$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa File: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (raw, json) Hash identifier: xeHbC/VCkuQ0ewa0mKT4AWB4+3P9LD9U12PZtoBDe2A= Subject key identifier: 04:99:05:96:CE:32:04:84:DA:BA:FC:5E:D1:8D:CF:91:5A:05:04:1B Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 4423AE79651D8642ACBEF71117FD73CDCB8F8D72 Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa Signing time: Sun 21 Jul 2024 11:34:23 +0000 ROA not before: Sun 21 Jul 2024 11:29:23 +0000 ROA not after: Sun 20 Jul 2025 11:34:23 +0000 asID: 152808 IP address blocks: 160.22.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:23:ae:79:65:1d:86:42:ac:be:f7:11:17:fd:73:cd:cb:8f:8d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Jul 21 11:29:23 2024 GMT Not After : Jul 20 11:34:23 2025 GMT Subject: CN=04990596CE320484DABAFC5ED18DCF915A05041B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:1d:35:85:d6:bb:3e:8c:33:17:27:29:be: c6:33:28:17:d6:70:d2:42:da:67:62:38:c8:be:d5: fb:15:7f:f7:c5:08:71:05:ec:dd:72:f7:9f:bc:50: 94:e1:17:f1:c2:0d:bc:89:55:2f:46:c7:b1:74:7a: 29:2c:61:20:f8:87:60:f8:3b:d9:d2:b8:a3:1d:71: cf:19:8b:9c:59:58:ce:8a:03:23:0d:ae:82:20:0b: ea:90:f1:1d:b4:8c:2b:89:88:5a:ab:ff:6a:b0:a3: e7:ff:25:b7:60:4a:00:fa:db:8d:67:88:98:32:15: 65:48:a8:11:6a:d6:b7:5e:f4:12:2f:7c:15:29:c9: a6:12:fb:85:7c:59:61:7c:fe:94:e6:77:a0:81:32: d7:19:0b:73:83:7b:24:a8:62:4a:54:b4:9b:e2:fd: d1:d0:6e:ab:d7:f4:80:e8:b9:8a:73:1b:e2:0e:41: f6:c7:2f:35:ed:f1:bd:48:2f:b1:14:38:65:eb:6e: 49:82:b1:eb:5f:89:0d:89:d4:1e:09:f4:c6:c1:5c: 17:5a:1a:13:75:e0:97:20:63:a0:da:28:f9:c5:8a: 45:5e:d4:d7:ee:2b:10:db:9e:fe:ec:4d:f6:5e:50: 78:53:a3:08:a0:37:f5:bf:c9:b1:ed:82:2d:19:74: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:99:05:96:CE:32:04:84:DA:BA:FC:5E:D1:8D:CF:91:5A:05:04:1B X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.100.0/24 Signature Algorithm: sha256WithRSAEncryption 69:73:ba:17:b6:cc:63:69:68:d8:c1:35:c1:7b:fa:f3:87:5c: fa:be:a2:04:d3:92:88:c4:d2:b6:4a:4c:07:14:9d:19:f8:ee: 53:fd:ac:8b:45:ba:9d:01:7a:8f:0f:0f:99:cd:6e:e1:1c:5e: 07:55:2d:3a:f1:e6:ac:43:ca:74:d0:83:5c:45:57:1f:0c:e1: 31:2d:2d:e5:eb:53:73:75:f4:50:fe:ec:5a:38:70:ed:7c:7b: e6:25:bf:c1:21:d3:44:a5:c1:57:69:e0:39:dd:32:fd:0e:26: 0e:4f:75:39:69:2c:22:cb:4a:89:8c:07:af:73:e6:12:27:47: d3:2b:ae:a0:df:8a:b8:07:4f:7b:3f:ee:d2:6a:cc:2e:20:81: 86:d7:a1:1f:9c:08:f3:c2:57:3f:63:d6:b2:92:96:3c:24:e7: f8:84:1a:ea:56:6b:da:ef:b1:06:fc:ce:35:20:31:a0:9a:eb: 26:8a:5a:31:25:5d:03:55:5f:1b:6a:54:26:97:a1:96:0d:54: 8a:d5:24:e8:81:b7:4e:0a:cc:f5:c0:39:80:65:47:fe:1c:6b: fb:ee:d6:6e:6c:ab:2c:f2:97:af:ad:a7:db:62:ef:5d:67:bc: e7:1a:21:16:08:3e:29:a8:19:4b:c3:2b:3d:b8:93:2d:7d:5b: f2:1c:40:99 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURCOueWUdhkKsvvcRF/1zzcuPjXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNDA3MjExMTI5MjNaFw0yNTA3MjAxMTM0MjNaMDMxMTAvBgNV BAMTKDA0OTkwNTk2Q0UzMjA0ODREQUJBRkM1RUQxOERDRjkxNUEwNTA0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZB01hda7PowzFycpvsYzKBfW cNJC2mdiOMi+1fsVf/fFCHEF7N1y95+8UJThF/HCDbyJVS9Gx7F0eiksYSD4h2D4 O9nSuKMdcc8Zi5xZWM6KAyMNroIgC+qQ8R20jCuJiFqr/2qwo+f/JbdgSgD6241n iJgyFWVIqBFq1rde9BIvfBUpyaYS+4V8WWF8/pTmd6CBMtcZC3ODeySoYkpUtJvi /dHQbqvX9IDouYpzG+IOQfbHLzXt8b1IL7EUOGXrbkmCsetfiQ2J1B4J9MbBXBda GhN14JcgY6DaKPnFikVe1NfuKxDbnv7sTfZeUHhTowigN/W/ybHtgi0ZdOFpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBJkFls4yBITauvxe0Y3PkVoFBBswHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwYThjZTZjLTgyOTAtNGI5ZC05 YWVkLTA3NTRkM2ZkOGQzMi8wLzMxMzYzMDJlMzIzMjJlMzEzMDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBZkMA0GCSqG SIb3DQEBCwUAA4IBAQBpc7oXtsxjaWjYwTXBe/rzh1z6vqIE05KIxNK2SkwHFJ0Z +O5T/ayLRbqdAXqPDw+ZzW7hHF4HVS068easQ8p00INcRVcfDOExLS3l61NzdfRQ /uxaOHDtfHvmJb/BIdNEpcFXaeA53TL9DiYOT3U5aSwiy0qJjAevc+YSJ0fTK66g 34q4B097P+7SaswuIIGG16EfnAjzwlc/Y9aykpY8JOf4hBrqVmva77EG/M41IDGg musmiloxJV0DVV8balQml6GWDVSK1STogbdOCsz1wDmAZUf+HGv77tZubKss8pev rafbYu9dZ7znGiEWCD4pqBlLwys9uJMtfVvyHECZ -----END CERTIFICATE-----Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org