$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a393a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a393a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: JcaNiAm9dTIsyQHjCHW2Z4DzpUiynVdj6a/EPYBUyWo= Subject key identifier: BF:39:DC:61:76:74:57:DE:92:9E:41:F5:B0:36:72:C0:9A:80:88:BB Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 60EC8CD7EB3AB68B58828B5CDF6F311F051BCDC3 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a393a3a2f34382d3438203d3e203338353234.roa Signing time: Tue 08 Aug 2023 23:00:01 +0000 ROA not before: Tue 08 Aug 2023 22:55:01 +0000 ROA not after: Tue 06 Aug 2024 23:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ec:8c:d7:eb:3a:b6:8b:58:82:8b:5c:df:6f:31:1f:05:1b:cd:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Aug 8 22:55:01 2023 GMT Not After : Aug 6 23:00:01 2024 GMT Subject: CN=BF39DC61767457DE929E41F5B03672C09A8088BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:bf:44:5c:58:b7:00:9a:57:d4:f3:87:07: e4:73:e1:b0:30:5a:3e:e1:c4:4b:f2:61:c8:19:46: 15:bb:52:46:46:68:c1:26:7b:e3:f9:e7:14:28:04: 51:67:f9:0f:7e:e1:26:37:36:72:24:e6:14:5b:fc: 26:3c:ef:54:43:a2:af:18:95:59:0f:c6:25:8c:7f: 08:d3:fa:7c:81:1e:53:95:e2:ce:7b:d4:6d:4f:ae: 94:f7:2e:e8:e2:d7:7b:b6:14:06:04:82:7f:6c:cd: 84:9d:24:92:93:90:17:27:54:35:5c:f3:52:0c:47: fb:eb:23:18:25:16:72:df:ac:8a:49:24:55:7d:10: 8d:1c:04:74:e3:3d:22:a0:e6:9c:41:ba:16:7f:88: 5e:f8:0e:46:c4:ab:67:09:3c:99:a6:3d:06:39:be: ee:00:1b:cf:1a:c4:2f:4c:99:36:8f:55:6f:d8:de: 38:bc:4c:66:85:ac:c0:58:81:20:b7:ce:83:10:38: 52:f5:66:b4:d2:31:43:38:1b:99:32:7b:3a:6c:30: c3:2d:39:9a:b7:08:65:3f:69:75:66:83:06:0c:46: 45:f4:be:5b:ec:b5:58:d8:94:b7:2a:03:47:7a:e3: 41:29:a7:bd:29:25:c5:d3:e4:c7:f5:22:e9:6d:b9: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:39:DC:61:76:74:57:DE:92:9E:41:F5:B0:36:72:C0:9A:80:88:BB X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a393a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:9::/48 Signature Algorithm: sha256WithRSAEncryption 71:fc:20:9d:c5:06:d6:0c:03:2d:a0:b4:70:5d:38:94:74:7e: aa:4a:c5:88:30:f8:3b:ef:90:ea:79:6d:81:92:2d:6d:d9:41: 80:35:e6:6a:d1:ef:a4:b1:18:62:9b:12:8d:2c:ff:9c:1d:78: 33:67:bf:ba:a5:2b:33:a2:cf:9c:d7:9a:a4:c2:18:24:b8:9e: 68:f4:85:74:d1:e8:4f:7e:17:64:a6:39:03:35:b8:17:70:34: 16:4b:1a:ba:ec:09:49:41:55:e6:37:8a:5e:20:11:ce:70:3d: da:2f:5a:07:62:95:7f:9b:02:9c:ef:69:4e:dd:25:e2:d3:02: cf:80:d6:02:29:13:b4:2e:b3:63:49:b3:5d:c0:0e:38:bd:e0: 79:60:e2:d1:42:34:4f:c6:42:86:3b:7a:f7:ea:62:c9:f6:d7: b0:31:79:9f:56:ac:fc:f8:b1:31:7b:8c:fb:33:0a:a1:93:29: 5c:3c:e0:5d:81:9b:d3:48:f8:f8:67:24:f3:df:27:e0:01:f5: 00:55:fb:75:00:24:5c:92:c4:8c:ee:d5:0d:16:f2:cf:f9:2d: 50:c0:fe:53:4a:2b:20:7f:a1:27:56:3e:b5:cf:bc:85:91:c7: 32:44:4d:3e:d3:9d:3e:5a:d8:b6:75:27:2a:d9:8f:1d:d7:2e: 3e:d0:9d:1f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUYOyM1+s6totYgotc328xHwUbzcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yMzA4MDgyMjU1MDFaFw0yNDA4MDYyMzAwMDFaMDMxMTAvBgNV BAMTKEJGMzlEQzYxNzY3NDU3REU5MjlFNDFGNUIwMzY3MkMwOUE4MDg4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtib9EXFi3AJpX1POHB+Rz4bAw Wj7hxEvyYcgZRhW7UkZGaMEme+P55xQoBFFn+Q9+4SY3NnIk5hRb/CY871RDoq8Y lVkPxiWMfwjT+nyBHlOV4s571G1PrpT3Luji13u2FAYEgn9szYSdJJKTkBcnVDVc 81IMR/vrIxglFnLfrIpJJFV9EI0cBHTjPSKg5pxBuhZ/iF74DkbEq2cJPJmmPQY5 vu4AG88axC9MmTaPVW/Y3ji8TGaFrMBYgSC3zoMQOFL1ZrTSMUM4G5kyezpsMMMt OZq3CGU/aXVmgwYMRkX0vlvstVjYlLcqA0d640Epp70pJcXT5Mf1IultuW7/AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUvzncYXZ0V96SnkH1sDZywJqAiLswHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAJMA0G CSqGSIb3DQEBCwUAA4IBAQBx/CCdxQbWDAMtoLRwXTiUdH6qSsWIMPg775DqeW2B ki1t2UGANeZq0e+ksRhimxKNLP+cHXgzZ7+6pSszos+c15qkwhgkuJ5o9IV00ehP fhdkpjkDNbgXcDQWSxq67AlJQVXmN4peIBHOcD3aL1oHYpV/mwKc72lO3SXi0wLP gNYCKRO0LrNjSbNdwA44veB5YOLRQjRPxkKGO3r36mLJ9tewMXmfVqz8+LExe4z7 MwqhkylcPOBdgZvTSPj4ZyTz3yfgAfUAVft1ACRcksSM7tUNFvLP+S1QwP5TSisg f6EnVj61z7yFkccyRE0+050+Wti2dScq2Y8d1y4+0J0f -----END CERTIFICATE-----Generated at Fri Apr 19 01:43:22 2024 by rpki-client on console-ams.rpki-client.org