$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: M0KqRRcQRWcDYHdoo9MAdglvWhcWalimuEDRsZuWDBk= Subject key identifier: 28:EA:C5:8E:2A:7C:5D:8F:2E:60:30:37:E3:25:CC:09:2A:7A:10:04 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 2D5FB2FDEC7C28B5AD36B4C05A62D95BD4DD0AE0 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa Signing time: Fri 24 Nov 2023 12:32:42 +0000 ROA not before: Fri 24 Nov 2023 12:27:42 +0000 ROA not after: Fri 22 Nov 2024 12:32:42 +0000 asID: 55685 IP address blocks: 2404:e100:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5f:b2:fd:ec:7c:28:b5:ad:36:b4:c0:5a:62:d9:5b:d4:dd:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Nov 24 12:27:42 2023 GMT Not After : Nov 22 12:32:42 2024 GMT Subject: CN=28EAC58E2A7C5D8F2E603037E325CC092A7A1004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:72:4d:29:1e:c0:21:e5:82:b5:95:58:6a: 66:82:9a:0f:49:a5:f9:2c:eb:c3:54:ee:6a:c0:9f: 96:59:23:ec:dd:6a:54:2b:22:be:e2:ca:59:fe:d7: 2a:44:66:b7:f0:9b:72:5d:fe:3b:b9:de:89:84:8d: 15:53:1f:ae:f9:63:cb:99:58:28:c2:66:d5:5f:ec: 0e:86:1a:93:b9:89:39:ae:a8:8c:2c:f9:04:ce:49: a5:87:c8:50:d5:b7:d5:81:86:db:d0:5e:60:ce:ed: 67:cb:2d:12:24:b4:3e:43:8a:cb:be:94:89:4c:dc: 22:8f:40:a7:9d:bb:0a:8c:e6:c0:f0:68:71:86:a1: c1:a0:2d:f7:f1:fc:9b:48:5d:50:4b:a1:66:92:7d: 04:fb:1f:16:fa:cd:ab:08:2d:27:c0:f6:a4:5c:5b: 0f:d9:f5:88:b3:3d:8f:97:25:87:f4:ab:e2:b3:99: e9:d3:92:81:b9:96:b4:8f:0a:05:ce:75:bd:16:ff: 86:a9:56:54:28:84:73:2c:af:58:c2:1c:17:f8:c1: 28:12:fa:2a:dc:36:d4:09:ed:00:f0:87:ae:25:df: 44:4e:f1:a0:84:84:33:04:29:2a:ca:77:40:b9:5d: ac:c5:e3:00:21:f7:97:e1:ae:c7:af:19:6a:6f:08: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EA:C5:8E:2A:7C:5D:8F:2E:60:30:37:E3:25:CC:09:2A:7A:10:04 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:6::/48 Signature Algorithm: sha256WithRSAEncryption 93:a4:89:15:b3:40:e0:8e:de:ef:87:d1:62:43:e6:96:b6:b1: 0e:01:17:ee:c1:fc:67:3d:37:aa:7d:76:b2:69:4b:cc:6f:1a: 44:f5:2f:4a:2e:0f:2a:b3:76:42:ca:8e:14:c4:98:5c:a6:34: 5c:14:c2:c4:05:4b:c0:b2:e8:cf:a7:5c:92:69:1f:5c:f5:1b: f1:96:e3:27:82:be:15:95:d3:90:21:df:a8:7a:13:13:7b:cd: 61:84:03:dc:ff:3d:fe:d3:5f:f0:2d:cf:76:30:d7:6b:2b:10: 8c:5e:30:38:0c:02:8b:e2:00:80:c5:b1:5e:12:3a:0d:3b:d8: 85:8d:c4:b9:a8:53:b1:ee:d6:11:43:8c:2e:a1:ff:b2:72:e4: 2a:27:70:67:26:79:82:6d:64:5b:22:76:75:ce:3f:ac:f3:12: 3d:21:7e:0c:3b:e5:ce:e0:72:b6:62:de:26:62:52:ec:1e:41: 95:d9:7b:eb:a6:b4:8b:4a:73:dc:f0:c9:e2:c3:54:45:9e:a9: c9:b6:95:10:c6:eb:e6:e3:7c:33:3f:e1:c7:93:c6:f8:c6:a0: 70:67:36:98:f1:1f:0e:3c:2a:03:fe:8b:5a:2f:6a:10:a3:fb: 7d:de:02:50:13:9f:30:95:50:ca:43:79:84:e5:53:be:87:c8: cb:6a:0a:32 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIULV+y/ex8KLWtNrTAWmLZW9TdCuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yMzExMjQxMjI3NDJaFw0yNDExMjIxMjMyNDJaMDMxMTAvBgNV BAMTKDI4RUFDNThFMkE3QzVEOEYyRTYwMzAzN0UzMjVDQzA5MkE3QTEwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxU3JNKR7AIeWCtZVYamaCmg9J pfks68NU7mrAn5ZZI+zdalQrIr7iyln+1ypEZrfwm3Jd/ju53omEjRVTH675Y8uZ WCjCZtVf7A6GGpO5iTmuqIws+QTOSaWHyFDVt9WBhtvQXmDO7WfLLRIktD5Disu+ lIlM3CKPQKeduwqM5sDwaHGGocGgLffx/JtIXVBLoWaSfQT7Hxb6zasILSfA9qRc Ww/Z9YizPY+XJYf0q+KzmenTkoG5lrSPCgXOdb0W/4apVlQohHMsr1jCHBf4wSgS +ircNtQJ7QDwh64l30RO8aCEhDMEKSrKd0C5XazF4wAh95fhrsevGWpvCBZJAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUKOrFjip8XY8uYDA34yXMCSp6EAQwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAAGMA0G CSqGSIb3DQEBCwUAA4IBAQCTpIkVs0Dgjt7vh9FiQ+aWtrEOARfuwfxnPTeqfXay aUvMbxpE9S9KLg8qs3ZCyo4UxJhcpjRcFMLEBUvAsujPp1ySaR9c9RvxluMngr4V ldOQId+oehMTe81hhAPc/z3+01/wLc92MNdrKxCMXjA4DAKL4gCAxbFeEjoNO9iF jcS5qFOx7tYRQ4wuof+ycuQqJ3BnJnmCbWRbInZ1zj+s8xI9IX4MO+XO4HK2Yt4m YlLsHkGV2XvrprSLSnPc8Mniw1RFnqnJtpUQxuvm43wzP+HHk8b4xqBwZzaY8R8O PCoD/otaL2oQo/t93gJQE58wlVDKQ3mE5VO+h8jLagoy -----END CERTIFICATE-----Generated at Fri May 3 10:33:22 2024 by rpki-client on console-ams.rpki-client.org