$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a643a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a643a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: HTo7jdSG1p5Hn94oiskz0Uw3e3PJ4ikqD8Sir1lzgDQ= Subject key identifier: 0A:F9:13:E5:83:B3:E9:09:ED:CC:25:9C:3B:C3:C3:8B:D5:40:AB:E1 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 33174F6AC453BFBF36E4C1945420A53C6992FF17 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a643a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 09 Aug 2023 00:00:00 +0000 ROA not before: Tue 08 Aug 2023 23:55:00 +0000 ROA not after: Wed 07 Aug 2024 00:00:00 +0000 asID: 38524 IP address blocks: 2401:de80:d::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 09:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:17:4f:6a:c4:53:bf:bf:36:e4:c1:94:54:20:a5:3c:69:92:ff:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Aug 8 23:55:00 2023 GMT Not After : Aug 7 00:00:00 2024 GMT Subject: CN=0AF913E583B3E909EDCC259C3BC3C38BD540ABE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:b7:b8:32:70:80:94:ea:d9:eb:91:87:99: b6:d1:f9:b7:a7:06:9d:c5:40:61:2b:b9:b1:98:a1: 52:59:aa:f3:96:db:42:ec:a8:fd:0c:17:d0:38:ae: be:d6:81:6a:3d:85:be:20:58:d4:16:f9:30:38:58: 20:46:f6:9b:50:ed:23:5f:45:66:5c:03:2c:86:86: c9:78:8f:1e:bb:5e:79:a2:70:23:94:e4:7b:28:40: 62:18:4e:2c:f3:08:c0:67:60:64:31:61:92:5b:00: af:41:a5:7d:22:76:1e:91:a1:08:25:7e:a3:19:b9: 9b:da:6d:54:d8:2e:5f:9f:02:db:33:be:cd:16:5e: 45:be:bc:d1:73:6c:b8:fd:f1:22:1b:fa:20:cd:65: 80:79:03:59:5e:a5:94:be:87:bc:81:c1:28:00:d7: 89:dc:79:1d:10:38:53:f6:cd:9c:c0:b4:43:61:d8: a9:1c:a5:7f:8c:25:61:db:8e:cb:7d:e2:3e:7c:e0: 30:27:0d:21:27:90:67:ce:69:19:d2:06:6d:78:f4: 33:5a:48:25:00:40:44:b7:ab:90:f2:d9:d9:6f:b9: fb:d8:7c:77:f7:0c:5e:16:b4:23:87:b2:2c:71:95: dd:f1:cc:16:73:da:db:2a:e2:bd:8c:7b:24:61:8f: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F9:13:E5:83:B3:E9:09:ED:CC:25:9C:3B:C3:C3:8B:D5:40:AB:E1 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a643a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:d::/48 Signature Algorithm: sha256WithRSAEncryption 5a:98:0f:71:49:0c:72:2b:08:bc:10:ea:e1:b2:d8:f8:91:be: 43:1d:23:29:ec:ec:bb:04:ef:8f:03:c5:53:fb:d7:2e:2b:bb: 2f:61:70:68:2c:82:2b:65:f2:f1:9e:7c:ab:5c:cf:0a:4c:4f: 6b:8d:e6:da:e5:91:2e:cd:94:f4:1a:ca:5a:15:c0:ea:f5:12: 6b:79:ce:cc:b7:7a:30:a7:0d:73:88:1d:27:4e:86:60:cc:8d: 4c:4c:f4:f7:a4:f3:24:da:f4:b0:b2:79:73:35:82:eb:83:1a: 79:4f:c4:bc:70:82:51:7c:9d:0b:e8:f7:f1:a1:8a:37:46:1a: 55:c1:df:41:85:8e:dd:25:07:67:08:1d:ec:35:5a:23:4f:e3: 1c:ef:cc:61:65:58:54:62:04:dc:7e:39:10:9c:b7:c0:2d:b9: b4:48:4e:11:50:5c:b0:01:5a:90:3b:13:41:c9:50:da:91:3a: 03:f0:41:8f:aa:88:90:03:30:93:6a:8b:2b:e7:f5:02:52:d0: 30:fc:c2:30:93:ad:37:70:e7:ed:79:26:e1:1d:8a:c6:fe:03: cb:ad:a6:2d:e8:1c:ea:d7:c4:a1:ab:a5:91:91:ba:5e:52:f3: 87:48:09:2d:c1:d2:e9:15:e8:48:fb:d1:de:42:3c:47:65:24: 10:b3:44:a8 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUMxdPasRTv7825MGUVCClPGmS/xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yMzA4MDgyMzU1MDBaFw0yNDA4MDcwMDAwMDBaMDMxMTAvBgNV BAMTKDBBRjkxM0U1ODNCM0U5MDlFRENDMjU5QzNCQzNDMzhCRDU0MEFCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKre4MnCAlOrZ65GHmbbR+ben Bp3FQGErubGYoVJZqvOW20LsqP0MF9A4rr7WgWo9hb4gWNQW+TA4WCBG9ptQ7SNf RWZcAyyGhsl4jx67XnmicCOU5HsoQGIYTizzCMBnYGQxYZJbAK9BpX0idh6RoQgl fqMZuZvabVTYLl+fAtszvs0WXkW+vNFzbLj98SIb+iDNZYB5A1lepZS+h7yBwSgA 14nceR0QOFP2zZzAtENh2KkcpX+MJWHbjst94j584DAnDSEnkGfOaRnSBm149DNa SCUAQES3q5Dy2dlvufvYfHf3DF4WtCOHsixxld3xzBZz2tsq4r2MeyRhjzkvAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUCvkT5YOz6QntzCWcO8PDi9VAq+EwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhNjQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAANMA0G CSqGSIb3DQEBCwUAA4IBAQBamA9xSQxyKwi8EOrhstj4kb5DHSMp7Oy7BO+PA8VT +9cuK7svYXBoLIIrZfLxnnyrXM8KTE9rjeba5ZEuzZT0GspaFcDq9RJrec7Mt3ow pw1ziB0nToZgzI1MTPT3pPMk2vSwsnlzNYLrgxp5T8S8cIJRfJ0L6PfxoYo3RhpV wd9BhY7dJQdnCB3sNVojT+Mc78xhZVhUYgTcfjkQnLfALbm0SE4RUFywAVqQOxNB yVDakToD8EGPqoiQAzCTaosr5/UCUtAw/MIwk603cOfteSbhHYrG/gPLraYt6Bzq 18Shq6WRkbpeUvOHSAktwdLpFehI+9HeQjxHZSQQs0So -----END CERTIFICATE-----Generated at Thu Apr 25 09:16:52 2024 by rpki-client on console-ams.rpki-client.org