$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa File: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (raw, json) Hash identifier: hezNNbhUajCptWpnwfUzl4SBqEdlom/yjX2EzaxR8NU= Subject key identifier: 8C:E0:BC:8D:1E:E8:B2:3E:63:59:FF:03:1C:A4:B7:25:04:96:70:89 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 73CF12206E5110B859B834E629BD97A557441EC2 Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa Signing time: Sun 10 Nov 2024 12:38:32 +0000 ROA not before: Sun 10 Nov 2024 12:33:32 +0000 ROA not after: Sun 09 Nov 2025 12:38:32 +0000 asID: 153071 IP address blocks: 160.25.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:cf:12:20:6e:51:10:b8:59:b8:34:e6:29:bd:97:a5:57:44:1e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Nov 10 12:33:32 2024 GMT Not After : Nov 9 12:38:32 2025 GMT Subject: CN=8CE0BC8D1EE8B23E6359FF031CA4B72504967089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b7:ba:28:c0:28:83:99:f2:ac:d1:28:ec:f4: c1:fe:74:52:a3:b4:18:f9:84:bb:b3:88:de:a6:38: 57:01:79:e1:3b:17:7d:27:31:ff:34:da:ac:54:ce: e4:58:cd:d9:86:58:bf:0b:5f:4e:4a:4b:d8:69:c2: b9:16:14:bc:ca:bd:c6:e7:1d:a3:ee:c8:d5:52:21: 40:ab:f5:56:01:64:3e:e3:e1:d9:e7:7e:54:a1:a0: 60:23:67:9f:a4:92:af:68:c7:9f:fc:cc:35:bb:90: 5f:e8:20:2c:2e:6e:c2:d0:db:99:3f:01:f9:d0:85: da:1f:cb:a6:fb:96:3f:bf:f9:7d:8b:9a:93:18:a4: d2:05:04:6a:b0:3a:f0:6c:45:f4:33:80:63:2c:f2: 03:f9:35:c2:63:f8:57:58:60:99:34:11:c8:78:21: 22:6a:83:0f:31:05:8d:95:a9:9a:67:01:d8:94:9f: d3:f2:66:77:33:5f:83:1e:41:5b:e5:4f:a8:fa:4f: 8d:d5:19:0f:04:c1:e1:6c:17:dc:8e:ab:c0:61:24: 46:4b:50:21:51:01:51:f0:c4:2e:d7:a7:95:f8:d9: 3e:19:23:52:9a:32:d7:5e:21:2b:26:a4:ca:53:ee: 20:35:37:bd:5a:d7:04:3d:6b:b4:5e:cb:8f:78:c9: 88:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:BC:8D:1E:E8:B2:3E:63:59:FF:03:1C:A4:B7:25:04:96:70:89 X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.115.0/24 Signature Algorithm: sha256WithRSAEncryption 62:25:b3:da:fb:6c:b7:95:10:58:b4:2f:4b:7b:e4:ec:c3:ac: 52:9c:97:3d:11:9e:fd:ee:6a:44:46:c7:14:3d:74:b4:bd:43: 4e:1e:5b:5c:3b:e2:17:79:64:57:eb:a3:8e:98:c8:5b:a8:9e: d0:a2:67:5c:65:eb:75:1f:e3:42:8f:55:01:bf:c8:43:eb:92: 33:ca:79:41:07:4d:ad:5d:dd:1a:80:0b:15:ef:c4:2b:87:b8: 5e:43:27:58:be:b5:07:ef:33:fa:53:ac:13:5b:bd:96:7e:e2: 44:db:67:5c:13:b7:d1:e0:0a:2c:cb:f5:31:27:e2:27:fc:8d: a7:93:46:ee:56:0a:08:56:f1:01:f8:6e:3a:78:06:17:ff:54: 83:3e:61:d1:ae:0f:8d:dc:37:76:8e:a4:25:ea:1f:d4:19:85: 4e:b6:c9:81:16:bd:45:ee:b7:37:02:d0:49:73:16:3b:39:41: ba:28:ab:3f:6a:a2:d8:fd:a9:d2:89:a4:7c:b2:af:33:82:ad: 77:0b:bd:a4:13:e3:44:8d:b7:6a:7b:aa:b0:66:0c:7d:7c:83: a4:2e:9b:07:6a:57:1c:e7:c2:cc:28:9c:7a:40:dc:54:74:72: ae:26:fd:9f:5b:cd:68:aa:ed:f9:17:8a:53:a8:99:42:ae:e1: ba:93:96:b6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUc88SIG5RELhZuDTmKb2XpVdEHsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNDExMTAxMjMzMzJaFw0yNTExMDkxMjM4MzJaMDMxMTAvBgNV BAMTKDhDRTBCQzhEMUVFOEIyM0U2MzU5RkYwMzFDQTRCNzI1MDQ5NjcwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNt7oowCiDmfKs0Sjs9MH+dFKj tBj5hLuziN6mOFcBeeE7F30nMf802qxUzuRYzdmGWL8LX05KS9hpwrkWFLzKvcbn HaPuyNVSIUCr9VYBZD7j4dnnflShoGAjZ5+kkq9ox5/8zDW7kF/oICwubsLQ25k/ AfnQhdofy6b7lj+/+X2LmpMYpNIFBGqwOvBsRfQzgGMs8gP5NcJj+FdYYJk0Ech4 ISJqgw8xBY2VqZpnAdiUn9PyZnczX4MeQVvlT6j6T43VGQ8EweFsF9yOq8BhJEZL UCFRAVHwxC7Xp5X42T4ZI1KaMtdeISsmpMpT7iA1N71a1wQ9a7Rey494yYhPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjOC8jR7osj5jWf8DHKS3JQSWcIkwHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2Nzg2MGUzLTZhZDgtNDdhNS05 NGMwLTkzZmZkMjQ3Mjg2NS8wLzMxMzYzMDJlMzIzNTJlMzEzMTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBlzMA0GCSqG SIb3DQEBCwUAA4IBAQBiJbPa+2y3lRBYtC9Le+Tsw6xSnJc9EZ797mpERscUPXS0 vUNOHltcO+IXeWRX66OOmMhbqJ7QomdcZet1H+NCj1UBv8hD65IzynlBB02tXd0a gAsV78Qrh7heQydYvrUH7zP6U6wTW72WfuJE22dcE7fR4Aosy/UxJ+In/I2nk0bu VgoIVvEB+G46eAYX/1SDPmHRrg+N3Dd2jqQl6h/UGYVOtsmBFr1F7rc3AtBJcxY7 OUG6KKs/aqLY/anSiaR8sq8zgq13C72kE+NEjbdqe6qwZgx9fIOkLpsHalcc58LM KJx6QNxUdHKuJv2fW81oqu35F4pTqJlCruG6k5a2 -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org