$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS48.roa File: AS48.roa (raw, json) Hash identifier: 3jc2QH57PJ+9Y1yfzdofUCeBl6n6kaY9ztEnCFZkFpE= Subject key identifier: AF:5D:97:CF:53:C3:F7:C0:6A:E2:F5:2E:BF:6A:63:D8:47:8E:99:D1 Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 77CD3B7C022A5450C65349B0CA1ED4CB025EA498 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS48.roa Signing time: Sun 12 May 2024 06:00:59 +0000 ROA not before: Sun 12 May 2024 05:55:59 +0000 ROA not after: Sun 11 May 2025 06:00:59 +0000 asID: 48 IP address blocks: 2400:d680:1f3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:cd:3b:7c:02:2a:54:50:c6:53:49:b0:ca:1e:d4:cb:02:5e:a4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: May 12 05:55:59 2024 GMT Not After : May 11 06:00:59 2025 GMT Subject: CN=AF5D97CF53C3F7C06AE2F52EBF6A63D8478E99D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:3f:1a:71:56:27:51:ba:e4:2f:59:d1:58: a1:78:29:fe:8b:23:4c:af:07:77:61:dc:f9:42:6a: 16:a3:88:fb:72:5b:2b:ea:ef:ec:ff:2e:a7:7e:d2: 14:17:84:50:15:78:88:54:85:90:69:bd:eb:cf:03: 55:9f:2c:e9:8e:80:76:f3:96:14:9f:d2:a2:c5:5d: 6c:e7:93:74:2e:10:93:4c:76:be:6d:62:83:58:c3: 41:e6:ac:04:2a:8c:89:1f:08:b2:3e:f5:62:44:6a: 77:a4:7f:5e:54:bc:78:d0:be:60:78:dd:95:14:32: 6c:56:0e:04:db:40:9a:70:88:e9:03:5d:0b:81:c8: f9:42:e0:e5:2b:08:c2:7c:b7:cf:ab:cd:a7:a0:f6: c7:78:58:00:c7:fc:b9:27:2f:f6:22:c2:61:f2:a4: 41:2f:40:b5:ae:83:2b:17:05:e6:c1:20:d1:91:ca: b1:5a:32:5a:a2:75:d1:52:3a:b0:1e:54:08:82:8b: 56:41:59:43:05:f8:62:36:9e:73:8f:75:01:06:6c: 70:e9:63:ba:03:09:ba:f8:a0:51:4d:0e:62:c2:98: 3d:ca:cf:d2:75:4a:7e:ed:1a:27:98:34:65:0a:8f: a2:51:f1:3e:b8:a0:ed:31:df:5d:06:48:b0:82:cb: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5D:97:CF:53:C3:F7:C0:6A:E2:F5:2E:BF:6A:63:D8:47:8E:99:D1 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS48.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d680:1f3::/48 Signature Algorithm: sha256WithRSAEncryption 6f:0f:ea:6c:61:d2:89:02:da:63:e2:37:4a:26:25:97:2b:39: 9a:90:e0:ed:e4:cc:1e:08:34:46:01:62:3f:15:35:6e:47:26: eb:fe:99:22:5d:42:d0:ac:ff:5c:e3:2e:40:e1:1e:d4:4b:2f: aa:58:f9:8e:92:56:e3:ed:bf:ae:db:d7:b5:7a:45:ae:11:15: f3:38:76:f1:90:56:77:bf:9c:0e:66:70:cc:82:be:0d:87:17: f4:23:1b:9f:f6:ab:1e:ec:ff:d3:2d:84:3e:f0:f3:06:f3:c3: 65:14:e1:ee:27:b4:84:3b:88:3a:ad:8f:58:b2:8d:7a:3d:3d: e9:0f:cd:a2:29:cd:39:61:f1:d5:6c:40:31:23:ab:5c:e6:64: dd:c2:9c:87:09:b8:e9:9e:e8:21:32:06:57:2e:e2:fc:81:86: 98:36:d2:96:12:f7:d6:3a:93:49:96:7a:12:f5:89:64:58:97: ca:b0:82:b2:76:46:30:b1:46:cc:1a:e1:de:ac:d0:c1:24:b6: 50:d0:d6:62:26:00:7b:06:62:c1:8d:33:1f:5f:ac:23:93:3f: d1:18:31:44:5e:40:41:2f:12:b1:12:a2:cb:32:9b:53:a5:ef: 8d:32:31:01:bb:a1:69:2b:62:e2:39:49:60:73:4a:3a:c2:18: 3e:d5:b8:03 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUd807fAIqVFDGU0mwyh7UywJepJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNDA1MTIwNTU1NTlaFw0yNTA1MTEwNjAwNTlaMDMxMTAvBgNV BAMTKEFGNUQ5N0NGNTNDM0Y3QzA2QUUyRjUyRUJGNkE2M0Q4NDc4RTk5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPT8acVYnUbrkL1nRWKF4Kf6L I0yvB3dh3PlCahajiPtyWyvq7+z/Lqd+0hQXhFAVeIhUhZBpvevPA1WfLOmOgHbz lhSf0qLFXWznk3QuEJNMdr5tYoNYw0HmrAQqjIkfCLI+9WJEanekf15UvHjQvmB4 3ZUUMmxWDgTbQJpwiOkDXQuByPlC4OUrCMJ8t8+rzaeg9sd4WADH/LknL/YiwmHy pEEvQLWugysXBebBINGRyrFaMlqiddFSOrAeVAiCi1ZBWUMF+GI2nnOPdQEGbHDp Y7oDCbr4oFFNDmLCmD3Kz9J1Sn7tGieYNGUKj6JR8T64oO0x310GSLCCy9aRAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUr12Xz1PD98Bq4vUuv2pj2EeOmdEwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby9hODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02 OGQyYmQ2M2M5YzMvMC9BUzQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADWgAHzMA0GCSqGSIb3DQEB CwUAA4IBAQBvD+psYdKJAtpj4jdKJiWXKzmakODt5MweCDRGAWI/FTVuRybr/pki XULQrP9c4y5A4R7USy+qWPmOklbj7b+u29e1ekWuERXzOHbxkFZ3v5wOZnDMgr4N hxf0Ixuf9qse7P/TLYQ+8PMG88NlFOHuJ7SEO4g6rY9Yso16PT3pD82iKc05YfHV bEAxI6tc5mTdwpyHCbjpnughMgZXLuL8gYaYNtKWEvfWOpNJlnoS9YlkWJfKsIKy dkYwsUbMGuHerNDBJLZQ0NZiJgB7BmLBjTMfX6wjkz/RGDFEXkBBLxKxEqLLMptT pe+NMjEBu6FpK2LiOUlgc0o6whg+1bgD -----END CERTIFICATE-----Generated at Sat May 18 21:23:57 2024 by rpki-client on console-fra.rpki-client.org