$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa File: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (raw, json) Hash identifier: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4= Subject key identifier: B1:B7:DF:4D:E9:8A:F1:6C:0A:09:1A:12:F4:C1:C8:CE:43:4F:84:31 Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 3B6C62AAC281E57639442D1B591EA0BAD2718028 Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa Signing time: Tue 05 Nov 2024 07:35:08 +0000 ROA not before: Tue 05 Nov 2024 07:30:08 +0000 ROA not after: Tue 04 Nov 2025 07:35:08 +0000 asID: 153135 IP address blocks: 160.187.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6c:62:aa:c2:81:e5:76:39:44:2d:1b:59:1e:a0:ba:d2:71:80:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Nov 5 07:30:08 2024 GMT Not After : Nov 4 07:35:08 2025 GMT Subject: CN=B1B7DF4DE98AF16C0A091A12F4C1C8CE434F8431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:9a:e7:65:96:38:7b:43:83:ad:82:32:c0: 38:ce:a1:f7:95:a7:eb:d6:34:5a:25:2a:68:58:b4: 94:0d:e9:d3:07:9e:b4:99:60:02:ba:30:ec:98:15: 77:a1:73:6a:1e:6c:e4:a8:e5:8d:31:57:ca:cd:e9: 86:c6:bb:0a:70:de:fd:a3:b9:d1:b9:26:ee:71:71: c8:45:d9:48:8a:f5:de:08:a7:6f:8e:32:0c:b6:f8: 4e:bc:2c:e6:5d:21:a7:92:d9:74:35:b3:51:92:5a: 4b:f5:42:72:1e:76:9d:85:e7:d7:82:f2:27:7a:55: 3c:7b:90:c2:07:36:04:18:fe:92:05:44:39:34:7c: 0f:01:06:5b:9a:b3:2f:c3:ec:17:a0:ce:00:3a:11: 98:b8:16:39:9d:d8:ca:f5:f4:9b:8c:00:31:9a:5c: e0:97:a6:ba:ec:08:be:1e:6c:a1:4c:2f:48:45:59: 52:48:e7:23:58:5a:3a:41:b2:20:c8:63:26:e1:51: 87:14:97:76:33:d0:42:bb:56:a3:97:bb:d8:07:cf: 59:73:19:e6:b9:af:99:75:0a:79:df:86:7d:04:0c: c7:23:96:1e:2d:98:87:09:f0:9f:c8:b4:b6:3a:5c: 3d:77:bc:f3:46:01:96:d7:f0:9b:b8:58:ca:1c:83: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B7:DF:4D:E9:8A:F1:6C:0A:09:1A:12:F4:C1:C8:CE:43:4F:84:31 X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.174.0/24 Signature Algorithm: sha256WithRSAEncryption 63:42:10:1a:29:c2:b5:b6:16:6f:05:92:52:39:24:0c:26:af: 81:1e:ad:e6:b2:c3:63:00:94:d7:8c:5f:eb:65:9e:82:f6:94: 39:21:8a:e7:b1:00:93:f5:33:30:db:d6:5f:20:89:08:de:6c: 43:d5:18:63:c1:32:47:29:ba:56:f3:31:3a:35:47:aa:f1:3b: 82:4b:57:7b:e2:6c:c1:a4:32:97:46:a0:24:ac:c2:92:e9:18: b8:fc:de:de:f0:7a:bd:25:fb:91:67:37:d7:79:1f:dd:46:b9: d3:7d:c5:2b:a7:e8:fb:c5:d5:7d:de:82:7f:64:3b:7f:07:b9: 02:1e:86:f8:5f:10:26:b1:16:e7:57:ae:c1:fa:99:1b:2d:7b: e1:83:dc:60:10:56:ef:3b:8f:85:e2:76:99:72:5c:bd:42:26: 2b:62:40:a0:e7:f8:10:97:ed:a9:99:9e:d1:bb:1b:7e:4a:e5: 3d:24:13:dd:7c:ba:83:a5:2c:57:75:aa:0a:39:19:06:8d:b2: e3:6b:00:82:9b:da:2f:61:9b:87:8d:32:e5:4d:4a:70:e3:5c: 62:10:7b:a8:0d:55:f2:d1:3f:a3:a9:e7:9f:38:43:da:6e:e7: f9:19:0d:f2:a6:21:a9:f0:16:6b:df:a2:59:60:45:fb:ef:ad: 67:11:d5:1b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUO2xiqsKB5XY5RC0bWR6gutJxgCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNDExMDUwNzMwMDhaFw0yNTExMDQwNzM1MDhaMDMxMTAvBgNV BAMTKEIxQjdERjRERTk4QUYxNkMwQTA5MUExMkY0QzFDOENFNDM0Rjg0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrprnZZY4e0ODrYIywDjOofeV p+vWNFolKmhYtJQN6dMHnrSZYAK6MOyYFXehc2oebOSo5Y0xV8rN6YbGuwpw3v2j udG5Ju5xcchF2UiK9d4Ip2+OMgy2+E68LOZdIaeS2XQ1s1GSWkv1QnIedp2F59eC 8id6VTx7kMIHNgQY/pIFRDk0fA8BBluasy/D7BegzgA6EZi4Fjmd2Mr19JuMADGa XOCXprrsCL4ebKFML0hFWVJI5yNYWjpBsiDIYybhUYcUl3Yz0EK7VqOXu9gHz1lz Gea5r5l1Cnnfhn0EDMcjlh4tmIcJ8J/ItLY6XD13vPNGAZbX8Ju4WMocg+JLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUsbffTemK8WwKCRoS9MHIzkNPhDEwHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ODUzYWFiLThkNmMtNDU3Zi05 ZDU3LTQ4NGFjYWNlYTlkOC8wLzMxMzYzMDJlMzEzODM3MmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMzMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu64wDQYJ KoZIhvcNAQELBQADggEBAGNCEBopwrW2Fm8FklI5JAwmr4Eereayw2MAlNeMX+tl noL2lDkhiuexAJP1MzDb1l8giQjebEPVGGPBMkcpulbzMTo1R6rxO4JLV3vibMGk MpdGoCSswpLpGLj83t7wer0l+5FnN9d5H91GudN9xSun6PvF1X3egn9kO38HuQIe hvhfECaxFudXrsH6mRste+GD3GAQVu87j4XidplyXL1CJitiQKDn+BCX7amZntG7 G35K5T0kE918uoOlLFd1qgo5GQaNsuNrAIKb2i9hm4eNMuVNSnDjXGIQe6gNVfLR P6Op5584Q9pu5/kZDfKmIanwFmvfollgRfvvrWcR1Rs= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:02 2024 by rpki-client on console-ams.rpki-client.org