$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: tCBvEMP9fTJ3TYQ1F9MRoca54VGqpa6CyxqKQIhTlQg= Subject key identifier: 9D:94:36:EC:E6:C1:66:59:FD:80:D9:CE:C6:43:91:25:53:BC:71:39 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 128FAE7C25516F74EA337C0B0F0015442718E14F Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa Signing time: Tue 12 Dec 2023 03:03:00 +0000 ROA not before: Tue 12 Dec 2023 02:58:00 +0000 ROA not after: Tue 10 Dec 2024 03:03:00 +0000 asID: 55685 IP address blocks: 2404:e100:b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8f:ae:7c:25:51:6f:74:ea:33:7c:0b:0f:00:15:44:27:18:e1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Dec 12 02:58:00 2023 GMT Not After : Dec 10 03:03:00 2024 GMT Subject: CN=9D9436ECE6C16659FD80D9CEC643912553BC7139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:e7:94:d4:09:62:f7:a4:03:12:3f:f2:f1: 5e:ef:5d:bd:28:65:48:75:d7:fb:45:46:74:71:59: fe:72:5d:cb:92:e9:37:3c:0e:ed:d4:ac:b8:e9:62: 12:66:e0:22:57:f6:7d:d4:b0:d1:bd:5c:5f:39:22: e9:5e:5d:8b:fe:2c:c1:10:19:51:aa:cc:75:98:dd: 5f:d7:30:a4:cf:de:8a:1d:5b:36:6f:3b:3b:3c:88: 45:c2:68:33:75:38:78:fa:2b:45:58:5c:c8:2d:f7: c6:a9:63:03:1c:94:10:16:58:96:27:77:3f:80:62: 34:b5:77:ab:9d:d1:36:59:dc:19:3b:30:94:1e:d8: b7:e9:93:21:b7:7e:7c:e5:0c:a5:53:63:31:72:2f: f6:13:6b:e6:73:b2:67:7a:db:53:ec:1a:a0:20:dc: 58:f7:95:81:2a:42:d8:df:bb:f5:a6:bf:fa:bb:b1: 5b:0e:da:1a:35:89:8c:3e:31:a1:1a:60:d5:0d:a7: c5:c2:d5:c9:f7:ff:b9:8e:6e:a6:75:dc:0f:2f:7e: 10:1e:79:b3:54:1a:61:32:bc:5c:36:ea:4d:46:6a: 47:36:67:0a:74:4b:b5:f0:84:5e:04:ff:69:59:38: f7:68:4e:a4:c4:72:eb:8b:83:d7:90:7d:3e:2d:c6: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:36:EC:E6:C1:66:59:FD:80:D9:CE:C6:43:91:25:53:BC:71:39 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:b::/48 Signature Algorithm: sha256WithRSAEncryption 9d:2d:6e:f4:b4:28:04:e3:c4:02:53:79:7d:e4:b8:5c:84:2e: 08:8a:69:ee:1b:bd:2b:23:1b:a6:50:73:94:1b:86:14:91:c5: 7c:9d:00:f6:7e:92:69:ab:c2:ed:35:bf:84:a7:90:ee:b8:7d: 49:31:54:5a:ca:59:1a:9c:fe:8c:67:1c:d9:25:92:dd:83:7e: 10:14:3b:2a:b7:da:95:a8:71:c4:a8:50:9b:49:72:c5:93:3b: 12:28:7b:56:fc:da:20:e2:4c:2b:64:b9:cf:36:64:1b:22:37: e4:03:c4:ba:6a:7f:8e:b2:f3:53:81:d4:4e:d4:11:bc:31:5a: 9c:9b:7b:2f:c7:fe:d5:96:19:e9:df:30:4d:0d:68:68:17:b5: 88:65:1a:70:88:6a:db:43:78:22:8d:72:83:bd:b7:93:92:9c: 97:5f:40:90:8f:b1:0c:05:fb:96:3a:02:79:ff:8e:e8:84:02: 54:13:38:d9:ad:50:b0:35:dc:b1:38:e4:e5:d0:2a:7d:51:4e: 1f:9f:49:32:43:04:26:be:ff:66:da:7d:f1:5b:26:4e:92:c5: 5a:a2:60:28:3d:36:a6:ed:9b:64:f9:9d:d4:52:41:b2:35:75: d9:48:4e:0b:5d:c7:bc:cc:0e:00:3d:34:67:50:e7:db:80:f6: b6:2a:03:0a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUEo+ufCVRb3TqM3wLDwAVRCcY4U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yMzEyMTIwMjU4MDBaFw0yNDEyMTAwMzAzMDBaMDMxMTAvBgNV BAMTKDlEOTQzNkVDRTZDMTY2NTlGRDgwRDlDRUM2NDM5MTI1NTNCQzcxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fueU1Ali96QDEj/y8V7vXb0o ZUh11/tFRnRxWf5yXcuS6Tc8Du3UrLjpYhJm4CJX9n3UsNG9XF85IuleXYv+LMEQ GVGqzHWY3V/XMKTP3oodWzZvOzs8iEXCaDN1OHj6K0VYXMgt98apYwMclBAWWJYn dz+AYjS1d6ud0TZZ3Bk7MJQe2LfpkyG3fnzlDKVTYzFyL/YTa+Zzsmd621PsGqAg 3Fj3lYEqQtjfu/Wmv/q7sVsO2ho1iYw+MaEaYNUNp8XC1cn3/7mObqZ13A8vfhAe ebNUGmEyvFw26k1Gakc2Zwp0S7XwhF4E/2lZOPdoTqTEcuuLg9eQfT4txnYTAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUnZQ27ObBZln9gNnOxkORJVO8cTkwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAALMA0G CSqGSIb3DQEBCwUAA4IBAQCdLW70tCgE48QCU3l95LhchC4IimnuG70rIxumUHOU G4YUkcV8nQD2fpJpq8LtNb+Ep5DuuH1JMVRaylkanP6MZxzZJZLdg34QFDsqt9qV qHHEqFCbSXLFkzsSKHtW/Nog4kwrZLnPNmQbIjfkA8S6an+OsvNTgdRO1BG8MVqc m3svx/7Vlhnp3zBNDWhoF7WIZRpwiGrbQ3gijXKDvbeTkpyXX0CQj7EMBfuWOgJ5 /47ohAJUEzjZrVCwNdyxOOTl0Cp9UU4fn0kyQwQmvv9m2n3xWyZOksVaomAoPTam 7Ztk+Z3UUkGyNXXZSE4LXce8zA4APTRnUOfbgPa2KgMK -----END CERTIFICATE-----Generated at Fri May 3 09:07:40 2024 by rpki-client on console-fra.rpki-client.org