$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: 6Kja3t/hsIc5kvAfeUXN0stzdI4SnAPADn/4baL7bc8= Subject key identifier: 05:DE:DF:D8:E9:52:05:66:F7:7B:2B:28:19:75:A6:9E:3E:1D:EC:2E Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 396DC6FC4B87A1831F433CB48BAA3BFA2DA26775 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa Signing time: Tue 08 Aug 2023 23:00:01 +0000 ROA not before: Tue 08 Aug 2023 22:55:01 +0000 ROA not after: Tue 06 Aug 2024 23:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 09:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6d:c6:fc:4b:87:a1:83:1f:43:3c:b4:8b:aa:3b:fa:2d:a2:67:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Aug 8 22:55:01 2023 GMT Not After : Aug 6 23:00:01 2024 GMT Subject: CN=05DEDFD8E9520566F77B2B281975A69E3E1DEC2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:ec:b7:3c:47:bd:f0:be:56:9d:fe:d8:74: 0e:8b:7f:46:85:a4:cc:10:1f:38:26:5f:07:78:93: 08:dc:82:30:79:69:01:93:7c:cb:72:cb:79:f6:64: 1a:82:74:b3:84:54:f0:47:24:67:aa:12:ae:f3:28: 9c:0e:48:a5:19:ea:9f:c8:a2:9a:99:4e:24:fc:fb: 5a:98:4e:f5:9c:9b:2c:60:83:5c:bf:03:88:91:fd: aa:2e:db:82:a9:c2:3e:71:81:5a:07:22:0b:f1:4d: 5f:65:fe:5d:7e:a2:ed:2a:de:17:6e:d4:e3:64:4e: f7:64:db:92:bb:6d:52:46:d0:03:f5:df:1d:06:ed: 2b:ec:86:03:37:f5:2f:a1:73:e2:69:9d:10:b6:9a: 1d:a8:ab:83:cd:bb:28:94:83:a4:7a:71:31:9d:d3: a8:a8:d8:b8:9b:6c:ab:d6:68:80:d5:91:cb:c2:ac: 50:d1:95:43:e4:4d:49:ba:5c:fe:57:35:ec:d8:38: b5:54:6e:7d:84:de:84:53:b2:f8:9d:46:2e:ad:3b: b5:91:41:45:ef:c6:ad:33:e3:4b:d8:97:3e:3f:0c: ab:8c:68:da:8e:f6:43:29:68:cb:de:26:a2:e3:20: 87:60:ec:be:16:1f:23:e8:a1:56:b3:40:64:56:c5: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DE:DF:D8:E9:52:05:66:F7:7B:2B:28:19:75:A6:9E:3E:1D:EC:2E X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:6::/48 Signature Algorithm: sha256WithRSAEncryption 82:6b:4a:f9:c4:f9:00:49:dc:c7:3d:c5:bb:cc:91:50:83:42: 87:6e:33:76:04:80:08:e0:a4:8b:99:2b:58:33:93:fa:4e:5d: 3c:46:7b:25:b3:d9:7d:67:b1:45:29:3e:a3:b1:67:20:3b:8d: ac:7b:ba:6f:b3:41:e9:95:75:ef:de:06:94:64:c2:1b:0d:62: f0:40:7c:66:9e:e4:93:21:96:9d:b2:14:ad:4d:87:5d:06:54: 05:b4:f2:1a:04:1e:69:e7:1a:f3:4c:6d:26:7f:6b:5f:bc:9c: 9f:66:e0:55:90:2b:e2:4c:89:5a:de:1e:c9:24:43:6e:52:9f: a8:75:82:7a:bd:91:67:e3:76:d5:4a:c1:14:22:28:0a:71:00: 4f:ae:24:07:a0:ac:35:68:e6:f8:49:ba:d5:a9:c5:10:01:ca: 2d:f5:c7:f9:2f:73:ed:93:2a:29:7f:e3:ff:4f:4e:20:fe:8d: 13:0b:2b:80:c3:8d:76:63:c3:5f:5e:0c:72:6f:f7:ab:e7:9d: f6:24:bb:75:92:66:8a:48:39:c0:70:fa:d0:b7:1b:c2:13:55: d1:96:6c:0c:55:10:ef:4f:34:49:0e:89:08:0c:ef:be:e1:61: 92:b9:8c:ca:a8:b2:16:06:bb:bd:2e:dd:11:61:a1:d9:29:2b: 75:71:25:b9 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUOW3G/EuHoYMfQzy0i6o7+i2iZ3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yMzA4MDgyMjU1MDFaFw0yNDA4MDYyMzAwMDFaMDMxMTAvBgNV BAMTKDA1REVERkQ4RTk1MjA1NjZGNzdCMkIyODE5NzVBNjlFM0UxREVDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwOy3PEe98L5Wnf7YdA6Lf0aF pMwQHzgmXwd4kwjcgjB5aQGTfMtyy3n2ZBqCdLOEVPBHJGeqEq7zKJwOSKUZ6p/I opqZTiT8+1qYTvWcmyxgg1y/A4iR/aou24Kpwj5xgVoHIgvxTV9l/l1+ou0q3hdu 1ONkTvdk25K7bVJG0AP13x0G7SvshgM39S+hc+JpnRC2mh2oq4PNuyiUg6R6cTGd 06io2LibbKvWaIDVkcvCrFDRlUPkTUm6XP5XNezYOLVUbn2E3oRTsvidRi6tO7WR QUXvxq0z40vYlz4/DKuMaNqO9kMpaMveJqLjIIdg7L4WHyPooVazQGRWxU2bAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUBd7f2OlSBWb3eysoGXWmnj4d7C4wHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAGMA0G CSqGSIb3DQEBCwUAA4IBAQCCa0r5xPkASdzHPcW7zJFQg0KHbjN2BIAI4KSLmStY M5P6Tl08Rnsls9l9Z7FFKT6jsWcgO42se7pvs0HplXXv3gaUZMIbDWLwQHxmnuST IZadshStTYddBlQFtPIaBB5p5xrzTG0mf2tfvJyfZuBVkCviTIla3h7JJENuUp+o dYJ6vZFn43bVSsEUIigKcQBPriQHoKw1aOb4SbrVqcUQAcot9cf5L3Ptkyopf+P/ T04g/o0TCyuAw412Y8NfXgxyb/er5532JLt1kmaKSDnAcPrQtxvCE1XRlmwMVRDv TzRJDokIDO++4WGSuYzKqLIWBru9Lt0RYaHZKSt1cSW5 -----END CERTIFICATE-----Generated at Thu Apr 25 09:16:52 2024 by rpki-client on console-ams.rpki-client.org