$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa File: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (raw, json) Hash identifier: acW7MmyfNG3sUp37/a67TBL3VhsulHr1Ydf1eaVxfYA= Subject key identifier: 40:EB:E9:1D:32:6A:35:C7:6D:DA:57:9D:CC:1D:F6:86:82:B0:E0:6B Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 0C79E60AD22E1402344F493AAFC1B64142EE796B Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa Signing time: Thu 31 Oct 2024 03:42:52 +0000 ROA not before: Thu 31 Oct 2024 03:37:52 +0000 ROA not after: Thu 30 Oct 2025 03:42:52 +0000 asID: 153132 IP address blocks: 160.187.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:79:e6:0a:d2:2e:14:02:34:4f:49:3a:af:c1:b6:41:42:ee:79:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Oct 31 03:37:52 2024 GMT Not After : Oct 30 03:42:52 2025 GMT Subject: CN=40EBE91D326A35C76DDA579DCC1DF68682B0E06B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:55:81:84:0c:af:6d:68:cf:2d:f6:4a:2c:e7: 48:f1:22:62:22:15:9b:0f:9e:2c:39:b0:71:bd:d1: dc:7d:c4:1a:f5:28:b1:88:1c:88:3f:1f:88:2e:44: ce:d6:5e:d5:29:7d:f5:3d:ab:ee:98:98:1e:32:d7: 9f:5c:cd:d3:33:27:b1:a7:14:8a:32:73:a0:1a:1b: 93:4b:a0:ff:08:6b:53:32:d6:c5:0d:a2:df:a4:51: 6b:54:28:59:ac:9d:d0:68:72:19:0a:ba:c2:17:04: 7b:66:c6:1d:5d:58:ae:02:a2:f0:21:92:3d:0c:4b: 37:af:b5:b8:63:63:97:d8:7b:29:65:e0:db:1a:4a: 21:bb:bb:74:bb:de:9a:5e:8a:ce:0b:2f:f4:d0:01: 12:2a:a3:11:84:ec:f1:ad:ba:3a:a7:80:c0:36:9e: 70:94:c8:50:78:e9:86:82:56:f4:5e:c2:8f:4a:a7: 10:a9:d6:9f:fd:b8:11:aa:c7:fe:66:36:87:fe:4e: 1b:cd:11:a7:aa:d3:ef:64:4c:63:7d:9e:ec:70:e4: bb:c7:f0:c2:b9:cd:1b:52:01:2d:bd:b1:9f:9c:9e: a2:a7:f7:bf:45:ba:4c:f6:ed:47:d6:7c:03:b8:d8: 2f:f2:00:23:2d:ad:68:a7:a0:43:31:c4:f9:47:2d: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EB:E9:1D:32:6A:35:C7:6D:DA:57:9D:CC:1D:F6:86:82:B0:E0:6B X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.218.0/24 Signature Algorithm: sha256WithRSAEncryption e0:fe:bd:d9:3f:a3:98:e8:de:ca:dc:4b:51:95:2c:39:06:a3: b9:73:cf:b9:bf:0f:24:72:cb:56:32:a3:4f:68:86:cf:98:fa: cc:aa:98:e1:76:5b:df:cd:7b:ea:07:91:4d:d5:db:6a:af:bc: 45:86:03:7c:ac:ad:b1:cb:d2:f9:74:8f:9d:c8:a9:4e:e2:b0: 35:90:d4:89:fa:2a:b4:13:49:64:6b:47:39:ec:fd:68:7c:30: 28:42:cd:5c:cf:85:88:bc:ce:bf:e4:46:22:60:ce:3e:b2:bb: e1:fd:70:93:f2:d4:b7:bf:ae:f0:10:c8:1d:d0:fb:24:cc:32: 86:2f:d1:04:f2:5a:98:d5:7d:1c:d8:a8:74:f0:2c:19:63:2d: 48:03:f7:84:0b:82:a3:cb:04:ef:6e:7d:3b:93:f6:74:91:6f: ce:4c:21:a3:08:0e:41:36:dd:f2:ec:b6:36:85:e1:6c:f2:3b: 28:bd:94:c4:4d:33:3d:51:b0:55:13:03:4e:2d:cf:ad:24:df: 39:94:6d:2d:4e:be:4a:33:8b:17:cd:02:ae:d1:3c:18:15:7c: 46:16:52:ee:33:d8:65:50:82:f1:22:3b:17:73:50:4b:41:8b: e4:3c:a5:3d:a9:da:2f:44:6b:4e:c2:18:0b:1e:b5:18:66:9c: 7f:40:6a:67 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDHnmCtIuFAI0T0k6r8G2QULueWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNDEwMzEwMzM3NTJaFw0yNTEwMzAwMzQyNTJaMDMxMTAvBgNV BAMTKDQwRUJFOTFEMzI2QTM1Qzc2RERBNTc5RENDMURGNjg2ODJCMEUwNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlVYGEDK9taM8t9kos50jxImIi FZsPniw5sHG90dx9xBr1KLGIHIg/H4guRM7WXtUpffU9q+6YmB4y159czdMzJ7Gn FIoyc6AaG5NLoP8Ia1My1sUNot+kUWtUKFmsndBochkKusIXBHtmxh1dWK4CovAh kj0MSzevtbhjY5fYeyll4NsaSiG7u3S73ppeis4LL/TQARIqoxGE7PGtujqngMA2 nnCUyFB46YaCVvRewo9KpxCp1p/9uBGqx/5mNof+ThvNEaeq0+9kTGN9nuxw5LvH 8MK5zRtSAS29sZ+cnqKn979Fukz27UfWfAO42C/yACMtrWinoEMxxPlHLY/pAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUQOvpHTJqNcdt2ledzB32hoKw4GswHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4MWQ1NGNiLTU3YTktNGExNi1h NzBlLWM1ZjYwMjRlMTM5ZC8wLzMxMzYzMDJlMzEzODM3MmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMzMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu9owDQYJ KoZIhvcNAQELBQADggEBAOD+vdk/o5jo3srcS1GVLDkGo7lzz7m/DyRyy1Yyo09o hs+Y+syqmOF2W9/Ne+oHkU3V22qvvEWGA3ysrbHL0vl0j53IqU7isDWQ1In6KrQT SWRrRzns/Wh8MChCzVzPhYi8zr/kRiJgzj6yu+H9cJPy1Le/rvAQyB3Q+yTMMoYv 0QTyWpjVfRzYqHTwLBljLUgD94QLgqPLBO9ufTuT9nSRb85MIaMIDkE23fLstjaF 4WzyOyi9lMRNMz1RsFUTA04tz60k3zmUbS1OvkozixfNAq7RPBgVfEYWUu4z2GVQ gvEiOxdzUEtBi+Q8pT2p2i9Ea07CGAsetRhmnH9Aamc= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org