$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32332d3233203d3e20313533313232.roa File: 3136302e3138372e3133382e302f32332d3233203d3e20313533313232.roa (raw, json) Hash identifier: rgFKWwMd3mdU3d1sl5rQzkSoYIQr1Z2xxGI7oeoaK18= Subject key identifier: 99:9B:71:B4:B0:56:6C:C7:3E:6F:A1:E8:6C:98:2E:9E:51:E4:24:EA Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 568DD67542118FB3397C260FD794F08C89FCD178 Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32332d3233203d3e20313533313232.roa Signing time: Wed 09 Oct 2024 07:06:07 +0000 ROA not before: Wed 09 Oct 2024 07:01:07 +0000 ROA not after: Wed 08 Oct 2025 07:06:07 +0000 asID: 153122 IP address blocks: 160.187.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8d:d6:75:42:11:8f:b3:39:7c:26:0f:d7:94:f0:8c:89:fc:d1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Oct 9 07:01:07 2024 GMT Not After : Oct 8 07:06:07 2025 GMT Subject: CN=999B71B4B0566CC73E6FA1E86C982E9E51E424EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:24:45:f1:f3:b9:1f:46:78:9d:da:50:7d: 6c:b9:d9:e2:27:5a:fc:83:5a:78:cf:68:ea:c0:37: fb:2e:19:16:5c:d7:45:30:c7:21:fc:9e:43:36:82: 8c:e9:fe:81:9d:b4:f0:02:7d:73:58:bb:6a:ba:29: c5:97:e2:31:0d:3d:87:a1:e1:d5:8a:02:1f:ea:a2: 4e:4a:e6:a7:9c:af:82:29:1e:a6:09:a4:59:e4:f2: a2:55:8a:28:32:7d:6d:ae:6c:5e:42:a9:d7:40:40: 9e:07:0e:d1:45:39:8f:44:00:05:e0:7d:84:b1:d6: a9:31:94:05:7f:2f:28:4b:6f:05:a0:db:e5:14:ae: f2:a5:ad:a6:bb:2d:45:8b:f1:0b:10:34:ab:96:aa: 6d:83:46:8b:ee:47:35:c1:6e:34:08:3e:e9:34:88: f7:79:ea:4d:f2:39:14:b3:c2:7d:53:4b:cf:9e:dc: 5e:73:1e:02:44:19:f4:31:47:e5:0a:ed:b3:c5:f3: 6e:6b:85:a4:6b:cf:e3:52:50:b7:b2:e7:24:17:9c: ac:8e:6f:37:49:97:5e:21:d3:25:85:a1:c3:f0:1d: 93:23:2c:e0:df:20:6f:5c:9c:8e:ee:49:cd:1c:5d: a5:81:e5:31:d0:19:c7:09:d1:75:e0:c1:49:aa:95: a2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9B:71:B4:B0:56:6C:C7:3E:6F:A1:E8:6C:98:2E:9E:51:E4:24:EA X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32332d3233203d3e20313533313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.138.0/23 Signature Algorithm: sha256WithRSAEncryption 56:51:9e:a2:a3:ab:e7:cb:8d:d3:f2:8d:2c:e6:2e:9e:1e:66: 93:37:9f:68:da:c1:0d:7c:b7:1e:4b:3a:23:40:1c:d3:f1:fa: ad:ae:6b:3d:a2:b7:21:de:7d:7c:24:81:e4:69:8e:52:af:de: 80:e6:86:e2:0b:94:05:f4:78:16:4b:ed:3f:3a:22:ea:6e:68: 04:75:c7:ce:de:fd:1c:4d:89:97:b6:19:fc:b4:49:16:b9:22: 20:3e:e6:bf:70:9a:a9:d5:51:49:c7:0d:64:36:a8:57:e9:87: b2:d4:45:53:9e:fd:83:5c:30:2a:ce:04:90:87:87:86:0e:66: 9e:fc:a2:fa:21:71:2b:0b:de:ae:ad:10:bf:91:bc:82:50:ee: 15:65:46:c8:dc:83:e4:f4:7e:e8:2c:db:20:bb:ca:02:5a:4a: a0:38:29:ca:33:9b:5b:a6:a7:ff:06:ad:ba:1c:6a:82:fa:ec: be:44:8d:7b:01:cd:f9:f1:be:e2:8c:ef:ee:7b:92:6d:6f:a1: cd:f0:12:54:c4:b0:24:ba:d2:e2:9f:b9:b1:36:98:49:a6:7b: 9d:24:f3:38:6e:d1:85:17:0a:8c:9e:47:95:f9:31:bc:a1:79: 33:4f:8c:9b:f5:08:c6:b9:ab:ee:52:cc:b4:8c:fa:63:9d:a1: eb:81:40:c7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVo3WdUIRj7M5fCYP15TwjIn80XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNDEwMDkwNzAxMDdaFw0yNTEwMDgwNzA2MDdaMDMxMTAvBgNV BAMTKDk5OUI3MUI0QjA1NjZDQzczRTZGQTFFODZDOTgyRTlFNTFFNDI0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRPyRF8fO5H0Z4ndpQfWy52eIn WvyDWnjPaOrAN/suGRZc10UwxyH8nkM2gozp/oGdtPACfXNYu2q6KcWX4jENPYeh 4dWKAh/qok5K5qecr4IpHqYJpFnk8qJViigyfW2ubF5CqddAQJ4HDtFFOY9EAAXg fYSx1qkxlAV/LyhLbwWg2+UUrvKlraa7LUWL8QsQNKuWqm2DRovuRzXBbjQIPuk0 iPd56k3yORSzwn1TS8+e3F5zHgJEGfQxR+UK7bPF825rhaRrz+NSULey5yQXnKyO bzdJl14h0yWFocPwHZMjLODfIG9cnI7uSc0cXaWB5THQGccJ0XXgwUmqlaLnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmZtxtLBWbMc+b6HobJgunlHkJOowHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjJmNjQ5LTk5NjgtNDk1ZC1i ZGYxLTdkNzYyNTZkYWFkNS8wLzMxMzYzMDJlMzEzODM3MmUzMTMzMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzMzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgu4owDQYJ KoZIhvcNAQELBQADggEBAFZRnqKjq+fLjdPyjSzmLp4eZpM3n2jawQ18tx5LOiNA HNPx+q2uaz2ityHefXwkgeRpjlKv3oDmhuILlAX0eBZL7T86IupuaAR1x87e/RxN iZe2Gfy0SRa5IiA+5r9wmqnVUUnHDWQ2qFfph7LURVOe/YNcMCrOBJCHh4YOZp78 ovohcSsL3q6tEL+RvIJQ7hVlRsjcg+T0fugs2yC7ygJaSqA4Kcozm1ump/8Grboc aoL67L5EjXsBzfnxvuKM7+57km1voc3wElTEsCS60uKfubE2mEmme50k8zhu0YUX CoyeR5X5MbyheTNPjJv1CMa5q+5SzLSM+mOdoeuBQMc= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org