$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/323430353a396363303a3a2f33322d3438203d3e20313339393637.roa File: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (raw, json) Hash identifier: hGHZYqsrTotmCOekwKuOxx7mDMYHkZ5rlyLk/n+jEFA= Subject key identifier: DA:11:B1:A8:E5:16:C9:F9:A0:10:A1:83:26:A2:00:C1:CB:1E:43:82 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 0BEE6AF2288AB6568FEAF03726D5E033074E55E6 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/323430353a396363303a3a2f33322d3438203d3e20313339393637.roa Signing time: Sat 04 Nov 2023 20:00:00 +0000 ROA not before: Sat 04 Nov 2023 19:55:00 +0000 ROA not after: Sat 02 Nov 2024 20:00:00 +0000 asID: 139967 IP address blocks: 2405:9cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ee:6a:f2:28:8a:b6:56:8f:ea:f0:37:26:d5:e0:33:07:4e:55:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Nov 4 19:55:00 2023 GMT Not After : Nov 2 20:00:00 2024 GMT Subject: CN=DA11B1A8E516C9F9A010A18326A200C1CB1E4382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b8:32:9a:56:79:43:b3:f8:ff:53:50:7c:33: d2:63:49:13:17:0e:54:2c:bb:f6:76:a6:0a:3b:17: 4e:01:6b:50:47:1a:74:57:7c:92:ca:3f:94:8b:eb: fc:2a:72:59:c0:3c:6f:aa:0f:0a:72:43:0a:4a:f1: 59:98:53:d6:0c:fd:8b:53:db:2a:41:b7:91:ac:f5: 6f:fe:9c:48:22:6e:8a:fb:16:4a:61:9a:4b:53:cf: 6f:8d:0b:0b:67:b5:ae:00:ed:f9:f3:89:83:dc:ad: ca:e4:09:4e:af:2a:a7:44:5c:13:4a:23:35:02:c2: 88:3d:71:01:e0:7a:d5:be:43:b1:6f:ba:4a:8d:5a: af:a7:e1:6a:d4:d0:94:cb:4d:c2:66:db:dd:75:c9: 3a:35:e8:df:68:42:98:40:18:20:f4:80:42:9e:9b: 23:10:62:87:91:a6:01:5e:78:86:1e:34:be:cd:cf: 20:ef:ed:d0:4a:ce:df:2b:81:0c:76:ed:04:d6:eb: ec:56:29:4d:a6:be:83:06:a0:ba:93:fd:0a:7e:93: 97:20:b6:1f:9d:f8:44:d5:0c:1f:9a:ff:71:d4:f8: ad:43:97:42:7d:95:bd:dc:be:1c:04:91:e5:54:ca: cf:18:53:52:59:1d:9f:9d:9d:9e:43:ab:07:f0:55: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:11:B1:A8:E5:16:C9:F9:A0:10:A1:83:26:A2:00:C1:CB:1E:43:82 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/323430353a396363303a3a2f33322d3438203d3e20313339393637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:9cc0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:36:8e:af:d8:27:0d:49:36:e1:dc:36:de:a2:6e:c0:d3:d7: 07:b2:4e:af:50:43:bc:8c:ac:b0:b0:38:9f:c3:b7:8e:99:fe: 38:ea:d9:1c:12:03:b9:55:07:37:77:06:c0:e9:09:df:36:23: 5f:9b:95:38:1e:95:7a:de:fd:15:d8:d7:86:0e:28:76:ea:be: 39:a2:a3:f7:7d:9f:2f:8f:ec:1c:61:6a:fd:20:1f:54:fc:37: 30:88:5a:05:db:5f:55:c8:aa:8c:5f:05:cf:8f:3f:b6:ad:6c: 98:15:83:73:7f:57:93:f1:80:c9:ad:f4:8f:e5:60:68:58:03: 39:0d:a0:8d:2a:85:d9:f5:23:7e:52:8d:99:bd:16:fb:df:3e: 5d:9d:1a:c4:c3:e2:e7:c3:6b:4a:4e:ea:89:9e:e5:f9:d9:04: f8:b5:91:3f:2e:ea:69:06:9a:8d:c1:ad:4c:5a:02:02:69:0a: fc:7b:26:bd:d0:a0:f5:78:a6:d4:8c:7a:72:57:70:8e:a4:6a: 53:a2:7a:67:d9:41:de:f4:fa:5f:f0:88:cf:cf:8f:92:5a:46: 26:c8:24:1d:f3:43:3b:ef:c4:96:fb:ca:c1:bf:c6:83:80:74: 3b:01:bf:2a:39:2d:8c:53:b3:48:e1:1f:92:b7:60:37:08:00: 68:73:cc:c4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUC+5q8iiKtlaP6vA3JtXgMwdOVeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yMzExMDQxOTU1MDBaFw0yNDExMDIyMDAwMDBaMDMxMTAvBgNV BAMTKERBMTFCMUE4RTUxNkM5RjlBMDEwQTE4MzI2QTIwMEMxQ0IxRTQzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxuDKaVnlDs/j/U1B8M9JjSRMX DlQsu/Z2pgo7F04Ba1BHGnRXfJLKP5SL6/wqclnAPG+qDwpyQwpK8VmYU9YM/YtT 2ypBt5Gs9W/+nEgibor7FkphmktTz2+NCwtnta4A7fnziYPcrcrkCU6vKqdEXBNK IzUCwog9cQHgetW+Q7FvukqNWq+n4WrU0JTLTcJm2911yTo16N9oQphAGCD0gEKe myMQYoeRpgFeeIYeNL7NzyDv7dBKzt8rgQx27QTW6+xWKU2mvoMGoLqT/Qp+k5cg th+d+ETVDB+a/3HU+K1Dl0J9lb3cvhwEkeVUys8YU1JZHZ+dnZ5DqwfwVZgfAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU2hGxqOUWyfmgEKGDJqIAwcseQ4IwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YzUzMjdmLTEwZmQtNGNmMC04 NTFjLTBjZmNkM2MzYzY5Ny8wLzMyMzQzMDM1M2EzOTYzNjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFnMAwDQYJKoZI hvcNAQELBQADggEBAC02jq/YJw1JNuHcNt6ibsDT1weyTq9QQ7yMrLCwOJ/Dt46Z /jjq2RwSA7lVBzd3BsDpCd82I1+blTgelXre/RXY14YOKHbqvjmio/d9ny+P7Bxh av0gH1T8NzCIWgXbX1XIqoxfBc+PP7atbJgVg3N/V5PxgMmt9I/lYGhYAzkNoI0q hdn1I35SjZm9FvvfPl2dGsTD4ufDa0pO6ome5fnZBPi1kT8u6mkGmo3BrUxaAgJp Cvx7Jr3QoPV4ptSMenJXcI6kalOiemfZQd70+l/wiM/Pj5JaRibIJB3zQzvvxJb7 ysG/xoOAdDsBvyo5LYxTs0jhH5K3YDcIAGhzzMQ= -----END CERTIFICATE-----Generated at Thu Apr 25 01:59:05 2024 by rpki-client on console-ams.rpki-client.org