$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa File: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (raw, json) Hash identifier: hfp0R3ELBQf5z/8Cte4K8Vl+BAiPG2EB5Pp1Bo96E+c= Subject key identifier: 6E:BD:B4:4C:33:D1:99:86:4D:87:A4:FD:89:9F:A0:96:5C:68:4F:11 Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C Certificate serial: 7526A71AB3DDA4D038BB4EEC42617D203F8F2CA1 Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa Signing time: Wed 06 Nov 2024 05:18:27 +0000 ROA not before: Wed 06 Nov 2024 05:13:27 +0000 ROA not after: Wed 05 Nov 2025 05:18:27 +0000 asID: 152810 IP address blocks: 160.22.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:26:a7:1a:b3:dd:a4:d0:38:bb:4e:ec:42:61:7d:20:3f:8f:2c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C Validity Not Before: Nov 6 05:13:27 2024 GMT Not After : Nov 5 05:18:27 2025 GMT Subject: CN=6EBDB44C33D199864D87A4FD899FA0965C684F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:6c:4f:9c:13:18:dc:1f:39:78:06:33:47: e5:37:0c:fc:88:88:56:2a:1d:5c:47:a2:dd:22:5e: 6f:55:98:96:50:4f:3f:ea:ce:7a:f9:58:20:d0:da: 0b:9b:a3:da:3b:30:05:3a:e5:6d:1c:19:e7:1c:69: 9b:bf:c2:d4:fe:81:49:79:25:f0:e3:70:f3:01:e5: 96:0b:7e:1f:ad:d5:e4:64:f8:a2:6a:26:af:b0:c2: b4:f4:60:72:fa:7d:7e:2d:84:ee:10:59:1e:9c:54: c2:d3:54:ee:82:a9:46:15:41:e0:8f:b6:8a:6c:a8: 02:b7:85:43:21:15:93:6a:01:c8:66:07:c1:2f:84: 72:0d:ee:04:b6:70:5a:e4:18:f1:06:ad:04:b1:0b: 43:c7:90:23:84:a1:5c:e0:1b:77:31:0b:37:9f:99: f7:95:b9:85:20:4a:45:3e:23:28:35:45:e2:5c:4f: b8:61:59:e5:09:7c:12:af:89:48:cf:a1:81:5b:82: 17:6e:64:79:4c:02:97:2f:bc:d3:cf:48:11:15:06: 0b:b7:bb:30:55:84:4c:2f:5a:b2:94:c9:1a:d3:4c: 6b:99:0c:67:f8:8a:e5:eb:61:a2:f5:57:9c:49:75: 53:71:5e:4a:63:73:8a:c8:9a:80:8a:d8:1e:56:fd: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BD:B4:4C:33:D1:99:86:4D:87:A4:FD:89:9F:A0:96:5C:68:4F:11 X509v3 Authority Key Identifier: keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.134.0/23 Signature Algorithm: sha256WithRSAEncryption e3:b2:ce:34:87:b7:cb:11:6f:15:98:45:57:59:b9:b1:02:33: ff:66:48:d6:57:73:7f:d3:f8:9a:49:43:87:67:74:6c:a7:17: 2f:df:6d:80:75:3f:bd:62:df:8b:95:f9:0b:73:fc:ee:8b:2f: 54:04:02:94:34:d5:d2:bf:95:01:1c:f8:1e:c9:78:c2:75:a3: 6a:28:d2:a4:eb:32:9b:2e:4a:28:f5:e5:a7:b7:25:f8:6d:6c: 95:db:e6:40:cc:ba:d8:35:17:56:31:a8:30:a8:f2:87:c0:74: e7:a7:1b:d7:51:5d:13:f7:ae:d3:08:2a:c8:03:ce:2c:a5:00: 6c:3f:31:e5:f6:28:cd:1f:4a:03:83:30:a5:b9:49:a8:bd:59: 18:c3:cf:b8:39:b3:a7:18:7b:a2:f1:be:2b:e9:aa:b4:27:a1: fd:68:7e:99:0e:49:00:05:f5:9e:28:ff:d1:29:f1:64:25:17: ab:b8:b1:ca:c6:8a:75:a0:5f:72:b5:c2:c6:d1:67:ea:74:97: 87:a0:0f:ca:1d:4e:bb:08:bb:30:8f:9a:d6:53:a4:f9:e1:b5: 94:95:6c:bc:e0:39:44:06:47:3e:6f:b4:3f:dc:03:30:b0:72: f2:d4:de:7a:5c:aa:28:a1:a2:19:15:5a:28:0c:ef:54:5d:01: b4:be:18:62 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdSanGrPdpNA4u07sQmF9ID+PLKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4 NUUzNzI0QzAeFw0yNDExMDYwNTEzMjdaFw0yNTExMDUwNTE4MjdaMDMxMTAvBgNV BAMTKDZFQkRCNDRDMzNEMTk5ODY0RDg3QTRGRDg5OUZBMDk2NUM2ODRGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2GxPnBMY3B85eAYzR+U3DPyI iFYqHVxHot0iXm9VmJZQTz/qznr5WCDQ2gubo9o7MAU65W0cGeccaZu/wtT+gUl5 JfDjcPMB5ZYLfh+t1eRk+KJqJq+wwrT0YHL6fX4thO4QWR6cVMLTVO6CqUYVQeCP topsqAK3hUMhFZNqAchmB8EvhHIN7gS2cFrkGPEGrQSxC0PHkCOEoVzgG3cxCzef mfeVuYUgSkU+Iyg1ReJcT7hhWeUJfBKviUjPoYFbghduZHlMApcvvNPPSBEVBgu3 uzBVhEwvWrKUyRrTTGuZDGf4iuXrYaL1V5xJdVNxXkpjc4rImoCK2B5W/cpZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbr20TDPRmYZNh6T9iZ+gllxoTxEwHwYDVR0j BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2 OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz NzI0Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg0NzUzMzhkLTdhY2ItNGFhNy1i ZWRjLWQ2NDU5ZmQxMzUwNC8wLzMxMzYzMDJlMzIzMjJlMzEzMzM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBaGMA0GCSqG SIb3DQEBCwUAA4IBAQDjss40h7fLEW8VmEVXWbmxAjP/ZkjWV3N/0/iaSUOHZ3Rs pxcv322AdT+9Yt+LlfkLc/zuiy9UBAKUNNXSv5UBHPgeyXjCdaNqKNKk6zKbLkoo 9eWntyX4bWyV2+ZAzLrYNRdWMagwqPKHwHTnpxvXUV0T967TCCrIA84spQBsPzHl 9ijNH0oDgzCluUmovVkYw8+4ObOnGHui8b4r6aq0J6H9aH6ZDkkABfWeKP/RKfFk JReruLHKxop1oF9ytcLG0WfqdJeHoA/KHU67CLswj5rWU6T54bWUlWy84DlEBkc+ b7Q/3AMwsHLy1N56XKoooaIZFVooDO9UXQG0vhhi -----END CERTIFICATE-----Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org