$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa File: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (raw, json) Hash identifier: NmZXIgcKTkZtM5b0WZ83BTrIrXMCCDJKAphwFiNMMH8= Subject key identifier: 6B:F0:FB:37:DB:1A:27:41:F1:04:E2:97:00:E1:06:03:AA:8C:08:D3 Certificate issuer: /CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Certificate serial: 3D1980DFD88007DDABF47ACC5C51A746346CD2DD Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa Signing time: Mon 22 Jul 2024 05:56:04 +0000 ROA not before: Mon 22 Jul 2024 05:51:04 +0000 ROA not after: Mon 21 Jul 2025 05:56:04 +0000 asID: 153079 IP address blocks: 160.25.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:19:80:df:d8:80:07:dd:ab:f4:7a:cc:5c:51:a7:46:34:6c:d2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Validity Not Before: Jul 22 05:51:04 2024 GMT Not After : Jul 21 05:56:04 2025 GMT Subject: CN=6BF0FB37DB1A2741F104E29700E10603AA8C08D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:68:23:fd:ff:73:5d:42:81:f9:e0:87:6c: af:43:94:41:6a:6b:55:9a:45:50:22:c0:dc:1e:b1: 79:d5:a0:8d:aa:5b:46:3b:b1:92:83:f3:cf:39:c7: ef:90:85:d6:19:8f:87:0a:52:9d:d7:48:52:da:a8: 22:91:6b:87:71:4b:af:dc:dc:70:ea:cc:6e:f6:2c: d2:ea:c1:ca:de:5d:21:04:cd:d4:44:db:c0:b5:4e: 64:78:11:ec:59:5e:cb:f0:01:a9:d9:d5:0c:69:40: 98:27:a6:da:0a:20:55:20:64:ad:77:0c:b5:44:72: 80:91:97:e4:74:2d:dd:52:16:22:c7:7d:df:dd:18: 51:80:26:ba:99:96:16:66:9b:d8:14:80:2a:5e:ed: 0e:36:d8:72:bf:37:09:51:9e:ad:ee:ea:1b:3b:06: da:44:31:36:96:18:fb:62:6e:1c:d7:2b:35:47:ea: a3:9d:5e:78:47:44:7b:bf:45:20:54:8f:5f:8b:81: 8d:34:3a:70:4c:04:8d:b9:13:de:cf:60:b6:50:7b: 50:c2:0f:bf:e2:13:fe:17:24:5a:65:56:f8:76:73: f0:ae:62:47:54:db:e3:1b:b4:92:6a:12:05:16:4d: 41:86:64:6e:4a:06:2b:da:29:b4:82:78:90:bd:03: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F0:FB:37:DB:1A:27:41:F1:04:E2:97:00:E1:06:03:AA:8C:08:D3 X509v3 Authority Key Identifier: keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.116.0/24 Signature Algorithm: sha256WithRSAEncryption 19:5c:6b:7b:0a:f6:37:a1:33:3c:19:2d:1e:42:d3:5b:81:45: 45:d0:72:92:6f:85:11:a1:57:e1:10:b1:ec:4e:9f:68:c5:ee: b7:e9:af:38:80:6e:4b:4e:a5:93:51:41:a8:0a:8b:b4:af:25: a6:ad:b7:0d:8b:5e:f5:72:0a:9b:09:8f:00:58:69:ca:3c:93: ab:9f:26:d7:0e:40:86:28:36:1b:7b:48:e5:83:cc:85:76:2c: 7f:c4:9a:88:9b:5d:fb:62:06:12:ad:f6:0e:9b:f9:8b:63:ca: 46:a8:b4:2a:ef:30:e4:37:58:86:4d:9e:df:78:65:f8:ee:51: 7c:d4:19:ed:8f:0c:4b:b7:d4:a6:39:f8:6c:91:8e:fe:a1:cf: 3b:2b:9c:91:50:7f:d4:f0:83:f3:52:40:89:47:50:01:06:0f: b4:96:92:d5:2d:48:91:97:14:53:08:60:3c:1b:ed:2c:db:be: a8:dc:96:d3:66:05:cf:dc:35:4f:4b:cb:41:bc:2f:55:03:91: ba:fe:4f:bd:9d:bf:d9:42:d3:57:fb:d8:75:e9:de:46:0b:6d: be:87:36:5b:e6:a0:95:44:44:ca:0d:74:36:40:00:83:6f:79: 70:3b:76:8b:d0:9f:00:cc:e6:96:12:f6:31:57:5e:5c:de:19: 34:3b:aa:4a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPRmA39iAB92r9HrMXFGnRjRs0t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3 RTI0NDlBMDAeFw0yNDA3MjIwNTUxMDRaFw0yNTA3MjEwNTU2MDRaMDMxMTAvBgNV BAMTKDZCRjBGQjM3REIxQTI3NDFGMTA0RTI5NzAwRTEwNjAzQUE4QzA4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEGgj/f9zXUKB+eCHbK9DlEFq a1WaRVAiwNwesXnVoI2qW0Y7sZKD8885x++QhdYZj4cKUp3XSFLaqCKRa4dxS6/c 3HDqzG72LNLqwcreXSEEzdRE28C1TmR4EexZXsvwAanZ1QxpQJgnptoKIFUgZK13 DLVEcoCRl+R0Ld1SFiLHfd/dGFGAJrqZlhZmm9gUgCpe7Q422HK/NwlRnq3u6hs7 BtpEMTaWGPtibhzXKzVH6qOdXnhHRHu/RSBUj1+LgY00OnBMBI25E97PYLZQe1DC D7/iE/4XJFplVvh2c/CuYkdU2+MbtJJqEgUWTUGGZG5KBivaKbSCeJC9AyoNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUa/D7N9saJ0HxBOKXAOEGA6qMCNMwHwYDVR0j BBgwFoAUJ308CBG1l7wihHMp5UPM7n4kSaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMC8yNzdEM0MwODEx QjU5N0JDMjI4NDczMjlFNTQzQ0NFRTdFMjQ0OUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3RTI0 NDlBMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3ODI1OWQ2LTI2NTUtNDQxNy1i ZWM0LTgzZWY2NjQ0ZjU3ZS8wLzMxMzYzMDJlMzIzNTJlMzEzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBl0MA0GCSqG SIb3DQEBCwUAA4IBAQAZXGt7CvY3oTM8GS0eQtNbgUVF0HKSb4URoVfhELHsTp9o xe636a84gG5LTqWTUUGoCou0ryWmrbcNi171cgqbCY8AWGnKPJOrnybXDkCGKDYb e0jlg8yFdix/xJqIm137YgYSrfYOm/mLY8pGqLQq7zDkN1iGTZ7feGX47lF81Bnt jwxLt9SmOfhskY7+oc87K5yRUH/U8IPzUkCJR1ABBg+0lpLVLUiRlxRTCGA8G+0s 276o3JbTZgXP3DVPS8tBvC9VA5G6/k+9nb/ZQtNX+9h16d5GC22+hzZb5qCVRETK DXQ2QACDb3lwO3aL0J8AzOaWEvYxV15c3hk0O6pK -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org