$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a373a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a373a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: IUjgVAt43EnOWdlK4AKgpx42vuuHvvqdq5nkR2yt2u0= Subject key identifier: E8:06:ED:39:EB:B7:E7:EC:A6:11:9D:64:34:DD:17:55:77:06:6F:BD Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 0246A6124B0B2AD573D6A30EADEE3C313FC5C7EA Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a373a3a2f34382d3438203d3e203535363835.roa Signing time: Fri 24 Nov 2023 12:33:00 +0000 ROA not before: Fri 24 Nov 2023 12:28:00 +0000 ROA not after: Fri 22 Nov 2024 12:33:00 +0000 asID: 55685 IP address blocks: 2404:e100:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:46:a6:12:4b:0b:2a:d5:73:d6:a3:0e:ad:ee:3c:31:3f:c5:c7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Nov 24 12:28:00 2023 GMT Not After : Nov 22 12:33:00 2024 GMT Subject: CN=E806ED39EBB7E7ECA6119D6434DD175577066FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:18:27:f8:7d:c7:4f:34:4d:8f:bd:a1:08: a2:e9:55:27:84:58:26:79:ef:3a:0f:58:cf:e1:10: af:f3:69:3c:d7:86:b8:a5:da:43:c7:42:9b:9f:c2: 83:e5:fd:f9:0d:29:34:89:d7:2e:a1:93:25:f0:68: f2:19:2c:d2:a3:ff:63:44:a7:16:a3:2e:21:c1:bf: 8f:75:b2:29:fb:13:0c:2b:34:55:09:02:98:f8:1b: c3:3e:b6:58:77:73:e2:81:35:ff:32:f9:19:91:63: cc:22:d8:51:ef:20:ec:e8:7f:d4:69:6f:cd:d6:b6: 1d:c8:35:37:70:76:11:fa:6e:09:f9:c4:91:58:d6: 53:5e:2e:74:30:b9:f9:c1:4a:cd:16:e2:a0:e3:50: 58:6e:fb:e5:ff:d9:9a:9e:ff:1a:8c:11:1c:19:fc: 07:e8:bd:a8:fb:bb:4f:e5:5a:dd:10:d5:43:67:ea: 31:00:d8:00:8e:f5:17:bd:8d:61:db:6b:cd:49:69: 01:31:92:38:06:44:02:4b:77:77:1e:27:7a:12:d8: ca:ef:42:83:e5:1a:23:27:88:5b:08:80:fa:45:c8: eb:7e:68:07:ea:4c:a6:a1:79:29:88:f4:3f:f2:1d: b8:5a:1c:e6:14:ae:64:35:35:0d:f8:23:0d:8b:3b: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:06:ED:39:EB:B7:E7:EC:A6:11:9D:64:34:DD:17:55:77:06:6F:BD X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a373a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:7::/48 Signature Algorithm: sha256WithRSAEncryption 86:21:a0:61:12:17:ec:8a:64:10:86:21:3c:9a:60:81:3a:ae: 98:92:8d:28:f4:d0:5a:89:b1:70:67:b1:4e:85:eb:f5:fe:d9: 62:6b:d5:8a:00:01:d2:a7:c8:cc:d5:d6:79:ce:64:27:13:ec: 8d:73:c4:75:38:89:6b:69:6b:30:a2:a7:7f:7b:0a:36:ed:a5: 54:7a:4b:1b:74:97:eb:bf:51:d4:48:f5:e4:11:1b:97:f2:86: 11:45:35:4d:b9:f7:1a:f8:3a:1c:31:49:b7:e2:a0:e5:61:97: 3d:d4:c0:d1:ca:39:07:ce:3c:32:3d:4b:cb:57:0d:af:dc:27: c4:16:77:52:cd:05:58:31:2d:16:52:96:70:a1:8b:82:84:53: 67:89:12:f9:65:f6:83:8b:d4:3b:c6:d4:6c:8d:5f:f0:9b:5e: 37:01:78:9d:ee:93:59:00:f7:91:79:26:53:09:bf:39:d0:80: 78:59:60:1d:27:d5:31:1d:02:8f:c6:38:8d:36:21:9d:6a:fa: 58:13:f7:35:a5:eb:19:28:7c:0a:39:31:43:06:7c:79:51:d4: e0:5a:99:f5:49:68:6c:3a:ef:4a:37:5c:a9:76:d8:d5:d2:ea: 04:a0:0c:9d:c9:20:4c:a5:f8:8d:9e:7b:f4:63:6c:62:44:c0: 33:10:74:6e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUAkamEksLKtVz1qMOre48MT/Fx+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yMzExMjQxMjI4MDBaFw0yNDExMjIxMjMzMDBaMDMxMTAvBgNV BAMTKEU4MDZFRDM5RUJCN0U3RUNBNjExOUQ2NDM0REQxNzU1NzcwNjZGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbShgn+H3HTzRNj72hCKLpVSeE WCZ57zoPWM/hEK/zaTzXhril2kPHQpufwoPl/fkNKTSJ1y6hkyXwaPIZLNKj/2NE pxajLiHBv491sin7EwwrNFUJApj4G8M+tlh3c+KBNf8y+RmRY8wi2FHvIOzof9Rp b83Wth3INTdwdhH6bgn5xJFY1lNeLnQwufnBSs0W4qDjUFhu++X/2Zqe/xqMERwZ /Afovaj7u0/lWt0Q1UNn6jEA2ACO9Re9jWHba81JaQExkjgGRAJLd3ceJ3oS2Mrv QoPlGiMniFsIgPpFyOt+aAfqTKaheSmI9D/yHbhaHOYUrmQ1NQ34Iw2LO6fBAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU6AbtOeu35+ymEZ1kNN0XVXcGb70wHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAAHMA0G CSqGSIb3DQEBCwUAA4IBAQCGIaBhEhfsimQQhiE8mmCBOq6Yko0o9NBaibFwZ7FO hev1/tlia9WKAAHSp8jM1dZ5zmQnE+yNc8R1OIlraWswoqd/ewo27aVUeksbdJfr v1HUSPXkERuX8oYRRTVNufca+DocMUm34qDlYZc91MDRyjkHzjwyPUvLVw2v3CfE FndSzQVYMS0WUpZwoYuChFNniRL5ZfaDi9Q7xtRsjV/wm143AXid7pNZAPeReSZT Cb850IB4WWAdJ9UxHQKPxjiNNiGdavpYE/c1pesZKHwKOTFDBnx5UdTgWpn1SWhs Ou9KN1ypdtjV0uoEoAydySBMpfiNnnv0Y2xiRMAzEHRu -----END CERTIFICATE-----Generated at Fri May 3 10:33:22 2024 by rpki-client on console-ams.rpki-client.org