$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa File: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (raw, json) Hash identifier: oOhjxNchKYaSdtA4Y1DYNdIAblAIJ4R/DzgKf/zg2vo= Subject key identifier: 5A:F3:B2:19:80:AE:6A:E2:4E:DF:40:64:81:A6:D1:95:99:93:61:14 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 57E9206ACD21B9EBF38FB1683A0D1E81D4240568 Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa Signing time: Fri 01 Nov 2024 06:00:22 +0000 ROA not before: Fri 01 Nov 2024 05:55:22 +0000 ROA not after: Fri 31 Oct 2025 06:00:22 +0000 asID: 140456 IP address blocks: 160.22.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 16:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e9:20:6a:cd:21:b9:eb:f3:8f:b1:68:3a:0d:1e:81:d4:24:05:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Nov 1 05:55:22 2024 GMT Not After : Oct 31 06:00:22 2025 GMT Subject: CN=5AF3B21980AE6AE24EDF406481A6D19599936114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:7f:a8:2b:12:6b:3f:64:8a:e2:ff:ca:6c: 29:17:0c:2c:d4:1b:4d:2c:75:4a:bb:c2:09:4c:5c: 52:02:cf:41:00:e8:74:3c:9e:a5:b6:d7:34:8d:13: d8:8c:bc:02:98:4b:6b:ed:92:cd:ab:35:66:53:8b: f5:f8:8d:af:21:74:9a:6f:ac:58:c7:2b:de:a4:03: 10:4f:d5:63:1c:f9:18:b4:40:c1:4c:61:0c:10:6f: 8b:71:94:27:5a:e4:5c:fb:11:dd:4d:99:6b:9f:e5: d5:9a:a7:97:df:0a:1a:f4:e2:1e:cb:de:2d:3f:01: c2:06:d8:a6:4b:82:58:f6:67:b5:10:48:c2:f8:12: 23:40:da:d0:06:eb:d9:ab:4e:82:f0:58:f4:7e:28: 0d:2b:54:64:72:96:f6:e7:5e:6e:d7:88:6c:d4:28: 33:7e:49:18:5c:47:70:fa:6d:3e:b7:44:9f:e8:ff: 96:f6:04:5f:73:f7:16:2c:97:84:22:3f:03:b7:80: de:33:07:4d:75:d9:18:82:41:82:5b:c9:26:24:a1: 13:89:59:8e:e3:3b:fa:29:01:84:ae:b9:52:07:30: 93:d3:e5:b0:58:65:b5:c8:21:3d:22:de:9b:34:21: de:94:c0:a3:8e:e0:ad:77:97:be:82:21:91:88:98: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F3:B2:19:80:AE:6A:E2:4E:DF:40:64:81:A6:D1:95:99:93:61:14 X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.250.0/24 Signature Algorithm: sha256WithRSAEncryption 34:80:e3:f0:28:b0:70:4c:7a:b2:dc:01:93:de:83:0c:82:64: a0:8a:59:8b:02:84:42:f8:01:ab:c1:dc:29:e7:50:08:db:a4: 13:59:93:37:6f:6b:bd:0b:c1:68:be:d0:fc:e7:78:d5:6b:a8: 0c:15:8f:c5:ba:7a:d0:e0:bf:00:e8:65:7b:4a:6f:a0:f0:59: 55:b7:6b:e1:69:f8:06:67:3a:3f:42:16:0b:57:34:c6:0a:08: bb:26:dc:7e:35:79:c2:6b:15:7e:01:53:44:e3:89:03:71:e8: 02:47:67:17:60:ae:b2:b3:65:41:c5:96:84:17:0a:b4:9f:d2: c9:4f:16:4a:0d:82:e3:53:12:8a:81:af:e2:47:3e:ec:1d:60: 5b:74:00:6b:bd:69:68:c0:7c:09:b2:ec:4c:1f:1e:70:ac:9b: a9:d2:15:78:e0:19:d6:55:46:49:9f:14:fb:a6:21:66:54:23: 6c:1e:f0:fe:74:9b:ae:db:f4:8f:51:a5:ec:da:19:7c:6b:60: 53:ce:ca:09:70:53:f1:7b:b5:20:af:8b:1a:f3:b1:e3:4c:fe: 34:c4:90:f6:bb:5e:f9:ee:1b:85:5a:83:06:e0:22:a9:46:2e: ef:8e:8c:ec:eb:99:be:00:31:2a:2d:5c:43:14:3f:e8:67:8f: c2:14:62:99 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUV+kgas0huevzj7FoOg0egdQkBWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNDExMDEwNTU1MjJaFw0yNTEwMzEwNjAwMjJaMDMxMTAvBgNV BAMTKDVBRjNCMjE5ODBBRTZBRTI0RURGNDA2NDgxQTZEMTk1OTk5MzYxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAn+oKxJrP2SK4v/KbCkXDCzU G00sdUq7wglMXFICz0EA6HQ8nqW21zSNE9iMvAKYS2vtks2rNWZTi/X4ja8hdJpv rFjHK96kAxBP1WMc+Ri0QMFMYQwQb4txlCda5Fz7Ed1NmWuf5dWap5ffChr04h7L 3i0/AcIG2KZLglj2Z7UQSML4EiNA2tAG69mrToLwWPR+KA0rVGRylvbnXm7XiGzU KDN+SRhcR3D6bT63RJ/o/5b2BF9z9xYsl4QiPwO3gN4zB0112RiCQYJbySYkoROJ WY7jO/opAYSuuVIHMJPT5bBYZbXIIT0i3ps0Id6UwKOO4K13l76CIZGImHypAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWvOyGYCuauJO30BkgabRlZmTYRQwHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwOGFiMTU3LWQ4MjctNDlhOC1i Yjg2LTI4YmUxMzFjM2QyNi8wLzMxMzYzMDJlMzIzMjJlMzIzNTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBb6MA0GCSqG SIb3DQEBCwUAA4IBAQA0gOPwKLBwTHqy3AGT3oMMgmSgilmLAoRC+AGrwdwp51AI 26QTWZM3b2u9C8FovtD853jVa6gMFY/FunrQ4L8A6GV7Sm+g8FlVt2vhafgGZzo/ QhYLVzTGCgi7Jtx+NXnCaxV+AVNE44kDcegCR2cXYK6ys2VBxZaEFwq0n9LJTxZK DYLjUxKKga/iRz7sHWBbdABrvWlowHwJsuxMHx5wrJup0hV44BnWVUZJnxT7piFm VCNsHvD+dJuu2/SPUaXs2hl8a2BTzsoJcFPxe7Ugr4sa87HjTP40xJD2u1757huF WoMG4CKpRi7vjozs65m+ADEqLVxDFD/oZ4/CFGKZ -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:19 2024 by rpki-client on console-fra.rpki-client.org