$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a383a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a383a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: seLj+2dvPGWUI2AVznEm0HIa5qQpALI78k66g13iibE= Subject key identifier: 51:E9:5E:44:AA:C6:0D:FD:AB:55:C0:84:B1:17:B5:37:6E:E1:E2:2B Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 7FA129D64DA154A60A7CFA98C268F23BC704A1EF Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a383a3a2f34382d3438203d3e203338353234.roa Signing time: Tue 08 Aug 2023 23:00:01 +0000 ROA not before: Tue 08 Aug 2023 22:55:01 +0000 ROA not after: Tue 06 Aug 2024 23:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a1:29:d6:4d:a1:54:a6:0a:7c:fa:98:c2:68:f2:3b:c7:04:a1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Aug 8 22:55:01 2023 GMT Not After : Aug 6 23:00:01 2024 GMT Subject: CN=51E95E44AAC60DFDAB55C084B117B5376EE1E22B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:c6:72:64:b0:f9:33:0d:74:c7:5c:bd:1d: 1f:50:8b:db:17:44:c8:9b:a2:62:fc:97:4d:bf:a4: 4f:1a:93:46:e2:d7:22:51:75:09:a9:e3:2f:96:6a: ad:93:07:8f:e5:77:e2:36:0e:a0:06:91:7d:c1:4c: 40:04:66:9d:5e:de:4c:c5:76:a0:ea:94:81:d9:91: 84:ea:7e:80:03:5b:06:cb:c8:e4:34:e9:c9:e0:6b: 39:97:d5:d3:3b:d6:c7:f2:51:c4:08:6a:67:be:32: 2a:91:2b:2c:01:75:2c:59:41:1a:b9:7b:43:fe:10: 42:f6:b5:8e:92:bb:d4:04:da:b6:bb:09:1a:ca:18: c6:b3:95:9b:36:d1:b4:db:34:ff:cd:64:bb:a9:a4: d1:ec:ae:1d:f0:7d:d6:c3:3c:a4:a3:b6:c3:34:ff: 12:e5:ee:cd:5a:df:9f:7b:14:2c:f5:70:9a:36:f0: 85:48:a3:7e:ae:de:c1:df:98:17:7d:5b:12:3a:bb: c4:93:77:75:53:6c:1f:15:79:2d:2d:f9:3c:79:3f: 5b:18:c1:60:a1:30:79:0e:ba:b0:01:14:49:ca:47: be:7d:a0:23:cd:e1:d6:c6:ea:3d:cb:70:43:3b:56: a3:c5:2a:8b:0f:59:ad:29:61:89:ff:e4:b9:4b:9d: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E9:5E:44:AA:C6:0D:FD:AB:55:C0:84:B1:17:B5:37:6E:E1:E2:2B X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a383a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:8::/48 Signature Algorithm: sha256WithRSAEncryption b1:30:8e:63:78:d1:52:e4:85:cb:97:b9:ac:48:e4:6f:65:39: cc:fb:99:ac:e3:0d:39:6e:21:ab:5a:38:ad:7d:f5:6c:ff:08: 6c:42:2b:10:76:1b:0d:47:c2:1e:1f:ad:0d:3a:dd:49:ec:19: 1d:5b:da:8c:59:5a:0a:01:dc:61:52:53:7a:e3:cb:da:64:e7: bc:aa:d4:56:85:af:17:24:c4:4d:e2:9f:29:de:83:26:ef:eb: 29:85:3c:41:82:57:23:3a:c1:f6:e2:e3:3a:e0:7f:dd:8f:46: 77:51:f2:26:cd:83:4c:85:17:99:e9:61:4f:55:bd:17:65:50: 97:18:a9:c2:4d:dc:ca:b7:2f:b4:c3:3e:37:66:6a:c8:c2:bf: 7f:e5:a1:94:96:9c:75:11:3c:4b:2a:68:6b:de:ce:78:aa:c2: b5:ba:52:36:1f:10:12:0c:83:c8:d4:74:b7:1b:28:74:55:be: 3f:38:b7:15:22:24:25:24:be:38:4a:07:a5:75:c5:34:64:e4: 90:c2:5a:e8:70:7b:e5:dd:6e:77:7a:6f:7b:fb:dd:59:7a:a5: 89:49:d2:45:ad:da:09:70:53:75:8a:8c:57:83:80:60:b9:d8: 62:3e:42:73:ca:4b:4e:7e:76:96:43:31:a7:5c:9b:a1:20:13: 71:fb:b5:8a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUf6Ep1k2hVKYKfPqYwmjyO8cEoe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yMzA4MDgyMjU1MDFaFw0yNDA4MDYyMzAwMDFaMDMxMTAvBgNV BAMTKDUxRTk1RTQ0QUFDNjBERkRBQjU1QzA4NEIxMTdCNTM3NkVFMUUyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZMZyZLD5Mw10x1y9HR9Qi9sX RMibomL8l02/pE8ak0bi1yJRdQmp4y+Waq2TB4/ld+I2DqAGkX3BTEAEZp1e3kzF dqDqlIHZkYTqfoADWwbLyOQ06cngazmX1dM71sfyUcQIame+MiqRKywBdSxZQRq5 e0P+EEL2tY6Su9QE2ra7CRrKGMazlZs20bTbNP/NZLuppNHsrh3wfdbDPKSjtsM0 /xLl7s1a3597FCz1cJo28IVIo36u3sHfmBd9WxI6u8STd3VTbB8VeS0t+Tx5P1sY wWChMHkOurABFEnKR759oCPN4dbG6j3LcEM7VqPFKosPWa0pYYn/5LlLnQvXAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUUeleRKrGDf2rVcCEsRe1N27h4iswHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAIMA0G CSqGSIb3DQEBCwUAA4IBAQCxMI5jeNFS5IXLl7msSORvZTnM+5ms4w05biGrWjit ffVs/whsQisQdhsNR8IeH60NOt1J7BkdW9qMWVoKAdxhUlN648vaZOe8qtRWha8X JMRN4p8p3oMm7+sphTxBglcjOsH24uM64H/dj0Z3UfImzYNMhReZ6WFPVb0XZVCX GKnCTdzKty+0wz43ZmrIwr9/5aGUlpx1ETxLKmhr3s54qsK1ulI2HxASDIPI1HS3 Gyh0Vb4/OLcVIiQlJL44SgeldcU0ZOSQwlrocHvl3W53em97+91ZeqWJSdJFrdoJ cFN1ioxXg4BgudhiPkJzyktOfnaWQzGnXJuhIBNx+7WK -----END CERTIFICATE-----Generated at Fri Apr 19 01:15:58 2024 by rpki-client on console-fra.rpki-client.org