$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa File: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (raw, json) Hash identifier: n+/1ZzwG4EgdsUBMybZxOh7Up3KgHvNTAiUa7eDfLu8= Subject key identifier: 87:D3:C0:59:C4:3E:00:A0:2B:48:BF:30:1B:B9:6B:90:28:D5:25:FC Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 15E0A9B81F12532915BA606BAEDCEDA2C2518610 Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa Signing time: Tue 25 Jun 2024 14:15:12 +0000 ROA not before: Tue 25 Jun 2024 14:10:12 +0000 ROA not after: Tue 24 Jun 2025 14:15:12 +0000 asID: 152800 IP address blocks: 160.22.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e0:a9:b8:1f:12:53:29:15:ba:60:6b:ae:dc:ed:a2:c2:51:86:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Jun 25 14:10:12 2024 GMT Not After : Jun 24 14:15:12 2025 GMT Subject: CN=87D3C059C43E00A02B48BF301BB96B9028D525FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:0a:3a:eb:95:8c:10:47:2a:43:42:d5:b7: 56:a2:63:72:56:b7:fb:10:0b:17:a8:60:ba:fc:57: f1:f7:a7:a8:27:15:62:a9:1f:ac:a2:a0:da:c6:a1: 43:88:aa:19:74:b9:40:23:80:6b:cd:1d:29:ef:18: 8c:ae:d6:57:35:62:bd:6a:4f:2b:b3:e9:a4:05:66: 2a:2b:c1:a7:4d:af:c2:88:7d:10:0d:d1:85:45:01: 35:32:2e:77:90:01:8d:7c:6b:4a:09:2a:9f:94:6b: ad:a9:bd:90:76:54:1f:76:50:1c:b4:6b:e2:84:bd: 14:01:2c:33:d5:e9:ed:13:0c:1b:75:7e:83:4e:2e: 9d:1d:42:d4:d6:f1:5e:cd:11:c5:6a:ab:64:af:14: 58:c2:4a:4c:d7:f4:c6:59:70:f6:22:ad:f8:1d:5c: 43:51:2b:fc:c6:ea:b0:ae:35:c6:b5:ce:33:44:57: 5f:76:2e:27:cc:87:42:7a:4c:4f:17:80:f9:c0:9e: ce:1d:a6:d1:0f:29:b5:6a:8c:d8:f5:08:71:23:4e: 74:ec:17:7c:6f:db:e8:10:49:42:72:81:c6:f6:aa: 38:83:1c:43:c8:29:7d:ba:d5:2e:f5:39:f5:b8:24: 25:b5:c5:99:e9:ef:fa:79:a0:14:b0:1c:b0:81:16: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D3:C0:59:C4:3E:00:A0:2B:48:BF:30:1B:B9:6B:90:28:D5:25:FC X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.25.0/24 Signature Algorithm: sha256WithRSAEncryption 13:45:63:ae:3e:7e:bc:d4:a5:f4:ba:a4:4e:95:49:c8:89:8f: 20:d8:f8:16:4f:19:fc:08:25:4f:19:e4:06:ce:02:34:63:0f: 54:4e:25:98:02:50:89:ac:83:cc:7c:ad:e3:a2:fd:ce:c7:e1: 07:69:6d:03:64:78:36:3b:b6:59:cd:c4:af:87:ec:e9:f9:c9: bc:0e:48:60:59:54:42:fe:49:0c:43:5d:8a:37:c7:64:23:9a: 25:f3:9e:f1:3a:56:2d:5e:54:0a:59:4d:83:15:f1:82:67:fb: 97:46:42:56:99:1d:c6:e6:74:32:ff:2a:7f:70:6b:8b:82:e2: fa:a6:73:b6:36:d3:a3:b9:9f:48:f8:b6:d6:f4:82:82:d9:6a: aa:8b:c0:06:73:9e:ba:df:cc:53:e5:62:eb:9b:d4:e8:7f:94: 29:39:62:8e:09:67:9b:8a:64:60:79:c5:ef:71:53:17:f2:43: 47:b0:d1:cf:04:0c:be:f7:41:4a:75:aa:15:0d:57:63:0a:69: fc:81:28:15:dc:8c:55:30:3b:2e:1c:5b:ca:a2:b1:87:13:63: 60:81:53:df:9a:ff:23:2a:0d:bc:3a:14:4a:1b:3e:bf:f0:37: 7c:8d:90:50:bd:fe:9f:5e:0a:b6:e2:92:ca:a3:32:6b:2d:a0: 27:77:ef:50 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFeCpuB8SUykVumBrrtztosJRhhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNDA2MjUxNDEwMTJaFw0yNTA2MjQxNDE1MTJaMDMxMTAvBgNV BAMTKDg3RDNDMDU5QzQzRTAwQTAyQjQ4QkYzMDFCQjk2QjkwMjhENTI1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74Qo665WMEEcqQ0LVt1aiY3JW t/sQCxeoYLr8V/H3p6gnFWKpH6yioNrGoUOIqhl0uUAjgGvNHSnvGIyu1lc1Yr1q Tyuz6aQFZiorwadNr8KIfRAN0YVFATUyLneQAY18a0oJKp+Ua62pvZB2VB92UBy0 a+KEvRQBLDPV6e0TDBt1foNOLp0dQtTW8V7NEcVqq2SvFFjCSkzX9MZZcPYirfgd XENRK/zG6rCuNca1zjNEV192LifMh0J6TE8XgPnAns4dptEPKbVqjNj1CHEjTnTs F3xv2+gQSUJygcb2qjiDHEPIKX261S71OfW4JCW1xZnp7/p5oBSwHLCBFkW5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUh9PAWcQ+AKArSL8wG7lrkCjVJfwwHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2ZGEwZTgyLTA3NjQtNDVkMy1h ZWQ5LWZkMjU4ZTcyYjZlMi8wLzMxMzYzMDJlMzIzMjJlMzIzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWGTANBgkqhkiG 9w0BAQsFAAOCAQEAE0Vjrj5+vNSl9LqkTpVJyImPINj4Fk8Z/AglTxnkBs4CNGMP VE4lmAJQiayDzHyt46L9zsfhB2ltA2R4Nju2Wc3Er4fs6fnJvA5IYFlUQv5JDENd ijfHZCOaJfOe8TpWLV5UCllNgxXxgmf7l0ZCVpkdxuZ0Mv8qf3Bri4Li+qZztjbT o7mfSPi21vSCgtlqqovABnOeut/MU+Vi65vU6H+UKTlijglnm4pkYHnF73FTF/JD R7DRzwQMvvdBSnWqFQ1XYwpp/IEoFdyMVTA7LhxbyqKxhxNjYIFT35r/IyoNvDoU Shs+v/A3fI2QUL3+n14KtuKSyqMyay2gJ3fvUA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:40 2024 by rpki-client on console-ams.rpki-client.org