$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa File: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (raw, json) Hash identifier: bRxB1/XYWBuRDsFTyowa+aqFQkf4scGUR4oQ2TVJrXQ= Subject key identifier: 35:2A:35:34:93:17:9A:66:BA:93:99:E8:B9:14:95:B6:B7:22:99:6D Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 281A88036F204306B4DE84E5D71811F47475F836 Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa Signing time: Mon 16 Sep 2024 03:15:48 +0000 ROA not before: Mon 16 Sep 2024 03:10:48 +0000 ROA not after: Mon 15 Sep 2025 03:15:48 +0000 asID: 153088 IP address blocks: 160.25.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1a:88:03:6f:20:43:06:b4:de:84:e5:d7:18:11:f4:74:75:f8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Sep 16 03:10:48 2024 GMT Not After : Sep 15 03:15:48 2025 GMT Subject: CN=352A353493179A66BA9399E8B91495B6B722996D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:d6:77:e7:6b:58:2c:5e:3e:fe:14:30:33: 9c:33:47:d7:b7:c4:b9:30:8e:c1:b7:46:b2:08:04: 37:ed:bf:f2:3c:d5:37:09:5a:98:2c:1c:e9:cb:db: 64:5a:d8:f6:b3:71:e8:c1:39:36:94:61:77:1d:0c: b0:f2:bf:a2:f7:bb:80:2e:34:d0:ed:5e:06:ec:09: f6:16:a6:7a:e6:b2:4b:1f:d3:e9:9f:fc:55:b0:9f: c2:d7:6f:7b:ba:48:69:68:6b:61:35:0a:72:b2:35: 92:d5:41:c6:3f:cb:bd:09:b0:48:b8:ec:c6:51:4e: 0f:aa:f6:96:06:f7:2a:d5:00:65:86:ad:4d:ab:9c: e7:1b:c7:09:1a:4c:14:81:4c:6c:32:ec:c4:af:bc: eb:da:01:4c:19:df:51:33:c8:15:6b:64:f8:7c:54: 6b:8c:83:39:d4:d8:f0:bd:cb:b8:7d:16:0a:e1:d8: a3:27:95:45:d5:51:82:cc:10:b6:36:aa:98:93:0d: 74:60:85:35:95:6d:76:82:4d:59:54:ea:4c:15:ff: d2:ea:ad:34:70:e7:1f:20:f1:46:50:57:04:6e:ca: 7e:d5:8c:79:25:b5:fe:77:8d:cf:e6:bb:64:7d:78: 81:df:1a:7e:9a:bd:3b:07:60:dd:2b:97:0a:43:d3: 1c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2A:35:34:93:17:9A:66:BA:93:99:E8:B9:14:95:B6:B7:22:99:6D X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.156.0/24 Signature Algorithm: sha256WithRSAEncryption 81:eb:34:6a:01:c7:1f:a2:0f:0d:12:fe:f3:38:70:c6:db:9d: 4b:f9:94:f2:ac:07:d9:86:b0:8e:41:dc:af:c8:05:c6:bd:bc: a9:6d:04:e1:91:08:ea:0b:b8:14:6e:e9:39:7e:14:a4:46:f0: 13:cf:63:b2:88:4c:93:cc:ac:ae:26:d0:9c:e4:1a:ab:3c:2f: 5b:24:95:92:5f:46:57:24:ac:0b:8e:76:26:aa:eb:6e:6a:9d: a3:38:b4:83:40:75:fa:c5:07:9d:9f:17:26:9d:44:e6:32:98: 78:15:b4:77:34:92:6f:8b:fd:00:ef:dc:4c:9d:b2:66:15:83: bb:7b:14:78:a7:b4:33:5f:49:a8:4d:1b:55:f3:5a:62:f9:85: 72:2b:d5:b8:47:ce:c0:2b:98:4f:76:74:7a:1b:88:d2:f8:52: 97:d8:6a:5b:23:6d:20:b9:be:1a:da:a9:03:92:99:2e:c6:87: 00:6d:99:f2:1d:38:a2:d4:fa:fb:9a:27:22:d4:86:7b:f1:24: e7:9a:16:4a:60:1d:4c:88:d4:72:fd:c9:a2:a7:c4:c0:aa:c6: 5a:e9:99:ae:2b:ba:23:5f:25:3f:e0:db:39:4f:03:6a:90:e9: 9a:29:a9:28:78:09:93:3b:d9:a7:66:b9:43:16:be:e6:b8:3b: 77:41:09:83 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKBqIA28gQwa03oTl1xgR9HR1+DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNDA5MTYwMzEwNDhaFw0yNTA5MTUwMzE1NDhaMDMxMTAvBgNV BAMTKDM1MkEzNTM0OTMxNzlBNjZCQTkzOTlFOEI5MTQ5NUI2QjcyMjk5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADdZ352tYLF4+/hQwM5wzR9e3 xLkwjsG3RrIIBDftv/I81TcJWpgsHOnL22Ra2PazcejBOTaUYXcdDLDyv6L3u4Au NNDtXgbsCfYWpnrmsksf0+mf/FWwn8LXb3u6SGloa2E1CnKyNZLVQcY/y70JsEi4 7MZRTg+q9pYG9yrVAGWGrU2rnOcbxwkaTBSBTGwy7MSvvOvaAUwZ31EzyBVrZPh8 VGuMgznU2PC9y7h9Fgrh2KMnlUXVUYLMELY2qpiTDXRghTWVbXaCTVlU6kwV/9Lq rTRw5x8g8UZQVwRuyn7VjHkltf53jc/mu2R9eIHfGn6avTsHYN0rlwpD0xyhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUNSo1NJMXmma6k5nouRSVtrcimW0wHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhZmRkNmY5LWI3OTktNGE5Ni05 ZTJhLTFmZWY2OWJmYTU5Ny8wLzMxMzYzMDJlMzIzNTJlMzEzNTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBmcMA0GCSqG SIb3DQEBCwUAA4IBAQCB6zRqAccfog8NEv7zOHDG251L+ZTyrAfZhrCOQdyvyAXG vbypbQThkQjqC7gUbuk5fhSkRvATz2OyiEyTzKyuJtCc5BqrPC9bJJWSX0ZXJKwL jnYmqutuap2jOLSDQHX6xQednxcmnUTmMph4FbR3NJJvi/0A79xMnbJmFYO7exR4 p7QzX0moTRtV81pi+YVyK9W4R87AK5hPdnR6G4jS+FKX2GpbI20gub4a2qkDkpku xocAbZnyHTii1Pr7mici1IZ78STnmhZKYB1MiNRy/cmip8TAqsZa6ZmuK7ojXyU/ 4Ns5TwNqkOmaKakoeAmTO9mnZrlDFr7muDt3QQmD -----END CERTIFICATE-----Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org