$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa File: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (raw, json) Hash identifier: HdQz1dWfKOGxSjvYAjfqgzM8praYpuYX0xMaqB08kJM= Subject key identifier: 6A:F5:02:59:8E:D8:69:80:B5:9D:51:B0:01:BA:63:F7:AA:5F:65:2A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 51641899B77A9C35FD04676AD3CDFD57C12E2A87 Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa Signing time: Tue 23 Jul 2024 05:10:01 +0000 ROA not before: Tue 23 Jul 2024 05:05:01 +0000 ROA not after: Tue 22 Jul 2025 05:10:01 +0000 asID: 153061 IP address blocks: 160.22.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:64:18:99:b7:7a:9c:35:fd:04:67:6a:d3:cd:fd:57:c1:2e:2a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Jul 23 05:05:01 2024 GMT Not After : Jul 22 05:10:01 2025 GMT Subject: CN=6AF502598ED86980B59D51B001BA63F7AA5F652A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:58:c5:41:46:49:f0:85:b3:bd:65:15:48: 0d:5b:31:0f:64:05:4e:d3:e0:ae:14:59:fe:e9:74: a6:09:ef:39:f2:8a:64:d1:d9:2d:51:04:5d:9c:2c: 93:1b:4b:9f:05:64:d2:4c:a8:7d:22:2a:39:dc:7a: cc:70:e8:a4:b4:2a:5a:7a:39:51:68:27:03:d1:7a: ff:85:ea:0a:3a:84:28:35:9f:ed:ea:82:ff:f7:97: 0a:69:4d:4d:0f:4c:ee:64:15:41:c6:56:ba:e9:b0: ac:01:f2:fb:9f:6b:86:21:cb:69:39:41:24:d0:18: 72:29:33:12:f1:bc:6f:13:b6:46:b9:8c:ef:41:26: b8:04:27:71:42:0e:79:b1:01:66:92:c9:bf:78:7e: 49:73:fb:88:38:f2:8d:3d:60:9c:84:f8:f2:3d:62: fd:ff:64:b6:68:0e:e4:56:d9:5c:95:1a:55:e9:83: 7a:6d:e8:a0:11:71:e5:2d:4d:95:9b:cb:f6:10:01: 89:fa:fa:7b:5b:d3:46:30:31:db:fe:94:7b:da:e4: 62:e0:17:3c:07:ff:52:1b:6e:8b:12:88:fa:37:7a: 43:cb:5a:23:38:e6:0d:d9:07:98:26:e8:4f:54:94: bb:2f:36:64:92:ae:5c:1e:46:02:b2:da:a1:f2:0a: f2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F5:02:59:8E:D8:69:80:B5:9D:51:B0:01:BA:63:F7:AA:5F:65:2A X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.234.0/24 Signature Algorithm: sha256WithRSAEncryption 39:22:3a:df:69:1e:2d:48:ba:92:08:16:69:20:f7:4e:e8:2b: bb:9b:44:16:07:82:55:1e:fa:a9:bb:81:5d:9b:2b:bb:e0:fb: 0d:5f:9a:8c:ed:4e:db:ea:d5:21:0b:73:99:ef:b4:24:05:de: a6:b7:59:83:f2:32:06:5f:98:34:4f:32:9e:64:13:9d:38:0b: c9:d7:26:1c:3f:5c:d9:22:34:35:22:6f:49:63:24:ab:e7:03: 82:5d:f0:5d:2c:ec:90:01:8a:3b:4a:33:55:0e:0e:0d:79:54: 2f:b2:31:db:e8:e3:52:f8:23:58:91:a3:ca:7e:32:75:6e:83: e9:6a:d1:46:f5:fa:7e:58:3b:f7:2f:aa:5f:f4:3e:e6:d9:b1: 6c:ef:44:1e:b5:ac:77:47:68:9d:a0:05:a4:41:1c:4b:78:b4: cb:2d:c8:24:6e:71:f7:28:22:fb:f7:07:6f:67:b3:45:95:bb: 83:60:d5:fa:fe:a4:48:26:60:14:b4:71:95:f2:20:79:52:4b: 7a:6d:d2:c0:b3:ad:22:fc:0a:10:1b:e6:51:cb:76:93:5f:a7: 54:5b:7a:6a:0f:68:91:6a:59:ee:c8:e6:18:1d:84:15:62:90: c1:dc:f7:42:14:af:d3:19:ad:cd:04:24:26:49:c0:be:eb:d6: 93:b8:4a:8d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUWQYmbd6nDX9BGdq0839V8EuKocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNDA3MjMwNTA1MDFaFw0yNTA3MjIwNTEwMDFaMDMxMTAvBgNV BAMTKDZBRjUwMjU5OEVEODY5ODBCNTlENTFCMDAxQkE2M0Y3QUE1RjY1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1FjFQUZJ8IWzvWUVSA1bMQ9k BU7T4K4UWf7pdKYJ7znyimTR2S1RBF2cLJMbS58FZNJMqH0iKjncesxw6KS0Klp6 OVFoJwPRev+F6go6hCg1n+3qgv/3lwppTU0PTO5kFUHGVrrpsKwB8vufa4Yhy2k5 QSTQGHIpMxLxvG8Ttka5jO9BJrgEJ3FCDnmxAWaSyb94fklz+4g48o09YJyE+PI9 Yv3/ZLZoDuRW2VyVGlXpg3pt6KARceUtTZWby/YQAYn6+ntb00YwMdv+lHva5GLg FzwH/1IbbosSiPo3ekPLWiM45g3ZB5gm6E9UlLsvNmSSrlweRgKy2qHyCvIvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUavUCWY7YaYC1nVGwAbpj96pfZSowHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5YjUzNDIwLThjNTktNDljZi1i M2IyLWY1NWU5ODkwZGRjZC8wLzMxMzYzMDJlMzIzMjJlMzIzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbqMA0GCSqG SIb3DQEBCwUAA4IBAQA5IjrfaR4tSLqSCBZpIPdO6Cu7m0QWB4JVHvqpu4Fdmyu7 4PsNX5qM7U7b6tUhC3OZ77QkBd6mt1mD8jIGX5g0TzKeZBOdOAvJ1yYcP1zZIjQ1 Im9JYySr5wOCXfBdLOyQAYo7SjNVDg4NeVQvsjHb6ONS+CNYkaPKfjJ1boPpatFG 9fp+WDv3L6pf9D7m2bFs70Qetax3R2idoAWkQRxLeLTLLcgkbnH3KCL79wdvZ7NF lbuDYNX6/qRIJmAUtHGV8iB5Ukt6bdLAs60i/AoQG+ZRy3aTX6dUW3pqD2iRalnu yOYYHYQVYpDB3PdCFK/TGa3NBCQmScC+69aTuEqN -----END CERTIFICATE-----Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org