$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa File: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (raw, json) Hash identifier: 4VRZi1K7JmUX+mY4PjGbZVJq7hsS2Sqman/3Bm5DdSM= Subject key identifier: B2:77:C2:ED:0D:57:F5:25:1F:D4:FA:1E:FB:DC:85:16:1C:3D:08:60 Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 04381D1DFE29C02849C3619A001761143941CF19 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa Signing time: Thu 13 Jun 2024 04:45:54 +0000 ROA not before: Thu 13 Jun 2024 04:40:54 +0000 ROA not after: Thu 12 Jun 2025 04:45:54 +0000 asID: 152796 IP address blocks: 160.22.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:38:1d:1d:fe:29:c0:28:49:c3:61:9a:00:17:61:14:39:41:cf:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Jun 13 04:40:54 2024 GMT Not After : Jun 12 04:45:54 2025 GMT Subject: CN=B277C2ED0D57F5251FD4FA1EFBDC85161C3D0860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:26:a0:a0:44:ad:bc:88:2e:9a:4a:e1:6c: 42:78:0e:75:be:00:21:af:a5:23:5d:5b:dc:eb:3c: e6:63:c6:06:79:9e:47:3c:bc:0a:5d:d2:90:97:c3: 5b:f5:c7:e8:c8:4e:21:d9:eb:71:b2:02:35:d4:fc: 33:b4:aa:ed:9f:e2:51:88:bb:4f:60:21:80:b7:e1: 83:75:b1:95:dd:50:61:0b:b9:dd:20:70:4c:9a:74: 5a:4d:41:67:4a:60:44:37:43:83:f0:62:78:a3:35: 26:d6:d7:43:a6:ff:3a:41:06:0a:0a:ff:79:b4:50: 3a:01:37:4e:4e:df:cc:6c:88:1d:00:ee:a9:61:1b: a9:ad:be:e3:b4:38:92:16:c0:fd:0d:1e:3d:1d:b2: 90:de:52:05:a4:bd:c5:9a:16:92:bc:84:77:ee:b2: 09:ae:11:5b:9c:b6:fa:97:e3:3b:26:0f:b6:b2:66: 49:a1:78:da:5d:3f:96:f7:83:7a:a4:19:45:45:90: 72:71:33:3e:33:40:36:61:02:3d:98:be:00:4a:32: 7a:51:89:f5:34:0b:8c:7f:fe:2d:ff:04:0f:69:e1: ff:04:c0:f1:e5:7c:36:d4:46:ba:8c:ef:7b:d2:ec: fa:25:0b:68:d6:9e:a0:44:a2:3d:5d:1e:5c:e6:88: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:77:C2:ED:0D:57:F5:25:1F:D4:FA:1E:FB:DC:85:16:1C:3D:08:60 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.7.0/24 Signature Algorithm: sha256WithRSAEncryption 14:30:96:d6:e6:11:ef:bf:e5:d4:a0:4d:c0:28:d3:d5:ec:63: f6:c8:18:10:4f:d7:e9:f5:5a:50:4e:d4:0f:ac:19:52:ab:a4: f9:c2:61:aa:0b:9e:e8:9e:f0:9f:2a:00:fe:8e:e2:a1:12:09: 65:1f:5c:69:e0:0a:8c:1f:71:47:d2:c4:f1:31:15:57:b6:9b: 03:c4:f8:34:2e:13:ff:33:02:93:3c:a9:5f:06:2e:4c:1a:5e: f7:ed:a6:03:fa:e9:12:1a:5f:1d:0b:d3:7e:14:4c:3a:94:51: 6e:44:a8:a5:23:67:39:d6:39:a0:e0:22:61:ac:7c:e5:aa:cc: 37:ca:28:3e:ff:8c:24:80:01:a4:8b:45:53:45:7a:a2:ad:f6: c1:63:4f:13:5b:fa:ee:fb:39:86:f3:4a:62:7d:3c:eb:14:09: 63:9b:46:4e:a9:9e:39:ec:2a:27:c8:9d:f5:b3:94:53:1c:77: 84:e6:1b:57:3a:14:1f:ff:08:27:50:42:cf:65:40:a4:d0:98: 39:f0:d9:7f:f1:77:65:22:aa:06:8a:12:d9:a5:10:64:02:d6: 23:fa:26:2b:99:d4:85:62:f9:bd:d0:23:ee:7a:8e:27:85:ae: d6:63:ff:c8:ea:b0:89:c0:03:86:53:29:53:6a:37:17:73:32: 25:5e:72:6e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUBDgdHf4pwChJw2GaABdhFDlBzxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNDA2MTMwNDQwNTRaFw0yNTA2MTIwNDQ1NTRaMDMxMTAvBgNV BAMTKEIyNzdDMkVEMEQ1N0Y1MjUxRkQ0RkExRUZCREM4NTE2MUMzRDA4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+CagoEStvIgumkrhbEJ4DnW+ ACGvpSNdW9zrPOZjxgZ5nkc8vApd0pCXw1v1x+jITiHZ63GyAjXU/DO0qu2f4lGI u09gIYC34YN1sZXdUGELud0gcEyadFpNQWdKYEQ3Q4PwYnijNSbW10Om/zpBBgoK /3m0UDoBN05O38xsiB0A7qlhG6mtvuO0OJIWwP0NHj0dspDeUgWkvcWaFpK8hHfu sgmuEVuctvqX4zsmD7ayZkmheNpdP5b3g3qkGUVFkHJxMz4zQDZhAj2YvgBKMnpR ifU0C4x//i3/BA9p4f8EwPHlfDbURrqM73vS7PolC2jWnqBEoj1dHlzmiLjHAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUsnfC7Q1X9SUf1Poe+9yFFhw9CGAwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMTk4ODE2LTVhZjktNDdlZi1i OTg5LTQyZjI3MzE4NDhiZS8wLzMxMzYzMDJlMzIzMjJlMzcyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTM1MzIzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgFgcwDQYJKoZIhvcN AQELBQADggEBABQwltbmEe+/5dSgTcAo09XsY/bIGBBP1+n1WlBO1A+sGVKrpPnC YaoLnuie8J8qAP6O4qESCWUfXGngCowfcUfSxPExFVe2mwPE+DQuE/8zApM8qV8G LkwaXvftpgP66RIaXx0L034UTDqUUW5EqKUjZznWOaDgImGsfOWqzDfKKD7/jCSA AaSLRVNFeqKt9sFjTxNb+u77OYbzSmJ9POsUCWObRk6pnjnsKifInfWzlFMcd4Tm G1c6FB//CCdQQs9lQKTQmDnw2X/xd2UiqgaKEtmlEGQC1iP6JiuZ1IVi+b3QI+56 jieFrtZj/8jqsInAA4ZTKVNqNxdzMiVecm4= -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org