$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36372e302f32342d3234203d3e20313532383134.roa File: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (raw, json) Hash identifier: nALNOd2M4Ypyg+e26YPaQ5ppKocXSpgBvFiHxaD0J/s= Subject key identifier: 96:6B:9C:9B:9B:E9:3E:02:92:BC:B3:07:26:14:B1:6E:E6:9F:ED:AD Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 5FC11007F025157CE581E33C5919F28DBB7F7BC0 Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36372e302f32342d3234203d3e20313532383134.roa Signing time: Tue 16 Jul 2024 08:53:22 +0000 ROA not before: Tue 16 Jul 2024 08:48:22 +0000 ROA not after: Tue 15 Jul 2025 08:53:22 +0000 asID: 152814 IP address blocks: 160.22.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c1:10:07:f0:25:15:7c:e5:81:e3:3c:59:19:f2:8d:bb:7f:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Jul 16 08:48:22 2024 GMT Not After : Jul 15 08:53:22 2025 GMT Subject: CN=966B9C9B9BE93E0292BCB3072614B16EE69FEDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c7:ba:fa:0e:ca:ab:c5:49:1b:d4:52:34:bc: c4:9a:b2:cc:5b:01:77:2c:17:c9:56:7a:c1:34:1f: ac:e5:24:d2:26:3d:75:40:c7:ff:de:de:cc:23:a0: b6:4f:6f:a8:88:a4:a6:ee:13:b8:a2:2d:29:22:45: 37:2c:70:ea:13:db:7d:3e:24:e0:b5:99:c1:7c:13: 5f:1b:c4:a8:ec:a7:95:96:31:b5:c8:8b:b1:51:51: f7:dc:8d:48:82:11:e3:74:3f:a0:b8:2a:16:79:7d: e5:92:df:dc:d4:74:af:63:f2:bc:50:b0:1b:f6:27: bd:b8:cb:f2:ba:ef:77:b5:cd:f3:9a:e8:01:d4:bb: c5:a2:1e:4b:1c:f2:bd:07:e9:c1:e5:0c:03:b3:dd: 30:64:db:c7:fc:f9:6f:73:8e:5c:e7:05:3a:6f:b7: 8b:8d:1f:f2:f5:e9:3b:d5:45:72:9a:83:31:be:a5: fc:85:30:7f:cf:91:8a:40:66:8b:88:a9:fd:88:77: 9e:17:82:7a:9d:53:dd:09:49:32:8a:5f:2b:4d:d2: aa:db:11:87:7b:d1:de:d3:3d:27:ad:19:cc:c3:61: 1a:68:48:5a:5b:53:39:7b:41:ac:2d:51:03:2f:41: 45:ab:ed:f2:04:e1:7d:ad:7b:7c:99:0e:0b:25:8a: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6B:9C:9B:9B:E9:3E:02:92:BC:B3:07:26:14:B1:6E:E6:9F:ED:AD X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36372e302f32342d3234203d3e20313532383134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.67.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:8d:bf:60:da:50:79:28:de:84:98:06:40:80:76:e5:f6:40: ff:e8:c6:19:ac:17:96:5b:b5:6e:1e:46:ca:e4:e8:00:c9:50: 8a:7c:d2:7e:b8:12:31:2f:a2:09:e3:14:8d:0c:6c:e2:93:1d: 29:e9:6e:1c:21:29:55:07:43:5f:c1:1f:1a:9a:26:c0:8d:a4: 7d:66:27:89:4c:21:e2:3c:e0:fd:ed:76:ca:37:a4:2f:fa:20: 7b:11:c0:26:a8:37:e6:4d:25:55:a0:2c:06:74:bb:68:1f:21: 6f:d6:09:12:59:b1:64:a6:e4:0e:ed:3b:69:ff:4e:de:de:12: 15:70:f0:92:36:b1:41:c8:8a:46:e2:77:00:af:32:f3:ee:ed: 90:ed:eb:c8:b1:64:c5:dd:f7:7e:c7:49:53:bf:1b:2b:6d:0f: 12:d8:56:3f:5d:62:ea:46:15:b3:ed:d5:ba:ca:d4:dd:3d:5f: 9c:11:5a:7c:61:2a:6c:47:45:63:bb:ca:e2:5d:d5:66:20:c7: 79:bf:48:3b:4d:19:a3:89:d9:58:7d:0c:10:2d:28:af:73:49: 69:16:e0:a8:f3:11:25:92:2a:9e:9d:d7:3a:41:85:0f:4a:a2: fc:f0:99:c8:c8:16:c9:c9:2e:39:ed:fd:3e:26:f2:71:19:7e: 20:d9:79:a3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUX8EQB/AlFXzlgeM8WRnyjbt/e8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNDA3MTYwODQ4MjJaFw0yNTA3MTUwODUzMjJaMDMxMTAvBgNV BAMTKDk2NkI5QzlCOUJFOTNFMDI5MkJDQjMwNzI2MTRCMTZFRTY5RkVEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkx7r6DsqrxUkb1FI0vMSassxb AXcsF8lWesE0H6zlJNImPXVAx//e3swjoLZPb6iIpKbuE7iiLSkiRTcscOoT230+ JOC1mcF8E18bxKjsp5WWMbXIi7FRUffcjUiCEeN0P6C4KhZ5feWS39zUdK9j8rxQ sBv2J724y/K673e1zfOa6AHUu8WiHksc8r0H6cHlDAOz3TBk28f8+W9zjlznBTpv t4uNH/L16TvVRXKagzG+pfyFMH/PkYpAZouIqf2Id54XgnqdU90JSTKKXytN0qrb EYd70d7TPSetGczDYRpoSFpbUzl7QawtUQMvQUWr7fIE4X2te3yZDgslinB/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUlmucm5vpPgKSvLMHJhSxbuaf7a0wHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYjkyN2RmLWJjOWMtNGJlNi1h MWZhLTJlMTI1YzQ2OWY3MS8wLzMxMzYzMDJlMzIzMjJlMzYzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWQzANBgkqhkiG 9w0BAQsFAAOCAQEAbY2/YNpQeSjehJgGQIB25fZA/+jGGawXllu1bh5GyuToAMlQ inzSfrgSMS+iCeMUjQxs4pMdKeluHCEpVQdDX8EfGpomwI2kfWYniUwh4jzg/e12 yjekL/ogexHAJqg35k0lVaAsBnS7aB8hb9YJElmxZKbkDu07af9O3t4SFXDwkjax QciKRuJ3AK8y8+7tkO3ryLFkxd33fsdJU78bK20PEthWP11i6kYVs+3VusrU3T1f nBFafGEqbEdFY7vK4l3VZiDHeb9IO00Zo4nZWH0MEC0or3NJaRbgqPMRJZIqnp3X OkGFD0qi/PCZyMgWyckuOe39PibycRl+INl5ow== -----END CERTIFICATE-----Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org