$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137342e302f32332d3233203d3e20313533303733.roa File: 3136302e32352e3137342e302f32332d3233203d3e20313533303733.roa (raw, json) Hash identifier: cFwSaadqVEmvV99RTCy+V4lO3VUqzOknd+W4cZk592U= Subject key identifier: E7:45:E7:C5:1F:19:07:4C:92:1B:0D:35:0B:68:43:86:84:D7:5C:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 3962D3EC57F6F4C0ADFA71619F72DC319B68CFB4 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137342e302f32332d3233203d3e20313533303733.roa Signing time: Fri 19 Jul 2024 03:25:19 +0000 ROA not before: Fri 19 Jul 2024 03:20:19 +0000 ROA not after: Fri 18 Jul 2025 03:25:19 +0000 asID: 153073 IP address blocks: 160.25.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:62:d3:ec:57:f6:f4:c0:ad:fa:71:61:9f:72:dc:31:9b:68:cf:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Jul 19 03:20:19 2024 GMT Not After : Jul 18 03:25:19 2025 GMT Subject: CN=E745E7C51F19074C921B0D350B68438684D75C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:1f:60:1a:13:b8:ce:b3:b1:d5:65:e6:dc: 44:e6:6c:76:a9:82:32:f9:d1:2d:4d:2f:1f:24:f5: c8:d2:c9:83:1d:35:de:b9:91:6e:5f:5e:1f:6d:29: 3c:47:8b:ff:82:e3:6c:8d:e1:08:75:c8:f1:3a:30: 60:f2:2e:5b:4b:1c:b1:40:b7:98:48:d4:09:2a:58: 69:6f:b1:94:0e:e6:56:63:86:4d:57:69:33:1f:cb: 99:91:42:db:b9:34:f6:36:2e:fe:5f:fb:76:ff:94: cd:40:2e:7b:35:9f:b7:a0:0f:ef:71:3c:79:32:c4: f1:b7:e6:f0:d9:87:63:7e:fd:9c:20:f2:bc:bb:a7: 7f:25:c6:48:05:72:e3:5e:66:71:b9:be:dc:30:34: 99:ab:76:90:96:eb:16:e0:6e:3f:1e:e7:4b:5d:43: 3d:f2:81:ee:9d:7d:78:78:3d:34:f4:f1:c2:02:c9: 7a:36:17:5a:30:c6:b3:eb:50:fc:2f:76:83:6f:26: 5d:25:8f:af:ed:46:7f:72:66:65:9a:59:98:1c:86: 23:a9:e7:8b:04:32:57:f8:a5:78:c4:e8:fa:9a:2f: 89:ee:56:a5:20:2d:09:6d:b4:cb:34:34:d5:29:4f: 92:f0:f6:1d:df:50:6e:ba:83:ba:b7:55:77:83:7a: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:45:E7:C5:1F:19:07:4C:92:1B:0D:35:0B:68:43:86:84:D7:5C:93 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137342e302f32332d3233203d3e20313533303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.174.0/23 Signature Algorithm: sha256WithRSAEncryption a5:d3:1d:4d:5e:0e:fd:68:18:0f:98:5f:c0:bb:72:4a:70:f5: 37:38:60:44:c6:ce:9b:85:b1:70:48:9e:48:1a:1d:69:77:be: cf:90:c1:16:91:ac:d7:d9:9e:0d:ad:03:cd:02:60:91:e7:f0: 9d:49:ee:4d:b8:f8:7e:e9:35:ea:a3:c8:97:bd:0c:64:f9:6f: b7:a8:c1:f6:5a:d2:c3:e0:b2:3a:81:c2:5a:21:ca:7e:d2:95: 0f:60:ab:95:a7:7b:b8:e2:df:77:31:b9:1a:0e:33:b5:f0:4c: 81:8c:e6:64:12:35:dc:9f:e6:bd:5e:e3:6f:cb:50:8a:d9:32: fd:07:12:84:19:c7:ff:9d:f0:96:8b:76:38:1c:2e:35:9e:27: 66:b1:ba:77:c8:b5:e4:79:a6:69:d3:06:98:bf:42:9c:5a:3a: 94:f7:82:80:ae:37:3d:fb:fb:14:02:d2:f0:0d:77:2a:b1:51: 80:2c:12:be:a1:c6:6e:8e:13:bf:a5:80:96:b9:d5:12:ec:af: 96:a4:a5:ee:1b:bd:ca:fd:fa:d3:b7:53:da:eb:33:5c:fa:c9: 33:72:18:c2:a1:4d:0a:9e:90:04:81:13:a9:52:c2:88:ab:af: 4f:5d:e7:00:c5:43:20:51:d7:96:7f:8d:46:45:57:6e:a6:6e: 70:69:fd:aa -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOWLT7Ff29MCt+nFhn3LcMZtoz7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNDA3MTkwMzIwMTlaFw0yNTA3MTgwMzI1MTlaMDMxMTAvBgNV BAMTKEU3NDVFN0M1MUYxOTA3NEM5MjFCMEQzNTBCNjg0Mzg2ODRENzVDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXh9gGhO4zrOx1WXm3ETmbHap gjL50S1NLx8k9cjSyYMdNd65kW5fXh9tKTxHi/+C42yN4Qh1yPE6MGDyLltLHLFA t5hI1AkqWGlvsZQO5lZjhk1XaTMfy5mRQtu5NPY2Lv5f+3b/lM1ALns1n7egD+9x PHkyxPG35vDZh2N+/Zwg8ry7p38lxkgFcuNeZnG5vtwwNJmrdpCW6xbgbj8e50td Qz3yge6dfXh4PTT08cICyXo2F1owxrPrUPwvdoNvJl0lj6/tRn9yZmWaWZgchiOp 54sEMlf4pXjE6PqaL4nuVqUgLQlttMs0NNUpT5Lw9h3fUG66g7q3VXeDenGdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU50XnxR8ZB0ySGw01C2hDhoTXXJMwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNzJlZTNjLWUxODAtNDI5Ni05 ZGFkLTk1MDBlZmQ5NDg5MC8wLzMxMzYzMDJlMzIzNTJlMzEzNzM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMzMzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBmuMA0GCSqG SIb3DQEBCwUAA4IBAQCl0x1NXg79aBgPmF/Au3JKcPU3OGBExs6bhbFwSJ5IGh1p d77PkMEWkazX2Z4NrQPNAmCR5/CdSe5NuPh+6TXqo8iXvQxk+W+3qMH2WtLD4LI6 gcJaIcp+0pUPYKuVp3u44t93MbkaDjO18EyBjOZkEjXcn+a9XuNvy1CK2TL9BxKE Gcf/nfCWi3Y4HC41nidmsbp3yLXkeaZp0waYv0KcWjqU94KArjc9+/sUAtLwDXcq sVGALBK+ocZujhO/pYCWudUS7K+WpKXuG73K/frTt1Pa6zNc+skzchjCoU0KnpAE gROpUsKIq69PXecAxUMgUdeWf41GRVdupm5waf2q -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:29 2024 by rpki-client on console-ams.rpki-client.org