$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33362e302f32332d3234203d3e20313532383332.roa File: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (raw, json) Hash identifier: 0s3rWLKkoef0LRd26YLEPlEN62q6VM66IYGFVdLCLsM= Subject key identifier: 6B:F2:85:38:2F:D1:E0:4A:76:CE:16:A8:17:4F:C5:7C:E7:BC:74:ED Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 286C932E67CFC50FBEC710D9EA51EFD20E9AA278 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33362e302f32332d3234203d3e20313532383332.roa Signing time: Tue 03 Sep 2024 05:11:04 +0000 ROA not before: Tue 03 Sep 2024 05:06:04 +0000 ROA not after: Tue 02 Sep 2025 05:11:04 +0000 asID: 152832 IP address blocks: 160.25.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6c:93:2e:67:cf:c5:0f:be:c7:10:d9:ea:51:ef:d2:0e:9a:a2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Sep 3 05:06:04 2024 GMT Not After : Sep 2 05:11:04 2025 GMT Subject: CN=6BF285382FD1E04A76CE16A8174FC57CE7BC74ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:d6:0c:5b:33:5b:4f:5a:ff:0a:33:5d:fa: 91:37:9d:3e:83:68:f4:25:0e:a2:83:f6:c3:0f:c5: 3d:3f:34:e4:fc:5a:6f:de:dd:07:c7:39:64:09:32: 1d:cc:e2:3a:df:cc:d7:bb:59:71:4d:c4:9f:c5:d4: 8a:d7:80:fa:a1:bb:54:47:59:7a:a9:c4:dd:e5:bd: 41:94:8c:a1:e2:45:13:b1:12:5a:03:28:07:87:bb: 81:56:11:69:19:d7:ba:d4:22:f0:d1:bb:4e:c2:ca: 51:fc:a6:9a:90:c4:39:37:85:5a:37:29:c2:06:2c: 6f:cc:e8:e3:46:d5:05:50:23:02:ae:fd:db:fe:43: a7:30:ee:80:f1:15:98:c3:ce:1b:fe:83:bf:bf:a1: cb:a9:78:d0:61:e3:81:aa:25:3a:55:82:e0:e0:cd: 82:f4:66:1b:73:cc:28:a2:0f:00:9a:d0:90:16:bb: 8b:61:d5:53:47:46:1c:5d:d0:33:4f:15:84:83:a2: 68:ca:2f:3a:30:6e:4d:91:36:d8:a2:b0:20:4b:2d: a4:0e:9c:15:53:7d:c0:15:29:bc:51:8c:d0:7d:ed: 0f:59:fe:72:e4:c1:da:3f:8b:2b:e6:39:c5:41:87: df:4f:f3:1e:39:2d:ed:9c:a4:e1:04:aa:64:d3:79: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F2:85:38:2F:D1:E0:4A:76:CE:16:A8:17:4F:C5:7C:E7:BC:74:ED X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33362e302f32332d3234203d3e20313532383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.36.0/23 Signature Algorithm: sha256WithRSAEncryption 26:6d:56:42:c3:25:22:34:91:1f:41:3e:e7:d0:37:18:c4:28: 3e:48:9c:d5:2b:e6:9f:69:bd:b0:9d:31:ea:e9:89:5b:a0:cb: 49:5a:be:c7:0b:0d:69:d9:3b:a8:46:74:4b:88:7b:39:d3:89: 6e:8a:9b:10:67:32:3f:a2:bc:28:0c:17:32:53:0f:0e:21:3f: f3:c9:6f:2e:d2:cc:79:23:b6:72:f9:0c:53:82:15:8e:97:1b: 98:2c:ef:28:34:56:66:88:91:f6:1d:97:62:ab:ad:01:5b:8f: 58:b2:26:c2:13:63:7c:9d:59:93:1c:f7:a8:73:7d:a1:72:2f: 6d:44:13:f4:e2:35:da:fa:4e:40:44:4d:37:bd:d6:73:6e:54: bb:cf:69:8c:0b:4c:33:60:57:75:f3:70:fd:84:a9:02:87:35: 17:d9:ee:b4:62:67:1e:ee:a8:29:2f:e7:51:bf:77:06:41:79: 4c:de:cd:4d:e3:ee:6b:5b:1e:33:63:a4:a2:a9:82:b6:5f:17: 13:8e:a1:55:4a:ac:40:04:68:cb:b4:44:1a:a6:66:c8:36:54: 67:b7:7d:77:58:fb:6e:8a:d1:e8:3f:a5:48:70:20:17:8c:57: 4a:4d:62:58:28:7b:94:99:84:d2:d6:3d:c9:3e:ae:b6:88:08: 5a:ec:04:50 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKGyTLmfPxQ++xxDZ6lHv0g6aongwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNDA5MDMwNTA2MDRaFw0yNTA5MDIwNTExMDRaMDMxMTAvBgNV BAMTKDZCRjI4NTM4MkZEMUUwNEE3NkNFMTZBODE3NEZDNTdDRTdCQzc0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8idYMWzNbT1r/CjNd+pE3nT6D aPQlDqKD9sMPxT0/NOT8Wm/e3QfHOWQJMh3M4jrfzNe7WXFNxJ/F1IrXgPqhu1RH WXqpxN3lvUGUjKHiRROxEloDKAeHu4FWEWkZ17rUIvDRu07CylH8ppqQxDk3hVo3 KcIGLG/M6ONG1QVQIwKu/dv+Q6cw7oDxFZjDzhv+g7+/ocupeNBh44GqJTpVguDg zYL0ZhtzzCiiDwCa0JAWu4th1VNHRhxd0DNPFYSDomjKLzowbk2RNtiisCBLLaQO nBVTfcAVKbxRjNB97Q9Z/nLkwdo/iyvmOcVBh99P8x45Le2cpOEEqmTTedYrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUa/KFOC/R4Ep2zhaoF0/FfOe8dO0wHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmNGI1M2Q4LWIyZmYtNDk3My1i MWFjLTZmODVmYWVhZGJlNS8wLzMxMzYzMDJlMzIzNTJlMzMzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZJDANBgkqhkiG 9w0BAQsFAAOCAQEAJm1WQsMlIjSRH0E+59A3GMQoPkic1Svmn2m9sJ0x6umJW6DL SVq+xwsNadk7qEZ0S4h7OdOJboqbEGcyP6K8KAwXMlMPDiE/88lvLtLMeSO2cvkM U4IVjpcbmCzvKDRWZoiR9h2XYqutAVuPWLImwhNjfJ1Zkxz3qHN9oXIvbUQT9OI1 2vpOQERNN73Wc25Uu89pjAtMM2BXdfNw/YSpAoc1F9nutGJnHu6oKS/nUb93BkF5 TN7NTePua1seM2OkoqmCtl8XE46hVUqsQARoy7REGqZmyDZUZ7d9d1j7borR6D+l SHAgF4xXSk1iWCh7lJmE0tY9yT6utogIWuwEUA== -----END CERTIFICATE-----Generated at Sun Nov 24 08:35:26 2024 by rpki-client on console-ams.rpki-client.org