$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3131342e302f32332d3234203d3e2034383030.roa File: 3135372e36362e3131342e302f32332d3234203d3e2034383030.roa (raw, json) Hash identifier: N3+ankUtNDB3ndk8mOc5YD4yAcQaCxG6KCMs55HK4gI= Subject key identifier: 8C:37:E9:83:A5:01:1C:5D:B2:66:61:EB:B9:7B:7A:04:1A:C7:AC:E6 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7FE1FA7D31D133E4DF51CDB3F801166D1AE59EEB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3131342e302f32332d3234203d3e2034383030.roa Signing time: Sun 30 Jun 2024 01:59:54 +0000 ROA not before: Sun 30 Jun 2024 01:54:54 +0000 ROA not after: Sun 29 Jun 2025 01:59:54 +0000 asID: 4800 IP address blocks: 157.66.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e1:fa:7d:31:d1:33:e4:df:51:cd:b3:f8:01:16:6d:1a:e5:9e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 30 01:54:54 2024 GMT Not After : Jun 29 01:59:54 2025 GMT Subject: CN=8C37E983A5011C5DB26661EBB97B7A041AC7ACE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:61:ae:58:8d:ff:5a:79:c7:20:8e:9e:75: c7:ce:c8:48:2b:3e:aa:4b:ff:66:8a:2a:64:86:c7: 5e:86:0b:d6:b4:dc:af:1f:d6:47:3f:31:d3:23:3c: 62:96:cd:1a:5b:99:ac:4e:b7:00:3d:a4:2e:f0:d4: 42:dd:b4:bc:d5:a3:b3:5e:b7:19:e5:e2:a1:d9:e6: 2c:2a:70:fa:b5:f5:60:6d:2f:91:e4:56:ed:01:a5: b5:c5:fc:bf:94:65:32:d4:10:64:ba:f4:7e:b3:c8: e8:cb:cd:25:f7:56:7c:96:bf:0c:7f:85:60:d5:68: 6d:ec:f1:73:a8:a8:20:43:e3:8b:05:8c:cf:91:e4: e4:a4:a8:e9:03:89:74:e7:cf:4b:8b:fa:75:59:e7: 91:4f:18:d8:d5:89:cb:c9:ee:ea:2e:55:ec:c6:20: aa:d1:d1:04:8a:57:95:66:4d:1c:3b:67:6d:83:e1: 14:d3:96:47:19:cb:3a:4f:29:ee:28:71:4e:c4:e0: 79:c0:67:04:cb:e0:38:f1:f6:84:d4:cc:75:7f:b7: a2:9e:7e:79:dc:2c:b0:6a:b8:3b:f5:c9:fb:1b:9f: 6c:63:d1:b5:99:7c:0a:c3:e5:81:78:26:56:5b:64: 1e:de:81:ae:d8:20:38:4d:4b:53:bb:96:3a:f6:19: 88:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:37:E9:83:A5:01:1C:5D:B2:66:61:EB:B9:7B:7A:04:1A:C7:AC:E6 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3131342e302f32332d3234203d3e2034383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.114.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:7f:34:52:16:61:8d:35:54:eb:2b:96:24:b9:1a:e8:e2:b1: 0e:7b:90:90:ea:5c:0c:b0:f5:51:6b:1b:1c:b4:c9:b9:1a:2d: 0e:da:03:e5:93:ae:57:9a:ee:d3:e1:8c:35:67:7c:2b:43:13: 24:b7:bd:19:d7:c9:62:54:f2:32:ae:30:c6:fe:30:8c:52:28: 9a:63:67:49:42:ce:fe:82:76:9e:a4:b8:af:1f:18:26:c3:0d: f9:3e:87:68:ed:3a:e5:f8:2b:80:4b:24:1f:cf:13:4b:6a:16: f9:7e:0e:e0:f2:2f:24:fb:e5:6b:e1:3f:5f:b0:51:42:ac:3d: f2:b6:6a:ba:c3:73:40:a2:6d:5c:1b:88:8d:13:7e:f6:c5:03: b8:5e:a6:60:3d:4d:eb:98:01:56:2b:5e:d3:67:27:fc:d4:6b: f9:ed:e6:95:91:ea:b0:ae:75:20:b5:79:c8:8c:51:fb:97:3e: 79:a9:53:aa:01:5b:96:5a:c4:f5:0a:4a:bc:ef:fe:e1:38:67: 94:44:d8:37:ed:a3:e3:79:38:60:d9:e4:be:45:c6:8e:4d:f2: 93:e5:bb:0b:82:6d:a0:e2:99:ac:8a:06:5a:07:98:92:92:45: be:f8:fc:c3:bf:fc:12:77:03:b3:fe:0f:80:63:76:a7:96:9e: 9e:71:17:f3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUf+H6fTHRM+TfUc2z+AEWbRrlnuswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDYzMDAxNTQ1NFoX DTI1MDYyOTAxNTk1NFowMzExMC8GA1UEAxMoOEMzN0U5ODNBNTAxMUM1REIyNjY2 MUVCQjk3QjdBMDQxQUM3QUNFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKY1Ya5Yjf9aeccgjp51x87ISCs+qkv/ZooqZIbHXoYL1rTcrx/WRz8x0yM8 YpbNGluZrE63AD2kLvDUQt20vNWjs163GeXiodnmLCpw+rX1YG0vkeRW7QGltcX8 v5RlMtQQZLr0frPI6MvNJfdWfJa/DH+FYNVobezxc6ioIEPjiwWMz5Hk5KSo6QOJ dOfPS4v6dVnnkU8Y2NWJy8nu6i5V7MYgqtHRBIpXlWZNHDtnbYPhFNOWRxnLOk8p 7ihxTsTgecBnBMvgOPH2hNTMdX+3op5+edwssGq4O/XJ+xufbGPRtZl8CsPlgXgm VltkHt6BrtggOE1LU7uWOvYZiC0CAwEAAaOCAf0wggH5MB0GA1UdDgQWBBSMN+mD pQEcXbJmYeu5e3oEGses5jAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNTM3MmUz NjM2MmUzMTMxMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAZ1CcjANBgkqhkiG9w0BAQsFAAOCAQEACn80UhZhjTVU6yuWJLka6OKx DnuQkOpcDLD1UWsbHLTJuRotDtoD5ZOuV5ru0+GMNWd8K0MTJLe9GdfJYlTyMq4w xv4wjFIommNnSULO/oJ2nqS4rx8YJsMN+T6HaO065fgrgEskH88TS2oW+X4O4PIv JPvla+E/X7BRQqw98rZqusNzQKJtXBuIjRN+9sUDuF6mYD1N65gBVite02cn/NRr +e3mlZHqsK51ILV5yIxR+5c+ealTqgFbllrE9QpKvO/+4ThnlETYN+2j43k4YNnk vkXGjk3yk+W7C4JtoOKZrIoGWgeYkpJFvvj8w7/8EncDs/4PgGN2p5aennEX8w== -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org