$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e32302e3233322e302f32342d3234203d3e20313439363934.roa File: 3135372e32302e3233322e302f32342d3234203d3e20313439363934.roa (raw, json) Hash identifier: 3tnfrdpfqgJO4ECKc+2mgRrCUFbDJL6YdgGwOEYpSsw= Subject key identifier: 17:FA:A1:D1:13:BB:82:03:9A:C7:0C:66:05:C5:98:5B:42:59:95:18 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0E334D65FCF0DBB93A8B290BFDF7B316A9D02E19 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e32302e3233322e302f32342d3234203d3e20313439363934.roa Signing time: Wed 03 Apr 2024 02:58:54 +0000 ROA not before: Wed 03 Apr 2024 02:53:54 +0000 ROA not after: Wed 02 Apr 2025 02:58:54 +0000 asID: 149694 IP address blocks: 157.20.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:33:4d:65:fc:f0:db:b9:3a:8b:29:0b:fd:f7:b3:16:a9:d0:2e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 3 02:53:54 2024 GMT Not After : Apr 2 02:58:54 2025 GMT Subject: CN=17FAA1D113BB82039AC70C6605C5985B42599518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:0e:05:d4:38:5a:a0:e2:d9:95:a6:e0:b6: 14:dc:9e:cc:e9:e7:f0:a3:a7:0e:cf:dc:72:d8:9b: ef:d0:2a:84:9d:79:8a:31:c2:aa:66:e7:d0:6e:ba: b0:3f:3a:28:42:e2:5d:82:df:df:09:e1:23:58:57: 64:45:79:bd:d8:20:b2:ad:90:59:c9:fe:89:c4:d8: fb:1d:03:c7:ec:14:05:2d:21:9f:ca:13:4e:c1:cc: d3:b5:89:3c:2b:a5:76:22:17:2e:71:b4:28:b3:66: dd:96:af:17:e6:b5:a5:bd:5a:86:10:2d:5e:cd:61: 2a:8f:5c:50:07:99:74:f0:58:df:a0:1f:97:6c:51: d8:28:0d:d3:4f:08:b4:d0:58:fd:7b:f7:d4:9b:fd: ad:8a:e0:02:a1:94:70:ff:64:68:6c:3c:09:11:23: 33:cc:f0:fa:0e:bd:df:77:17:51:ea:5f:b1:e4:9d: 65:83:e0:a9:51:1d:cb:3a:4a:4e:4a:65:9e:fe:9b: 74:82:1d:3f:a0:a9:18:f1:af:77:f8:e2:2d:a1:9e: ca:01:45:6b:42:8c:6d:a2:3a:eb:e8:32:af:6a:fb: 77:e6:bc:5d:74:e3:e3:0e:2b:0b:d4:03:85:4a:47: fc:29:bf:8f:26:4d:3e:57:86:73:2f:be:3e:02:81: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FA:A1:D1:13:BB:82:03:9A:C7:0C:66:05:C5:98:5B:42:59:95:18 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e32302e3233322e302f32342d3234203d3e20313439363934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.232.0/24 Signature Algorithm: sha256WithRSAEncryption 61:3a:d0:fd:7e:96:1a:03:43:d1:2d:0f:66:c5:80:5d:03:38: d3:77:4e:18:12:5a:e4:9d:7b:65:fd:05:ca:37:6f:3f:e8:51: c5:84:fa:58:fc:c5:c2:2d:2c:50:78:b5:9d:1d:04:78:0c:2d: 48:35:ea:9f:1b:82:cc:0e:48:10:87:e0:e0:d8:9e:34:47:b2: 75:91:ab:aa:28:65:39:ef:6c:8f:af:9a:e6:4d:83:c3:ed:c3: a1:7b:df:db:a7:be:eb:99:7d:e3:1b:2d:55:88:c4:b5:fe:19: a4:f5:d8:38:83:76:55:95:eb:a4:05:42:07:82:93:9f:bc:ae: 77:9d:85:e4:e0:8f:23:a4:2a:d9:ed:c1:77:37:9c:cd:eb:2c: 43:1c:1b:24:09:ab:be:f6:34:8e:11:e4:c9:7c:30:fe:72:15: ec:2d:39:a3:4f:6a:98:1e:f7:ee:14:5d:c2:7f:95:86:bb:8b: 03:80:1f:c8:03:72:a9:fb:3a:7b:46:aa:88:5d:39:de:c4:06: 01:b5:19:50:62:50:37:8f:bb:f9:78:59:18:f5:08:42:bf:f6: 32:d3:29:e4:a6:cf:2e:2f:35:00:b5:40:da:bd:be:5a:62:76: c8:79:c4:92:42:58:6e:f2:86:aa:7e:b6:9e:8c:61:76:d3:17: fb:ff:ee:5e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUDjNNZfzw27k6iykL/fezFqnQLhkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDQwMzAyNTM1NFoX DTI1MDQwMjAyNTg1NFowMzExMC8GA1UEAxMoMTdGQUExRDExM0JCODIwMzlBQzcw QzY2MDVDNTk4NUI0MjU5OTUxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCIDgXUOFqg4tmVpuC2FNyezOnn8KOnDs/cctib79AqhJ15ijHCqmbn0G66 sD86KELiXYLf3wnhI1hXZEV5vdggsq2QWcn+icTY+x0Dx+wUBS0hn8oTTsHM07WJ PCuldiIXLnG0KLNm3ZavF+a1pb1ahhAtXs1hKo9cUAeZdPBY36Afl2xR2CgN008I tNBY/Xv31Jv9rYrgAqGUcP9kaGw8CREjM8zw+g6933cXUepfseSdZYPgqVEdyzpK Tkplnv6bdIIdP6CpGPGvd/jiLaGeygFFa0KMbaI66+gyr2r7d+a8XXTj4w4rC9QD hUpH/Cm/jyZNPleGcy++PgKB4X0CAwEAAaOCAgEwggH9MB0GA1UdDgQWBBQX+qHR E7uCA5rHDGYFxZhbQlmVGDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNTM3MmUz MjMwMmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNjM5MzQu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBACdFOgwDQYJKoZIhvcNAQELBQADggEBAGE60P1+lhoDQ9EtD2bF gF0DONN3ThgSWuSde2X9Bco3bz/oUcWE+lj8xcItLFB4tZ0dBHgMLUg16p8bgswO SBCH4ODYnjRHsnWRq6ooZTnvbI+vmuZNg8Ptw6F739unvuuZfeMbLVWIxLX+GaT1 2DiDdlWV66QFQgeCk5+8rnedheTgjyOkKtntwXc3nM3rLEMcGyQJq772NI4R5Ml8 MP5yFewtOaNPapge9+4UXcJ/lYa7iwOAH8gDcqn7OntGqohdOd7EBgG1GVBiUDeP u/l4WRj1CEK/9jLTKeSmzy4vNQC1QNq9vlpidsh5xJJCWG7yhqp+tp6MYXbTF/v/ 7l4= -----END CERTIFICATE-----Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org