$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa File: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (raw, json) Hash identifier: JTPBl2xXnGWTl8ZrptZDVbUzFDyRS3/D40BYMh+0i4U= Subject key identifier: 7C:C5:6A:9B:D1:8D:96:D8:86:A7:37:2E:47:1B:4A:5A:7C:F5:9E:A5 Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 05ADCA20FE9CB01E5E8A961EF559BE6AF38F16B8 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa Signing time: Thu 19 Sep 2024 03:11:36 +0000 ROA not before: Thu 19 Sep 2024 03:06:36 +0000 ROA not after: Thu 18 Sep 2025 03:11:36 +0000 asID: 153086 IP address blocks: 160.25.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ad:ca:20:fe:9c:b0:1e:5e:8a:96:1e:f5:59:be:6a:f3:8f:16:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Sep 19 03:06:36 2024 GMT Not After : Sep 18 03:11:36 2025 GMT Subject: CN=7CC56A9BD18D96D886A7372E471B4A5A7CF59EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:8d:9d:50:68:a3:37:e8:1f:38:13:3b:61: 76:8e:5a:9f:b7:a5:18:8d:a1:48:05:f1:e1:16:56: 74:90:1b:80:2d:93:19:e2:e1:21:1f:c8:28:cc:e3: c0:d3:e0:a6:41:5f:e1:b5:fa:a1:b7:ed:2f:c9:91: 34:46:45:59:99:f0:41:7b:6a:01:2a:7f:07:22:21: fa:cb:fd:3f:5f:91:a4:98:fc:02:93:c8:3f:0e:a8: f6:94:d2:b6:3d:14:74:a8:38:38:5f:24:a8:45:6b: ab:bc:37:f8:b6:b3:d2:33:a9:fe:d2:a8:64:91:d1: 42:22:91:13:f0:a7:10:f6:8e:be:16:21:76:81:7b: 32:72:06:86:1f:d5:46:18:78:34:20:05:d8:4b:aa: 15:d9:33:76:07:b0:68:88:75:62:aa:ad:dc:cb:58: 68:5f:b6:45:1f:b4:c1:a4:26:c1:89:b1:92:65:ed: ff:75:6b:63:1b:94:6d:1f:a9:28:46:ac:5f:91:ca: e6:f9:16:ca:8f:8a:36:62:e8:cc:37:11:25:02:7c: bd:c0:9f:ab:29:55:92:c0:04:fe:28:f3:a9:7f:0a: 75:b9:a5:10:0b:56:b8:4a:81:04:80:66:14:80:29: ae:56:02:c8:a1:88:55:bb:e8:73:48:c1:7a:e3:58: 2c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C5:6A:9B:D1:8D:96:D8:86:A7:37:2E:47:1B:4A:5A:7C:F5:9E:A5 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.219.0/24 Signature Algorithm: sha256WithRSAEncryption aa:f5:92:c6:16:2a:96:1a:9d:44:aa:88:6c:d9:b2:9e:92:41: f6:09:f6:9a:dd:04:53:25:e7:6b:5f:06:c7:14:07:57:cd:22: 75:b6:d4:27:c2:50:f9:17:c6:2c:49:6b:cc:b4:9f:54:b6:38: 86:33:9e:07:09:e7:a0:11:4b:93:11:af:18:36:3e:78:98:1e: ae:65:23:ff:8f:03:7d:2a:44:9d:bb:61:d7:31:ec:05:79:5e: c9:70:6b:3e:c6:b6:ce:4c:50:45:df:1d:1b:a6:29:75:b6:d8: 30:0f:cc:15:39:c9:17:9a:7c:ca:f5:ab:96:e3:09:ad:b9:0a: 92:eb:d5:33:fe:99:fc:82:ea:92:12:4b:77:91:50:97:2b:5f: 33:fc:b4:ef:8a:aa:f9:da:53:39:f7:35:ac:a5:68:77:2a:c4: a7:43:29:c3:95:e1:61:97:67:19:31:1d:ff:af:93:f9:aa:6f: 2c:32:54:09:22:3f:4a:6c:0d:e4:e8:cb:38:6a:01:2e:63:54: 3e:ae:df:ea:bf:75:72:e7:37:c9:14:73:cf:c8:d9:25:51:35: d8:4e:41:b8:c9:2e:b5:b1:37:63:f1:8f:a3:fd:6e:14:6f:b0: 9d:4d:17:65:ee:8d:6e:8c:8a:af:2d:ea:a9:22:0c:13:05:3d: d3:ba:a4:98 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBa3KIP6csB5eipYe9Vm+avOPFrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNDA5MTkwMzA2MzZaFw0yNTA5MTgwMzExMzZaMDMxMTAvBgNV BAMTKDdDQzU2QTlCRDE4RDk2RDg4NkE3MzcyRTQ3MUI0QTVBN0NGNTlFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wo2dUGijN+gfOBM7YXaOWp+3 pRiNoUgF8eEWVnSQG4Atkxni4SEfyCjM48DT4KZBX+G1+qG37S/JkTRGRVmZ8EF7 agEqfwciIfrL/T9fkaSY/AKTyD8OqPaU0rY9FHSoODhfJKhFa6u8N/i2s9Izqf7S qGSR0UIikRPwpxD2jr4WIXaBezJyBoYf1UYYeDQgBdhLqhXZM3YHsGiIdWKqrdzL WGhftkUftMGkJsGJsZJl7f91a2MblG0fqShGrF+Ryub5FsqPijZi6Mw3ESUCfL3A n6spVZLABP4o86l/CnW5pRALVrhKgQSAZhSAKa5WAsihiFW76HNIwXrjWCyZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfMVqm9GNltiGpzcuRxtKWnz1nqUwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhZjA3ZjE4LTVjNDktNDEyOS1h YTUzLTcwODVjY2Q1N2I2My8wLzMxMzYzMDJlMzIzNTJlMzIzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBnbMA0GCSqG SIb3DQEBCwUAA4IBAQCq9ZLGFiqWGp1Eqohs2bKekkH2Cfaa3QRTJedrXwbHFAdX zSJ1ttQnwlD5F8YsSWvMtJ9UtjiGM54HCeegEUuTEa8YNj54mB6uZSP/jwN9KkSd u2HXMewFeV7JcGs+xrbOTFBF3x0bpil1ttgwD8wVOckXmnzK9auW4wmtuQqS69Uz /pn8guqSEkt3kVCXK18z/LTviqr52lM59zWspWh3KsSnQynDleFhl2cZMR3/r5P5 qm8sMlQJIj9KbA3k6Ms4agEuY1Q+rt/qv3Vy5zfJFHPPyNklUTXYTkG4yS61sTdj 8Y+j/W4Ub7CdTRdl7o1ujIqvLeqpIgwTBT3TuqSY -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org