$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa File: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (raw, json) Hash identifier: 9PomQkSttLsu2qKBmiaLRKmeGtvcWbDlDji4mKMGTaQ= Subject key identifier: 90:4B:B4:14:E6:39:CC:A8:39:8C:E8:C6:BB:98:67:5C:BB:E1:7C:31 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6358CADA52800A49E0ED60AEC13ADAF9E8409F0B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa Signing time: Wed 28 Aug 2024 08:08:53 +0000 ROA not before: Wed 28 Aug 2024 08:03:53 +0000 ROA not after: Wed 27 Aug 2025 08:08:53 +0000 asID: 152829 IP address blocks: 160.22.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:58:ca:da:52:80:0a:49:e0:ed:60:ae:c1:3a:da:f9:e8:40:9f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 28 08:03:53 2024 GMT Not After : Aug 27 08:08:53 2025 GMT Subject: CN=904BB414E639CCA8398CE8C6BB98675CBBE17C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:cf:77:d2:d9:55:5d:7d:29:74:02:74:04: ba:e2:98:7d:0c:58:e7:9c:49:b3:cd:4d:9d:80:85: 8d:5c:57:1b:89:c1:fc:c9:06:86:66:e0:45:2c:bb: f9:72:c6:26:b7:e1:1a:9d:18:2d:2d:92:57:c1:8f: 5b:1a:a9:ac:0c:e4:6a:b1:80:14:80:4d:f3:cd:97: 58:60:e4:bd:95:df:0d:8b:2f:7d:18:18:25:f6:84: 58:e3:5c:91:e3:7c:dc:57:e9:52:12:15:d2:04:72: 8e:a1:d7:ff:d7:98:1d:b7:f1:8b:76:1c:13:d0:cb: 5f:f0:7d:68:b1:3f:33:0c:15:10:db:38:24:5b:6a: 0b:46:84:ad:96:e2:0f:38:70:ab:5b:7e:38:0e:52: be:c6:69:eb:ca:e8:40:6f:78:55:af:34:5a:93:f0: e8:e0:1f:72:c4:f1:b5:eb:fe:2f:89:8c:d9:6d:a1: 8d:72:1a:35:e1:3c:a8:49:61:a5:11:a8:4c:4c:27: fe:31:ce:b0:55:cd:45:b5:e8:3a:06:d9:58:c6:64: 82:20:5b:0c:8f:ab:2f:90:c4:96:77:be:4d:35:83: 75:25:48:2f:5b:40:7a:f6:8b:65:ee:8d:41:a7:07: cf:59:cf:00:6e:99:2e:74:03:30:90:70:e0:89:00: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4B:B4:14:E6:39:CC:A8:39:8C:E8:C6:BB:98:67:5C:BB:E1:7C:31 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.208.0/23 Signature Algorithm: sha256WithRSAEncryption 43:cf:7b:e8:20:37:c6:a9:c5:8a:1c:4b:63:64:c3:a5:c4:c7: 1f:ac:28:b1:b5:41:25:a4:b7:0e:22:06:27:b9:4e:28:82:6a: 87:ad:04:de:1f:f0:23:73:7c:7f:03:c1:98:b3:d8:f5:96:f5: 2b:c2:26:46:e2:d9:08:5b:33:2e:5a:56:5c:ad:43:be:74:4c: cd:ae:b6:4a:85:8b:79:f4:7a:bf:bc:38:48:5c:34:c6:88:e3: 33:2d:1a:e7:e7:dc:2f:16:48:fc:42:d1:89:cd:39:a6:40:4b: 13:c1:c8:ea:69:8d:b9:22:c1:57:f0:cb:fa:c1:cf:da:5b:7a: 3e:8a:26:ef:ef:ce:69:be:ab:e6:88:3c:e4:ce:fd:18:11:c9: c0:ce:18:27:70:f5:45:56:1f:34:14:78:d6:6d:c7:d0:92:40: bb:85:22:24:f3:4d:cb:bb:40:f5:ef:c3:14:63:54:dc:ef:3b: 91:ec:35:48:a8:f9:4f:61:17:7d:18:d8:53:c1:fa:ad:17:0e: cb:ae:22:eb:1e:e4:37:94:cd:2a:98:e9:59:65:23:fe:04:5f: a4:c4:8b:5e:92:ef:8d:e0:7a:68:ab:69:f8:c3:b3:f9:ac:09: ac:6b:fa:c1:7c:5e:c1:5c:24:5b:21:e5:e8:77:bf:3a:1e:76: 18:15:dd:63 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUY1jK2lKACkng7WCuwTra+ehAnwswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDgyODA4MDM1M1oX DTI1MDgyNzA4MDg1M1owMzExMC8GA1UEAxMoOTA0QkI0MTRFNjM5Q0NBODM5OENF OEM2QkI5ODY3NUNCQkUxN0MzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlWz3fS2VVdfSl0AnQEuuKYfQxY55xJs81NnYCFjVxXG4nB/MkGhmbgRSy7 +XLGJrfhGp0YLS2SV8GPWxqprAzkarGAFIBN882XWGDkvZXfDYsvfRgYJfaEWONc keN83FfpUhIV0gRyjqHX/9eYHbfxi3YcE9DLX/B9aLE/MwwVENs4JFtqC0aErZbi Dzhwq1t+OA5SvsZp68roQG94Va80WpPw6OAfcsTxtev+L4mM2W2hjXIaNeE8qElh pRGoTEwn/jHOsFXNRbXoOgbZWMZkgiBbDI+rL5DElne+TTWDdSVIL1tAevaLZe6N QacHz1nPAG6ZLnQDMJBw4IkAut8CAwEAAaOCAgEwggH9MB0GA1UdDgQWBBSQS7QU 5jnMqDmM6Ma7mGdcu+F8MTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNjMwMmUz MjMyMmUzMjMwMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM1MzIzODMyMzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAGgFtAwDQYJKoZIhvcNAQELBQADggEBAEPPe+ggN8apxYocS2Nk w6XExx+sKLG1QSWktw4iBie5TiiCaoetBN4f8CNzfH8DwZiz2PWW9SvCJkbi2Qhb My5aVlytQ750TM2utkqFi3n0er+8OEhcNMaI4zMtGufn3C8WSPxC0YnNOaZASxPB yOppjbkiwVfwy/rBz9pbej6KJu/vzmm+q+aIPOTO/RgRycDOGCdw9UVWHzQUeNZt x9CSQLuFIiTzTcu7QPXvwxRjVNzvO5HsNUio+U9hF30Y2FPB+q0XDsuuIuse5DeU zSqY6VllI/4EX6TEi16S743gemirafjDs/msCaxr+sF8XsFcJFsh5eh3vzoedhgV 3WM= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org