$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/323430353a366334303a3a2f33322d3438203d3e203234353237.roa File: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (raw, json) Hash identifier: A+tvUCoIH9aP9wAu6tEqr3WVSzsSIv1BMMTpxNptNaA= Subject key identifier: F0:8B:CB:C3:56:54:21:98:AC:94:2C:3F:31:21:06:34:39:07:41:15 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 3B75FAD05219E93030CDAFFE295D79BEEB6BD016 Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/323430353a366334303a3a2f33322d3438203d3e203234353237.roa Signing time: Mon 31 Jul 2023 00:01:16 +0000 ROA not before: Sun 30 Jul 2023 23:56:16 +0000 ROA not after: Mon 29 Jul 2024 00:01:16 +0000 asID: 24527 IP address blocks: 2405:6c40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 14:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:75:fa:d0:52:19:e9:30:30:cd:af:fe:29:5d:79:be:eb:6b:d0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Jul 30 23:56:16 2023 GMT Not After : Jul 29 00:01:16 2024 GMT Subject: CN=F08BCBC356542198AC942C3F3121063439074115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:9a:ad:0e:5a:3d:18:5b:44:08:d5:52:3f: 9b:4e:e0:b8:ae:62:61:6c:5d:2c:21:6d:3d:e2:e9: 91:13:bd:7d:b4:fc:56:b0:6a:88:b5:49:d2:ce:7e: 4e:0d:09:3a:9a:d9:4a:18:e0:97:7c:a0:41:ef:92: bb:0c:c3:a1:73:07:61:18:73:e6:87:c1:87:72:a0: f4:da:61:65:5c:7e:d1:9b:d5:99:f9:e2:e8:da:6e: b7:1c:a6:88:62:d4:14:18:a1:2f:ca:63:33:ab:eb: 2c:95:33:ce:b9:1d:a5:aa:de:47:31:13:b8:49:62: 32:d8:ed:22:63:8f:9f:96:b1:59:fd:57:0e:3f:62: 70:45:fb:c8:c6:72:ec:55:bd:f8:9f:46:b6:f3:0f: 29:20:e8:f2:0f:97:8c:c9:34:b1:5e:86:bc:be:1b: 65:69:0f:e9:5f:1a:8f:ee:e2:ae:9c:f2:80:15:6d: 4f:4f:f9:61:8d:79:bb:f7:73:03:57:57:63:2b:dc: 0c:f5:98:73:02:71:57:50:69:ba:d9:ae:b0:ff:7d: f4:4c:b6:6a:90:42:69:33:11:f6:ac:41:4b:70:1c: 73:21:4f:5b:1d:ce:e0:91:f4:e1:84:ce:20:07:9f: d4:84:2f:ee:7c:c3:5d:7a:22:e4:fa:81:10:94:6a: fe:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8B:CB:C3:56:54:21:98:AC:94:2C:3F:31:21:06:34:39:07:41:15 X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/323430353a366334303a3a2f33322d3438203d3e203234353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6c40::/32 Signature Algorithm: sha256WithRSAEncryption 8b:4b:12:8b:d6:24:9f:94:7e:b3:c0:82:55:cd:02:3e:a5:65: cd:af:aa:d8:44:4e:4e:47:4e:bd:bc:ad:5e:cc:50:d9:f0:3e: b9:c8:e6:31:be:5c:50:07:28:3c:9e:ff:6c:db:7a:46:ba:27: b3:ee:7f:03:fe:a2:a1:2c:16:76:46:54:11:2b:8d:a0:e9:dd: 70:71:76:a3:c5:99:28:04:46:6c:34:66:e7:b4:05:6e:3f:b4: e2:66:32:16:e8:b7:b3:4d:cc:ba:0b:9e:03:fa:51:ad:1d:3f: 21:de:35:53:25:e1:10:2d:6c:95:49:1b:6c:81:02:1e:81:df: 56:3a:d0:47:03:6a:1b:cf:f8:c7:db:0e:82:b4:b8:4c:cc:db: 4b:aa:c2:a4:c8:d2:c5:24:f6:ef:7f:e7:28:75:2a:15:f4:d5: c8:7c:bc:45:2b:11:89:ae:3b:c0:f7:d6:9d:90:80:44:e4:61: fa:8f:c1:0d:f7:d9:cf:fb:6c:0f:7e:69:74:98:aa:11:8c:8f: 4e:f8:d9:72:39:ad:ee:92:58:dc:62:65:78:27:58:73:ad:46: cc:51:e7:0b:20:94:37:99:5b:33:b1:f5:d8:82:5b:50:75:2d: 4c:11:50:56:d8:35:e4:b2:32:d6:8f:a5:8f:77:c9:79:72:a2: 13:4d:d9:1a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUO3X60FIZ6TAwza/+KV15vutr0BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yMzA3MzAyMzU2MTZaFw0yNDA3MjkwMDAxMTZaMDMxMTAvBgNV BAMTKEYwOEJDQkMzNTY1NDIxOThBQzk0MkMzRjMxMjEwNjM0MzkwNzQxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH65qtDlo9GFtECNVSP5tO4Liu YmFsXSwhbT3i6ZETvX20/Fawaoi1SdLOfk4NCTqa2UoY4Jd8oEHvkrsMw6FzB2EY c+aHwYdyoPTaYWVcftGb1Zn54ujabrccpohi1BQYoS/KYzOr6yyVM865HaWq3kcx E7hJYjLY7SJjj5+WsVn9Vw4/YnBF+8jGcuxVvfifRrbzDykg6PIPl4zJNLFehry+ G2VpD+lfGo/u4q6c8oAVbU9P+WGNebv3cwNXV2Mr3Az1mHMCcVdQabrZrrD/ffRM tmqQQmkzEfasQUtwHHMhT1sdzuCR9OGEziAHn9SEL+58w116IuT6gRCUav5NAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU8IvLw1ZUIZislCw/MSEGNDkHQRUwHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2Yjg3ZmViLTBmZTItNDE4YS1h MzdhLWJlM2RkMWYwZTYzYy8wLzMyMzQzMDM1M2EzNjYzMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzQzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBWxAMA0GCSqGSIb3 DQEBCwUAA4IBAQCLSxKL1iSflH6zwIJVzQI+pWXNr6rYRE5OR069vK1ezFDZ8D65 yOYxvlxQByg8nv9s23pGuiez7n8D/qKhLBZ2RlQRK42g6d1wcXajxZkoBEZsNGbn tAVuP7TiZjIW6LezTcy6C54D+lGtHT8h3jVTJeEQLWyVSRtsgQIegd9WOtBHA2ob z/jH2w6CtLhMzNtLqsKkyNLFJPbvf+codSoV9NXIfLxFKxGJrjvA99adkIBE5GH6 j8EN99nP+2wPfml0mKoRjI9O+NlyOa3ukljcYmV4J1hzrUbMUecLIJQ3mVszsfXY gltQdS1MEVBW2DXksjLWj6WPd8l5cqITTdka -----END CERTIFICATE-----Generated at Wed Apr 24 12:29:09 2024 by rpki-client on console-fra.rpki-client.org