$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36382e302f32332d3234203d3e20313532383430.roa File: 3136302e32352e36382e302f32332d3234203d3e20313532383430.roa (raw, json) Hash identifier: 4i8FjKHuMJZs9ehASRTTzzbmgJaF3lnGvx5voJ5RPxk= Subject key identifier: 10:39:8C:D7:14:05:6F:2B:91:52:79:59:63:2E:CF:DB:79:29:71:0C Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 1AA434AEB55C00E486C875CFA9F20330EA913922 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36382e302f32332d3234203d3e20313532383430.roa Signing time: Thu 22 Aug 2024 07:41:21 +0000 ROA not before: Thu 22 Aug 2024 07:36:21 +0000 ROA not after: Thu 21 Aug 2025 07:41:21 +0000 asID: 152840 IP address blocks: 160.25.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:34:ae:b5:5c:00:e4:86:c8:75:cf:a9:f2:03:30:ea:91:39:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Aug 22 07:36:21 2024 GMT Not After : Aug 21 07:41:21 2025 GMT Subject: CN=10398CD714056F2B91527959632ECFDB7929710C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:e6:af:3e:21:b7:3e:e7:90:b5:07:76:fb: 9e:da:4e:42:85:6a:cd:35:19:4f:5e:f0:67:03:65: c5:9f:e3:67:54:ac:c4:73:ea:fc:c1:7c:64:47:34: 38:25:51:4d:ce:7a:14:b4:ad:88:03:56:fc:16:16: 8c:5f:3a:f6:51:d9:14:d0:15:49:ed:12:20:44:9b: 3f:f6:10:96:35:08:0f:e3:6b:6a:be:c2:c4:36:c9: 8e:57:e9:35:cc:18:51:86:9c:f3:17:5a:5f:2b:53: 68:50:a2:3c:97:cb:9f:f6:9d:04:cc:05:32:dc:b3: 88:f1:3e:fd:19:b4:d0:5e:31:a3:4b:50:3d:e9:92: 3a:0a:76:bd:a3:69:d2:37:79:3f:25:4f:62:9d:2b: 93:ec:f2:29:84:8c:1e:79:0b:d8:d8:a9:83:a3:75: e5:ce:37:3e:32:02:99:a7:39:43:b8:fe:92:75:75: 08:64:ee:5b:e8:cc:02:35:a1:e2:62:b5:eb:72:9a: 90:6d:1c:3f:06:69:42:98:c2:7e:e7:52:ce:e4:97: be:be:97:73:75:ce:31:07:f1:f4:ce:6f:3d:1c:70: b6:7d:fd:9e:58:15:6a:cf:89:ab:eb:36:af:ba:71: 79:b6:71:d2:aa:18:8e:65:3b:86:5e:f3:9d:d6:8f: d4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:39:8C:D7:14:05:6F:2B:91:52:79:59:63:2E:CF:DB:79:29:71:0C X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36382e302f32332d3234203d3e20313532383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.68.0/23 Signature Algorithm: sha256WithRSAEncryption 98:7d:89:55:50:cf:7f:8b:a8:db:a2:b7:59:9b:60:04:57:f8: 82:55:35:36:e4:61:3d:99:60:35:80:04:04:e4:03:23:79:f6: 5b:84:07:94:c2:e5:33:b8:c3:d3:26:e4:57:d2:93:78:fc:87: a7:85:dc:af:a9:78:a4:ac:8a:8b:f0:29:55:32:61:b0:66:31: c8:a4:4f:5b:a4:e9:5c:fc:78:21:b6:19:44:73:cb:60:98:d6: 5d:df:64:11:9b:5c:0a:2d:87:2f:cd:1e:2d:23:b1:a4:1f:43: 0c:f6:e5:85:e7:59:a9:9a:29:d9:ce:b3:59:11:88:d8:b6:97: 88:01:fb:45:12:5c:a7:1f:0d:58:18:ff:29:51:6d:2f:cc:db: 6b:9b:fc:25:4a:ad:14:71:a9:2e:1d:34:3d:75:c0:3a:e6:c1: 3b:4f:34:cc:16:a7:36:d8:f7:9a:b1:24:be:fb:8f:ad:44:ad: b8:5a:5b:cd:75:8f:92:45:52:d6:db:f3:59:0b:a2:45:42:4b: eb:86:e2:68:9d:c1:6f:d2:af:68:ae:c5:47:07:af:1f:77:c0: cb:f7:d4:6f:22:bf:9d:32:89:d7:0e:af:cc:30:f7:9e:f9:b2: b3:c7:24:36:44:95:8a:c1:33:de:81:a9:01:86:35:10:d3:b8: a8:0b:69:87 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGqQ0rrVcAOSGyHXPqfIDMOqROSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNDA4MjIwNzM2MjFaFw0yNTA4MjEwNzQxMjFaMDMxMTAvBgNV BAMTKDEwMzk4Q0Q3MTQwNTZGMkI5MTUyNzk1OTYzMkVDRkRCNzkyOTcxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqE+avPiG3PueQtQd2+57aTkKF as01GU9e8GcDZcWf42dUrMRz6vzBfGRHNDglUU3OehS0rYgDVvwWFoxfOvZR2RTQ FUntEiBEmz/2EJY1CA/ja2q+wsQ2yY5X6TXMGFGGnPMXWl8rU2hQojyXy5/2nQTM BTLcs4jxPv0ZtNBeMaNLUD3pkjoKdr2jadI3eT8lT2KdK5Ps8imEjB55C9jYqYOj deXONz4yApmnOUO4/pJ1dQhk7lvozAI1oeJitetympBtHD8GaUKYwn7nUs7kl76+ l3N1zjEH8fTObz0ccLZ9/Z5YFWrPiavrNq+6cXm2cdKqGI5lO4Ze853Wj9SDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUEDmM1xQFbyuRUnlZYy7P23kpcQwwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyZmJhYWZjLTRkYjItNGZjNC1h MWE4LTJkOGU0YzhiMmNlMC8wLzMxMzYzMDJlMzIzNTJlMzYzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZRDANBgkqhkiG 9w0BAQsFAAOCAQEAmH2JVVDPf4uo26K3WZtgBFf4glU1NuRhPZlgNYAEBOQDI3n2 W4QHlMLlM7jD0ybkV9KTePyHp4Xcr6l4pKyKi/ApVTJhsGYxyKRPW6TpXPx4IbYZ RHPLYJjWXd9kEZtcCi2HL80eLSOxpB9DDPblhedZqZop2c6zWRGI2LaXiAH7RRJc px8NWBj/KVFtL8zba5v8JUqtFHGpLh00PXXAOubBO080zBanNtj3mrEkvvuPrUSt uFpbzXWPkkVS1tvzWQuiRUJL64biaJ3Bb9KvaK7FRwevH3fAy/fUbyK/nTKJ1w6v zDD3nvmys8ckNkSVisEz3oGpAYY1ENO4qAtphw== -----END CERTIFICATE-----Generated at Thu Nov 21 05:34:48 2024 by rpki-client on console-ams.rpki-client.org