:9e:96:ae:e1:7b:0d:af:bc:f2:5e:5e:51:2e: 5a:05:50:ee:85:0c:81:29:33:9e:5f:8b:5f:4a:1b:4a:7a:50: d5:3d:20:3a:92:c4:48:9e:c9:37:bc:98:53:7e:85:8d:97:f2: 9f:42:4e:40:1b:45:a1:c0:18:bc:9b:f2:3b:86:c4:98:41:b6: 13:cd:38:c9:a8:39:6a:47:5c:05:b9:05:7c:d7:b9:82:28:67: cc:f9:5b:6f:f3:df:19:87:92:1e:c0:62:eb:a8:10:06:4f:ae: 59:49:b3:96:c2:89:42:9e:3d:c2:76:7c:66:d7:c5:6e:04:66: b4:99:9a:1e:19:b2:bc:86:30:49:b2:05:50:45:08:e4:40:fc: 1f:07:f9:6b:44:1e:12:a8:97:5d:9a:21:70:a4:aa:97:19:b9: 10:87:4a:61:f9:85:d0:2c:c1:e5:6e:50:01:7b:31:32:c6:82: 97:45:87:05 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUa1ODOXNwDD2rMZrs/pEJljf7N9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNDA2MjUxNDA4MzNaFw0yNTA2MjQxNDEzMzNaMDMxMTAvBgNV BAMTKDcyNDBDMUEyOEMwNDI4OENGMzczRDU1MzM1NDU3RTJDMDZFQUEwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnXX/si6uJw0m92MCCCa980yf jZhi8W7YTGHwcEBS2YAfOr3rC4gmcZdAEqs0wtTj9x8wVGdGpIAtU9Gn6AS2hLWi 8i5btEW/4QaVIQm+h9DsTZVnIq/tFmG1Wcq5DLvE1mHy20CFDpWXIvC6F/Jyg0jL jQt0hMc3m81YlrQgTDlLv6xDooQ+DWQ1dhwliNXO6xa3Csd3dFtxHHc+cKG7LOX7 SyLaIjyUpmg9Oird6F2FxpqCh03ms/aoWnu1ziF/zofY9YGNw5wBvhZds3xPi3jB BXqaUgccJtp7EU0ooqlnx4YFscj7pMBic6GL0J0Pq06UmQ5VLx4+JQELNQyvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUckDBoowEKIzzc9VTNUV+LAbqoJgwHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2ZGEwZTgyLTA3NjQtNDVkMy1h ZWQ5LWZkMjU4ZTcyYjZlMi8wLzMxMzYzMDJlMzIzMjJlMzIzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWGDANBgkqhkiG 9w0BAQsFAAOCAQEAe6Avq8jTW33+kqUf4gN4uvVJ9Rj+q/GzFEafhcRXpjWSkX7T ZS0pbG7hiZl7XJe6iBcvzrYBIJkiAAwtfNQ97Ar02jZU88pFdH3UWF+elq7hew2v vPJeXlEuWgVQ7oUMgSkznl+LX0obSnpQ1T0gOpLESJ7JN7yYU36FjZfyn0JOQBtF ocAYvJvyO4bEmEG2E804yag5akdcBbkFfNe5gihnzPlbb/PfGYeSHsBi66gQBk+u WUmzlsKJQp49wnZ8ZtfFbgRmtJmaHhmyvIYwSbIFUEUI5ED8Hwf5a0QeEqiXXZoh cKSqlxm5EIdKYfmF0CzB5W5QAXsxMsaCl0WHBQ== -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:20 2024 by rpki-client on console-fra.rpki-client.org