$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e38302e302f32342d3234203d3e20313532333834.roa File: 3135372e31352e38302e302f32342d3234203d3e20313532333834.roa (raw, json) Hash identifier: aOZ1b0YnYno+SIRPnsWIWCe5sJMwURGh95jysj0B9iw= Subject key identifier: 14:0A:0B:96:BA:BD:F7:B4:62:41:36:A2:74:A9:D0:A1:01:70:4A:68 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 381474BB414129C887FFAAA6018E18A45142413B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e38302e302f32342d3234203d3e20313532333834.roa Signing time: Fri 01 Mar 2024 08:36:26 +0000 ROA not before: Fri 01 Mar 2024 08:31:26 +0000 ROA not after: Fri 28 Feb 2025 08:36:26 +0000 asID: 152384 IP address blocks: 157.15.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:14:74:bb:41:41:29:c8:87:ff:aa:a6:01:8e:18:a4:51:42:41:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 1 08:31:26 2024 GMT Not After : Feb 28 08:36:26 2025 GMT Subject: CN=140A0B96BABDF7B4624136A274A9D0A101704A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:58:a7:61:fb:f8:c7:e8:7d:f7:ca:57:3c: b6:6a:9a:08:6d:0a:cc:f2:3e:e6:82:39:38:b4:ec: 46:11:8b:a1:34:a2:76:13:e5:2e:5d:ed:96:97:e3: e2:db:c7:d0:d1:9f:1a:54:06:76:83:6b:a5:f5:18: f2:2f:fe:40:06:42:4d:be:05:95:9e:d8:99:30:9d: e5:26:53:5f:59:5f:c6:d0:0e:61:10:61:7f:e5:1e: b0:66:21:bd:f9:f3:50:a0:fa:fd:13:81:80:a4:58: 79:84:cd:b9:cd:e0:ae:fc:d2:de:0a:a5:48:14:33: f0:59:da:d4:95:c4:8c:79:8c:5f:41:c9:92:4b:6b: 3b:55:a1:d2:a8:20:79:76:9f:ec:72:8d:32:70:46: c9:c6:05:3f:cf:fb:00:72:46:ba:26:9a:54:0c:4f: f0:b5:82:ee:43:c9:2b:c0:da:e4:36:00:a2:fd:90: 6d:5d:d9:71:53:82:30:e0:86:00:3f:82:55:78:77: c4:81:10:1c:85:7e:2f:d2:dd:da:2b:52:ce:0f:45: ba:47:b2:01:ec:33:7b:70:62:80:68:ab:89:30:71: 0e:bd:ab:0f:3d:30:2a:40:ea:0f:46:68:fa:66:11: 52:df:c9:3c:21:6a:16:71:c9:68:c5:54:8e:4d:7a: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0A:0B:96:BA:BD:F7:B4:62:41:36:A2:74:A9:D0:A1:01:70:4A:68 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e38302e302f32342d3234203d3e20313532333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.80.0/24 Signature Algorithm: sha256WithRSAEncryption 71:4a:75:24:58:da:5b:a5:a6:42:1d:cb:20:f3:d9:e9:3a:77: 7d:78:fc:ab:3c:f4:4f:e8:17:b5:da:c2:f3:49:99:9a:ba:4f: 5c:2e:ff:03:fd:52:7e:16:4b:dd:d2:3b:bb:0a:6a:15:e9:1d: f0:07:05:2c:b6:33:44:a5:14:bf:3f:0c:f9:d2:37:4d:9a:ad: 45:f8:00:b3:ae:89:f3:15:dd:d3:1a:cf:ab:f1:30:3d:8d:69: c8:8d:30:60:62:24:11:9f:02:20:57:48:ff:45:28:74:94:3d: 9d:6a:35:b0:f0:72:55:3c:50:74:70:04:2b:ab:03:9f:c1:d0: 7d:a7:19:0c:47:af:3d:20:a6:9d:23:e1:3e:0a:9b:d8:78:2c: 25:fa:11:5b:65:b4:d2:af:6c:e2:f6:f9:1b:0d:b4:3b:25:4e: fe:ef:e8:f0:40:83:9c:ab:2b:f4:08:8f:0f:54:60:95:61:9f: f3:31:ee:71:b7:67:10:b5:ff:ed:8e:db:22:ab:de:e6:1a:0e: d9:fc:79:63:90:1a:e7:61:0b:6b:74:a0:c3:54:01:89:78:45: 61:9d:ad:75:7e:d7:ec:2b:31:fe:71:17:9a:42:a3:bf:dc:88: d7:21:62:4d:77:9a:8d:ae:8b:42:3e:b0:3d:2d:8b:47:aa:4c: ac:e0:76:69 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUOBR0u0FBKciH/6qmAY4YpFFCQTswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMwMTA4MzEyNloX DTI1MDIyODA4MzYyNlowMzExMC8GA1UEAxMoMTQwQTBCOTZCQUJERjdCNDYyNDEz NkEyNzRBOUQwQTEwMTcwNEE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL2WKdh+/jH6H33ylc8tmqaCG0KzPI+5oI5OLTsRhGLoTSidhPlLl3tlpfj 4tvH0NGfGlQGdoNrpfUY8i/+QAZCTb4FlZ7YmTCd5SZTX1lfxtAOYRBhf+UesGYh vfnzUKD6/ROBgKRYeYTNuc3grvzS3gqlSBQz8Fna1JXEjHmMX0HJkktrO1Wh0qgg eXaf7HKNMnBGycYFP8/7AHJGuiaaVAxP8LWC7kPJK8Da5DYAov2QbV3ZcVOCMOCG AD+CVXh3xIEQHIV+L9Ld2itSzg9FukeyAewze3BigGiriTBxDr2rDz0wKkDqD0Zo +mYRUt/JPCFqFnHJaMVUjk16RW0CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQUCguW ur33tGJBNqJ0qdChAXBKaDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNTM3MmUz MTM1MmUzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzODM0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnQ9QMA0GCSqGSIb3DQEBCwUAA4IBAQBxSnUkWNpbpaZCHcsg89np Ond9ePyrPPRP6Be12sLzSZmauk9cLv8D/VJ+Fkvd0ju7CmoV6R3wBwUstjNEpRS/ Pwz50jdNmq1F+ACzronzFd3TGs+r8TA9jWnIjTBgYiQRnwIgV0j/RSh0lD2dajWw 8HJVPFB0cAQrqwOfwdB9pxkMR689IKadI+E+CpvYeCwl+hFbZbTSr2zi9vkbDbQ7 JU7+7+jwQIOcqyv0CI8PVGCVYZ/zMe5xt2cQtf/tjtsiq97mGg7Z/HljkBrnYQtr dKDDVAGJeEVhna11ftfsKzH+cReaQqO/3IjXIWJNd5qNrotCPrA9LYtHqkys4HZp -----END CERTIFICATE-----Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org