$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa File: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (raw, json) Hash identifier: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ= Subject key identifier: 13:72:D9:82:96:C8:87:22:AB:5A:54:74:E3:7A:DD:34:2E:A1:B6:AB Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 346D6E07F26EB8A70C2157E9CE7908389FD046D1 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa Signing time: Wed 05 Feb 2025 06:41:37 +0000 ROA not before: Wed 05 Feb 2025 06:36:37 +0000 ROA not after: Wed 04 Feb 2026 06:41:37 +0000 asID: 152764 IP address blocks: 160.19.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 22:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6d:6e:07:f2:6e:b8:a7:0c:21:57:e9:ce:79:08:38:9f:d0:46:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Feb 5 06:36:37 2025 GMT Not After : Feb 4 06:41:37 2026 GMT Subject: CN=1372D98296C88722AB5A5474E37ADD342EA1B6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:06:1a:0d:b7:2b:ae:87:d7:d2:01:25:48: dd:1a:92:5d:46:82:20:5a:b3:ca:27:0e:58:88:98: ef:c8:39:27:dd:69:d5:d0:39:7f:52:52:77:a9:62: 88:58:08:27:ef:95:ca:3d:c3:fc:8d:b5:b1:99:31: 3c:e0:1f:ec:4c:e0:62:e2:58:a6:f0:4d:4f:83:06: 46:20:ae:ea:77:d9:f1:55:62:aa:ae:e8:42:03:ee: 59:f6:d8:c6:6d:99:cc:46:a2:51:fe:2e:40:80:20: 39:f1:92:7d:09:02:13:84:35:52:7f:3a:ba:84:6f: 27:26:e4:e8:be:67:66:07:3d:da:ce:36:07:3b:1c: 56:39:a3:6a:9d:99:46:7d:c0:84:47:da:39:4b:b8: 36:37:a0:28:69:8d:3c:ac:2c:2c:91:63:4a:a5:6e: e1:e4:b0:48:b4:31:a7:33:82:4e:27:7f:6e:c0:da: 13:d5:40:57:5d:81:1a:f9:19:8c:79:70:d8:b0:1d: 6c:6d:47:38:e9:2a:53:4c:11:93:51:e8:00:d9:7f: ff:43:6f:d7:2f:51:cf:3d:69:12:13:7c:77:e5:29: 4e:26:16:04:d8:1d:9f:17:df:40:c4:0f:21:88:b0: d2:54:6e:f6:59:0b:d1:ea:78:7b:74:9e:48:63:38: 8c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:72:D9:82:96:C8:87:22:AB:5A:54:74:E3:7A:DD:34:2E:A1:B6:AB X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.206.0/24 Signature Algorithm: sha256WithRSAEncryption 63:95:56:df:7d:29:b7:12:5b:f8:ad:dd:36:57:41:e1:7b:ee: 5c:c1:6a:a2:c7:a3:2a:c7:32:6a:d1:6c:8a:64:b1:47:b5:0b: a2:ed:eb:25:a7:f9:48:ce:35:07:88:5b:40:b8:07:95:97:85: 31:19:7d:20:a7:c9:15:91:6a:de:2a:60:a1:6f:e6:44:fd:30: 1f:d6:4b:80:e1:0d:88:f4:e1:41:06:ea:7c:7f:82:59:bf:ec: cf:a2:12:00:c4:65:00:82:d8:9b:4e:a1:6e:85:0b:98:1d:3e: 2c:dc:a5:eb:dd:1a:e8:44:06:83:86:06:98:b0:d5:8b:18:e6: ef:b1:b9:78:4c:51:56:2b:74:e5:8e:36:51:73:fa:9b:dc:ee: 7c:9a:5c:6d:de:37:3f:08:ec:d5:67:b7:e5:b3:bb:be:95:76: b3:84:f2:02:49:e1:99:5d:66:77:c6:8d:55:4c:e2:a6:0d:cb: 49:4f:d8:ff:bc:04:71:70:c5:18:ff:f5:b0:c8:06:82:08:86: 07:7c:07:3f:bc:8c:89:06:01:d2:27:45:67:d2:bf:33:9b:63: 17:e9:a6:21:1d:6f:d7:39:93:f4:08:0d:5b:46:b1:90:9e:98: 9f:03:95:bf:d2:fc:b9:ad:d5:4e:56:c2:74:02:b3:11:85:84: 8e:07:22:f7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNG1uB/JuuKcMIVfpznkIOJ/QRtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTAyMDUwNjM2MzdaFw0yNjAyMDQwNjQxMzdaMDMxMTAvBgNV BAMTKDEzNzJEOTgyOTZDODg3MjJBQjVBNTQ3NEUzN0FERDM0MkVBMUI2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDgYaDbcrrofX0gElSN0akl1G giBas8onDliImO/IOSfdadXQOX9SUnepYohYCCfvlco9w/yNtbGZMTzgH+xM4GLi WKbwTU+DBkYgrup32fFVYqqu6EID7ln22MZtmcxGolH+LkCAIDnxkn0JAhOENVJ/ OrqEbycm5Oi+Z2YHPdrONgc7HFY5o2qdmUZ9wIRH2jlLuDY3oChpjTysLCyRY0ql buHksEi0Maczgk4nf27A2hPVQFddgRr5GYx5cNiwHWxtRzjpKlNMEZNR6ADZf/9D b9cvUc89aRITfHflKU4mFgTYHZ8X30DEDyGIsNJUbvZZC9HqeHt0nkhjOIyzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUE3LZgpbIhyKrWlR043rdNC6htqswHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiMmE5MTZhLWFkMjItNDk3OS1i ZTQzLTk1MWM3NmYyZjkyMC8wLzMxMzYzMDJlMzEzOTJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBPOMA0GCSqG SIb3DQEBCwUAA4IBAQBjlVbffSm3Elv4rd02V0Hhe+5cwWqix6MqxzJq0WyKZLFH tQui7eslp/lIzjUHiFtAuAeVl4UxGX0gp8kVkWreKmChb+ZE/TAf1kuA4Q2I9OFB Bup8f4JZv+zPohIAxGUAgtibTqFuhQuYHT4s3KXr3RroRAaDhgaYsNWLGObvsbl4 TFFWK3TljjZRc/qb3O58mlxt3jc/COzVZ7fls7u+lXazhPICSeGZXWZ3xo1VTOKm DctJT9j/vARxcMUY//WwyAaCCIYHfAc/vIyJBgHSJ0Vn0r8zm2MX6aYhHW/XOZP0 CA1bRrGQnpifA5W/0vy5rdVOVsJ0ArMRhYSOByL3 -----END CERTIFICATE-----Generated at Wed Feb 19 22:27:08 2025 by rpki-client