$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa File: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (raw, json) Hash identifier: 5TysUWdf//ijZZADQg/kyk1hPl8L9rMcShCWekWYvss= Subject key identifier: 64:F0:D2:C0:E4:29:64:73:B8:4F:67:45:82:26:C4:DE:6E:81:CF:77 Certificate issuer: /CN=D237DEA20D73B3F216B98336BA8307D913DDB257 Certificate serial: 61AFE73AE25D6C01C0F8536D20697F5565DCB187 Authority key identifier: D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa Signing time: Fri 01 Nov 2024 06:04:24 +0000 ROA not before: Fri 01 Nov 2024 05:59:24 +0000 ROA not after: Fri 31 Oct 2025 06:04:24 +0000 asID: 152790 IP address blocks: 160.20.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:af:e7:3a:e2:5d:6c:01:c0:f8:53:6d:20:69:7f:55:65:dc:b1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D237DEA20D73B3F216B98336BA8307D913DDB257 Validity Not Before: Nov 1 05:59:24 2024 GMT Not After : Oct 31 06:04:24 2025 GMT Subject: CN=64F0D2C0E4296473B84F67458226C4DE6E81CF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:3a:f1:2e:ec:e2:f1:37:a7:9b:71:09:61: 83:aa:8a:a5:42:59:9d:bc:da:20:a1:7f:03:08:91: 5d:c9:4c:ca:a8:d7:9d:27:e3:2a:23:c6:0e:aa:86: 19:e3:27:d9:64:d1:98:6d:df:4f:20:45:04:48:d8: 23:47:06:55:c9:c7:f3:95:aa:8b:ee:7f:f4:f9:ef: ca:0d:ac:2f:a0:e0:f8:d9:b8:aa:06:6f:61:3e:38: 9d:bb:0b:3d:da:e4:d9:29:8a:aa:f4:26:11:38:78: 6a:79:84:26:7d:59:5a:78:e2:31:63:8d:d4:41:d9: 99:8e:80:99:13:d0:38:c1:d8:82:aa:bb:cf:bd:b2: 6c:b8:9e:17:dd:04:3e:5c:52:29:85:d4:b1:e7:1e: b6:7a:1c:b5:b6:0b:18:0e:5b:82:b0:ec:1f:bb:21: b7:40:7c:b0:f5:e6:95:8e:b6:60:2d:cc:94:15:b8: a3:ff:dd:e6:63:80:9c:69:15:56:65:d3:57:9a:68: f7:12:e9:4f:0d:88:1c:bc:66:ea:6c:52:9e:04:b3: ee:43:b7:28:75:38:9c:92:56:6a:0e:31:4c:2e:58: 12:e3:01:0b:2d:0f:a6:e4:0b:b4:c3:ea:e6:8a:ce: 04:78:9e:f0:b5:79:74:24:4c:e4:ea:01:0c:73:f5: 50:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F0:D2:C0:E4:29:64:73:B8:4F:67:45:82:26:C4:DE:6E:81:CF:77 X509v3 Authority Key Identifier: keyid:D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.104.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:9d:1b:a3:14:73:16:03:83:bb:d5:c5:c5:50:6f:af:59:41: d5:5a:6e:97:02:4d:18:bf:50:6f:14:e7:72:33:0d:2b:0e:1d: 41:23:99:e7:c0:67:d8:a9:f9:2d:80:8f:29:de:c8:87:a0:be: aa:4a:83:f4:45:7e:e8:34:63:bc:8c:95:c1:c2:ea:d6:d6:ae: 3d:da:3b:f1:52:fd:85:13:12:1d:e0:25:0d:e7:25:fc:ad:b2: f3:38:8d:2d:24:a6:c1:0d:35:a3:2e:87:80:c1:3c:2a:d6:c8: 23:46:ac:01:9b:58:f9:bf:f6:a6:fb:94:fb:98:6e:71:e8:6a: 46:b6:35:16:e7:ab:06:1e:ef:b2:ae:ef:7d:5c:6c:54:1d:c0: 13:59:fe:88:1c:bb:cf:70:fa:7c:66:88:2e:4a:77:e3:e3:86: 1e:d1:63:6f:54:56:04:da:3a:14:95:a7:d4:e9:7d:ea:e6:52: 0d:7d:98:68:77:ec:95:bd:8b:12:0d:6c:fe:52:03:0a:95:5f: 77:a4:e6:d5:86:c4:24:04:3c:34:e4:e2:7b:ed:fe:a7:ba:69: e0:51:18:f0:33:c9:b3:4a:be:cc:57:c8:2e:db:88:f6:54:0a: 3f:88:0b:57:4b:9e:34:e2:ee:bc:25:f1:ad:54:a1:b7:18:af: 5b:5a:c2:ec -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYa/nOuJdbAHA+FNtIGl/VWXcsYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIzN0RFQTIwRDczQjNGMjE2Qjk4MzM2QkE4MzA3RDkx M0REQjI1NzAeFw0yNDExMDEwNTU5MjRaFw0yNTEwMzEwNjA0MjRaMDMxMTAvBgNV BAMTKDY0RjBEMkMwRTQyOTY0NzNCODRGNjc0NTgyMjZDNERFNkU4MUNGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuTrxLuzi8Tenm3EJYYOqiqVC WZ282iChfwMIkV3JTMqo150n4yojxg6qhhnjJ9lk0Zht308gRQRI2CNHBlXJx/OV qovuf/T578oNrC+g4PjZuKoGb2E+OJ27Cz3a5Nkpiqr0JhE4eGp5hCZ9WVp44jFj jdRB2ZmOgJkT0DjB2IKqu8+9smy4nhfdBD5cUimF1LHnHrZ6HLW2CxgOW4Kw7B+7 IbdAfLD15pWOtmAtzJQVuKP/3eZjgJxpFVZl01eaaPcS6U8NiBy8ZupsUp4Es+5D tyh1OJySVmoOMUwuWBLjAQstD6bkC7TD6uaKzgR4nvC1eXQkTOTqAQxz9VBXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZPDSwOQpZHO4T2dFgibE3m6Bz3cwHwYDVR0j BBgwFoAU0jfeog1zs/IWuYM2uoMH2RPdslcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMC9EMjM3REVBMjBE NzNCM0YyMTZCOTgzMzZCQTgzMDdEOTEzRERCMjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDIzN0RFQTIwRDczQjNGMjE2Qjk4MzM2QkE4MzA3RDkxM0RE QjI1Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiYjVmYTRhLWJlYTYtNDY0Zi1i NDA5LTExZDlhMzc2MWE2Yy8wLzMxMzYzMDJlMzIzMDJlMzEzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBRoMA0GCSqG SIb3DQEBCwUAA4IBAQAcnRujFHMWA4O71cXFUG+vWUHVWm6XAk0Yv1BvFOdyMw0r Dh1BI5nnwGfYqfktgI8p3siHoL6qSoP0RX7oNGO8jJXBwurW1q492jvxUv2FExId 4CUN5yX8rbLzOI0tJKbBDTWjLoeAwTwq1sgjRqwBm1j5v/am+5T7mG5x6GpGtjUW 56sGHu+yru99XGxUHcATWf6IHLvPcPp8ZoguSnfj44Ye0WNvVFYE2joUlafU6X3q 5lINfZhod+yVvYsSDWz+UgMKlV93pObVhsQkBDw05OJ77f6numngURjwM8mzSr7M V8gu24j2VAo/iAtXS5404u68JfGtVKG3GK9bWsLs -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:52 2024 by rpki-client on console-ams.rpki-client.org