$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3234302e302f32332d3234203d3e20313336303933.roa File: 3135372e36362e3234302e302f32332d3234203d3e20313336303933.roa (raw, json) Hash identifier: ZDb6IJl9qMGuLnz8XkJGB2N3jwDbmT+Qi48/jm+pHe0= Subject key identifier: 24:36:F1:F6:CD:D5:18:7C:E8:10:59:BC:9B:4D:AC:4B:13:88:EB:C3 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0B25E67B3D865AEE19EF20E7FAE33BCF7B03838E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3234302e302f32332d3234203d3e20313336303933.roa Signing time: Mon 02 Sep 2024 03:55:38 +0000 ROA not before: Mon 02 Sep 2024 03:50:38 +0000 ROA not after: Mon 01 Sep 2025 03:55:38 +0000 asID: 136093 IP address blocks: 157.66.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:25:e6:7b:3d:86:5a:ee:19:ef:20:e7:fa:e3:3b:cf:7b:03:83:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 2 03:50:38 2024 GMT Not After : Sep 1 03:55:38 2025 GMT Subject: CN=2436F1F6CDD5187CE81059BC9B4DAC4B1388EBC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cd:c0:ac:e1:b8:5b:95:19:ac:9e:61:25:cc: a4:56:fc:92:aa:dd:98:1d:31:85:b5:70:ff:93:40: 5b:96:8c:1e:c8:02:a2:f2:04:e0:da:98:99:88:ca: 9f:76:b3:9a:a4:6c:3f:be:be:a2:08:cd:d7:d9:25: 7f:8b:21:88:6d:71:3b:e7:b8:4f:dc:e2:2d:29:4f: 93:50:35:ee:95:e8:8a:e8:0e:52:e0:6c:31:b4:74: 08:1c:06:5c:f1:bd:57:fb:d0:59:88:6a:59:2f:c5: 3f:d0:cc:25:50:43:99:62:fe:77:21:68:7f:f9:ee: 3f:3d:2b:5e:9a:55:8d:e9:d6:ae:54:7c:13:82:97: ef:7e:e4:4c:e5:29:63:4a:b0:bd:1a:fa:12:e8:58: 52:c6:c1:dc:c1:e8:5f:e5:e5:5b:49:5a:b5:ac:4f: 41:e6:a3:99:4c:fe:27:7a:e8:9a:49:58:eb:77:b5: 03:d4:51:c5:31:96:33:87:97:08:50:b8:9b:68:67: ed:18:89:b1:f7:e7:ef:ea:af:77:94:b7:41:6a:e6: 98:e6:81:4b:84:e9:fc:0b:09:79:58:98:23:92:a3: 26:d7:a1:a9:7d:6e:4c:93:62:73:27:a8:81:de:ec: a2:47:12:a5:17:ef:3d:ed:d7:22:4d:db:b1:51:1e: 4d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:36:F1:F6:CD:D5:18:7C:E8:10:59:BC:9B:4D:AC:4B:13:88:EB:C3 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3234302e302f32332d3234203d3e20313336303933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.240.0/23 Signature Algorithm: sha256WithRSAEncryption 66:f1:e4:10:01:6b:de:86:c8:d3:2c:84:29:23:fc:23:9a:79: 4e:42:dd:41:06:24:ec:d8:55:a5:9a:b5:b7:01:cd:8d:73:16: d3:ca:fc:b6:77:4f:b0:f9:49:cf:b8:b3:3c:20:c7:85:02:f1: c5:84:5a:c8:2d:e7:1d:f1:63:a1:4c:1a:5d:42:fb:1c:25:5a: ce:b7:b1:1f:25:12:20:18:4b:75:ae:ae:81:d8:ac:87:ca:7b: 6a:99:48:bd:11:1b:5a:30:48:90:1f:df:43:9e:8d:fc:e6:d2: e9:84:1a:e2:54:3c:ab:33:de:08:26:7c:c3:91:fd:4b:b1:24: 7c:19:22:33:cc:b9:16:35:d8:79:78:61:64:23:7a:3b:d3:b5: ee:f9:cf:6f:05:ec:84:b9:b3:f3:12:cf:7a:7f:99:da:67:7a: 10:d3:f9:51:1b:46:cb:33:56:e1:40:87:11:05:da:07:ef:6d: 84:f2:47:ed:0b:97:73:d8:89:0a:9c:57:0f:65:2c:52:e7:e1: 27:88:eb:50:3f:ec:a0:2d:d1:64:3e:dd:a3:04:e1:00:bd:32: 23:6d:1b:a2:b6:b0:f2:a7:19:54:31:2f:4c:a7:b9:bb:ec:17: 3e:53:af:f8:31:fe:d9:b5:62:c6:bb:98:07:57:d4:89:77:37: e2:3c:31:9d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUCyXmez2GWu4Z7yDn+uM7z3sDg44wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDkwMjAzNTAzOFoX DTI1MDkwMTAzNTUzOFowMzExMC8GA1UEAxMoMjQzNkYxRjZDREQ1MTg3Q0U4MTA1 OUJDOUI0REFDNEIxMzg4RUJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJnNwKzhuFuVGayeYSXMpFb8kqrdmB0xhbVw/5NAW5aMHsgCovIE4NqYmYjK n3azmqRsP76+ogjN19klf4shiG1xO+e4T9ziLSlPk1A17pXoiugOUuBsMbR0CBwG XPG9V/vQWYhqWS/FP9DMJVBDmWL+dyFof/nuPz0rXppVjenWrlR8E4KX737kTOUp Y0qwvRr6EuhYUsbB3MHoX+XlW0lataxPQeajmUz+J3romklY63e1A9RRxTGWM4eX CFC4m2hn7RiJsffn7+qvd5S3QWrmmOaBS4Tp/AsJeViYI5KjJtehqX1uTJNicyeo gd7sokcSpRfvPe3XIk3bsVEeTWECAwEAAaOCAgEwggH9MB0GA1UdDgQWBBQkNvH2 zdUYfOgQWbybTaxLE4jrwzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNTM3MmUz NjM2MmUzMjM0MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzMDM5MzMu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAGdQvAwDQYJKoZIhvcNAQELBQADggEBAGbx5BABa96GyNMshCkj /COaeU5C3UEGJOzYVaWatbcBzY1zFtPK/LZ3T7D5Sc+4szwgx4UC8cWEWsgt5x3x Y6FMGl1C+xwlWs63sR8lEiAYS3WuroHYrIfKe2qZSL0RG1owSJAf30Oejfzm0umE GuJUPKsz3ggmfMOR/UuxJHwZIjPMuRY12Hl4YWQjejvTte75z28F7IS5s/MSz3p/ mdpnehDT+VEbRsszVuFAhxEF2gfvbYTyR+0Ll3PYiQqcVw9lLFLn4SeI61A/7KAt 0WQ+3aME4QC9MiNtG6K2sPKnGVQxL0ynubvsFz5Tr/gx/tm1Ysa7mAdX1Il3N+I8 MZ0= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org