$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa File: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (raw, json) Hash identifier: iBwCiGq60c+2kk4AeuGkzb89D8PG4a8vEAoiYw5XZV0= Subject key identifier: 2A:6A:A8:0A:8B:F1:6F:7A:10:2C:6E:47:81:68:7F:7F:7E:15:CA:4F Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 36A8C1B3C9EEA26C58EBAB34C0FD6E10B5FAFAF0 Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa Signing time: Thu 29 Aug 2024 17:27:46 +0000 ROA not before: Thu 29 Aug 2024 17:22:46 +0000 ROA not after: Thu 28 Aug 2025 17:27:46 +0000 asID: 152836 IP address blocks: 160.22.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a8:c1:b3:c9:ee:a2:6c:58:eb:ab:34:c0:fd:6e:10:b5:fa:fa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Aug 29 17:22:46 2024 GMT Not After : Aug 28 17:27:46 2025 GMT Subject: CN=2A6AA80A8BF16F7A102C6E4781687F7F7E15CA4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:05:38:ff:a1:d5:af:4b:cc:0b:b3:fb:82: 7c:01:e5:bb:50:1f:f8:4c:31:6b:c0:2f:af:04:7c: f0:4c:7f:9f:df:37:ce:cf:03:9a:4f:9b:e8:98:27: d2:2e:3e:5f:3a:65:42:8b:44:c3:fe:5a:05:e1:85: 8f:13:16:5b:1d:5a:5c:31:11:44:fc:eb:47:16:6b: 07:bd:f0:ed:46:2a:d0:3a:c7:3f:81:d4:82:08:dd: 7f:c2:5f:0d:74:7a:cc:b0:16:a2:43:5e:00:a6:fe: be:b9:66:78:c5:5d:50:42:b4:bb:e1:87:0b:c4:1f: 20:94:39:fd:e0:05:38:37:e1:ad:b2:47:5a:a5:ea: b0:9a:08:cf:f9:fd:e3:5b:43:9f:2e:91:89:bd:3a: f8:ed:b4:f5:c1:00:fb:35:a5:2a:fb:b1:c4:7a:31: c4:2c:73:95:90:9d:30:18:f5:77:8a:f9:3f:aa:cd: 9e:d2:f7:8a:a1:7c:d6:23:a4:23:ad:a1:e4:f0:d5: 7d:9d:80:50:78:57:91:b3:ad:d2:b4:16:d3:df:3a: ad:a7:97:f9:1a:cf:6b:3e:71:49:9d:bc:85:62:e4: af:88:4d:50:b1:9e:83:67:41:63:78:77:10:4d:05: d3:24:97:81:3b:70:5f:5a:4e:30:d7:fb:b3:98:f7: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:A8:0A:8B:F1:6F:7A:10:2C:6E:47:81:68:7F:7F:7E:15:CA:4F X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.198.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:e4:57:52:f1:1b:0c:4e:62:86:a7:52:2a:49:be:52:14:00: 5e:d9:73:03:38:b1:31:4d:ba:0c:89:72:51:3b:2c:f7:51:9e: 34:82:af:9b:0e:5c:48:d1:5f:41:6b:02:a4:cb:48:6a:74:29: e8:da:54:d2:57:89:0c:d7:0c:b0:bf:fd:ce:39:15:de:91:4c: db:cb:04:b0:49:91:09:25:8e:a6:ea:1f:fa:83:e4:d0:82:1b: 66:98:10:bd:5c:84:f8:15:bc:22:2f:9a:8b:98:48:5b:66:69: 4d:c7:91:5a:2d:26:3a:f8:55:a1:e0:b0:75:bd:29:66:49:9a: 46:67:6e:cf:5c:ec:33:8a:5e:4d:64:59:f6:06:d2:9b:23:e5: f6:c4:e7:d3:9e:cd:10:08:56:7f:3a:2f:ce:66:8b:97:df:bf: 3d:bc:f2:05:4a:59:78:a1:98:50:cb:a9:a8:78:99:35:24:72: 92:0d:c9:1c:01:40:6e:a9:17:cc:31:44:4f:74:46:c6:0c:c4: a2:94:98:44:c6:cb:45:e2:ea:4e:d7:68:1c:90:1a:f5:d0:04: b6:a1:5e:ab:60:12:67:f6:9a:bb:77:ea:ed:6b:cd:5e:c6:ea: e4:d3:29:f9:11:f5:e2:3b:7a:45:07:6c:79:b4:aa:56:4b:a5: 80:9d:05:c4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNqjBs8nuomxY66s0wP1uELX6+vAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNDA4MjkxNzIyNDZaFw0yNTA4MjgxNzI3NDZaMDMxMTAvBgNV BAMTKDJBNkFBODBBOEJGMTZGN0ExMDJDNkU0NzgxNjg3RjdGN0UxNUNBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcQU4/6HVr0vMC7P7gnwB5btQ H/hMMWvAL68EfPBMf5/fN87PA5pPm+iYJ9IuPl86ZUKLRMP+WgXhhY8TFlsdWlwx EUT860cWawe98O1GKtA6xz+B1III3X/CXw10esywFqJDXgCm/r65ZnjFXVBCtLvh hwvEHyCUOf3gBTg34a2yR1ql6rCaCM/5/eNbQ58ukYm9OvjttPXBAPs1pSr7scR6 McQsc5WQnTAY9XeK+T+qzZ7S94qhfNYjpCOtoeTw1X2dgFB4V5GzrdK0FtPfOq2n l/kaz2s+cUmdvIVi5K+ITVCxnoNnQWN4dxBNBdMkl4E7cF9aTjDX+7OY92sDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKmqoCovxb3oQLG5HgWh/f34Vyk8wHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmMzBlNGFlLTNlNDctNDU0MC04 MjNjLTUzY2FmMjI2N2IzNi8wLzMxMzYzMDJlMzIzMjJlMzEzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbGMA0GCSqG SIb3DQEBCwUAA4IBAQAq5FdS8RsMTmKGp1IqSb5SFABe2XMDOLExTboMiXJROyz3 UZ40gq+bDlxI0V9BawKky0hqdCno2lTSV4kM1wywv/3OORXekUzbywSwSZEJJY6m 6h/6g+TQghtmmBC9XIT4FbwiL5qLmEhbZmlNx5FaLSY6+FWh4LB1vSlmSZpGZ27P XOwzil5NZFn2BtKbI+X2xOfTns0QCFZ/Oi/OZouX3789vPIFSll4oZhQy6moeJk1 JHKSDckcAUBuqRfMMURPdEbGDMSilJhExstF4upO12gckBr10AS2oV6rYBJn9pq7 d+rta81exurk0yn5EfXiO3pFB2x5tKpWS6WAnQXE -----END CERTIFICATE-----Generated at Sat Nov 23 17:31:42 2024 by rpki-client on console-fra.rpki-client.org