$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa File: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (raw, json) Hash identifier: wfBLV7crHpRvOvrkP8sO7cSqml5P6MQ5e6U//U3tlqI= Subject key identifier: 58:4A:95:EF:40:71:81:C0:C8:75:5D:0E:36:E8:26:B1:7D:4B:88:40 Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 484E4E05B269174100E99558520B2650188EB1B6 Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa Signing time: Wed 03 Apr 2024 02:52:21 +0000 ROA not before: Wed 03 Apr 2024 02:47:21 +0000 ROA not after: Wed 02 Apr 2025 02:52:21 +0000 asID: 141120 IP address blocks: 157.20.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4e:4e:05:b2:69:17:41:00:e9:95:58:52:0b:26:50:18:8e:b1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Apr 3 02:47:21 2024 GMT Not After : Apr 2 02:52:21 2025 GMT Subject: CN=584A95EF407181C0C8755D0E36E826B17D4B8840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:ed:3e:70:0c:7f:7e:8b:56:7c:bd:a9:3e: fb:02:4c:d7:8e:67:39:c8:19:17:09:a5:10:f1:b5: 19:0b:57:29:ff:77:d0:a4:62:07:ef:ac:84:31:59: f1:e9:31:74:36:fb:53:40:5f:23:98:45:80:40:42: 65:d9:fd:6f:8e:c6:97:d9:f1:7a:04:ec:ab:18:38: e6:e7:04:39:0d:ef:08:a8:8b:4e:b5:04:fe:4b:e9: bd:0b:8c:fa:c0:58:b5:9d:38:ed:2d:89:29:71:e9: 81:cb:29:93:1b:c3:f1:5a:7a:5e:ce:a4:84:5e:85: 23:cb:8d:6b:9c:d4:36:5c:f5:e1:2e:ab:3b:bc:51: 8e:5a:01:11:b9:9f:1a:d3:2a:0f:05:0a:a3:f2:bd: e0:2b:d2:c0:98:4c:eb:39:20:bd:80:b6:3e:ba:62: d0:64:cc:b0:db:01:6e:27:86:1f:d0:19:e8:56:ea: 9e:b9:d2:55:85:30:4c:95:48:b1:09:30:1d:16:e5: 83:60:60:de:7c:09:ba:47:ff:94:b1:81:be:d9:9a: 3e:fa:ee:8e:ad:86:f9:b5:85:a9:6f:d6:e9:15:fe: 04:d1:0d:61:d3:51:b5:cb:b0:cd:db:b7:99:f3:d5: f4:bf:90:02:04:75:6c:cd:5c:00:8d:8f:39:07:a8: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4A:95:EF:40:71:81:C0:C8:75:5D:0E:36:E8:26:B1:7D:4B:88:40 X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.159.0/24 Signature Algorithm: sha256WithRSAEncryption 30:c6:a8:ac:46:0b:1f:ed:f4:4c:48:f2:5e:c9:d1:dd:2f:fa: 82:53:3b:74:b7:49:b7:10:0f:9e:6d:dd:b3:b7:3f:47:80:3b: 56:74:e9:ae:eb:35:da:29:8e:f0:5c:14:27:96:2e:ae:45:cf: 67:68:54:98:3f:70:d3:ba:27:79:bb:e4:ba:f1:80:11:ab:1e: d1:82:c1:19:90:f6:8f:be:3e:80:3b:96:da:a4:b2:1a:dc:22: 4f:16:5f:38:24:d5:2b:9d:f4:6d:11:2c:f8:f4:1e:13:a9:c3: 14:4c:e5:32:a4:69:6f:b4:66:36:f5:ef:b9:56:19:38:35:e5: 39:32:5d:43:fb:46:11:66:d5:cd:ad:f6:57:78:6a:24:13:5a: d3:b8:e8:b4:b1:0c:99:9f:ae:9a:c7:98:b9:86:fc:f1:85:e9: 3d:88:cb:22:b7:c6:b9:56:0a:a2:ca:30:43:e4:af:f7:1d:3c: b8:0a:d5:1f:c4:97:c4:21:97:67:33:62:81:15:8d:c5:09:8e: 99:31:31:3f:d5:ea:20:c0:31:9c:52:ae:75:e0:2d:e6:c2:9a: 87:98:02:29:d2:43:36:8f:7d:17:ff:e8:1c:42:4a:de:39:19: 63:40:30:a1:bc:22:16:1a:93:2d:05:38:e0:0f:e1:62:bc:d9: 82:e5:10:c7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSE5OBbJpF0EA6ZVYUgsmUBiOsbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNDA0MDMwMjQ3MjFaFw0yNTA0MDIwMjUyMjFaMDMxMTAvBgNV BAMTKDU4NEE5NUVGNDA3MTgxQzBDODc1NUQwRTM2RTgyNkIxN0Q0Qjg4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPu0+cAx/fotWfL2pPvsCTNeO ZznIGRcJpRDxtRkLVyn/d9CkYgfvrIQxWfHpMXQ2+1NAXyOYRYBAQmXZ/W+OxpfZ 8XoE7KsYOObnBDkN7wioi061BP5L6b0LjPrAWLWdOO0tiSlx6YHLKZMbw/Fael7O pIRehSPLjWuc1DZc9eEuqzu8UY5aARG5nxrTKg8FCqPyveAr0sCYTOs5IL2Atj66 YtBkzLDbAW4nhh/QGehW6p650lWFMEyVSLEJMB0W5YNgYN58CbpH/5Sxgb7Zmj76 7o6thvm1halv1ukV/gTRDWHTUbXLsM3bt5nz1fS/kAIEdWzNXACNjzkHqJEbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWEqV70BxgcDIdV0ONugmsX1LiEAwHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxNTlhMzYyLTk1MGMtNDVjMi1h ZWNjLTgyYjIxNGJjZTQ3NC8wLzMxMzUzNzJlMzIzMDJlMzEzNTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSfMA0GCSqG SIb3DQEBCwUAA4IBAQAwxqisRgsf7fRMSPJeydHdL/qCUzt0t0m3EA+ebd2ztz9H gDtWdOmu6zXaKY7wXBQnli6uRc9naFSYP3DTuid5u+S68YARqx7RgsEZkPaPvj6A O5bapLIa3CJPFl84JNUrnfRtESz49B4TqcMUTOUypGlvtGY29e+5Vhk4NeU5Ml1D +0YRZtXNrfZXeGokE1rTuOi0sQyZn66ax5i5hvzxhek9iMsit8a5VgqiyjBD5K/3 HTy4CtUfxJfEIZdnM2KBFY3FCY6ZMTE/1eogwDGcUq514C3mwpqHmAIp0kM2j30X /+gcQkreORljQDChvCIWGpMtBTjgD+FivNmC5RDH -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:20 2024 by rpki-client on console-ams.rpki-client.org