$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa File: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (raw, json) Hash identifier: EvJq4OLjEBVOFbG73OwOsPdQAb4z66x1zbfCbpT8orA= Subject key identifier: 2E:30:4F:88:4A:B3:24:CE:48:85:AB:CA:D6:4F:B5:76:7C:F7:9D:EE Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 6FD2FFEC30F975EA01621AE4C7CED49F57A79448 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa Signing time: Mon 08 Jul 2024 09:30:56 +0000 ROA not before: Mon 08 Jul 2024 09:25:56 +0000 ROA not after: Mon 07 Jul 2025 09:30:56 +0000 asID: 152780 IP address blocks: 160.20.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Sep 2024 12:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d2:ff:ec:30:f9:75:ea:01:62:1a:e4:c7:ce:d4:9f:57:a7:94:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Jul 8 09:25:56 2024 GMT Not After : Jul 7 09:30:56 2025 GMT Subject: CN=2E304F884AB324CE4885ABCAD64FB5767CF79DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:bc:40:9a:7e:0d:a4:b0:db:4e:a0:79:a9: da:ca:92:ab:17:a8:ae:1e:d9:8c:a8:37:4e:ee:e6: 05:b8:3c:de:c9:50:b2:b7:42:2c:f5:36:00:e0:bb: 1c:e7:78:5f:3c:68:84:cd:7f:22:a4:60:a8:73:a2: c4:5e:8b:a2:c9:6a:4e:f4:30:ba:c2:7b:7b:fa:9e: 2b:98:f8:3f:98:a7:c2:ee:75:cc:1f:21:d7:e0:99: 44:70:20:c7:9c:c5:b2:77:32:61:1c:d8:f6:9c:f3: 2f:8c:1a:f8:30:a0:36:9d:e9:88:e0:57:68:be:81: 4c:7c:69:00:80:55:b2:f3:75:6b:ef:25:4f:af:1a: 61:4e:c8:67:6b:47:1b:16:e9:a5:de:68:11:69:0a: 86:c1:0f:39:5f:72:05:3b:fe:86:18:3a:f4:35:39: 42:da:19:07:44:04:42:fc:e3:14:a8:a4:be:40:71: 56:82:25:00:9c:45:f6:1e:b9:f0:71:88:0c:20:74: 25:c9:4b:bd:79:b8:41:9a:e0:cb:96:17:61:bf:8a: 98:01:7d:21:bb:69:d5:f7:99:18:52:89:cc:e0:83: a3:02:a3:6b:48:be:cc:59:40:9b:3d:87:3d:b2:d8: 22:2a:f9:4d:bf:02:e9:77:f4:4f:6a:ad:73:83:58: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:4F:88:4A:B3:24:CE:48:85:AB:CA:D6:4F:B5:76:7C:F7:9D:EE X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.124.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ee:89:e1:a6:8b:17:6f:b8:fd:56:a6:68:34:82:0b:3c:08: e2:cb:9b:a1:d0:e7:c4:43:4d:d0:9d:e8:c4:8a:8e:2f:4c:9f: 73:2b:14:7a:45:3d:e4:a3:28:c8:22:9b:c2:2b:41:ec:bf:e6: b8:c2:c3:ed:b6:2b:df:d3:44:e1:57:01:b3:83:aa:5d:fc:e7: 1f:d4:1e:ee:bc:d3:2b:00:4d:8e:1f:13:90:9f:6e:9a:4c:5b: 01:ff:ad:4e:16:bf:6a:39:75:49:ff:bd:19:97:ee:1a:26:e4: 3e:c0:4a:72:0c:77:68:ca:74:ef:25:45:37:9b:93:17:99:e9: 8a:92:b9:39:4d:f3:b2:72:24:b7:f1:06:33:8a:17:e5:66:92: 42:0c:28:e0:74:f2:f6:62:44:4e:36:be:42:89:1a:5e:54:e6: 80:03:82:93:95:bb:74:36:29:6f:b8:9f:9a:61:ce:fd:5a:5c: f1:4a:2d:90:ed:34:c2:b0:89:68:d4:89:a4:01:53:01:ce:2e: 5a:2f:a1:51:a5:f4:0f:2b:da:dd:cf:3a:a4:94:ea:ba:b6:ed: ea:71:99:d6:db:fa:66:0e:9a:a1:ac:da:92:35:cf:db:6e:af: 0f:22:46:6b:9b:1e:21:c7:45:20:ef:d4:73:3e:62:4f:6d:56: 37:45:a1:99 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb9L/7DD5deoBYhrkx87Un1enlEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNDA3MDgwOTI1NTZaFw0yNTA3MDcwOTMwNTZaMDMxMTAvBgNV BAMTKDJFMzA0Rjg4NEFCMzI0Q0U0ODg1QUJDQUQ2NEZCNTc2N0NGNzlERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+rxAmn4NpLDbTqB5qdrKkqsX qK4e2YyoN07u5gW4PN7JULK3Qiz1NgDguxzneF88aITNfyKkYKhzosRei6LJak70 MLrCe3v6niuY+D+Yp8LudcwfIdfgmURwIMecxbJ3MmEc2Pac8y+MGvgwoDad6Yjg V2i+gUx8aQCAVbLzdWvvJU+vGmFOyGdrRxsW6aXeaBFpCobBDzlfcgU7/oYYOvQ1 OULaGQdEBEL84xSopL5AcVaCJQCcRfYeufBxiAwgdCXJS715uEGa4MuWF2G/ipgB fSG7adX3mRhSiczgg6MCo2tIvsxZQJs9hz2y2CIq+U2/Aul39E9qrXODWJuJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULjBPiEqzJM5IhavK1k+1dnz3ne4wHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzNTc5MjFkLWVlMTgtNDM1Yy04 YjZlLWViYTIyNDFiODNhYi8wLzMxMzYzMDJlMzIzMDJlMzEzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBR8MA0GCSqG SIb3DQEBCwUAA4IBAQBi7onhposXb7j9VqZoNIILPAjiy5uh0OfEQ03QnejEio4v TJ9zKxR6RT3koyjIIpvCK0Hsv+a4wsPttivf00ThVwGzg6pd/Ocf1B7uvNMrAE2O HxOQn26aTFsB/61OFr9qOXVJ/70Zl+4aJuQ+wEpyDHdoynTvJUU3m5MXmemKkrk5 TfOyciS38QYzihflZpJCDCjgdPL2YkRONr5CiRpeVOaAA4KTlbt0NilvuJ+aYc79 WlzxSi2Q7TTCsIlo1ImkAVMBzi5aL6FRpfQPK9rdzzqklOq6tu3qcZnW2/pmDpqh rNqSNc/bbq8PIkZrmx4hx0Ug79RzPmJPbVY3RaGZ -----END CERTIFICATE-----Generated at Thu Sep 26 18:51:06 2024 by rpki-client on console-fra.rpki-client.org