$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a3a2f33322d3332203d3e203338353234.roa File: 323430313a646538303a3a2f33322d3332203d3e203338353234.roa (raw, json) Hash identifier: VHKug2yiVlDBMoQTIIH0F1GD6JXrHPj+axaf8p1Kxek= Subject key identifier: 89:25:E1:52:DF:83:FB:57:12:D8:33:8D:0A:5C:5E:A9:55:DE:0F:25 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 57BBFD40F081A3DCFB9D3DC1FCE1DFB384E9A444 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a3a2f33322d3332203d3e203338353234.roa Signing time: Mon 31 Jul 2023 00:05:35 +0000 ROA not before: Mon 31 Jul 2023 00:00:35 +0000 ROA not after: Mon 29 Jul 2024 00:05:35 +0000 asID: 38524 IP address blocks: 2401:de80::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 09:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bb:fd:40:f0:81:a3:dc:fb:9d:3d:c1:fc:e1:df:b3:84:e9:a4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jul 31 00:00:35 2023 GMT Not After : Jul 29 00:05:35 2024 GMT Subject: CN=8925E152DF83FB5712D8338D0A5C5EA955DE0F25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:88:30:07:63:fa:64:ad:c4:a5:7a:e0:3d: ad:89:cc:73:f3:83:f9:1d:f3:5d:a5:d2:90:96:cf: 86:60:94:09:96:1a:a3:e0:c5:eb:93:e4:c2:6b:79: c7:b1:38:4e:f0:9d:b8:c2:71:0d:76:62:5b:d7:d9: f4:50:c7:e3:73:bd:e5:28:7b:91:96:40:a5:02:c6: f4:dd:0f:cd:6e:6c:60:46:61:f1:50:97:17:52:94: f8:b5:6d:ef:a2:0f:4d:8a:a2:c3:33:de:01:34:e2: 61:b2:45:ce:be:a0:35:84:7d:ca:97:7d:95:26:7b: 0c:51:42:75:df:4b:dd:49:55:14:01:5e:b3:35:e0: 43:b2:64:a4:ff:7a:13:99:66:34:38:4d:d3:37:54: 2e:95:f5:09:57:8b:f1:02:64:5f:98:3d:fc:da:7d: 1a:00:92:43:f6:d0:a6:84:6d:53:4f:46:8b:90:80: 9d:c1:25:85:12:ef:07:91:6f:0c:e0:38:99:74:0d: 0d:18:5b:ef:e4:a0:c1:b8:4a:bf:3f:81:f4:43:5b: f8:ac:6a:46:ff:a3:bb:2b:53:41:a8:b3:ad:e9:4d: a6:27:59:72:0f:1a:6f:04:e2:bf:39:d7:6f:fc:5d: 7d:26:69:fd:2f:82:86:f2:21:f0:58:1f:a0:2a:b1: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:25:E1:52:DF:83:FB:57:12:D8:33:8D:0A:5C:5E:A9:55:DE:0F:25 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a3a2f33322d3332203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80::/32 Signature Algorithm: sha256WithRSAEncryption 73:96:be:37:d1:5a:0a:3e:be:95:0d:14:3a:82:63:63:05:1b: 68:90:2b:be:12:33:df:a5:b6:2d:1b:93:3a:f0:ea:30:39:24: e2:e6:63:b1:e3:5f:4c:fd:53:45:fd:52:c3:92:88:40:da:3c: e9:84:a1:33:cb:6d:19:c8:6d:a2:12:f3:ea:6e:09:70:aa:3f: f7:46:ec:64:b9:02:fd:f5:0c:9c:47:3e:d2:8f:e0:0f:ab:8e: f4:1d:59:d8:fb:73:47:79:4b:0b:ba:15:ce:a6:62:0d:d7:58: 05:3e:7a:fc:b5:24:d3:e6:b3:76:a7:51:fb:72:69:f2:67:ad: c9:ac:a6:f8:48:10:34:ff:39:6e:63:e8:58:44:fa:21:e8:62: b7:cc:77:37:e6:ca:ed:33:09:86:f5:f5:4f:e1:2c:17:d3:7c: 9c:a9:9c:2b:69:34:81:16:d1:6f:92:44:37:4c:e5:da:dc:66: 99:75:f7:99:03:7b:19:1b:10:c1:2a:d3:3b:09:d6:59:d0:b3: b9:ff:35:b8:95:5b:d4:31:72:5b:1f:e9:55:25:88:74:cd:91: c7:de:9b:b7:a3:2e:9b:42:13:ca:dc:5c:6b:15:bd:b5:47:65: c3:7c:04:e9:7f:47:16:70:6c:f2:35:5d:95:4a:b9:98:af:d5: 87:11:74:ab -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUV7v9QPCBo9z7nT3B/OHfs4TppEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yMzA3MzEwMDAwMzVaFw0yNDA3MjkwMDA1MzVaMDMxMTAvBgNV BAMTKDg5MjVFMTUyREY4M0ZCNTcxMkQ4MzM4RDBBNUM1RUE5NTVERTBGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmYgwB2P6ZK3EpXrgPa2JzHPz g/kd812l0pCWz4ZglAmWGqPgxeuT5MJrecexOE7wnbjCcQ12YlvX2fRQx+NzveUo e5GWQKUCxvTdD81ubGBGYfFQlxdSlPi1be+iD02KosMz3gE04mGyRc6+oDWEfcqX fZUmewxRQnXfS91JVRQBXrM14EOyZKT/ehOZZjQ4TdM3VC6V9QlXi/ECZF+YPfza fRoAkkP20KaEbVNPRouQgJ3BJYUS7weRbwzgOJl0DQ0YW+/koMG4Sr8/gfRDW/is akb/o7srU0Gos63pTaYnWXIPGm8E4r8512/8XX0maf0vgobyIfBYH6AqsVNlAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUiSXhUt+D+1cS2DONClxeqVXeDyUwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMzMzgzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAd6AMA0GCSqGSIb3 DQEBCwUAA4IBAQBzlr430VoKPr6VDRQ6gmNjBRtokCu+EjPfpbYtG5M68OowOSTi 5mOx419M/VNF/VLDkohA2jzphKEzy20ZyG2iEvPqbglwqj/3RuxkuQL99QycRz7S j+APq470HVnY+3NHeUsLuhXOpmIN11gFPnr8tSTT5rN2p1H7cmnyZ63JrKb4SBA0 /zluY+hYRPoh6GK3zHc35srtMwmG9fVP4SwX03ycqZwraTSBFtFvkkQ3TOXa3GaZ dfeZA3sZGxDBKtM7CdZZ0LO5/zW4lVvUMXJbH+lVJYh0zZHH3pu3oy6bQhPK3Fxr Fb21R2XDfATpf0cWcGzyNV2VSrmYr9WHEXSr -----END CERTIFICATE-----Generated at Thu Apr 25 09:16:52 2024 by rpki-client on console-ams.rpki-client.org