$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa File: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (raw, json) Hash identifier: k9ZzAkFQGvt+xqoKJ82nD9k3QBtwiwB5qwFg/LMZg2I= Subject key identifier: C2:05:44:D5:05:DB:F5:AE:EF:9A:82:2F:3C:17:D7:2E:24:E7:2D:6B Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 5884ECDE8EDAA6C21F55857C0FBDB0CD99B2AB7F Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa Signing time: Fri 01 Nov 2024 06:01:47 +0000 ROA not before: Fri 01 Nov 2024 05:56:47 +0000 ROA not after: Fri 31 Oct 2025 06:01:47 +0000 asID: 140456 IP address blocks: 160.22.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 16:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:84:ec:de:8e:da:a6:c2:1f:55:85:7c:0f:bd:b0:cd:99:b2:ab:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Nov 1 05:56:47 2024 GMT Not After : Oct 31 06:01:47 2025 GMT Subject: CN=C20544D505DBF5AEEF9A822F3C17D72E24E72D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:65:08:9e:35:9b:d5:8e:11:55:ab:22:2a: f6:04:6c:69:62:f6:9b:7f:de:f5:65:1b:db:d8:c3: 06:96:0e:84:d8:3e:92:a3:a0:ae:f1:b6:f1:ab:23: d3:e5:d6:bf:bb:d9:33:b0:f8:90:a8:30:46:48:5a: b4:2a:0c:3f:e5:42:df:aa:9f:44:1a:71:30:2a:fa: f9:40:50:b7:db:19:55:69:d8:10:41:03:f1:e6:04: a6:ec:e1:a9:9b:d8:6a:51:a2:c8:da:88:fb:1b:ec: e4:50:e1:ff:ef:9a:6e:d9:84:50:54:6c:8e:75:85: d9:4b:af:06:fc:4e:54:95:9c:60:55:6a:e2:31:05: c4:bf:f7:d0:c4:2f:4a:5a:86:41:0c:1e:81:9d:d3: 04:1d:58:72:ba:d3:8a:17:c4:28:94:3f:fe:98:62: 8c:07:33:a2:d0:89:cb:4b:b3:d3:fc:53:42:45:99: 9a:92:f6:72:fa:ec:e3:d2:44:f5:c2:74:1d:af:a9: 6d:e1:5d:2e:54:b8:02:df:59:f5:72:66:59:4c:89: 7b:fc:db:cf:82:ba:8c:b2:52:1a:7a:4c:80:4c:5d: cd:cd:5a:8e:44:de:c3:3b:68:bf:cd:de:03:d0:f3: d7:39:fd:c3:a3:c3:eb:50:6b:2e:e8:18:c7:a5:51: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:05:44:D5:05:DB:F5:AE:EF:9A:82:2F:3C:17:D7:2E:24:E7:2D:6B X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.251.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:d4:32:7e:12:bc:52:c6:e4:1f:7e:28:c2:b0:79:c3:20:ed: 50:c0:5a:43:21:42:9a:c5:0f:86:a3:20:98:81:19:5a:7c:bd: f3:30:8d:9a:d5:d2:63:8d:dc:35:0e:5a:d9:9c:15:85:16:54: c7:8b:d8:90:81:f5:81:43:d0:78:d6:28:33:19:5a:5d:d1:c5: 94:2f:d1:ab:5f:49:d0:cc:f5:ec:f9:2f:e3:c7:47:28:9b:53: ce:76:a1:af:c9:cf:16:2b:34:42:b9:46:60:46:18:3d:5c:a8: 6d:31:bd:ed:01:14:18:ca:1e:d9:3e:eb:c9:0c:4e:bf:65:2f: 77:bf:10:c5:89:e9:40:a8:99:be:66:b2:2a:d3:26:41:9a:2c: a7:9d:64:7c:a8:0f:02:9a:86:0a:27:30:6f:d8:58:d1:4f:ba: e3:80:dc:8e:cf:eb:32:f3:d7:6c:92:5a:5e:2c:c0:35:a5:cb: 37:ef:fe:90:6b:70:ab:dc:cb:e2:d3:5b:f3:81:1b:2b:eb:48: 68:3a:8d:51:df:0d:6b:4b:51:bd:28:ba:5b:b3:a0:36:c9:94: 6d:57:aa:72:01:ba:2b:d2:93:d0:21:79:b0:a3:f6:7a:e7:df: 6a:68:d5:bb:bf:ec:08:77:11:56:d5:e8:fe:3e:a8:60:67:9e: 03:3f:2f:ee -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWITs3o7apsIfVYV8D72wzZmyq38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNDExMDEwNTU2NDdaFw0yNTEwMzEwNjAxNDdaMDMxMTAvBgNV BAMTKEMyMDU0NEQ1MDVEQkY1QUVFRjlBODIyRjNDMTdENzJFMjRFNzJENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aGUInjWb1Y4RVasiKvYEbGli 9pt/3vVlG9vYwwaWDoTYPpKjoK7xtvGrI9Pl1r+72TOw+JCoMEZIWrQqDD/lQt+q n0QacTAq+vlAULfbGVVp2BBBA/HmBKbs4amb2GpRosjaiPsb7ORQ4f/vmm7ZhFBU bI51hdlLrwb8TlSVnGBVauIxBcS/99DEL0pahkEMHoGd0wQdWHK604oXxCiUP/6Y YowHM6LQictLs9P8U0JFmZqS9nL67OPSRPXCdB2vqW3hXS5UuALfWfVyZllMiXv8 28+CuoyyUhp6TIBMXc3NWo5E3sM7aL/N3gPQ89c5/cOjw+tQay7oGMelUcmfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUwgVE1QXb9a7vmoIvPBfXLiTnLWswHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwOGFiMTU3LWQ4MjctNDlhOC1i Yjg2LTI4YmUxMzFjM2QyNi8wLzMxMzYzMDJlMzIzMjJlMzIzNTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBb7MA0GCSqG SIb3DQEBCwUAA4IBAQAd1DJ+ErxSxuQffijCsHnDIO1QwFpDIUKaxQ+GoyCYgRla fL3zMI2a1dJjjdw1DlrZnBWFFlTHi9iQgfWBQ9B41igzGVpd0cWUL9GrX0nQzPXs +S/jx0com1POdqGvyc8WKzRCuUZgRhg9XKhtMb3tARQYyh7ZPuvJDE6/ZS93vxDF ielAqJm+ZrIq0yZBmiynnWR8qA8CmoYKJzBv2FjRT7rjgNyOz+sy89dsklpeLMA1 pcs37/6Qa3Cr3Mvi01vzgRsr60hoOo1R3w1rS1G9KLpbs6A2yZRtV6pyAbor0pPQ IXmwo/Z6599qaNW7v+wIdxFW1ej+PqhgZ54DPy/u -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org