$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: 0BEoacm/CAvmhJQJNa5QmAmBTLZWp6La8kv15453Sl0= Subject key identifier: 1D:01:DA:F5:11:0F:F0:ED:55:44:B6:93:BF:F8:15:26:DC:97:4E:28 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 12D54E6AADD638657D4767E2594E558439C06021 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa Signing time: Thu 30 Nov 2023 10:00:02 +0000 ROA not before: Thu 30 Nov 2023 09:55:02 +0000 ROA not after: Thu 28 Nov 2024 10:00:02 +0000 asID: 55685 IP address blocks: 2404:e100:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 10:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d5:4e:6a:ad:d6:38:65:7d:47:67:e2:59:4e:55:84:39:c0:60:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Nov 30 09:55:02 2023 GMT Not After : Nov 28 10:00:02 2024 GMT Subject: CN=1D01DAF5110FF0ED5544B693BFF81526DC974E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:48:23:a6:e8:8c:58:70:0b:6a:bc:32:b6:e0: b6:5b:53:97:93:af:23:53:0a:d8:2b:04:a1:6e:1f: c8:62:a5:20:97:e6:de:34:29:5c:8a:28:a7:6f:84: cc:db:59:91:d7:e4:79:2f:2f:4e:e1:4e:e1:03:90: 23:b7:5b:c4:60:04:7b:70:03:c5:ec:29:31:c0:44: 88:86:f2:c5:9b:02:d8:fa:e2:29:76:2d:68:5d:f6: 89:15:7c:3e:f7:ef:66:ee:de:74:75:66:a2:51:38: 3f:4c:b1:29:30:9f:ff:3e:b0:05:0b:53:08:f2:47: 6c:ce:b4:a7:8d:a4:f4:db:23:5f:cd:de:ce:06:62: 70:3d:ca:58:14:7d:78:07:74:56:42:99:9c:00:a1: a1:2a:be:74:9d:81:dc:f3:4f:ba:a0:61:2d:39:25: 18:ee:fb:4d:5e:7d:8a:25:67:4e:72:e3:7a:69:1f: fa:6f:0e:d3:ac:86:82:27:f8:d9:bf:bd:c7:a1:fd: 4d:f5:d1:2d:d2:a7:6c:ee:84:e8:e0:cb:ae:80:ae: 80:e4:10:3c:37:fe:ae:09:38:d1:37:e2:8f:ff:da: dd:32:dd:0f:ff:1f:d7:76:b8:f0:95:04:67:52:5b: f6:01:43:b9:9e:03:72:14:71:2b:5b:10:77:91:9c: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:01:DA:F5:11:0F:F0:ED:55:44:B6:93:BF:F8:15:26:DC:97:4E:28 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:3002::/48 Signature Algorithm: sha256WithRSAEncryption 04:4b:12:a3:18:67:70:57:16:74:bd:95:63:66:85:bc:8b:73: 5f:ab:88:53:f2:30:ff:8d:65:bf:e6:59:96:23:ca:ba:5a:98: 09:87:fd:24:bb:30:ec:28:b9:42:8a:ad:f7:55:2d:9a:08:ec: 9c:14:e9:78:5e:e3:12:15:1b:25:7d:0f:8a:9c:a5:82:98:b7: 06:e4:eb:78:b8:9a:ae:85:e5:34:f4:5f:03:11:bd:c7:62:01: ed:aa:d2:d0:80:f5:f8:3e:78:dc:67:1e:06:e4:82:ed:e0:a2: 21:45:a9:fa:85:91:27:7f:ca:b0:77:5a:31:68:3b:d8:d2:d8: 03:74:44:2f:e9:4c:56:54:96:9a:85:c4:be:32:8b:35:46:c3: ea:04:23:65:21:e2:c6:a9:38:95:01:41:4e:f6:cf:9c:28:cb: fc:30:49:15:c8:79:9d:14:97:80:10:11:5c:65:23:ef:d3:14: 26:fc:99:90:bb:5a:fb:53:d4:6a:61:ce:c9:f3:ae:9c:30:52: f6:e7:75:89:ba:c0:2f:05:83:38:be:46:88:47:32:23:55:d7: c8:22:22:fb:e5:33:6e:c7:d7:98:9d:ad:d0:c0:ec:e5:35:84: 20:8b:51:2d:80:89:05:fa:99:41:e8:02:6f:59:8f:e5:e0:ad: f5:39:25:49 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEtVOaq3WOGV9R2fiWU5VhDnAYCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yMzExMzAwOTU1MDJaFw0yNDExMjgxMDAwMDJaMDMxMTAvBgNV BAMTKDFEMDFEQUY1MTEwRkYwRUQ1NTQ0QjY5M0JGRjgxNTI2REM5NzRFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSCOm6IxYcAtqvDK24LZbU5eT ryNTCtgrBKFuH8hipSCX5t40KVyKKKdvhMzbWZHX5HkvL07hTuEDkCO3W8RgBHtw A8XsKTHARIiG8sWbAtj64il2LWhd9okVfD7372bu3nR1ZqJROD9MsSkwn/8+sAUL UwjyR2zOtKeNpPTbI1/N3s4GYnA9ylgUfXgHdFZCmZwAoaEqvnSdgdzzT7qgYS05 JRju+01efYolZ05y43ppH/pvDtOshoIn+Nm/vceh/U310S3Sp2zuhOjgy66AroDk EDw3/q4JONE34o//2t0y3Q//H9d2uPCVBGdSW/YBQ7meA3IUcStbEHeRnD+PAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUHQHa9REP8O1VRLaTv/gVJtyXTigwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzMzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATh ADACMA0GCSqGSIb3DQEBCwUAA4IBAQAESxKjGGdwVxZ0vZVjZoW8i3Nfq4hT8jD/ jWW/5lmWI8q6WpgJh/0kuzDsKLlCiq33VS2aCOycFOl4XuMSFRslfQ+KnKWCmLcG 5Ot4uJquheU09F8DEb3HYgHtqtLQgPX4PnjcZx4G5ILt4KIhRan6hZEnf8qwd1ox aDvY0tgDdEQv6UxWVJaahcS+Mos1RsPqBCNlIeLGqTiVAUFO9s+cKMv8MEkVyHmd FJeAEBFcZSPv0xQm/JmQu1r7U9RqYc7J866cMFL253WJusAvBYM4vkaIRzIjVdfI IiL75TNux9eYna3QwOzlNYQgi1EtgIkF+plB6AJvWY/l4K31OSVJ -----END CERTIFICATE-----Generated at Sat Apr 20 06:49:19 2024 by rpki-client on console-fra.rpki-client.org