$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33372e302f32342d3234203d3e20313532383332.roa File: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (raw, json) Hash identifier: M7PLTShc17cNHbAkZ/Aq1Y/sFTRdm7Sh5vz/cqQ2zg0= Subject key identifier: 75:E2:42:45:A5:74:BC:5F:0D:98:01:2E:97:5C:57:35:46:82:28:3B Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 057D700216C35B9EB22D09B5C6F908B3F94364A7 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33372e302f32342d3234203d3e20313532383332.roa Signing time: Tue 16 Jul 2024 07:10:10 +0000 ROA not before: Tue 16 Jul 2024 07:05:10 +0000 ROA not after: Tue 15 Jul 2025 07:10:10 +0000 asID: 152832 IP address blocks: 160.25.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7d:70:02:16:c3:5b:9e:b2:2d:09:b5:c6:f9:08:b3:f9:43:64:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Jul 16 07:05:10 2024 GMT Not After : Jul 15 07:10:10 2025 GMT Subject: CN=75E24245A574BC5F0D98012E975C57354682283B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:34:f0:74:26:00:94:0f:d0:35:15:9c:73:de: e2:54:4e:cd:ca:ce:2d:f7:9f:21:77:8c:f9:8b:77: 08:36:23:02:6a:cf:b1:eb:a0:64:16:f9:5c:38:b5: 34:e4:0a:dd:ec:59:73:be:cc:95:bb:0a:ed:8e:d0: 0b:4c:2d:2d:af:3a:30:a6:f2:98:af:71:11:22:6f: a6:45:4e:d3:64:49:78:d0:ed:28:0b:22:f8:bf:00: cf:0c:b9:09:6f:ad:98:b2:5f:83:3d:96:b6:6a:2d: 24:b9:98:e4:7b:bf:84:51:8f:ac:8f:c1:c1:b2:19: 33:2f:31:3b:ed:e6:f5:da:f3:0c:e7:2a:06:a1:07: 8b:7b:ae:8f:eb:3c:95:fb:73:23:53:97:43:f7:da: 8a:a9:bd:68:bc:ca:18:e0:6c:1a:53:9c:44:4c:3d: 2e:d0:a6:a2:93:67:4b:8a:a7:1f:05:e1:77:53:01: a6:d3:32:8a:96:98:2d:50:0a:01:f3:a8:ef:09:7e: ae:82:ed:ca:43:2f:a2:cd:b4:96:53:97:85:3a:e0: 89:e9:62:27:c8:de:d5:18:e9:23:9e:e1:15:94:11: 72:d6:6b:f3:98:68:c8:b2:1b:11:2a:41:74:20:21: b9:71:07:3c:2c:b6:68:5f:01:92:d7:c2:80:69:42: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E2:42:45:A5:74:BC:5F:0D:98:01:2E:97:5C:57:35:46:82:28:3B X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33372e302f32342d3234203d3e20313532383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.37.0/24 Signature Algorithm: sha256WithRSAEncryption ad:38:82:ad:1d:a7:4b:18:b0:e3:51:40:25:17:a4:84:9a:8a: 60:32:1f:14:44:fd:73:3b:bf:c4:73:1d:fd:e3:9d:58:ed:97: 05:8b:3f:38:a6:45:0c:dd:95:a9:bd:09:db:a7:5f:0c:c2:f6: 3e:91:9c:70:9c:04:ca:28:16:86:fe:a0:10:83:5e:ab:c0:01: c9:6d:39:55:05:1f:a1:c3:9d:04:e8:80:cd:fd:7f:ec:62:d7: bf:1a:69:77:69:b2:d4:17:33:e5:46:65:99:d1:89:48:1c:db: 9a:77:18:4a:47:98:60:6f:67:f8:55:b8:3d:3a:47:88:58:21: 1a:6b:ac:09:be:dd:47:3f:7b:b0:4c:f0:86:a0:9b:98:3b:09: 84:be:cd:51:b9:90:c6:57:85:95:38:1a:0a:66:69:87:aa:68: a3:17:f5:74:b2:60:75:59:8b:8b:4b:e7:72:6f:1e:bd:de:31: bb:22:26:fe:0e:fd:cc:31:71:97:b4:11:88:42:45:be:cc:33: 3f:3b:b8:dd:67:44:76:85:9c:56:82:7b:db:70:4d:7d:3f:a0: 7f:39:98:c8:c3:81:dc:2b:9c:44:36:48:f3:a2:91:a2:8c:5c: 97:37:60:0f:70:7e:eb:a4:5b:34:ce:b9:fd:d3:43:29:7a:c2: 9a:3d:0c:d2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBX1wAhbDW56yLQm1xvkIs/lDZKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNDA3MTYwNzA1MTBaFw0yNTA3MTUwNzEwMTBaMDMxMTAvBgNV BAMTKDc1RTI0MjQ1QTU3NEJDNUYwRDk4MDEyRTk3NUM1NzM1NDY4MjI4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhNPB0JgCUD9A1FZxz3uJUTs3K zi33nyF3jPmLdwg2IwJqz7HroGQW+Vw4tTTkCt3sWXO+zJW7Cu2O0AtMLS2vOjCm 8pivcREib6ZFTtNkSXjQ7SgLIvi/AM8MuQlvrZiyX4M9lrZqLSS5mOR7v4RRj6yP wcGyGTMvMTvt5vXa8wznKgahB4t7ro/rPJX7cyNTl0P32oqpvWi8yhjgbBpTnERM PS7QpqKTZ0uKpx8F4XdTAabTMoqWmC1QCgHzqO8Jfq6C7cpDL6LNtJZTl4U64Inp YifI3tUY6SOe4RWUEXLWa/OYaMiyGxEqQXQgIblxBzwstmhfAZLXwoBpQiqXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdeJCRaV0vF8NmAEul1xXNUaCKDswHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmNGI1M2Q4LWIyZmYtNDk3My1i MWFjLTZmODVmYWVhZGJlNS8wLzMxMzYzMDJlMzIzNTJlMzMzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAZJTANBgkqhkiG 9w0BAQsFAAOCAQEArTiCrR2nSxiw41FAJRekhJqKYDIfFET9czu/xHMd/eOdWO2X BYs/OKZFDN2Vqb0J26dfDML2PpGccJwEyigWhv6gEINeq8AByW05VQUfocOdBOiA zf1/7GLXvxppd2my1Bcz5UZlmdGJSBzbmncYSkeYYG9n+FW4PTpHiFghGmusCb7d Rz97sEzwhqCbmDsJhL7NUbmQxleFlTgaCmZph6pooxf1dLJgdVmLi0vncm8evd4x uyIm/g79zDFxl7QRiEJFvswzPzu43WdEdoWcVoJ723BNfT+gfzmYyMOB3CucRDZI 86KRooxclzdgD3B+66RbNM65/dNDKXrCmj0M0g== -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org