$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa File: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (raw, json) Hash identifier: Fswu6lJ30EX6/fAqhwEQZyHe3mZ7uraLiB9eQ6YzihQ= Subject key identifier: 66:2C:FC:CE:01:E1:15:DD:1C:7C:80:21:B3:37:53:1A:1B:04:A7:70 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 7F5134450D3D0292D5D2AE8F591D2BFCD6275F54 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa Signing time: Fri 30 Aug 2024 03:15:04 +0000 ROA not before: Fri 30 Aug 2024 03:10:04 +0000 ROA not after: Fri 29 Aug 2025 03:15:04 +0000 asID: 152773 IP address blocks: 160.19.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:51:34:45:0d:3d:02:92:d5:d2:ae:8f:59:1d:2b:fc:d6:27:5f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Aug 30 03:10:04 2024 GMT Not After : Aug 29 03:15:04 2025 GMT Subject: CN=662CFCCE01E115DD1C7C8021B337531A1B04A770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:9c:fb:90:a1:f0:0e:b4:9e:9e:64:b7:a9: 5a:35:b0:d2:e0:a6:fc:eb:88:86:ad:70:4a:10:4c: b5:d9:1f:7b:cb:83:29:d3:4e:c4:98:d2:3d:8c:e3: 85:b8:42:73:11:e7:c2:f0:d8:a1:a1:6a:9d:78:37: bc:5b:45:b6:dc:47:97:e0:64:8b:b4:59:91:00:06: 12:30:b2:64:a2:89:e4:1b:fd:31:92:fb:57:fc:18: 92:cf:ee:8f:98:92:cb:f2:ed:1a:38:65:d7:d3:5d: 52:50:7a:b9:25:99:99:b7:32:30:dd:26:2b:c3:e3: 86:07:cc:3c:f6:32:93:51:73:1a:16:64:eb:ab:75: 78:d8:2f:2e:c6:70:7c:75:45:bb:a4:eb:0c:1b:fc: cb:9a:a0:71:68:d7:3c:49:6c:32:92:ef:86:16:4b: ef:17:dd:c8:4c:4b:cd:8a:55:3c:1e:44:bb:79:cd: 59:00:9d:52:ee:36:cf:c8:be:d8:38:59:60:81:0d: f5:fa:63:c2:76:a3:dc:27:46:9e:7f:89:f7:e7:38: a9:3f:65:6a:c2:7c:00:18:25:a6:bb:87:ce:6e:82: 6b:5b:d3:0c:c8:0d:68:36:a8:93:75:af:19:09:d5: b6:a3:79:f0:ce:76:d1:46:1f:70:7e:b9:df:45:34: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2C:FC:CE:01:E1:15:DD:1C:7C:80:21:B3:37:53:1A:1B:04:A7:70 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.110.0/23 Signature Algorithm: sha256WithRSAEncryption 05:9c:52:14:6d:69:4b:0f:9b:b1:8d:27:9b:d9:fc:c8:41:ad: de:50:50:17:4f:7b:af:93:f5:17:62:c1:27:34:ad:24:83:aa: 7b:0f:f3:ed:b4:5f:c1:52:2b:23:40:a6:90:3c:0e:46:41:85: d1:dd:63:64:be:64:da:2a:8a:fe:47:89:1a:35:0a:02:2d:90: 7c:5b:80:e0:3a:23:3c:75:65:89:88:af:1b:9d:27:13:d3:8f: d7:19:93:76:b8:3a:d4:7f:6a:b1:71:43:31:88:8f:59:d0:78: 65:34:63:9d:e0:1b:ae:0d:a5:62:5e:75:86:35:44:8f:f5:23: e0:54:86:29:d5:38:5a:7f:b1:a9:b4:16:d5:5f:6a:bf:eb:2b: 07:65:1e:a0:d3:a2:e8:64:6b:37:f1:73:a1:b6:d9:67:1c:cf: de:8a:be:68:73:59:01:fa:fd:78:9b:9a:93:c8:46:61:4d:6d: ad:b5:bd:c8:f7:eb:f4:6c:26:64:1a:46:b8:73:27:94:3a:12: 77:ba:2d:99:51:8c:ad:5e:c2:e1:2a:a5:61:e9:24:e4:02:61: c6:06:a7:05:c1:33:53:bd:f1:87:02:7b:7d:1b:98:37:b4:e8: 18:37:4c:cd:8e:67:e2:45:39:43:c0:36:2d:9e:4e:32:9d:5f: 0d:c2:56:e1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUf1E0RQ09ApLV0q6PWR0r/NYnX1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNDA4MzAwMzEwMDRaFw0yNTA4MjkwMzE1MDRaMDMxMTAvBgNV BAMTKDY2MkNGQ0NFMDFFMTE1REQxQzdDODAyMUIzMzc1MzFBMUIwNEE3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQr5z7kKHwDrSenmS3qVo1sNLg pvzriIatcEoQTLXZH3vLgynTTsSY0j2M44W4QnMR58Lw2KGhap14N7xbRbbcR5fg ZIu0WZEABhIwsmSiieQb/TGS+1f8GJLP7o+Yksvy7Ro4ZdfTXVJQerklmZm3MjDd JivD44YHzDz2MpNRcxoWZOurdXjYLy7GcHx1Rbuk6wwb/MuaoHFo1zxJbDKS74YW S+8X3chMS82KVTweRLt5zVkAnVLuNs/Ivtg4WWCBDfX6Y8J2o9wnRp5/iffnOKk/ ZWrCfAAYJaa7h85ugmtb0wzIDWg2qJN1rxkJ1bajefDOdtFGH3B+ud9FNPTNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZiz8zgHhFd0cfIAhszdTGhsEp3AwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkOWIzNTE5LTNkZjMtNDQwNi04 MjhmLTNlYmI5MWQ5Mjk0NC8wLzMxMzYzMDJlMzEzOTJlMzEzMTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBNuMA0GCSqG SIb3DQEBCwUAA4IBAQAFnFIUbWlLD5uxjSeb2fzIQa3eUFAXT3uvk/UXYsEnNK0k g6p7D/PttF/BUisjQKaQPA5GQYXR3WNkvmTaKor+R4kaNQoCLZB8W4DgOiM8dWWJ iK8bnScT04/XGZN2uDrUf2qxcUMxiI9Z0HhlNGOd4BuuDaViXnWGNUSP9SPgVIYp 1Thaf7GptBbVX2q/6ysHZR6g06LoZGs38XOhttlnHM/eir5oc1kB+v14m5qTyEZh TW2ttb3I9+v0bCZkGka4cyeUOhJ3ui2ZUYytXsLhKqVh6STkAmHGBqcFwTNTvfGH Ant9G5g3tOgYN0zNjmfiRTlDwDYtnk4ynV8Nwlbh -----END CERTIFICATE-----Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org