$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136302e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136302e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 1BWagKAw3heFpJCXFG1nnJUz949VibG03daPmLrGz4c= Subject key identifier: 44:D5:F5:80:86:36:F2:8D:D9:92:F2:92:47:20:AB:D7:A7:A6:69:B8 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 257482AA3D665845D67BD972B9111C2AC55A23F3 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136302e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 11:00:02 +0000 ROA not before: Sun 11 Aug 2024 10:55:02 +0000 ROA not after: Sun 10 Aug 2025 11:00:02 +0000 asID: 63859 IP address blocks: 158.140.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:74:82:aa:3d:66:58:45:d6:7b:d9:72:b9:11:1c:2a:c5:5a:23:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 10:55:02 2024 GMT Not After : Aug 10 11:00:02 2025 GMT Subject: CN=44D5F5808636F28DD992F2924720ABD7A7A669B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:56:6a:34:34:78:1b:5e:6e:7d:82:f0:5b: 57:c7:9d:b3:cc:96:c8:2e:63:d2:60:98:d1:66:68: d6:db:ce:f8:34:c7:0e:45:b5:a4:60:7c:fb:9f:7c: 5b:40:ce:96:b3:cb:6f:58:3f:aa:47:79:f7:77:b8: f2:15:4d:57:95:3e:2c:8e:cd:08:f2:5d:d2:cd:3b: 25:2f:f9:be:9e:f0:59:81:bb:ca:c7:4a:5b:61:62: 99:eb:03:1c:d9:60:d3:92:df:44:6e:5e:b9:f6:3d: 28:65:6f:66:d4:96:48:ad:07:6c:cb:8f:3b:8b:7a: af:68:ae:07:b7:54:2c:05:d6:3b:82:7b:e9:db:56: 45:6e:24:7b:f5:b5:2a:87:82:46:3a:c0:96:2c:05: 0f:12:f5:48:db:c1:45:4c:dd:fb:7b:5e:77:d5:8c: 2e:e4:dd:8c:6c:51:00:d3:cd:6d:37:8c:27:04:2f: a3:b3:f2:dd:82:51:77:f7:81:b9:81:ab:b9:4a:c5: b6:56:49:cb:45:51:42:bb:04:ac:20:64:26:f1:2b: 4c:33:2e:cf:a7:03:a2:a3:8c:c3:74:3b:9a:fb:c4: a8:59:2c:40:16:22:31:72:3d:41:da:9e:12:e5:3d: 26:f7:76:17:15:93:07:9a:6b:a4:6b:d7:85:46:43: 2e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D5:F5:80:86:36:F2:8D:D9:92:F2:92:47:20:AB:D7:A7:A6:69:B8 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136302e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.160.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:49:17:07:ed:c4:c7:cd:c4:35:9f:0d:60:3d:90:05:be:c6: 4f:c4:2a:3c:59:30:14:d8:1d:09:4a:f7:6e:21:24:9d:8c:b5: 43:e0:71:18:97:ab:3c:bf:f3:fd:39:16:00:65:1e:3a:22:7c: 4a:d1:aa:fd:ac:1b:ab:d8:13:77:c2:ca:01:c5:3d:c3:a5:1e: 57:cb:03:e5:cc:fd:f3:01:8a:3c:1a:16:65:10:fd:43:bf:82: 49:d5:cf:23:ec:9b:2a:77:3a:da:31:ec:1d:a6:9b:fc:ee:a1: 9b:78:b5:15:6d:76:69:41:2b:3b:5f:c7:f3:5c:63:67:58:50: 2f:55:1c:a0:6f:6a:4c:a3:0e:ec:3b:e8:d5:71:74:5e:0f:3b: 14:e1:40:30:fa:0c:95:a3:63:cd:ae:a4:5d:e8:95:30:42:0f: 93:0f:66:d8:18:93:7c:ed:ca:b2:90:bf:d5:25:33:ea:9a:40: d9:b4:31:b1:2e:fb:01:29:45:5c:7c:46:55:84:2c:20:d5:e5: ad:42:e3:84:36:d7:db:3f:4e:d6:04:4f:44:2d:c8:a2:ff:bf: 06:80:46:f6:44:2a:20:c6:7a:17:a5:8f:94:50:96:16:0d:7b: 6b:68:ca:8e:dd:c5:60:5f:f7:b5:76:95:e6:ca:1b:01:24:22: 4e:c4:e8:3d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJXSCqj1mWEXWe9lyuREcKsVaI/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTExMDU1MDJaFw0yNTA4MTAxMTAwMDJaMDMxMTAvBgNV BAMTKDQ0RDVGNTgwODYzNkYyOEREOTkyRjI5MjQ3MjBBQkQ3QTdBNjY5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwlZqNDR4G15ufYLwW1fHnbPM lsguY9JgmNFmaNbbzvg0xw5FtaRgfPuffFtAzpazy29YP6pHefd3uPIVTVeVPiyO zQjyXdLNOyUv+b6e8FmBu8rHSlthYpnrAxzZYNOS30RuXrn2PShlb2bUlkitB2zL jzuLeq9orge3VCwF1juCe+nbVkVuJHv1tSqHgkY6wJYsBQ8S9UjbwUVM3ft7XnfV jC7k3YxsUQDTzW03jCcEL6Oz8t2CUXf3gbmBq7lKxbZWSctFUUK7BKwgZCbxK0wz Ls+nA6KjjMN0O5r7xKhZLEAWIjFyPUHanhLlPSb3dhcVkweaa6Rr14VGQy4VAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURNX1gIY28o3ZkvKSRyCr16emabgwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM2MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoygMA0GCSqG SIb3DQEBCwUAA4IBAQBvSRcH7cTHzcQ1nw1gPZAFvsZPxCo8WTAU2B0JSvduISSd jLVD4HEYl6s8v/P9ORYAZR46InxK0ar9rBur2BN3wsoBxT3DpR5XywPlzP3zAYo8 GhZlEP1Dv4JJ1c8j7JsqdzraMewdppv87qGbeLUVbXZpQSs7X8fzXGNnWFAvVRyg b2pMow7sO+jVcXReDzsU4UAw+gyVo2PNrqRd6JUwQg+TD2bYGJN87cqykL/VJTPq mkDZtDGxLvsBKUVcfEZVhCwg1eWtQuOENtfbP07WBE9ELcii/78GgEb2RCogxnoX pY+UUJYWDXtraMqO3cVgX/e1dpXmyhsBJCJOxOg9 -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org