$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33312e302f32342d3234203d3e20313532373938.roa File: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (raw, json) Hash identifier: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk= Subject key identifier: 29:CD:A0:88:88:B8:A8:FA:B5:95:B5:82:8C:4A:B8:A2:C4:13:36:D9 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 5827E38D82F1CE174911C38FCC697B098C296938 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33312e302f32342d3234203d3e20313532373938.roa Signing time: Thu 17 Oct 2024 09:02:50 +0000 ROA not before: Thu 17 Oct 2024 08:57:50 +0000 ROA not after: Thu 16 Oct 2025 09:02:50 +0000 asID: 152798 IP address blocks: 160.22.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 13:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:27:e3:8d:82:f1:ce:17:49:11:c3:8f:cc:69:7b:09:8c:29:69:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Oct 17 08:57:50 2024 GMT Not After : Oct 16 09:02:50 2025 GMT Subject: CN=29CDA08888B8A8FAB595B5828C4AB8A2C41336D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:0a:76:23:32:96:6d:9c:26:da:ca:94:af: 22:62:b3:29:05:f9:cb:9a:1f:8b:25:3a:c0:37:b3: 28:b1:68:71:fd:8e:67:5c:f1:8b:ab:9d:33:6a:12: d5:bf:ca:e9:8b:a3:34:a4:c2:39:02:7b:42:d0:4e: cd:3e:cf:9a:81:64:d1:91:de:ac:b3:31:ed:8c:37: 11:42:ba:44:92:a3:97:8f:0b:43:f2:50:12:48:63: 18:38:84:56:91:5a:fb:81:32:24:78:cd:26:34:07: c6:c4:59:ae:ff:67:94:6c:0e:97:9f:54:56:8a:1f: 35:99:1c:f1:0f:a1:a3:51:0b:79:79:95:08:65:56: 66:d7:8e:f7:c4:93:66:fd:e6:29:9b:e5:12:60:54: 12:89:20:58:23:c1:f0:9c:28:04:b7:c5:5c:23:ea: a3:65:e1:e2:99:c0:e9:75:63:fc:e9:38:97:ce:14: 49:d8:72:9d:b1:18:a9:e7:96:7a:51:e6:0d:58:70: 22:75:f4:9b:cf:e0:7c:af:58:c2:0a:d6:b3:dd:44: b3:58:6b:ca:3a:9b:7a:d3:9e:75:d8:34:e1:86:a4: 43:a6:98:4b:41:99:54:33:cf:f5:9d:05:e4:44:f4: 53:c3:a8:90:02:4b:b1:43:04:bb:76:97:2e:08:1a: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CD:A0:88:88:B8:A8:FA:B5:95:B5:82:8C:4A:B8:A2:C4:13:36:D9 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33312e302f32342d3234203d3e20313532373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.31.0/24 Signature Algorithm: sha256WithRSAEncryption c3:44:d4:63:4c:10:37:81:f8:0a:b3:44:15:f2:e3:57:62:80: 57:f9:87:fd:68:a4:4d:de:79:f2:51:d6:5b:24:35:62:22:b9: 56:bd:b0:ac:32:57:b5:ab:ff:63:d4:ec:7a:f8:8d:18:a5:e1: b2:6e:26:d3:07:f9:11:97:29:66:f6:30:29:c8:35:35:4f:3d: f8:18:1c:bd:5e:05:96:5a:51:5b:03:ae:24:55:03:bb:dc:ac: dc:ff:62:14:f2:10:a2:e4:c3:b1:f7:e9:3e:a2:f5:f8:0b:b9: b7:c8:eb:ab:05:0f:63:ac:b5:e6:f2:5a:be:3a:23:cd:61:3f: 72:f6:fe:46:11:ed:b1:00:cf:f7:62:d2:da:47:d2:62:7e:2f: 88:43:8b:e8:f9:0e:1a:7f:37:3a:84:5f:d3:c0:9c:bc:51:27: 0b:82:de:e2:93:42:04:d4:2d:59:97:3a:93:e1:73:fb:0f:9a: 9e:91:a6:44:8c:2f:fc:f2:42:96:30:1f:33:53:e4:8b:d1:05: 4f:0d:ad:f7:c4:0b:ec:9e:f3:f6:80:23:47:37:81:20:d8:fe: e5:ad:67:2b:b1:59:cf:68:f7:ae:d5:44:70:6d:18:87:4f:3b: b2:5b:75:49:1a:23:fc:37:8c:fa:75:c4:97:5d:dd:5f:02:aa: f8:39:9d:b7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWCfjjYLxzhdJEcOPzGl7CYwpaTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNDEwMTcwODU3NTBaFw0yNTEwMTYwOTAyNTBaMDMxMTAvBgNV BAMTKDI5Q0RBMDg4ODhCOEE4RkFCNTk1QjU4MjhDNEFCOEEyQzQxMzM2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlzgp2IzKWbZwm2sqUryJisykF +cuaH4slOsA3syixaHH9jmdc8YurnTNqEtW/yumLozSkwjkCe0LQTs0+z5qBZNGR 3qyzMe2MNxFCukSSo5ePC0PyUBJIYxg4hFaRWvuBMiR4zSY0B8bEWa7/Z5RsDpef VFaKHzWZHPEPoaNRC3l5lQhlVmbXjvfEk2b95imb5RJgVBKJIFgjwfCcKAS3xVwj 6qNl4eKZwOl1Y/zpOJfOFEnYcp2xGKnnlnpR5g1YcCJ19JvP4HyvWMIK1rPdRLNY a8o6m3rTnnXYNOGGpEOmmEtBmVQzz/WdBeRE9FPDqJACS7FDBLt2ly4IGvIXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUKc2giIi4qPq1lbWCjEq4osQTNtkwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1ZWZjNDEzLTI3MDktNDgzZS1h MzE0LWM1ZDA2NjNkZjkzMi8wLzMxMzYzMDJlMzIzMjJlMzMzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWHzANBgkqhkiG 9w0BAQsFAAOCAQEAw0TUY0wQN4H4CrNEFfLjV2KAV/mH/WikTd558lHWWyQ1YiK5 Vr2wrDJXtav/Y9TseviNGKXhsm4m0wf5EZcpZvYwKcg1NU89+BgcvV4FllpRWwOu JFUDu9ys3P9iFPIQouTDsffpPqL1+Au5t8jrqwUPY6y15vJavjojzWE/cvb+RhHt sQDP92LS2kfSYn4viEOL6PkOGn83OoRf08CcvFEnC4Le4pNCBNQtWZc6k+Fz+w+a npGmRIwv/PJCljAfM1Pki9EFTw2t98QL7J7z9oAjRzeBINj+5a1nK7FZz2j3rtVE cG0Yh087slt1SRoj/DeM+nXEl13dXwKq+Dmdtw== -----END CERTIFICATE-----Generated at Thu Nov 28 05:34:24 2024 by rpki-client on console-ams.rpki-client.org