$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: idX48zKppyV36Wo9pELVAaE3SlHo3hqfWeQykUrlx8o= Subject key identifier: C2:E0:59:14:62:5F:3C:C4:9B:5E:66:3F:C1:46:96:86:35:C6:3A:FD Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 03DE3F94B82EFC1F16ED368471F254D1417BA8FD Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 20 Dec 2023 15:00:02 +0000 ROA not before: Wed 20 Dec 2023 14:55:02 +0000 ROA not after: Wed 18 Dec 2024 15:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:1006::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:de:3f:94:b8:2e:fc:1f:16:ed:36:84:71:f2:54:d1:41:7b:a8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Dec 20 14:55:02 2023 GMT Not After : Dec 18 15:00:02 2024 GMT Subject: CN=C2E05914625F3CC49B5E663FC146968635C63AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:2a:ac:34:c9:21:a7:18:61:a1:87:5f:24: 65:4b:6d:e4:e0:6b:c0:08:d3:5d:ed:a9:33:f8:d6: d3:44:3f:b8:59:d1:03:3e:93:0e:f6:57:85:e7:e9: 1c:32:4c:35:16:06:62:a7:9a:60:67:74:2a:3a:f6: 15:fa:64:27:e9:a9:a4:2e:f9:68:1f:14:86:e7:8f: 87:25:1b:67:0d:00:0d:74:dc:25:ad:4a:2e:4e:08: 6f:cd:73:81:f4:7d:58:be:d8:ac:1c:68:cc:3e:a5: db:c8:2b:e0:d1:5b:60:32:8d:97:d4:b3:72:7e:69: 7a:74:0c:e5:22:63:c8:7b:4b:41:a9:71:6b:23:33: ca:36:81:f4:a4:00:ee:3c:89:8c:ef:6d:7a:0f:70: 30:10:cd:45:5f:03:12:15:79:a8:20:b8:ea:97:30: d0:34:73:84:e9:13:f0:3a:6b:7d:15:d9:89:89:d4: 09:ee:3a:fd:14:f1:4f:ad:45:77:48:9d:80:03:55: ff:1e:fe:b8:3f:2c:f7:70:ad:4c:e0:c3:7d:0e:2a: ed:65:47:7d:7e:50:d8:be:c8:92:a3:78:57:37:f1: 01:39:9d:1a:08:4d:65:0b:cc:10:3c:89:7f:33:6b: 52:34:57:c6:be:96:ba:e9:2c:bb:41:e3:d3:a1:a8: 45:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E0:59:14:62:5F:3C:C4:9B:5E:66:3F:C1:46:96:86:35:C6:3A:FD X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1006::/48 Signature Algorithm: sha256WithRSAEncryption a1:4f:aa:89:5e:64:f5:6b:53:24:df:f8:f8:80:09:40:f4:b1: 59:61:0d:ab:03:af:ac:6e:56:38:26:38:75:c9:98:ba:cb:98: 90:b3:64:a8:97:f9:92:e8:7f:46:93:6e:bf:ba:cd:11:d6:df: c3:b1:ac:cc:2d:d7:82:ef:a4:b1:73:70:de:7e:7d:8c:56:88: de:64:de:ef:f8:2e:6b:d9:a7:55:b5:5a:b0:6a:83:40:70:52: 9e:4f:b5:05:a9:8b:36:09:9a:c3:ce:75:7e:d5:fc:8c:e2:49: 3e:9b:d7:07:df:59:fc:3e:ed:2c:bd:eb:ce:fb:df:17:62:2f: ea:47:aa:cd:cc:c0:40:b5:07:aa:dc:b4:81:25:1f:9b:5f:d9: 59:48:1a:3e:20:c8:7f:42:9d:6b:2b:fd:17:3a:61:e1:e5:92: 5b:54:f5:5b:14:8b:00:79:36:f9:a9:dd:37:39:ce:82:ca:88: 91:c3:49:eb:82:17:10:c6:0c:42:30:79:f7:31:a4:79:c6:3c: 0c:c5:42:9e:fd:95:bb:3c:b9:ed:3d:bc:7e:1e:da:77:15:1f: a4:dc:53:d3:62:62:11:b1:bc:82:65:c2:77:2b:1e:7d:f9:27: 64:71:ea:17:60:d0:92:77:66:af:9e:02:fd:fe:c9:73:89:c0: 80:f8:70:ad -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUA94/lLgu/B8W7TaEcfJU0UF7qP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yMzEyMjAxNDU1MDJaFw0yNDEyMTgxNTAwMDJaMDMxMTAvBgNV BAMTKEMyRTA1OTE0NjI1RjNDQzQ5QjVFNjYzRkMxNDY5Njg2MzVDNjNBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiiqsNMkhpxhhoYdfJGVLbeTg a8AI013tqTP41tNEP7hZ0QM+kw72V4Xn6RwyTDUWBmKnmmBndCo69hX6ZCfpqaQu +WgfFIbnj4clG2cNAA103CWtSi5OCG/Nc4H0fVi+2KwcaMw+pdvIK+DRW2AyjZfU s3J+aXp0DOUiY8h7S0GpcWsjM8o2gfSkAO48iYzvbXoPcDAQzUVfAxIVeagguOqX MNA0c4TpE/A6a30V2YmJ1AnuOv0U8U+tRXdInYADVf8e/rg/LPdwrUzgw30OKu1l R31+UNi+yJKjeFc38QE5nRoITWULzBA8iX8za1I0V8a+lrrpLLtB49OhqEXrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUwuBZFGJfPMSbXmY/wUaWhjXGOv0wHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAGMA0GCSqGSIb3DQEBCwUAA4IBAQChT6qJXmT1a1Mk3/j4gAlA9LFZYQ2rA6+s blY4Jjh1yZi6y5iQs2Sol/mS6H9Gk26/us0R1t/DsazMLdeC76Sxc3Defn2MVoje ZN7v+C5r2adVtVqwaoNAcFKeT7UFqYs2CZrDznV+1fyM4kk+m9cH31n8Pu0svevO +98XYi/qR6rNzMBAtQeq3LSBJR+bX9lZSBo+IMh/Qp1rK/0XOmHh5ZJbVPVbFIsA eTb5qd03Oc6CyoiRw0nrghcQxgxCMHn3MaR5xjwMxUKe/ZW7PLntPbx+Htp3FR+k 3FPTYmIRsbyCZcJ3Kx59+SdkceoXYNCSd2avngL9/slzicCA+HCt -----END CERTIFICATE-----Generated at Sun May 5 17:20:20 2024 by rpki-client on console-fra.rpki-client.org