$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa File: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (raw, json) Hash identifier: ss2EJAnpKFiDc20LCUbPWRGzhNcuFuLtxPENwLK+/ro= Subject key identifier: 7D:A0:45:39:BB:0A:6B:57:D7:49:B8:DD:67:C5:C4:07:77:92:2D:99 Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 4B9B9C55B4957F2974C40088CD3D42BB30D5A9CE Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa Signing time: Tue 17 Dec 2024 08:52:54 +0000 ROA not before: Tue 17 Dec 2024 08:47:54 +0000 ROA not after: Tue 16 Dec 2025 08:52:54 +0000 asID: 153110 IP address blocks: 160.22.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 23:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9b:9c:55:b4:95:7f:29:74:c4:00:88:cd:3d:42:bb:30:d5:a9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Dec 17 08:47:54 2024 GMT Not After : Dec 16 08:52:54 2025 GMT Subject: CN=7DA04539BB0A6B57D749B8DD67C5C40777922D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:cf:89:64:75:33:7f:27:02:6f:0e:65:1f: 49:de:38:1c:f1:00:af:cc:26:f3:ca:f8:18:87:b0: c4:2a:3e:c6:a1:46:75:87:f0:fc:3d:66:ed:71:f5: e3:a4:ec:76:0c:ca:34:1b:34:d8:5e:e9:4c:c0:01: de:d6:27:b8:be:a9:a1:8c:72:e0:ce:ec:70:68:c1: f7:4c:ef:eb:df:65:4a:eb:94:bf:2c:bd:a4:a4:47: 1d:a9:31:74:5f:8d:26:e5:46:91:40:97:16:0c:5f: 30:52:62:3c:17:13:dc:3d:3b:16:32:cc:4e:52:7d: 3f:8a:a1:0b:28:48:f3:4a:ec:55:1e:1c:6d:40:c1: cd:6f:e0:af:5c:bd:93:d7:54:82:2e:c7:61:5e:a1: 22:14:bf:c8:6d:71:44:7c:c6:6f:3d:68:97:ba:8e: 54:8c:ea:18:24:aa:93:bf:e7:b4:32:51:17:ea:56: 13:f9:a5:67:12:0b:49:2c:c1:9d:0b:a3:9c:d8:c2: 59:99:8a:d8:3d:05:f7:1b:38:ff:a3:00:cd:48:0a: f4:5f:1d:18:eb:e9:20:a3:f7:57:25:62:e6:30:0b: f8:6d:bd:c5:46:30:96:22:0b:1f:22:8f:83:33:f2: bd:d9:fe:1c:d6:83:de:10:77:0e:ed:f2:9a:7b:93: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A0:45:39:BB:0A:6B:57:D7:49:B8:DD:67:C5:C4:07:77:92:2D:99 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.94.0/24 Signature Algorithm: sha256WithRSAEncryption 77:e1:50:9c:7b:12:6f:8c:b7:ed:3b:82:61:7f:1a:0c:2c:b6: c5:45:fd:dd:5d:0c:33:9d:8d:ab:ad:da:6b:b8:80:7e:40:16: 94:09:23:41:ba:40:9c:ff:0a:8a:c7:e9:6c:17:bf:b6:0d:bb: 3b:7e:1a:5e:d3:8e:69:d1:46:65:58:a9:a8:40:9f:53:4b:0b: b3:07:02:f3:85:6d:6a:d0:63:88:48:1a:4a:e3:fa:b7:d7:9d: bb:a2:a9:94:e7:f0:e0:83:cb:ef:0c:83:3f:3e:6a:ef:08:f8: 53:4f:b3:61:ae:a6:88:69:6a:01:ec:65:e7:f6:97:fa:40:a9: 97:0f:d2:51:bd:73:a0:fc:79:ce:05:c8:52:9c:a7:68:bb:a2: 03:3f:16:be:48:cb:51:4f:86:ca:16:ab:8c:e9:b2:9e:a9:da: 19:d8:c3:ab:11:9b:4f:b9:11:0e:9c:2d:72:2c:a8:ea:03:b8: 28:08:20:41:e3:04:c1:8b:e9:9c:95:72:06:96:44:34:b8:41: 90:dc:0c:80:8d:63:b5:3a:4e:d4:01:27:36:55:88:66:79:90: 08:2a:8a:63:13:39:d2:c7:3d:09:82:ff:2f:06:da:3c:bc:11: 39:26:0d:5c:3c:70:0b:e2:30:49:d6:d1:0a:6f:87:23:df:64: 3a:02:42:b3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUS5ucVbSVfyl0xACIzT1CuzDVqc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNDEyMTcwODQ3NTRaFw0yNTEyMTYwODUyNTRaMDMxMTAvBgNV BAMTKDdEQTA0NTM5QkIwQTZCNTdENzQ5QjhERDY3QzVDNDA3Nzc5MjJEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoM+JZHUzfycCbw5lH0neOBzx AK/MJvPK+BiHsMQqPsahRnWH8Pw9Zu1x9eOk7HYMyjQbNNhe6UzAAd7WJ7i+qaGM cuDO7HBowfdM7+vfZUrrlL8svaSkRx2pMXRfjSblRpFAlxYMXzBSYjwXE9w9OxYy zE5SfT+KoQsoSPNK7FUeHG1Awc1v4K9cvZPXVIIux2FeoSIUv8htcUR8xm89aJe6 jlSM6hgkqpO/57QyURfqVhP5pWcSC0kswZ0Lo5zYwlmZitg9BfcbOP+jAM1ICvRf HRjr6SCj91clYuYwC/htvcVGMJYiCx8ij4Mz8r3Z/hzWg94Qdw7t8pp7k68bAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfaBFObsKa1fXSbjdZ8XEB3eSLZkwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMDc3Mzg2LTMwMWItNGZmMS04 NzFiLTYyMzJiNWYzYmUwOS8wLzMxMzYzMDJlMzIzMjJlMzkzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWXjANBgkqhkiG 9w0BAQsFAAOCAQEAd+FQnHsSb4y37TuCYX8aDCy2xUX93V0MM52Nq63aa7iAfkAW lAkjQbpAnP8KisfpbBe/tg27O34aXtOOadFGZVipqECfU0sLswcC84VtatBjiEga SuP6t9edu6KplOfw4IPL7wyDPz5q7wj4U0+zYa6miGlqAexl5/aX+kCplw/SUb1z oPx5zgXIUpynaLuiAz8WvkjLUU+GyharjOmynqnaGdjDqxGbT7kRDpwtciyo6gO4 KAggQeMEwYvpnJVyBpZENLhBkNwMgI1jtTpO1AEnNlWIZnmQCCqKYxM50sc9CYL/ LwbaPLwROSYNXDxwC+IwSdbRCm+HI99kOgJCsw== -----END CERTIFICATE-----Generated at Sun Apr 27 23:04:20 2025 by rpki-client