$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa File: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (raw, json) Hash identifier: Mr9+qsjEnJb2cnSB3AyArFy2+SWtmXNIU1+g9FxOCh0= Subject key identifier: 6F:29:47:5C:41:E4:38:5D:E6:0C:7D:D7:03:22:19:0B:68:B9:75:12 Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 2C9228446F15360491F93E00DDC233E582F93D22 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa Signing time: Thu 19 Sep 2024 03:11:00 +0000 ROA not before: Thu 19 Sep 2024 03:06:00 +0000 ROA not after: Thu 18 Sep 2025 03:11:00 +0000 asID: 153086 IP address blocks: 160.25.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:92:28:44:6f:15:36:04:91:f9:3e:00:dd:c2:33:e5:82:f9:3d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Sep 19 03:06:00 2024 GMT Not After : Sep 18 03:11:00 2025 GMT Subject: CN=6F29475C41E4385DE60C7DD70322190B68B97512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:78:a4:97:ff:d8:9a:03:1d:cd:e9:cc:49:ad: d6:e1:4e:57:13:e7:57:98:10:ef:3e:06:62:bb:97: c2:f2:4c:27:22:ca:c0:f3:36:e4:95:e6:ff:ea:b3: 96:76:7f:95:f5:b3:0c:64:50:0f:7a:04:6e:c0:02: e6:0a:0f:97:86:03:0b:cb:0d:34:89:c5:54:57:b0: 0e:4c:d8:a5:5f:45:ea:7c:a2:ee:cf:9d:ea:e0:bc: 69:31:48:38:07:e5:1f:ba:90:0f:fe:08:11:3a:ee: db:70:26:06:88:ef:16:0b:8c:0b:90:ae:bb:b9:0b: e2:33:0e:85:f4:44:cb:31:09:57:f1:b6:31:d0:49: 1c:b5:39:a6:6a:fd:f9:49:0e:59:ae:f4:26:5b:9a: 0f:37:9e:b8:d2:80:b7:74:68:fd:1d:13:97:5a:59: 01:70:4e:80:32:9a:19:44:b0:fb:72:98:c9:5f:f9: fc:e9:4d:e8:62:e0:5d:13:f2:45:99:14:38:fe:e9: 0b:d4:28:dc:34:26:0e:dc:d7:49:7b:73:7d:d5:f3: 5d:40:0a:30:65:4e:95:14:73:cd:67:99:90:56:9c: 16:dc:9a:60:98:2a:40:50:ea:44:a5:af:82:a5:4f: 0a:a0:d7:89:64:80:f0:f9:4d:a9:fb:49:ec:88:cb: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:29:47:5C:41:E4:38:5D:E6:0C:7D:D7:03:22:19:0B:68:B9:75:12 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.218.0/24 Signature Algorithm: sha256WithRSAEncryption b5:2a:6f:3e:3f:38:17:f8:6b:c8:61:40:af:49:e2:50:1e:7b: 55:34:46:cf:60:94:1e:15:b1:bf:0e:7f:ef:19:b0:45:76:fd: ae:cf:2b:75:5e:e8:c8:0a:95:8e:b8:8f:ee:34:60:79:8b:e2: 42:2f:11:4c:9c:67:bf:06:7e:18:b8:b1:58:11:a2:98:fa:e0: 5f:54:7e:5e:5b:c8:d2:64:de:16:ca:ea:65:22:63:99:87:25: f8:ae:32:05:ab:65:81:8d:6d:4a:4c:b5:39:52:5f:20:cf:03: 3d:6b:09:36:44:2e:5a:6c:5d:32:5b:1a:cb:b8:5a:5d:72:4a: 25:93:22:29:08:70:53:e0:6d:b1:07:c4:b3:4f:e0:c9:07:02: 39:e3:cd:e4:41:80:2c:a2:09:52:3e:ad:66:c2:30:d7:da:82: bc:75:25:a1:08:90:45:91:b3:5e:bc:ad:b6:fb:71:ea:91:74: 8c:f8:c5:06:75:32:5e:a1:3d:ac:60:6e:7a:f7:04:7a:65:65: 8d:2f:be:7f:b8:47:b4:0b:87:dc:4c:e6:cb:9a:c6:32:d6:3e: 07:ab:16:16:6a:d8:e6:3c:c1:31:1f:8f:f7:6f:cb:e0:18:bf: e6:ad:24:4d:c5:90:ff:b2:7d:eb:2e:24:11:bd:75:c4:44:4e: 6c:85:d3:9d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULJIoRG8VNgSR+T4A3cIz5YL5PSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNDA5MTkwMzA2MDBaFw0yNTA5MTgwMzExMDBaMDMxMTAvBgNV BAMTKDZGMjk0NzVDNDFFNDM4NURFNjBDN0RENzAzMjIxOTBCNjhCOTc1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeKSX/9iaAx3N6cxJrdbhTlcT 51eYEO8+BmK7l8LyTCciysDzNuSV5v/qs5Z2f5X1swxkUA96BG7AAuYKD5eGAwvL DTSJxVRXsA5M2KVfRep8ou7PnergvGkxSDgH5R+6kA/+CBE67ttwJgaI7xYLjAuQ rru5C+IzDoX0RMsxCVfxtjHQSRy1OaZq/flJDlmu9CZbmg83nrjSgLd0aP0dE5da WQFwToAymhlEsPtymMlf+fzpTehi4F0T8kWZFDj+6QvUKNw0Jg7c10l7c33V811A CjBlTpUUc81nmZBWnBbcmmCYKkBQ6kSlr4KlTwqg14lkgPD5Tan7SeyIy/P1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbylHXEHkOF3mDH3XAyIZC2i5dRIwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhZjA3ZjE4LTVjNDktNDEyOS1h YTUzLTcwODVjY2Q1N2I2My8wLzMxMzYzMDJlMzIzNTJlMzIzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBnaMA0GCSqG SIb3DQEBCwUAA4IBAQC1Km8+PzgX+GvIYUCvSeJQHntVNEbPYJQeFbG/Dn/vGbBF dv2uzyt1XujICpWOuI/uNGB5i+JCLxFMnGe/Bn4YuLFYEaKY+uBfVH5eW8jSZN4W yuplImOZhyX4rjIFq2WBjW1KTLU5Ul8gzwM9awk2RC5abF0yWxrLuFpdckolkyIp CHBT4G2xB8SzT+DJBwI5483kQYAsoglSPq1mwjDX2oK8dSWhCJBFkbNevK22+3Hq kXSM+MUGdTJeoT2sYG569wR6ZWWNL75/uEe0C4fcTObLmsYy1j4HqxYWatjmPMEx H4/3b8vgGL/mrSRNxZD/sn3rLiQRvXXERE5shdOd -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org