$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: USWUHJkjKVa3MnQPU97On9v1R0bsTtezt/fGMs5vH0w= Subject key identifier: 86:AF:F6:89:7A:08:4C:09:88:DE:35:26:0A:69:9C:87:56:B0:48:16 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 3A441DC8AC71BED9A244E5DFE9DA28CF6F70CB61 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 20 Dec 2023 15:00:01 +0000 ROA not before: Wed 20 Dec 2023 14:55:01 +0000 ROA not after: Wed 18 Dec 2024 15:00:01 +0000 asID: 38156 IP address blocks: 2405:a540:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:44:1d:c8:ac:71:be:d9:a2:44:e5:df:e9:da:28:cf:6f:70:cb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Dec 20 14:55:01 2023 GMT Not After : Dec 18 15:00:01 2024 GMT Subject: CN=86AFF6897A084C0988DE35260A699C8756B04816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:08:e1:a2:0f:ca:3c:43:d4:e3:63:6a:79: 6c:ba:73:6b:a1:30:e3:62:cf:85:b7:5f:a9:d9:ff: 45:69:37:84:b1:04:c5:04:f8:de:cb:cd:41:76:7b: e0:b3:e0:93:64:d3:4b:58:6e:a7:44:da:38:f9:02: db:3e:a3:bf:22:70:a5:db:4b:f2:2b:66:61:f5:dc: 41:b8:ec:8d:05:35:d1:cb:e4:87:05:b2:a5:fd:9f: 17:f5:5f:69:25:3b:3b:75:cb:b6:b6:76:3b:59:4f: b0:3b:0d:b7:ae:3a:79:a7:e0:ec:5b:21:99:96:ec: 0a:6c:14:75:13:85:7e:f0:3d:61:9d:11:2a:c3:c1: 6b:2b:9e:db:d4:ef:39:95:b9:46:5d:b6:bd:bc:24: 68:e1:41:0b:fd:2c:f3:2f:12:7d:50:2d:92:42:bf: 2a:36:45:43:a2:b9:aa:0b:17:89:c8:50:1a:c9:bb: b8:77:d5:97:18:3e:00:34:52:3f:bc:f3:b4:6e:5e: 10:b5:07:65:29:db:6e:bf:32:7f:50:32:86:36:cb: 98:fa:7c:b0:42:00:fb:a8:64:7c:71:da:9b:b1:0e: 28:91:97:4d:dd:cb:3e:60:82:3e:30:b0:c1:83:6b: f8:e1:10:9e:ef:b6:1b:51:77:4f:e9:a3:fc:76:a6: 92:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AF:F6:89:7A:08:4C:09:88:DE:35:26:0A:69:9C:87:56:B0:48:16 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1005::/48 Signature Algorithm: sha256WithRSAEncryption b2:a7:52:a0:e9:02:d8:f8:37:86:5c:dd:be:6d:98:5b:c0:69: c0:01:7c:16:36:0a:2e:b4:d1:4f:01:77:2e:4e:47:16:75:52: 47:ec:d7:a4:be:63:d2:15:9d:9f:c5:99:ed:a1:6e:58:88:80: 18:90:48:d3:54:eb:ba:4d:16:86:94:1b:39:0a:8e:8c:4c:71: 14:5c:db:c1:41:bb:7f:53:b4:71:2d:fa:15:9b:af:f4:88:67: c8:e6:e6:b6:c0:15:2b:e7:6a:bc:d9:e9:97:c6:64:ad:79:eb: 2b:b2:24:fe:e4:4d:39:27:68:eb:fd:2b:0b:4d:1b:00:d0:44: 83:cc:54:ee:ff:c0:a9:02:14:3b:7f:98:04:a5:49:cf:ca:5a: a4:5a:fd:50:14:2b:71:c2:f9:ec:51:f7:54:7c:ba:85:c2:02: d0:36:d1:58:fb:9a:75:fc:83:a2:f8:6e:17:7a:60:30:e9:b8: 10:9a:74:ed:67:5f:59:f9:93:1b:07:f6:42:17:09:bb:0e:4e: e6:9b:2b:98:7e:59:98:3c:90:b0:2d:3b:a6:58:04:bb:f7:9c: 5c:9a:d8:ba:55:d6:9b:6c:72:3e:28:47:9a:4e:9f:f8:2f:ce: 10:56:5d:c0:f8:ad:9b:e0:94:18:4b:09:c3:b3:72:bd:05:09: bf:1d:f2:21 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOkQdyKxxvtmiROXf6dooz29wy2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yMzEyMjAxNDU1MDFaFw0yNDEyMTgxNTAwMDFaMDMxMTAvBgNV BAMTKDg2QUZGNjg5N0EwODRDMDk4OERFMzUyNjBBNjk5Qzg3NTZCMDQ4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8Ajhog/KPEPU42NqeWy6c2uh MONiz4W3X6nZ/0VpN4SxBMUE+N7LzUF2e+Cz4JNk00tYbqdE2jj5Ats+o78icKXb S/IrZmH13EG47I0FNdHL5IcFsqX9nxf1X2klOzt1y7a2djtZT7A7DbeuOnmn4Oxb IZmW7ApsFHUThX7wPWGdESrDwWsrntvU7zmVuUZdtr28JGjhQQv9LPMvEn1QLZJC vyo2RUOiuaoLF4nIUBrJu7h31ZcYPgA0Uj+887RuXhC1B2Up226/Mn9QMoY2y5j6 fLBCAPuoZHxx2puxDiiRl03dyz5ggj4wsMGDa/jhEJ7vthtRd0/po/x2ppIHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhq/2iXoITAmI3jUmCmmch1awSBYwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAFMA0GCSqGSIb3DQEBCwUAA4IBAQCyp1Kg6QLY+DeGXN2+bZhbwGnAAXwWNgou tNFPAXcuTkcWdVJH7NekvmPSFZ2fxZntoW5YiIAYkEjTVOu6TRaGlBs5Co6MTHEU XNvBQbt/U7RxLfoVm6/0iGfI5ua2wBUr52q82emXxmSteesrsiT+5E05J2jr/SsL TRsA0ESDzFTu/8CpAhQ7f5gEpUnPylqkWv1QFCtxwvnsUfdUfLqFwgLQNtFY+5p1 /IOi+G4XemAw6bgQmnTtZ19Z+ZMbB/ZCFwm7Dk7mmyuYflmYPJCwLTumWAS795xc mti6VdabbHI+KEeaTp/4L84QVl3A+K2b4JQYSwnDs3K9BQm/HfIh -----END CERTIFICATE-----Generated at Sun May 5 17:20:20 2024 by rpki-client on console-fra.rpki-client.org