$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa File: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (raw, json) Hash identifier: CBQ7BcTAX1WXp7Ylcc4yi/0Cf14WakzZ7YKG6S9yjVU= Subject key identifier: 6F:4E:CC:F1:9E:29:41:69:9D:86:51:42:AF:76:F0:A9:AB:4B:81:55 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 1081D326C42B24964ACB7525027E619E671FFD47 Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa Signing time: Sat 17 Aug 2024 05:16:47 +0000 ROA not before: Sat 17 Aug 2024 05:11:47 +0000 ROA not after: Sat 16 Aug 2025 05:16:47 +0000 asID: 153096 IP address blocks: 160.25.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:81:d3:26:c4:2b:24:96:4a:cb:75:25:02:7e:61:9e:67:1f:fd:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Aug 17 05:11:47 2024 GMT Not After : Aug 16 05:16:47 2025 GMT Subject: CN=6F4ECCF19E2941699D865142AF76F0A9AB4B8155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:a5:4c:9b:ec:b9:c9:da:c9:ce:8f:04:0f: 2d:82:2d:56:f9:a1:a0:90:d2:f6:10:5b:d3:65:b2: 1f:66:8e:64:38:5c:63:d1:3d:b1:21:26:9c:26:11: 39:e0:3c:72:e5:0e:10:1e:21:44:d6:f7:28:00:e8: b2:e1:dc:16:a2:90:55:0c:08:bc:ec:9f:93:6c:68: 1e:ad:39:e3:d5:4f:8e:85:9d:41:02:85:ad:0f:f6: cd:cf:9d:a1:a3:9a:2b:50:85:3f:6a:1a:0c:7a:ed: 35:95:da:03:1d:55:34:81:1d:d5:69:16:ba:ed:33: 79:4b:a2:da:d7:33:70:bc:18:4e:d5:8e:f0:8f:63: 83:ee:3f:ef:f4:52:28:8c:ed:00:06:14:27:27:7d: 8f:6d:7a:b7:9f:ae:10:18:de:44:30:76:2f:7b:62: 28:03:39:7f:89:7c:ed:bb:71:e1:60:45:73:13:86: 46:03:8a:d7:20:a3:14:d7:3c:d2:18:d6:4f:c3:7f: 21:62:46:5b:f4:14:b6:71:42:e9:b3:69:37:70:a2: 5b:61:7b:89:19:a0:50:e3:5c:3c:14:12:e4:62:a3: 6c:e7:79:6b:6b:d8:9a:10:9e:c5:f6:f0:cb:c4:9b: ac:0b:d4:aa:84:23:53:06:99:8b:53:1a:d3:50:64: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4E:CC:F1:9E:29:41:69:9D:86:51:42:AF:76:F0:A9:AB:4B:81:55 X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.119.0/24 Signature Algorithm: sha256WithRSAEncryption 61:28:ac:5e:65:70:73:68:b6:eb:9f:49:54:98:47:56:b3:c2: 14:f7:d1:aa:dd:84:a9:70:29:2b:70:dd:b9:3f:c2:6f:88:01: be:03:bf:ff:8b:6f:cb:35:8b:f2:5c:9f:51:e9:a1:a6:b8:73: 68:36:cd:d2:3f:90:e3:59:84:8f:17:c0:07:04:27:8c:38:97: bb:6c:46:60:dc:79:d9:5b:15:7e:32:75:59:e2:fb:2e:21:e9: e9:de:e4:49:1f:94:88:18:c5:13:93:bf:27:ea:5d:4f:7d:48: 7c:be:0e:a6:d5:04:fa:a0:16:fc:30:a5:2a:31:c1:55:1f:8b: 72:85:da:58:6e:e0:1e:fb:e0:24:37:3b:d7:b5:03:45:b7:d2: be:b9:3b:dd:6b:e4:4f:df:d0:1c:33:42:67:7a:78:d9:53:45: df:19:43:76:c3:43:c1:cd:c9:cb:e0:a0:7e:5d:81:15:fa:36: d3:c7:c2:71:9e:f3:ab:e2:8b:ea:0d:bb:da:79:3f:1d:99:82: 89:b3:74:99:62:38:f4:f6:be:33:02:8b:a2:00:6f:d9:b2:c9: 42:fc:64:2f:62:99:0f:f5:cd:8a:e3:92:19:16:be:21:aa:de: 77:56:c0:e3:48:fb:9b:2e:ac:04:52:5c:a4:c9:0f:b7:ca:5a: c0:4f:e2:2d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEIHTJsQrJJZKy3UlAn5hnmcf/UcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNDA4MTcwNTExNDdaFw0yNTA4MTYwNTE2NDdaMDMxMTAvBgNV BAMTKDZGNEVDQ0YxOUUyOTQxNjk5RDg2NTE0MkFGNzZGMEE5QUI0QjgxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hqVMm+y5ydrJzo8EDy2CLVb5 oaCQ0vYQW9Nlsh9mjmQ4XGPRPbEhJpwmETngPHLlDhAeIUTW9ygA6LLh3BaikFUM CLzsn5NsaB6tOePVT46FnUECha0P9s3PnaGjmitQhT9qGgx67TWV2gMdVTSBHdVp FrrtM3lLotrXM3C8GE7VjvCPY4PuP+/0UiiM7QAGFCcnfY9terefrhAY3kQwdi97 YigDOX+JfO27ceFgRXMThkYDitcgoxTXPNIY1k/DfyFiRlv0FLZxQumzaTdwolth e4kZoFDjXDwUEuRio2zneWtr2JoQnsX28MvEm6wL1KqEI1MGmYtTGtNQZAyLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUb07M8Z4pQWmdhlFCr3bwqatLgVUwHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZTQ0NjY1LWU4NDYtNDU1Yi1h YTFhLWQ1YWIwN2RlZWRmMy8wLzMxMzYzMDJlMzIzNTJlMzEzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBl3MA0GCSqG SIb3DQEBCwUAA4IBAQBhKKxeZXBzaLbrn0lUmEdWs8IU99Gq3YSpcCkrcN25P8Jv iAG+A7//i2/LNYvyXJ9R6aGmuHNoNs3SP5DjWYSPF8AHBCeMOJe7bEZg3HnZWxV+ MnVZ4vsuIenp3uRJH5SIGMUTk78n6l1PfUh8vg6m1QT6oBb8MKUqMcFVH4tyhdpY buAe++AkNzvXtQNFt9K+uTvda+RP39AcM0JnenjZU0XfGUN2w0PBzcnL4KB+XYEV +jbTx8JxnvOr4ovqDbvaeT8dmYKJs3SZYjj09r4zAouiAG/ZsslC/GQvYpkP9c2K 45IZFr4hqt53VsDjSPubLqwEUlykyQ+3ylrAT+It -----END CERTIFICATE-----Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org