$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa File: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (raw, json) Hash identifier: 5+IAAPz1BfpxLFB6OImwO+9tKy3enuKR84eAuCSq/a4= Subject key identifier: 81:D4:A6:FC:A5:B0:73:A9:0B:3D:54:D8:E5:41:13:85:B8:77:90:4C Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 379C9B0E2577991883943AD2299D2940AAFA655B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa Signing time: Fri 28 Jun 2024 06:33:34 +0000 ROA not before: Fri 28 Jun 2024 06:28:34 +0000 ROA not after: Fri 27 Jun 2025 06:33:34 +0000 asID: 152782 IP address blocks: 160.20.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9c:9b:0e:25:77:99:18:83:94:3a:d2:29:9d:29:40:aa:fa:65:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 28 06:28:34 2024 GMT Not After : Jun 27 06:33:34 2025 GMT Subject: CN=81D4A6FCA5B073A90B3D54D8E5411385B877904C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:3c:07:88:e3:f7:28:01:ed:58:e0:b3:7d: f2:93:e0:3c:af:a3:80:32:21:44:3c:da:a0:60:ca: 99:10:9f:e2:1b:49:94:3b:5b:8b:1f:14:7b:5d:71: 55:87:33:0a:4c:cc:e6:12:c9:f1:95:74:4e:6e:b6: fd:99:e4:4f:5e:ba:03:7c:f3:3f:16:f0:02:e2:ee: ca:2e:a0:d2:84:be:60:72:54:6a:25:c9:28:b1:8b: 90:98:8f:d4:33:54:e3:99:ad:89:49:a6:c3:07:e5: 5c:4e:d0:ef:f4:42:5f:02:94:07:9b:d3:a9:5e:91: f1:1e:35:12:ef:5b:00:bf:33:49:1e:a8:f2:0a:e1: af:1c:67:0f:9f:26:8e:5e:a8:4c:bf:bb:04:31:ab: 18:d8:d5:f9:2c:68:15:34:10:b4:ee:f8:9b:89:3b: 79:ae:6a:3e:9b:21:c6:66:2a:c0:44:f8:a2:53:f9: 4b:0b:91:f0:cd:52:b8:06:e8:ce:65:c6:64:0c:25: 14:76:1a:28:dc:e6:ba:12:7d:13:b0:51:54:42:7b: fb:7c:28:25:ac:0e:0f:11:8d:bf:10:b4:cf:56:d6: c2:d7:9f:57:62:46:d9:83:9f:ee:f5:ef:21:cb:36: 85:56:5f:96:23:b8:5e:2b:6b:17:0d:e4:1b:ab:ad: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D4:A6:FC:A5:B0:73:A9:0B:3D:54:D8:E5:41:13:85:B8:77:90:4C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.138.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:af:4f:34:71:b6:77:68:88:32:ef:70:08:2c:07:7a:8e:01: 3c:9d:91:d2:37:2c:08:03:6a:29:48:d5:0e:0c:f6:1b:2d:a5: d1:5c:e1:30:e8:aa:87:65:cb:40:a4:97:cc:3c:90:8b:0a:42: 1b:39:1a:4b:c3:c2:e0:5f:da:89:60:0f:9a:76:fc:89:39:2b: fe:17:a4:90:39:72:b7:d1:b0:bd:18:b5:20:8b:be:a7:46:15: 53:f4:19:7a:65:db:41:a4:0e:5c:5b:80:85:00:14:4e:ca:f8: cf:01:9c:f0:6d:21:71:cb:e2:a6:78:ba:d2:8e:87:aa:d4:98: 34:de:05:b0:5f:44:61:62:0e:8c:7a:52:b3:3c:be:7a:c8:db: a4:e7:c7:e7:3d:0e:52:4d:83:c8:4e:3d:06:16:87:0f:0f:99: 11:f7:48:5c:a7:24:f7:dd:18:bf:34:06:99:28:f9:ce:b8:8f: 07:6e:13:41:bd:fd:1e:09:54:35:f4:09:64:26:d6:32:ae:38: 81:e6:14:41:a7:42:37:ed:e5:27:39:54:9a:bd:c4:cf:b7:9c: 0c:8b:b2:fd:7d:16:a4:f4:01:4a:12:9d:d8:e4:97:ce:11:42: 96:31:9f:55:67:20:61:eb:d5:14:3c:bf:4a:be:6d:68:06:8c: 54:87:2e:f1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUN5ybDiV3mRiDlDrSKZ0pQKr6ZVswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDYyODA2MjgzNFoX DTI1MDYyNzA2MzMzNFowMzExMC8GA1UEAxMoODFENEE2RkNBNUIwNzNBOTBCM0Q1 NEQ4RTU0MTEzODVCODc3OTA0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMu3PAeI4/coAe1Y4LN98pPgPK+jgDIhRDzaoGDKmRCf4htJlDtbix8Ue11x VYczCkzM5hLJ8ZV0Tm62/ZnkT166A3zzPxbwAuLuyi6g0oS+YHJUaiXJKLGLkJiP 1DNU45mtiUmmwwflXE7Q7/RCXwKUB5vTqV6R8R41Eu9bAL8zSR6o8grhrxxnD58m jl6oTL+7BDGrGNjV+SxoFTQQtO74m4k7ea5qPpshxmYqwET4olP5SwuR8M1SuAbo zmXGZAwlFHYaKNzmuhJ9E7BRVEJ7+3woJawODxGNvxC0z1bWwtefV2JG2YOf7vXv Ics2hVZfliO4XitrFw3kG6utzOkCAwEAAaOCAgEwggH9MB0GA1UdDgQWBBSB1Kb8 pbBzqQs9VNjlQROFuHeQTDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNjMwMmUz MjMwMmUzMTMzMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM1MzIzNzM4MzIu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAGgFIowDQYJKoZIhvcNAQELBQADggEBAFyvTzRxtndoiDLvcAgs B3qOATydkdI3LAgDailI1Q4M9hstpdFc4TDoqodly0Ckl8w8kIsKQhs5GkvDwuBf 2olgD5p2/Ik5K/4XpJA5crfRsL0YtSCLvqdGFVP0GXpl20GkDlxbgIUAFE7K+M8B nPBtIXHL4qZ4utKOh6rUmDTeBbBfRGFiDox6UrM8vnrI26Tnx+c9DlJNg8hOPQYW hw8PmRH3SFynJPfdGL80Bpko+c64jwduE0G9/R4JVDX0CWQm1jKuOIHmFEGnQjft 5Sc5VJq9xM+3nAyLsv19FqT0AUoSndjkl84RQpYxn1VnIGHr1RQ8v0q+bWgGjFSH LvE= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org