$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3139312e3133302e302f32332d3234203d3e20313533313431.roa File: 3136302e3139312e3133302e302f32332d3234203d3e20313533313431.roa (raw, json) Hash identifier: KUhrEwQX4kXW97RF2nEl7gR5tlzIEBE+gwogpkXhBd4= Subject key identifier: 67:CA:30:7D:5F:2D:4C:F4:F1:95:9D:B5:93:D2:05:D6:EE:49:2F:28 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5B0C1C414FEEA7DBE3C535098C4201E591988116 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3139312e3133302e302f32332d3234203d3e20313533313431.roa Signing time: Wed 13 Nov 2024 07:01:55 +0000 ROA not before: Wed 13 Nov 2024 06:56:55 +0000 ROA not after: Wed 12 Nov 2025 07:01:55 +0000 asID: 153141 IP address blocks: 160.191.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0c:1c:41:4f:ee:a7:db:e3:c5:35:09:8c:42:01:e5:91:98:81:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 13 06:56:55 2024 GMT Not After : Nov 12 07:01:55 2025 GMT Subject: CN=67CA307D5F2D4CF4F1959DB593D205D6EE492F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:71:e6:65:a7:bf:5c:6b:ef:11:bd:8a:68:42: 86:49:b7:78:ee:be:eb:e5:3e:e9:35:0c:2f:a6:d4: 91:ad:e3:c6:6c:b8:e4:b9:ea:e0:cc:05:5b:51:2a: d5:c2:12:a9:60:ea:b3:8a:97:b7:b8:09:52:42:d6: 44:95:d4:36:71:78:3e:ca:82:37:48:50:b1:8e:2c: 06:39:b0:1a:3e:1b:a5:06:5e:76:c6:28:30:17:42: 9f:73:26:7e:73:10:c5:35:3e:0c:2c:5a:c6:71:74: 42:a6:66:a7:53:e9:0b:21:6c:34:c7:9c:e6:24:d3: f8:aa:b0:6a:46:a9:d2:b1:41:41:85:02:48:54:50: a0:d8:b0:90:71:77:c9:23:2b:67:4b:19:4b:60:6d: 85:cd:a9:61:a3:c8:45:67:ab:c4:77:92:7f:1f:b4: 59:97:9d:e4:40:2c:18:b2:62:3b:77:62:d1:4b:fc: 8d:93:3d:28:7c:c6:4c:f4:ca:c0:4a:a4:b1:fe:0b: 6a:f9:26:a4:db:cb:fe:45:d8:3a:14:10:42:75:e7: 4a:90:20:40:d6:52:89:43:aa:cd:98:17:0b:8e:33: de:e2:dd:3c:cf:3f:4b:e3:f4:ba:b7:71:f9:10:18: dc:77:7e:bb:47:8a:c6:5e:33:16:62:f0:5e:a8:22: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CA:30:7D:5F:2D:4C:F4:F1:95:9D:B5:93:D2:05:D6:EE:49:2F:28 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3139312e3133302e302f32332d3234203d3e20313533313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.130.0/23 Signature Algorithm: sha256WithRSAEncryption 53:a8:ea:c8:ed:10:74:5d:1a:3f:b1:89:67:72:25:7c:b7:40: 20:3b:c7:4b:da:27:cf:6a:4e:0a:9e:d5:c3:a9:97:91:4c:76: a3:6b:f6:c0:25:b4:85:f8:e0:12:cf:06:2b:9e:74:32:25:ae: 35:81:2d:04:49:0e:68:46:98:60:7c:25:62:1e:be:75:38:75: 4b:02:10:13:f9:a8:a0:a5:b5:5b:32:84:25:b6:b4:58:04:35: c4:a4:be:c0:52:e2:d5:4b:f0:e2:b3:95:d8:f0:8a:0d:38:cc: 87:18:c7:09:6c:94:91:6d:c4:d0:d8:de:50:f5:4e:27:96:dc: 65:cd:bc:51:e0:cf:56:e4:5e:db:86:12:7c:79:50:d6:72:9f: 29:0a:20:23:24:fd:d8:8c:83:b4:b6:1c:69:e0:ce:d2:88:02: 36:54:fc:57:24:07:66:b9:c3:d7:8f:d2:d1:0b:4c:c6:10:f9: 97:f6:af:97:2a:d4:be:8e:99:3b:5e:f6:0b:7a:ed:70:91:68: 57:0e:4e:e9:1a:7f:14:d9:8a:3e:bc:e6:eb:48:63:45:e9:90: e0:51:b5:2c:f5:97:23:0f:07:05:5e:0a:85:fc:a7:eb:87:db: 17:43:5b:b4:ae:86:95:a4:f5:99:1c:5f:2d:12:69:6c:0a:c2: 6b:ef:7d:a5 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUWwwcQU/up9vjxTUJjEIB5ZGYgRYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTExMzA2NTY1NVoX DTI1MTExMjA3MDE1NVowMzExMC8GA1UEAxMoNjdDQTMwN0Q1RjJENENGNEYxOTU5 REI1OTNEMjA1RDZFRTQ5MkYyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9x5mWnv1xr7xG9imhChkm3eO6+6+U+6TUML6bUka3jxmy45Lnq4MwFW1Eq 1cISqWDqs4qXt7gJUkLWRJXUNnF4PsqCN0hQsY4sBjmwGj4bpQZedsYoMBdCn3Mm fnMQxTU+DCxaxnF0QqZmp1PpCyFsNMec5iTT+Kqwakap0rFBQYUCSFRQoNiwkHF3 ySMrZ0sZS2Bthc2pYaPIRWerxHeSfx+0WZed5EAsGLJiO3di0Uv8jZM9KHzGTPTK wEqksf4LavkmpNvL/kXYOhQQQnXnSpAgQNZSiUOqzZgXC44z3uLdPM8/S+P0urdx +RAY3Hd+u0eKxl4zFmLwXqgiv1cCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBRnyjB9 Xy1M9PGVnbWT0gXW7kkvKDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNjMwMmUz MTM5MzEyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzQz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/gjANBgkqhkiG9w0BAQsFAAOCAQEAU6jqyO0QdF0aP7GJ Z3IlfLdAIDvHS9onz2pOCp7Vw6mXkUx2o2v2wCW0hfjgEs8GK550MiWuNYEtBEkO aEaYYHwlYh6+dTh1SwIQE/mooKW1WzKEJba0WAQ1xKS+wFLi1Uvw4rOV2PCKDTjM hxjHCWyUkW3E0NjeUPVOJ5bcZc28UeDPVuRe24YSfHlQ1nKfKQogIyT92IyDtLYc aeDO0ogCNlT8VyQHZrnD14/S0QtMxhD5l/avlyrUvo6ZO172C3rtcJFoVw5O6Rp/ FNmKPrzm60hjRemQ4FG1LPWXIw8HBV4Khfyn64fbF0NbtK6GlaT1mRxfLRJpbArC a+99pQ== -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org