$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35342e302f32332d3233203d3e20313533303630.roa File: 3136302e32352e35342e302f32332d3233203d3e20313533303630.roa (raw, json) Hash identifier: xGNAaG0xNMk64EfdvvCGeHAonw6BrwsqvBD5BwQLiBI= Subject key identifier: B6:9D:23:BA:BF:52:0C:59:74:59:36:9E:AD:3C:B9:37:80:45:FE:A9 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 558B04E1371F9FB26E2E8D6295AC6D406B7C6065 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35342e302f32332d3233203d3e20313533303630.roa Signing time: Sat 20 Jul 2024 08:45:44 +0000 ROA not before: Sat 20 Jul 2024 08:40:44 +0000 ROA not after: Sat 19 Jul 2025 08:45:44 +0000 asID: 153060 IP address blocks: 160.25.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8b:04:e1:37:1f:9f:b2:6e:2e:8d:62:95:ac:6d:40:6b:7c:60:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Jul 20 08:40:44 2024 GMT Not After : Jul 19 08:45:44 2025 GMT Subject: CN=B69D23BABF520C597459369EAD3CB9378045FEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:a5:9c:37:d3:20:53:93:f5:90:ab:5b:c5: 6d:25:a4:be:18:dd:69:4e:43:6e:bb:74:7a:27:79: 73:38:41:67:3d:9e:22:9e:3e:25:e2:82:0a:98:07: 4d:6c:42:e9:8f:90:dc:dc:f8:cf:7d:b5:7c:11:18: c6:2b:98:71:a7:1b:a4:8a:20:a6:0c:51:2b:5a:68: a9:38:ff:c5:2b:d0:06:17:65:57:48:6b:7b:2f:80: 46:57:f1:dd:76:fc:81:66:17:3b:e0:7e:54:c1:0f: c5:5a:b5:1f:1e:8c:bc:f3:bc:b0:47:5f:aa:5e:85: a9:0d:fa:d9:53:2e:64:75:86:ae:bd:a1:24:52:66: 79:21:09:49:a9:31:ff:ae:3f:c3:3b:1e:e3:8b:a0: 1f:de:4e:bc:cd:a6:2c:7c:6d:93:36:91:4b:79:11: af:85:c8:ed:0c:c2:3d:9e:1e:46:a0:5e:95:4b:c2: 61:2b:9c:09:e9:d2:5e:94:b2:60:2f:bb:eb:65:31: 2c:78:7c:7e:b0:58:d3:7b:e6:18:af:64:45:b7:40: 3d:a2:cd:23:cf:2e:39:1e:a7:ec:7e:6a:98:b9:5c: 35:8f:79:56:31:03:88:bf:73:7b:ae:9e:eb:cf:34: e7:fa:20:12:f6:20:c5:cb:4e:52:b9:af:5b:f8:cf: 92:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:23:BA:BF:52:0C:59:74:59:36:9E:AD:3C:B9:37:80:45:FE:A9 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35342e302f32332d3233203d3e20313533303630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.54.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:75:40:de:8e:11:21:41:21:5f:50:6e:9f:d1:8b:a3:d7:44: 58:48:30:2e:fb:ad:4c:e2:94:ba:4b:f6:fb:ff:9e:9f:ed:8b: 57:f3:4a:50:96:1a:af:97:fe:d7:fe:e0:57:7a:a5:61:e0:31: c3:31:49:81:02:d7:83:77:c1:d5:c1:73:74:c4:c6:22:47:61: 77:20:35:2c:2d:e2:a1:00:ba:fc:3e:b1:75:bf:14:92:f7:22: b6:3a:6b:5d:bb:b9:5d:80:bc:8a:a3:40:14:90:67:28:a7:9d: 3c:09:d3:93:e6:6f:ce:ac:9c:07:ed:93:fb:eb:c1:2b:9b:55: 04:ac:a7:05:d4:c0:1e:0c:d0:c9:d6:66:27:8f:4e:15:19:60: 43:2a:9f:cc:6f:a5:6d:8f:d0:4a:d8:93:8d:4b:b9:ab:83:8a: 74:08:45:a1:3c:78:72:6d:4b:97:2b:e5:e2:ea:b0:6e:cf:ca: 40:b6:78:dd:0d:eb:95:a6:cd:79:ad:25:be:5d:95:81:18:ca: 6e:68:c6:10:f0:82:75:2b:dd:7e:74:95:d6:23:5f:10:fe:f4: 8e:83:8d:fa:6b:77:91:44:57:82:9a:5c:92:07:d8:2d:97:85: 80:30:79:c6:6f:8d:15:d9:60:77:35:93:54:20:9b:05:6d:d8: 5c:22:4e:e7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVYsE4Tcfn7JuLo1ilaxtQGt8YGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNDA3MjAwODQwNDRaFw0yNTA3MTkwODQ1NDRaMDMxMTAvBgNV BAMTKEI2OUQyM0JBQkY1MjBDNTk3NDU5MzY5RUFEM0NCOTM3ODA0NUZFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3qWcN9MgU5P1kKtbxW0lpL4Y 3WlOQ267dHoneXM4QWc9niKePiXiggqYB01sQumPkNzc+M99tXwRGMYrmHGnG6SK IKYMUStaaKk4/8Ur0AYXZVdIa3svgEZX8d12/IFmFzvgflTBD8VatR8ejLzzvLBH X6pehakN+tlTLmR1hq69oSRSZnkhCUmpMf+uP8M7HuOLoB/eTrzNpix8bZM2kUt5 Ea+FyO0Mwj2eHkagXpVLwmErnAnp0l6UsmAvu+tlMSx4fH6wWNN75hivZEW3QD2i zSPPLjkep+x+api5XDWPeVYxA4i/c3uunuvPNOf6IBL2IMXLTlK5r1v4z5JfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUtp0jur9SDFl0WTaerTy5N4BF/qkwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTI2YTEwLTU4ZTgtNDNjNy05 NDdlLTcyMjE3M2Q2NjYxNC8wLzMxMzYzMDJlMzIzNTJlMzUzNDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMzMwMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZNjANBgkqhkiG 9w0BAQsFAAOCAQEAPXVA3o4RIUEhX1Bun9GLo9dEWEgwLvutTOKUukv2+/+en+2L V/NKUJYar5f+1/7gV3qlYeAxwzFJgQLXg3fB1cFzdMTGIkdhdyA1LC3ioQC6/D6x db8UkvcitjprXbu5XYC8iqNAFJBnKKedPAnTk+ZvzqycB+2T++vBK5tVBKynBdTA HgzQydZmJ49OFRlgQyqfzG+lbY/QStiTjUu5q4OKdAhFoTx4cm1Llyvl4uqwbs/K QLZ43Q3rlabNea0lvl2VgRjKbmjGEPCCdSvdfnSV1iNfEP70joON+mt3kURXgppc kgfYLZeFgDB5xm+NFdlgdzWTVCCbBW3YXCJO5w== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org