$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa File: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (raw, json) Hash identifier: lqWm7H1VLaNogQYDvPWFxyEVAtvNrhxj3L3hhsj87j0= Subject key identifier: 38:BE:81:CA:05:EA:14:99:A8:7F:A8:4C:E9:C6:EB:36:AF:2B:68:AB Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 3CD329FD7C703A7490C55434715815D69C121B43 Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa Signing time: Thu 05 Dec 2024 03:27:21 +0000 ROA not before: Thu 05 Dec 2024 03:22:21 +0000 ROA not after: Thu 04 Dec 2025 03:27:21 +0000 asID: 138089 IP address blocks: 160.191.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 05:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d3:29:fd:7c:70:3a:74:90:c5:54:34:71:58:15:d6:9c:12:1b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Dec 5 03:22:21 2024 GMT Not After : Dec 4 03:27:21 2025 GMT Subject: CN=38BE81CA05EA1499A87FA84CE9C6EB36AF2B68AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:3a:94:fa:80:77:46:b5:a5:e7:ad:15:68: ca:8b:45:07:3c:56:b3:aa:2a:d7:1f:07:e9:dc:b8: 71:2b:52:fb:5f:68:00:7a:4c:bb:48:73:cc:d1:5c: 30:84:9d:e1:37:3e:ff:15:c5:2b:95:54:28:35:ad: be:8c:7b:a0:9b:5e:76:ad:88:44:7b:8b:de:83:e6: bc:ca:9a:13:ed:e0:d1:6c:06:90:61:0d:a6:97:ab: 96:f1:e4:ca:77:bb:8d:ea:b0:f7:a2:d3:9b:24:96: 3e:b7:8d:e9:8a:40:0b:98:55:c9:a9:4f:9f:9a:ff: e2:2c:35:fc:5d:81:54:71:8f:06:40:22:fc:2e:d7: c4:0a:94:bc:dc:46:a8:bb:80:92:1c:84:b4:38:05: 4a:57:55:a1:0f:57:d8:d5:2c:34:3b:5b:0d:99:aa: a6:06:dc:7e:56:a8:3f:76:5f:e2:bf:2e:a4:ba:1a: df:ab:21:67:fa:90:fd:f2:b8:12:37:7b:88:b1:f5: 3b:3a:1a:cf:3d:a4:0b:7b:ce:dd:a5:67:35:f2:09: 91:da:cd:2b:58:cb:d1:a3:34:cd:85:a4:c7:48:05: 83:79:0a:fc:9d:a7:23:20:ef:08:43:7c:8d:d6:09: 6c:5b:c4:1f:c3:0c:57:1e:2c:2d:08:c1:27:a7:18: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:81:CA:05:EA:14:99:A8:7F:A8:4C:E9:C6:EB:36:AF:2B:68:AB X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.180.0/24 Signature Algorithm: sha256WithRSAEncryption 27:e3:e7:63:cd:9e:5c:d8:44:42:98:73:4b:71:72:62:b2:ab: 3c:fb:cb:0a:65:45:74:05:13:f2:f0:a7:17:f0:d9:f5:32:18: 03:ab:e5:fa:14:66:0e:8f:df:93:c2:57:90:08:10:d2:45:d7: 2d:c2:c8:2d:ff:2a:b3:23:26:83:f1:af:72:4d:f6:97:98:cf: 81:61:ee:b3:4b:22:2f:69:1b:fd:80:b3:15:ee:2f:3d:de:69: 39:a6:40:5c:84:eb:ed:97:f1:4e:59:70:56:2e:a7:71:d1:13: d5:de:89:0d:38:77:fd:eb:20:d2:e7:d1:b9:83:61:fa:f0:12: 2d:08:51:8c:55:63:93:60:66:b1:22:7c:3c:f3:19:3a:b0:aa: 83:a6:75:32:0a:ef:2a:22:36:50:4b:9b:9d:df:50:6c:06:f2: 87:7f:b5:09:75:c2:ef:e8:ff:8f:d0:af:dd:ca:31:97:04:7e: 8f:09:4f:0a:2a:8e:85:bd:16:8f:66:0b:c6:83:23:2a:56:07: 1f:14:f6:23:fb:ad:ee:33:2a:9a:53:5f:85:d8:79:65:4e:e9: 81:a4:57:b7:cb:a5:36:f5:3b:c3:14:3a:51:7d:27:1f:01:2c: 9f:97:b3:1b:ee:6d:95:e5:b0:17:1f:67:90:d5:21:df:13:20: b8:b9:43:2e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPNMp/XxwOnSQxVQ0cVgV1pwSG0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNDEyMDUwMzIyMjFaFw0yNTEyMDQwMzI3MjFaMDMxMTAvBgNV BAMTKDM4QkU4MUNBMDVFQTE0OTlBODdGQTg0Q0U5QzZFQjM2QUYyQjY4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/TzqU+oB3RrWl560VaMqLRQc8 VrOqKtcfB+ncuHErUvtfaAB6TLtIc8zRXDCEneE3Pv8VxSuVVCg1rb6Me6CbXnat iER7i96D5rzKmhPt4NFsBpBhDaaXq5bx5Mp3u43qsPei05sklj63jemKQAuYVcmp T5+a/+IsNfxdgVRxjwZAIvwu18QKlLzcRqi7gJIchLQ4BUpXVaEPV9jVLDQ7Ww2Z qqYG3H5WqD92X+K/LqS6Gt+rIWf6kP3yuBI3e4ix9Ts6Gs89pAt7zt2lZzXyCZHa zStYy9GjNM2FpMdIBYN5CvydpyMg7whDfI3WCWxbxB/DDFceLC0IwSenGGsXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOL6BygXqFJmof6hM6cbrNq8raKswHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1OTYxMmEyLTQ0MzMtNDJiOS04 ZjRmLWI4NDc3NzZhY2FmZC8wLzMxMzYzMDJlMzEzOTMxMmUzMTM4MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgv7QwDQYJ KoZIhvcNAQELBQADggEBACfj52PNnlzYREKYc0txcmKyqzz7ywplRXQFE/Lwpxfw 2fUyGAOr5foUZg6P35PCV5AIENJF1y3CyC3/KrMjJoPxr3JN9peYz4Fh7rNLIi9p G/2AsxXuLz3eaTmmQFyE6+2X8U5ZcFYup3HRE9XeiQ04d/3rINLn0bmDYfrwEi0I UYxVY5NgZrEifDzzGTqwqoOmdTIK7yoiNlBLm53fUGwG8od/tQl1wu/o/4/Qr93K MZcEfo8JTwoqjoW9Fo9mC8aDIypWBx8U9iP7re4zKppTX4XYeWVO6YGkV7fLpTb1 O8MUOlF9Jx8BLJ+XsxvubZXlsBcfZ5DVId8TILi5Qy4= -----END CERTIFICATE-----Generated at Sun Feb 23 16:14:43 2025 by rpki-client