$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa File: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (raw, json) Hash identifier: uR53pbwW9P8hqVOeVN0hgPpqYO4PeD2g8LQ/VFiv7kA= Subject key identifier: 26:82:41:F8:66:8B:EA:D9:50:30:A6:0E:A4:15:3B:33:A8:E2:59:BA Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374 Certificate serial: 5300201EA655722660C9C9E7945D945FEFB907F5 Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa Signing time: Fri 14 Jun 2024 05:45:33 +0000 ROA not before: Fri 14 Jun 2024 05:40:33 +0000 ROA not after: Fri 13 Jun 2025 05:45:33 +0000 asID: 152788 IP address blocks: 160.19.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 08:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:00:20:1e:a6:55:72:26:60:c9:c9:e7:94:5d:94:5f:ef:b9:07:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374 Validity Not Before: Jun 14 05:40:33 2024 GMT Not After : Jun 13 05:45:33 2025 GMT Subject: CN=268241F8668BEAD95030A60EA4153B33A8E259BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0e:b7:d7:20:11:f5:57:fb:14:58:f3:3c:3d: b2:95:60:ed:49:6c:ef:5b:fe:09:09:e1:ca:8b:c8: c3:3f:df:d8:ba:5c:06:4c:7f:69:a8:1f:13:b5:de: 4a:3d:a4:40:df:d8:0a:7c:91:40:b2:f9:78:78:64: 4e:e9:10:15:69:ec:95:31:c6:85:47:de:82:24:10: f0:0a:a5:2c:1c:84:11:9c:22:ac:dc:d9:4a:e6:6f: a7:48:51:9f:d4:29:86:3e:af:1e:53:d8:78:ed:a5: 20:fa:83:11:94:78:a1:fa:cb:95:69:1e:ee:43:e3: 74:56:49:9b:fb:b7:16:2e:61:d2:82:83:0a:64:41: d4:c1:d5:a3:e0:14:f5:e1:5b:bb:32:a5:81:6c:1e: e3:54:92:5d:86:25:da:bb:91:85:ea:f5:b9:3f:7b: 42:c6:2e:f8:92:c7:3d:6a:7b:4d:94:f1:fa:b0:b5: 8d:65:40:1d:b0:02:cc:f3:6f:34:d8:64:6b:f1:4f: ee:ee:3b:2b:d6:4e:18:f6:9d:af:2b:1f:2b:26:c8: 74:6d:f9:84:9c:48:e9:a0:19:93:a7:82:f3:5d:e5: e7:8f:ce:74:ef:e6:52:9c:4a:3e:58:48:16:56:98: 44:0c:83:2f:66:a3:30:13:df:7a:ae:ae:ae:a9:9f: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:82:41:F8:66:8B:EA:D9:50:30:A6:0E:A4:15:3B:33:A8:E2:59:BA X509v3 Authority Key Identifier: keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.144.0/23 Signature Algorithm: sha256WithRSAEncryption 35:7a:01:7f:b6:d0:6d:17:54:27:15:bb:89:5f:64:88:6a:3e: e1:a9:6a:bb:81:b3:0f:00:85:9f:2c:eb:56:42:8a:88:11:b5: 1e:5a:05:8f:b2:b5:26:27:cb:28:c8:86:ff:84:6b:94:d8:ae: ad:15:45:ce:24:fb:4c:4f:6b:9a:60:5f:02:ea:df:d2:a6:0b: ad:2c:f5:cc:29:2b:f7:c1:43:d2:3f:73:dc:a8:71:d7:9a:d8: 1e:ab:de:8f:f3:59:85:2c:25:73:5c:14:d1:53:db:28:a2:bb: d0:17:62:3e:30:d2:17:15:04:07:86:5f:3b:a6:88:93:1b:de: a4:b4:7b:ec:14:25:7b:c4:a1:dc:07:c5:53:78:be:d6:22:ff: 4a:f9:b6:ae:92:11:e0:3f:0a:bf:f1:98:b9:68:69:78:04:8a: a9:7c:8c:97:32:22:fe:6c:d5:ec:72:d4:2c:68:f3:5e:b1:ba: a4:a7:96:37:8f:a8:df:66:d0:8d:af:e8:2f:6a:b4:0b:65:aa: ef:e6:64:09:13:f9:5e:63:9a:03:1b:ae:7d:6c:52:87:32:c5: 52:a0:b5:72:e7:44:52:9c:a2:ae:d7:56:ee:8a:ef:d8:a4:36: a8:8c:34:9b:86:cf:8f:e0:46:fe:b4:79:05:08:31:2e:19:89: 36:9e:86:d2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUwAgHqZVciZgycnnlF2UX++5B/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0 QTQzMTM3NDAeFw0yNDA2MTQwNTQwMzNaFw0yNTA2MTMwNTQ1MzNaMDMxMTAvBgNV BAMTKDI2ODI0MUY4NjY4QkVBRDk1MDMwQTYwRUE0MTUzQjMzQThFMjU5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDrfXIBH1V/sUWPM8PbKVYO1J bO9b/gkJ4cqLyMM/39i6XAZMf2moHxO13ko9pEDf2Ap8kUCy+Xh4ZE7pEBVp7JUx xoVH3oIkEPAKpSwchBGcIqzc2Urmb6dIUZ/UKYY+rx5T2HjtpSD6gxGUeKH6y5Vp Hu5D43RWSZv7txYuYdKCgwpkQdTB1aPgFPXhW7sypYFsHuNUkl2GJdq7kYXq9bk/ e0LGLviSxz1qe02U8fqwtY1lQB2wAszzbzTYZGvxT+7uOyvWThj2na8rHysmyHRt +YScSOmgGZOngvNd5eePznTv5lKcSj5YSBZWmEQMgy9mozAT33qurq6pn1CnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJoJB+GaL6tlQMKYOpBU7M6jiWbowHwYDVR0j BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz MTM3NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0MGJkNmU0LWI0ZmItNGY0OC1i ODNhLWFjYjhmMmQ3NDU4My8wLzMxMzYzMDJlMzEzOTJlMzEzNDM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBOQMA0GCSqG SIb3DQEBCwUAA4IBAQA1egF/ttBtF1QnFbuJX2SIaj7hqWq7gbMPAIWfLOtWQoqI EbUeWgWPsrUmJ8soyIb/hGuU2K6tFUXOJPtMT2uaYF8C6t/SpgutLPXMKSv3wUPS P3PcqHHXmtgeq96P81mFLCVzXBTRU9soorvQF2I+MNIXFQQHhl87poiTG96ktHvs FCV7xKHcB8VTeL7WIv9K+baukhHgPwq/8Zi5aGl4BIqpfIyXMiL+bNXsctQsaPNe sbqkp5Y3j6jfZtCNr+gvarQLZarv5mQJE/leY5oDG659bFKHMsVSoLVy50RSnKKu 11buiu/YpDaojDSbhs+P4Eb+tHkFCDEuGYk2nobS -----END CERTIFICATE-----Generated at Sun Jun 30 04:07:03 2024 by rpki-client on console-fra.rpki-client.org