$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323430353a383138303a3a2f33322d3438203d3e20313335343738.roa File: 323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (raw, json) Hash identifier: WeoXYwH/rSRQpbP80oMBLEDValKHHjObQstAslS85JU= Subject key identifier: 25:F8:6E:B4:C3:71:35:F4:96:7F:30:B8:29:5F:47:29:2F:6F:DE:B1 Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Certificate serial: 1546D752F433AB7ECC9EC55F2D6E5B96C33499F6 Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323430353a383138303a3a2f33322d3438203d3e20313335343738.roa Signing time: Tue 19 Dec 2023 02:00:00 +0000 ROA not before: Tue 19 Dec 2023 01:55:00 +0000 ROA not after: Tue 17 Dec 2024 02:00:00 +0000 asID: 135478 IP address blocks: 2405:8180::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:46:d7:52:f4:33:ab:7e:cc:9e:c5:5f:2d:6e:5b:96:c3:34:99:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Validity Not Before: Dec 19 01:55:00 2023 GMT Not After : Dec 17 02:00:00 2024 GMT Subject: CN=25F86EB4C37135F4967F30B8295F47292F6FDEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cf:9f:29:fc:83:4e:63:16:08:87:02:5f:67: 0f:a2:15:0c:d2:9a:9c:76:6d:d4:fa:c1:88:fc:e1: 0b:c9:4e:92:02:c8:0d:1f:05:0a:ee:30:23:59:ed: e1:9f:66:d0:a1:fd:2c:d3:f8:51:b1:3d:80:5d:71: 3e:89:0b:9a:23:58:0e:3c:47:fc:48:5c:55:73:5f: 1b:df:33:f6:f9:85:b2:8b:44:c1:c6:af:21:f4:02: 42:22:1a:d0:4a:23:1c:f7:05:20:ee:7e:06:72:10: 14:25:da:42:ff:ba:83:b4:3b:4a:5c:35:81:c8:f2: c4:c9:04:26:1d:ee:c1:3b:17:fd:23:52:60:b6:84: dd:8b:f9:35:1d:23:f9:c5:2b:39:ee:2f:7c:81:c8: 93:f1:99:12:44:22:67:05:07:3b:9b:c0:08:13:0e: 5f:96:63:4b:fd:51:46:e5:94:d3:88:84:45:b4:4c: 6f:32:be:41:47:39:23:51:bc:cd:10:b2:07:12:a4: 91:3a:ac:5f:bf:5b:cf:06:cb:39:13:8e:72:6f:9d: be:bf:4a:93:86:ef:c3:ae:da:a2:fc:f5:ed:c4:b7: 37:38:79:98:98:3e:11:9c:a5:e9:b0:f7:17:58:7b: cc:30:53:e7:f1:e5:ab:3e:03:7d:39:65:09:e7:09: e9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F8:6E:B4:C3:71:35:F4:96:7F:30:B8:29:5F:47:29:2F:6F:DE:B1 X509v3 Authority Key Identifier: keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323430353a383138303a3a2f33322d3438203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:8180::/32 Signature Algorithm: sha256WithRSAEncryption 5f:b3:0f:18:74:af:bc:55:42:29:79:d3:1c:43:1c:ca:3a:e9: d3:20:0a:37:5e:d8:e9:32:82:4b:f7:c0:6d:4b:de:a9:ed:70: 91:36:d7:a2:84:66:45:a6:f3:dd:d7:af:ba:3b:43:0e:62:8e: 69:9b:66:46:d3:a7:9e:5f:35:91:3d:c2:ce:35:70:89:f5:9a: 24:8c:e7:b7:f1:de:02:61:e5:24:a3:b0:71:87:60:0c:99:9b: e6:8b:23:a6:88:e4:09:26:b2:d9:36:26:9b:ee:c7:e1:d6:34: 43:6e:6c:ef:2c:bf:7e:a4:97:5e:48:35:69:37:bd:44:ef:b8: 70:ae:d2:b0:02:8a:97:38:6e:d3:de:94:c7:52:ce:2b:8c:84: eb:02:1f:2d:9f:26:b2:8e:25:f5:d2:cf:f2:e5:cd:b4:33:43: 14:88:8b:01:ef:69:a7:ce:47:09:47:7b:3b:f1:a1:d6:33:a8: 29:f9:9f:52:13:4f:83:4e:a1:96:31:a7:91:0c:d6:3c:a7:41: b8:24:fd:ca:4a:bf:bd:b2:b7:ec:e8:36:22:27:dd:d4:6c:06: 81:b4:34:fd:f5:f9:28:bd:73:26:2d:2c:4c:87:25:c5:b0:2d: 54:be:92:3e:fe:f2:e2:a6:96:09:1e:cf:c3:3d:55:5b:6b:ed: 4c:bb:96:29 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUFUbXUvQzq37MnsVfLW5blsM0mfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz N0Q2OTk4QTAeFw0yMzEyMTkwMTU1MDBaFw0yNDEyMTcwMjAwMDBaMDMxMTAvBgNV BAMTKDI1Rjg2RUI0QzM3MTM1RjQ5NjdGMzBCODI5NUY0NzI5MkY2RkRFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWz58p/INOYxYIhwJfZw+iFQzS mpx2bdT6wYj84QvJTpICyA0fBQruMCNZ7eGfZtCh/SzT+FGxPYBdcT6JC5ojWA48 R/xIXFVzXxvfM/b5hbKLRMHGryH0AkIiGtBKIxz3BSDufgZyEBQl2kL/uoO0O0pc NYHI8sTJBCYd7sE7F/0jUmC2hN2L+TUdI/nFKznuL3yByJPxmRJEImcFBzubwAgT Dl+WY0v9UUbllNOIhEW0TG8yvkFHOSNRvM0QsgcSpJE6rF+/W88GyzkTjnJvnb6/ SpOG78Ou2qL89e3Etzc4eZiYPhGcpemw9xdYe8wwU+fx5as+A305ZQnnCemVAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUJfhutMNxNfSWfzC4KV9HKS9v3rEwHwYDVR0j BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1 REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2 OTk4QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMyMzQzMDM1M2EzODMxMzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNTM0MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFgYAwDQYJKoZI hvcNAQELBQADggEBAF+zDxh0r7xVQil50xxDHMo66dMgCjde2Okygkv3wG1L3qnt cJE216KEZkWm893Xr7o7Qw5ijmmbZkbTp55fNZE9ws41cIn1miSM57fx3gJh5SSj sHGHYAyZm+aLI6aI5Akmstk2Jpvux+HWNENubO8sv36kl15INWk3vUTvuHCu0rAC ipc4btPelMdSziuMhOsCHy2fJrKOJfXSz/LlzbQzQxSIiwHvaafORwlHezvxodYz qCn5n1ITT4NOoZYxp5EM1jynQbgk/cpKv72yt+zoNiIn3dRsBoG0NP31+Si9cyYt LEyHJcWwLVS+kj7+8uKmlgkez8M9VVtr7Uy7lik= -----END CERTIFICATE-----Generated at Tue Apr 30 21:36:30 2024 by rpki-client on console-fra.rpki-client.org