$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32332d3234203d3e20313532373830.roa File: 3136302e32302e3132342e302f32332d3234203d3e20313532373830.roa (raw, json) Hash identifier: IkjprjG3/n5zOp3iUTX5ZiF0lU1e6CPgH8Ndijbo+SA= Subject key identifier: D7:47:D6:24:E6:B6:15:9C:8B:22:B9:26:8D:C3:CB:38:C3:53:D9:31 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 3E02D4BBCAD8851E310CB2E386E1607DDB835F74 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32332d3234203d3e20313532373830.roa Signing time: Tue 04 Jun 2024 11:49:52 +0000 ROA not before: Tue 04 Jun 2024 11:44:52 +0000 ROA not after: Tue 03 Jun 2025 11:49:52 +0000 asID: 152780 IP address blocks: 160.20.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 06:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:02:d4:bb:ca:d8:85:1e:31:0c:b2:e3:86:e1:60:7d:db:83:5f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Jun 4 11:44:52 2024 GMT Not After : Jun 3 11:49:52 2025 GMT Subject: CN=D747D624E6B6159C8B22B9268DC3CB38C353D931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:4b:7f:12:67:a2:d3:68:04:d5:0d:cb:76: 05:20:c0:7c:77:24:bb:8e:a0:12:27:12:11:88:41: 07:ac:5c:6c:49:ac:3d:3a:b7:7b:21:c8:cf:16:51: 5f:c2:d9:e2:8f:37:a0:d9:a1:1a:93:c6:ef:f5:b0: 47:11:15:75:4e:2f:d1:b9:2c:69:82:d4:37:b0:cf: 50:4b:53:8d:52:6e:ab:ba:b3:58:f3:2d:ca:0d:88: 44:12:b9:e2:7f:e7:f8:06:c8:0e:5e:04:3b:83:0c: 7f:7c:51:be:64:02:9c:e9:24:ea:0d:8d:61:41:26: aa:f4:5c:92:10:23:6c:52:fd:be:3d:64:b7:d9:b0: c6:11:3e:a6:fe:a3:ec:0d:e4:33:26:51:d9:51:f9: 30:e2:eb:d5:8a:36:0c:fc:dc:b1:ad:e1:62:ee:9e: f2:50:3e:16:0a:c1:82:9d:c0:6e:4a:98:6e:a8:74: 27:d8:86:67:49:26:71:e4:2f:92:fc:74:05:51:52: 0e:90:49:34:4f:10:19:a1:46:b6:2a:96:2a:84:eb: d6:8b:1d:df:ad:c0:08:02:ac:01:c1:65:93:5b:f7: de:bb:d6:67:f8:14:46:fe:a0:0a:30:12:fc:e2:1a: 1c:fd:08:6d:31:33:29:98:2b:57:17:a6:9b:81:35: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:47:D6:24:E6:B6:15:9C:8B:22:B9:26:8D:C3:CB:38:C3:53:D9:31 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32332d3234203d3e20313532373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.124.0/23 Signature Algorithm: sha256WithRSAEncryption 97:ca:66:55:9e:db:77:1b:4b:07:2e:59:12:ee:96:ba:56:7b: 5a:3d:d7:c0:d3:61:84:60:88:70:3a:95:0b:57:83:a1:f4:82: dc:2d:d5:36:7a:d8:b3:1e:ee:b9:e6:a0:a1:e9:e0:a4:66:78: a1:b6:f7:03:95:f6:af:59:62:75:00:27:a1:fa:c6:98:e2:b8: 96:4c:08:c0:a3:36:ff:c9:85:df:71:41:60:4a:6e:4a:d6:19: f9:9d:6c:0e:63:96:9e:88:cc:a0:b6:10:9f:ea:49:27:f8:7c: 0f:77:d2:f7:3d:d4:52:b4:f7:63:d7:2b:6e:d4:bc:f8:ba:67: f1:d5:e0:19:ab:5f:37:c3:62:f1:61:03:0d:a5:36:6e:b6:06: 6c:96:fa:b0:9c:65:2b:2b:67:3f:00:85:dc:f0:0f:49:1e:35: 92:7e:c7:bb:e8:f6:c8:82:48:01:f8:6c:13:ac:39:9e:45:d8: 2b:eb:02:d6:28:f4:f7:18:e6:73:0e:9c:5a:c4:48:99:9b:4b: 46:db:1c:4c:16:9a:04:ac:8f:60:d4:cf:3f:f6:e4:e8:d1:ba: 29:15:d7:7f:2d:38:52:99:dd:85:ea:b2:53:9a:11:af:75:b6: 48:4c:3f:0f:a4:49:41:da:2b:66:d2:5f:b7:37:18:f7:a8:e4: 8a:62:22:06 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPgLUu8rYhR4xDLLjhuFgfduDX3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNDA2MDQxMTQ0NTJaFw0yNTA2MDMxMTQ5NTJaMDMxMTAvBgNV BAMTKEQ3NDdENjI0RTZCNjE1OUM4QjIyQjkyNjhEQzNDQjM4QzM1M0Q5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpUt/Emei02gE1Q3LdgUgwHx3 JLuOoBInEhGIQQesXGxJrD06t3shyM8WUV/C2eKPN6DZoRqTxu/1sEcRFXVOL9G5 LGmC1Dewz1BLU41Sbqu6s1jzLcoNiEQSueJ/5/gGyA5eBDuDDH98Ub5kApzpJOoN jWFBJqr0XJIQI2xS/b49ZLfZsMYRPqb+o+wN5DMmUdlR+TDi69WKNgz83LGt4WLu nvJQPhYKwYKdwG5KmG6odCfYhmdJJnHkL5L8dAVRUg6QSTRPEBmhRrYqliqE69aL Hd+twAgCrAHBZZNb99671mf4FEb+oAowEvziGhz9CG0xMymYK1cXppuBNYw/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU10fWJOa2FZyLIrkmjcPLOMNT2TEwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzNTc5MjFkLWVlMTgtNDM1Yy04 YjZlLWViYTIyNDFiODNhYi8wLzMxMzYzMDJlMzIzMDJlMzEzMjM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBR8MA0GCSqG SIb3DQEBCwUAA4IBAQCXymZVntt3G0sHLlkS7pa6VntaPdfA02GEYIhwOpULV4Oh 9ILcLdU2etizHu655qCh6eCkZnihtvcDlfavWWJ1ACeh+saY4riWTAjAozb/yYXf cUFgSm5K1hn5nWwOY5aeiMygthCf6kkn+HwPd9L3PdRStPdj1ytu1Lz4umfx1eAZ q183w2LxYQMNpTZutgZslvqwnGUrK2c/AIXc8A9JHjWSfse76PbIgkgB+GwTrDme Rdgr6wLWKPT3GOZzDpxaxEiZm0tG2xxMFpoErI9g1M8/9uTo0bopFdd/LThSmd2F 6rJTmhGvdbZITD8PpElB2itm0l+3Nxj3qOSKYiIG -----END CERTIFICATE-----Generated at Sat Jun 29 12:14:21 2024 by rpki-client on console-ams.rpki-client.org