$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/323430353a6263303a3a2f33332d3438203d3e20313336383432.roa File: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (raw, json) Hash identifier: vmPt8l0J5Y6aAaBkJCpUnRFWAMU/e2Oat6QgsrAej24= Subject key identifier: 0A:5E:3D:D5:3F:FD:E2:DB:B5:C8:91:38:B9:35:21:A4:D1:4B:63:D1 Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 578D9FED2A26D4E8BD49904F04E489E123153134 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/323430353a6263303a3a2f33332d3438203d3e20313336383432.roa Signing time: Fri 13 Oct 2023 08:00:01 +0000 ROA not before: Fri 13 Oct 2023 07:55:01 +0000 ROA not after: Fri 11 Oct 2024 08:00:01 +0000 asID: 136842 IP address blocks: 2405:bc0::/33 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:8d:9f:ed:2a:26:d4:e8:bd:49:90:4f:04:e4:89:e1:23:15:31:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Oct 13 07:55:01 2023 GMT Not After : Oct 11 08:00:01 2024 GMT Subject: CN=0A5E3DD53FFDE2DBB5C89138B93521A4D14B63D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:71:f6:5c:d6:b5:21:86:9a:9e:f4:33:18: f0:d4:7e:c8:e4:83:93:38:b6:35:bc:9e:75:7f:1a: 9b:d6:16:b8:94:92:71:04:00:80:c1:12:35:97:b9: c0:aa:fb:44:cd:c5:1f:56:8a:61:96:56:87:f8:fe: f2:fb:8c:7a:24:c8:fb:cb:32:07:e2:89:5d:b0:7f: 7e:db:11:ae:b2:f1:2f:17:d4:fb:16:08:80:ab:b0: 58:4c:6c:2a:ef:60:9c:7f:e8:ca:f7:22:ca:d8:ce: 61:fe:6a:6c:ea:db:75:3b:fa:05:30:98:42:25:70: dc:a8:c0:0b:6c:20:3c:4e:97:9b:d5:46:f8:8c:bf: e9:ab:17:46:61:f2:ad:fe:9d:4a:22:05:78:3d:4c: a1:de:0a:7b:8c:6c:ab:7f:93:68:f5:0b:9c:6d:35: 25:57:ff:e9:cf:90:d4:a4:dd:38:47:be:16:62:0e: 88:5b:1d:c4:31:df:e2:ba:0a:0f:eb:a4:e1:43:6c: d3:a0:00:c3:f9:7e:05:d4:c7:8b:f7:1d:90:15:d9: f0:f8:26:98:2e:2a:a5:26:7c:96:64:c8:6e:ab:72: 4c:e0:54:59:b0:9d:b5:56:9a:84:19:7c:b5:94:04: 31:a3:b6:eb:21:83:2c:76:96:26:84:d5:a7:ba:11: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5E:3D:D5:3F:FD:E2:DB:B5:C8:91:38:B9:35:21:A4:D1:4B:63:D1 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/323430353a6263303a3a2f33332d3438203d3e20313336383432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:bc0::/33 Signature Algorithm: sha256WithRSAEncryption 7e:9e:51:5c:87:7c:0a:16:e2:10:d8:54:52:8a:1c:cf:4b:b1: 1d:c5:c3:cc:d3:10:4c:e8:5f:ef:9a:ae:2c:20:1a:c9:96:33: 9c:47:83:67:1a:9d:55:d7:d3:c6:61:65:d0:bb:0d:e8:41:14: de:b0:c1:92:d9:fe:62:6e:a1:32:af:a7:95:51:3c:42:21:f7: eb:8b:df:44:26:af:71:bb:6e:0a:e7:55:28:7d:37:d6:21:d4: 1e:80:28:4f:f3:96:ab:56:73:22:56:ad:d2:24:bc:10:37:02: 8e:84:94:b0:dd:9c:25:79:d2:f6:48:49:22:e9:c0:7b:8e:63: fc:d1:6a:4a:d1:f3:69:6d:9f:d9:e3:d5:10:23:13:d4:78:38: ca:ff:77:84:bf:be:8b:14:b7:13:3b:63:75:c9:2b:4d:e5:e5: 37:dd:9d:a3:7b:37:fa:28:18:10:eb:21:e5:89:48:f4:91:9b: e7:c3:3c:c1:d3:70:63:38:c7:cb:03:43:17:81:e2:c9:e7:93: df:2c:45:f6:8d:de:fd:ed:68:3f:20:8e:81:28:75:e8:78:26: 86:ba:7c:4a:41:07:cf:a1:b7:6e:4c:62:60:99:18:82:75:c2: 7b:99:50:b4:cb:90:f7:81:a8:4e:54:fa:86:ac:e1:23:61:38: 0e:92:cd:4c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUV42f7Som1Oi9SZBPBOSJ4SMVMTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yMzEwMTMwNzU1MDFaFw0yNDEwMTEwODAwMDFaMDMxMTAvBgNV BAMTKDBBNUUzREQ1M0ZGREUyREJCNUM4OTEzOEI5MzUyMUE0RDE0QjYzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjHH2XNa1IYaanvQzGPDUfsjk g5M4tjW8nnV/GpvWFriUknEEAIDBEjWXucCq+0TNxR9WimGWVof4/vL7jHokyPvL MgfiiV2wf37bEa6y8S8X1PsWCICrsFhMbCrvYJx/6Mr3IsrYzmH+amzq23U7+gUw mEIlcNyowAtsIDxOl5vVRviMv+mrF0Zh8q3+nUoiBXg9TKHeCnuMbKt/k2j1C5xt NSVX/+nPkNSk3ThHvhZiDohbHcQx3+K6Cg/rpOFDbNOgAMP5fgXUx4v3HZAV2fD4 JpguKqUmfJZkyG6rckzgVFmwnbVWmoQZfLWUBDGjtushgyx2liaE1ae6EWWjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCl491T/94tu1yJE4uTUhpNFLY9EwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhOTdiY2Y0LWUxYWEtNDdkNi1i ZGU2LTJlNjY3YjlkNjEzNC8wLzMyMzQzMDM1M2E2MjYzMzAzYTNhMmYzMzMzMmQz NDM4MjAzZDNlMjAzMTMzMzYzODM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgckBQvAADANBgkqhkiG 9w0BAQsFAAOCAQEAfp5RXId8ChbiENhUUoocz0uxHcXDzNMQTOhf75quLCAayZYz nEeDZxqdVdfTxmFl0LsN6EEU3rDBktn+Ym6hMq+nlVE8QiH364vfRCavcbtuCudV KH031iHUHoAoT/OWq1ZzIlat0iS8EDcCjoSUsN2cJXnS9khJIunAe45j/NFqStHz aW2f2ePVECMT1Hg4yv93hL++ixS3EztjdckrTeXlN92do3s3+igYEOsh5YlI9JGb 58M8wdNwYzjHywNDF4HiyeeT3yxF9o3e/e1oPyCOgSh16Hgmhrp8SkEHz6G3bkxi YJkYgnXCe5lQtMuQ94GoTlT6hqzhI2E4DpLNTA== -----END CERTIFICATE-----Generated at Wed Apr 24 20:28:50 2024 by rpki-client on console-fra.rpki-client.org