$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: eRdxCRbNLfuWHUY9IIwq5IbdCidNyzCdqHaPK5DzWkk= Subject key identifier: 4D:06:21:BB:53:3A:84:6D:67:B7:95:AF:CC:81:4C:EE:16:19:C6:E2 Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 68DE55CEA20176BA8E407E976C91070BF032CCBC Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 02 Jul 2023 13:54:46 +0000 ROA not before: Sun 02 Jul 2023 13:49:46 +0000 ROA not after: Sun 30 Jun 2024 13:54:46 +0000 asID: 140413 IP address blocks: 2406:13c0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:de:55:ce:a2:01:76:ba:8e:40:7e:97:6c:91:07:0b:f0:32:cc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Jul 2 13:49:46 2023 GMT Not After : Jun 30 13:54:46 2024 GMT Subject: CN=4D0621BB533A846D67B795AFCC814CEE1619C6E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:55:ba:2b:6b:d4:40:0a:c3:8f:ba:6b:dd: 75:38:1f:2a:37:bf:3c:0a:a3:d5:49:8e:75:59:f3: 28:85:61:89:b0:eb:8e:7b:76:cc:54:b4:8c:26:e7: d0:d9:d1:40:9c:96:27:79:ec:13:a7:68:f7:6e:9c: 83:57:ca:b3:04:48:0a:c5:23:2d:bc:77:7c:9b:d1: e0:96:fa:e9:30:db:14:14:93:72:a2:0e:6d:6e:7d: ff:82:d6:dd:ae:74:94:00:3b:e7:fc:7a:ef:a1:60: 78:19:36:f5:c2:c1:43:38:ce:ef:95:5d:da:bf:cb: ce:66:fe:d8:13:8a:d9:3d:b2:20:28:45:d5:11:8f: 64:82:4e:42:34:3f:e2:76:1f:a3:e9:62:a1:95:4f: d5:8b:1b:59:a7:af:ea:65:31:aa:99:5b:0b:80:12: 67:ba:af:02:9b:9d:54:4f:a9:0d:b2:af:21:96:86: 8d:0b:cf:f9:d2:8a:cd:a1:a0:a5:eb:2b:6c:41:ef: a0:5c:bc:8f:9b:c0:8f:6d:5d:9e:11:9b:57:a1:64: 3c:d2:b5:1b:fc:c4:43:61:20:42:ec:e4:58:d6:d4: 87:d4:fa:97:cd:bb:61:1a:2a:c4:fb:cb:7c:92:fe: 26:f9:ba:ee:d2:30:b5:6b:5e:dd:e5:e5:fe:7c:d9: 9c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:06:21:BB:53:3A:84:6D:67:B7:95:AF:CC:81:4C:EE:16:19:C6:E2 X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:b::/48 Signature Algorithm: sha256WithRSAEncryption 74:68:fb:2d:6f:65:aa:c9:7e:a2:24:c7:c8:3f:13:4c:90:da: 35:94:e8:fb:34:1e:a1:d0:4f:68:db:ae:03:4e:7c:c7:7a:e7: 68:c8:9b:eb:7f:ce:eb:ea:0f:a2:ed:8f:70:ea:e6:9f:42:83: 77:77:b0:aa:b6:10:86:fd:d3:8b:81:f9:68:a4:ad:b7:a2:bc: 81:99:17:8f:95:69:57:62:c1:b5:8a:2a:4d:30:a3:a1:a7:86: ef:72:27:7c:b1:7a:a6:0f:af:0b:78:22:d5:32:5b:b8:60:18: 10:10:77:5f:f0:5d:7a:ae:e7:e3:76:5a:8c:06:b9:db:b0:ac: 06:8e:c8:c2:19:83:3d:41:9c:1c:af:28:e8:78:83:6a:0b:dc: f2:c4:d0:0f:c8:eb:11:d8:69:3b:e3:8b:40:0a:5e:5d:55:d8: cc:76:36:d0:c2:78:24:98:ff:5f:91:23:a6:f6:3a:29:39:6a: c2:82:0d:cd:ee:6f:77:b1:67:ba:64:7a:e1:88:87:98:6d:d4: 82:f6:a1:e4:93:2c:f2:a3:fd:8b:eb:6a:8e:bd:ba:0f:ea:db: 42:bd:10:33:c5:e0:41:29:1e:df:96:eb:ee:e6:bd:04:d9:b1: b6:e1:43:dd:ca:50:0b:9f:d4:9e:6d:c3:48:a7:11:2f:4f:b8: b4:83:f0:c1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUaN5VzqIBdrqOQH6XbJEHC/AyzLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yMzA3MDIxMzQ5NDZaFw0yNDA2MzAxMzU0NDZaMDMxMTAvBgNV BAMTKDREMDYyMUJCNTMzQTg0NkQ2N0I3OTVBRkNDODE0Q0VFMTYxOUM2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXVW6K2vUQArDj7pr3XU4Hyo3 vzwKo9VJjnVZ8yiFYYmw6457dsxUtIwm59DZ0UCclid57BOnaPdunINXyrMESArF Iy28d3yb0eCW+ukw2xQUk3KiDm1uff+C1t2udJQAO+f8eu+hYHgZNvXCwUM4zu+V Xdq/y85m/tgTitk9siAoRdURj2SCTkI0P+J2H6PpYqGVT9WLG1mnr+plMaqZWwuA Eme6rwKbnVRPqQ2yryGWho0Lz/nSis2hoKXrK2xB76BcvI+bwI9tXZ4Rm1ehZDzS tRv8xENhIELs5FjW1IfU+pfNu2EaKsT7y3yS/ib5uu7SMLVrXt3l5f582Zz9AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUTQYhu1M6hG1nt5WvzIFM7hYZxuIwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAsw DQYJKoZIhvcNAQELBQADggEBAHRo+y1vZarJfqIkx8g/E0yQ2jWU6Ps0HqHQT2jb rgNOfMd652jIm+t/zuvqD6Ltj3Dq5p9Cg3d3sKq2EIb904uB+WikrbeivIGZF4+V aVdiwbWKKk0wo6Gnhu9yJ3yxeqYPrwt4ItUyW7hgGBAQd1/wXXqu5+N2WowGuduw rAaOyMIZgz1BnByvKOh4g2oL3PLE0A/I6xHYaTvji0AKXl1V2Mx2NtDCeCSY/1+R I6b2Oik5asKCDc3ub3exZ7pkeuGIh5ht1IL2oeSTLPKj/Yvrao69ug/q20K9EDPF 4EEpHt+W6+7mvQTZsbbhQ93KUAuf1J5tw0inES9PuLSD8ME= -----END CERTIFICATE-----Generated at Wed May 1 22:50:25 2024 by rpki-client on console-ams.rpki-client.org