$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa File: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (raw, json) Hash identifier: IYlIkK9ZMSP7xUAGZ1Am2ZgHJrv4HQzXJImTEhZj1s8= Subject key identifier: EE:60:64:9E:6A:F3:01:F7:0E:33:CA:F8:1B:5F:3E:21:24:D4:15:3C Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 6C53B822172F7A66533EDBD1A344953413A0CFB0 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa Signing time: Sun 28 Jul 2024 17:17:19 +0000 ROA not before: Sun 28 Jul 2024 17:12:19 +0000 ROA not after: Sun 27 Jul 2025 17:17:19 +0000 asID: 152782 IP address blocks: 160.20.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:53:b8:22:17:2f:7a:66:53:3e:db:d1:a3:44:95:34:13:a0:cf:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Jul 28 17:12:19 2024 GMT Not After : Jul 27 17:17:19 2025 GMT Subject: CN=EE60649E6AF301F70E33CAF81B5F3E2124D4153C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:8f:92:e0:bf:62:de:b7:3d:02:b7:e0:65: 18:29:92:05:a3:97:72:b2:9c:f3:18:64:20:1d:f3: 83:94:4a:a7:35:de:ec:9a:a4:a8:1a:12:8b:62:58: 4c:be:a2:44:46:69:33:72:dc:38:b0:02:f3:5f:40: 32:63:7c:95:81:b7:ad:d2:ce:f5:a1:af:ea:c3:6c: 46:df:61:f5:29:2a:68:df:94:d1:ec:c5:70:c8:51: 3f:79:f4:9d:a8:04:f0:da:9d:bf:12:9f:8f:98:9d: f3:e0:df:9b:a8:ff:c1:72:74:fd:7b:d0:25:ea:2d: 22:b2:2f:c1:2c:9f:0c:3c:9f:71:2d:7d:32:af:5b: fd:f1:0a:ac:49:14:bb:b1:53:79:b4:13:26:37:c5: 69:4f:eb:bc:cc:a7:8e:5a:74:84:e3:9d:79:ea:e1: 15:f5:d9:82:aa:f1:14:05:11:de:27:0a:05:51:b5: 6a:3a:b4:0e:8d:98:04:f4:46:9d:c6:ef:15:0d:05: b8:15:97:25:e0:08:48:41:cd:e3:04:e1:48:15:ab: db:5d:79:80:d5:83:e6:d6:d3:14:a3:12:a3:cf:9a: 6a:48:88:cf:98:03:d8:50:31:59:34:2b:2f:62:6e: 44:f6:cc:98:15:2a:e1:92:fe:24:2c:07:df:49:85: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:64:9E:6A:F3:01:F7:0E:33:CA:F8:1B:5F:3E:21:24:D4:15:3C X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.138.0/23 Signature Algorithm: sha256WithRSAEncryption e5:5f:9a:1a:74:ec:14:3f:ef:d8:d5:5f:c3:cf:77:d6:75:7a: a3:21:f7:7b:cd:fc:4d:33:15:48:d1:d2:d7:c0:66:ae:73:68: d5:4a:17:af:1b:6c:e9:57:02:3e:a3:10:8c:5f:74:62:9a:7c: f8:09:3a:9d:b4:6f:33:d8:0e:d4:71:94:87:12:e3:ad:d2:e9: 34:42:cd:44:ad:96:9c:9c:87:7f:57:fd:7a:20:a2:bd:27:8c: a1:1d:22:d1:bf:b8:b1:d6:de:0f:e1:c9:24:23:ee:98:2d:cb: b5:c0:40:42:e1:00:d6:e7:81:d5:59:e4:77:af:95:d9:b4:f1: 85:9b:5d:58:d3:4b:72:b4:5e:69:25:e3:e7:b1:11:6d:dd:2d: df:f5:ad:d9:04:33:71:ea:95:9b:65:60:82:3d:42:c7:52:ac: 62:c6:f9:fc:d5:f9:0e:17:d2:b4:42:a9:52:30:63:5f:17:6e: 7a:13:cc:a2:03:86:44:41:cb:c8:d3:11:de:bb:10:8a:48:1d: 7e:f1:9a:0a:ff:49:c6:7b:15:3f:eb:b1:ab:6a:8d:2b:a7:3c: 6c:e4:a0:9e:f5:bd:23:67:85:eb:fc:68:8a:9e:40:63:e7:3f: 4f:61:75:27:f9:94:cc:5d:0b:9a:f5:4d:bd:9f:d6:59:33:64: c5:cd:01:b8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbFO4IhcvemZTPtvRo0SVNBOgz7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNDA3MjgxNzEyMTlaFw0yNTA3MjcxNzE3MTlaMDMxMTAvBgNV BAMTKEVFNjA2NDlFNkFGMzAxRjcwRTMzQ0FGODFCNUYzRTIxMjRENDE1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eY+S4L9i3rc9ArfgZRgpkgWj l3KynPMYZCAd84OUSqc13uyapKgaEotiWEy+okRGaTNy3DiwAvNfQDJjfJWBt63S zvWhr+rDbEbfYfUpKmjflNHsxXDIUT959J2oBPDanb8Sn4+YnfPg35uo/8FydP17 0CXqLSKyL8Esnww8n3EtfTKvW/3xCqxJFLuxU3m0EyY3xWlP67zMp45adITjnXnq 4RX12YKq8RQFEd4nCgVRtWo6tA6NmAT0Rp3G7xUNBbgVlyXgCEhBzeME4UgVq9td eYDVg+bW0xSjEqPPmmpIiM+YA9hQMVk0Ky9ibkT2zJgVKuGS/iQsB99Jhag1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7mBknmrzAfcOM8r4G18+ISTUFTwwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyMTBlYzBmLTA0MjAtNDAyZi05 NWZlLTdiMzNlNTExMmJjMy8wLzMxMzYzMDJlMzIzMDJlMzEzMzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBSKMA0GCSqG SIb3DQEBCwUAA4IBAQDlX5oadOwUP+/Y1V/Dz3fWdXqjIfd7zfxNMxVI0dLXwGau c2jVShevG2zpVwI+oxCMX3Rimnz4CTqdtG8z2A7UcZSHEuOt0uk0Qs1ErZacnId/ V/16IKK9J4yhHSLRv7ix1t4P4ckkI+6YLcu1wEBC4QDW54HVWeR3r5XZtPGFm11Y 00tytF5pJePnsRFt3S3f9a3ZBDNx6pWbZWCCPULHUqxixvn81fkOF9K0QqlSMGNf F256E8yiA4ZEQcvI0xHeuxCKSB1+8ZoK/0nGexU/67Grao0rpzxs5KCe9b0jZ4Xr /GiKnkBj5z9PYXUn+ZTMXQua9U29n9ZZM2TFzQG4 -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:20 2024 by rpki-client on console-fra.rpki-client.org