$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3a2f33322d3332203d3e20313336383431.roa File: 323430313a626534303a3a2f33322d3332203d3e20313336383431.roa (raw, json) Hash identifier: IVe+nVmQ/Pcf5nuTm9wxRBP9gRRfonisIPEkiSlemf0= Subject key identifier: BD:AE:D3:81:F4:EB:99:B1:ED:F7:D5:A6:7E:A8:4B:FA:BC:FC:00:79 Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 56B872F7E5CB80FA45B2F91C8DCFE9FAE6C5B5B4 Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3a2f33322d3332203d3e20313336383431.roa Signing time: Wed 13 Dec 2023 02:00:01 +0000 ROA not before: Wed 13 Dec 2023 01:55:01 +0000 ROA not after: Wed 11 Dec 2024 02:00:01 +0000 asID: 136841 IP address blocks: 2401:be40::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b8:72:f7:e5:cb:80:fa:45:b2:f9:1c:8d:cf:e9:fa:e6:c5:b5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Dec 13 01:55:01 2023 GMT Not After : Dec 11 02:00:01 2024 GMT Subject: CN=BDAED381F4EB99B1EDF7D5A67EA84BFABCFC0079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:0c:37:33:55:1d:57:53:fd:c5:50:ab:f3: 4a:41:60:89:8b:f9:31:ba:72:4f:92:41:e5:28:a3: 6d:00:69:21:c4:ca:ea:b3:9f:b7:f1:0d:ae:e4:6b: 0b:82:73:5d:2d:38:37:75:9f:f8:38:d7:f9:79:7e: 4d:1f:ca:e7:59:71:bb:cf:b6:7f:d9:d3:59:2d:68: 71:cf:09:9f:d1:e4:86:5e:81:e6:5d:8d:9c:71:07: aa:46:be:03:1a:93:ad:93:06:05:68:22:75:29:3d: f4:8a:26:49:5f:79:0d:d9:2a:af:f8:b6:f7:56:3d: f4:a9:e8:a7:03:fc:89:6d:67:62:6b:7c:ba:db:98: 48:e3:d3:48:36:bc:1c:d0:e6:e2:3a:7d:ee:ce:b5: d9:ee:3d:ee:74:53:03:f2:73:82:c9:1a:d8:f1:c4: c2:7e:0e:15:c8:b1:c9:43:bc:ed:7a:e9:3c:93:c1: 11:53:26:c3:1f:ba:60:a1:97:06:50:54:69:73:5b: a2:55:31:32:49:bd:a5:0a:8a:da:08:63:f1:69:6b: a8:8b:b1:b9:0b:6a:87:26:c3:2f:34:8e:09:e3:ff: 3f:31:b7:2a:9a:e6:4c:43:b0:71:25:5c:f9:69:26: 08:df:6c:47:c5:8e:41:a5:58:e5:9a:47:b5:70:de: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:D3:81:F4:EB:99:B1:ED:F7:D5:A6:7E:A8:4B:FA:BC:FC:00:79 X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3a2f33322d3332203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40::/32 Signature Algorithm: sha256WithRSAEncryption 4b:43:08:49:68:69:ea:1c:4b:3c:73:b0:ce:ce:79:f9:59:01: 04:37:b0:9c:6f:43:88:5e:ad:79:1c:5b:b4:4c:ae:91:6c:6c: d0:90:3a:ba:eb:f4:2a:fc:17:4e:ea:9c:27:d4:2b:18:71:82: c1:09:5e:36:96:98:16:19:71:4c:39:d7:d0:10:f1:b4:35:b2: 8f:b8:d8:ae:4c:2b:5b:ba:dd:64:20:aa:52:1a:b2:52:5b:59: 40:45:82:6c:47:3a:d0:4a:ce:1d:ec:c0:52:73:a7:e9:34:85: f1:6f:d0:dc:63:8f:24:bd:01:96:e7:1c:93:81:d6:aa:3e:9e: 3b:d3:fc:8b:e4:5d:66:5e:fc:f6:48:15:ef:9a:7e:66:5f:3f: 9b:a3:0e:5f:d9:47:76:ad:a4:ff:d8:2f:6f:08:5a:6a:3b:32: 62:0f:03:82:87:71:a8:68:b5:5b:6e:0d:79:d2:fd:9b:f2:92: 6b:3a:10:a4:4a:5a:dd:c8:df:9c:2f:ea:f8:3d:f5:9c:ea:f3: c1:e0:94:eb:a2:5d:d0:fa:46:1a:e9:7a:d5:ec:23:e4:5f:c1: 6a:af:f0:cd:dc:44:bc:22:98:f9:d3:01:56:d3:86:3e:de:e3: 21:e4:b9:7f:41:50:4b:5b:41:07:ca:55:66:99:8b:88:25:80: 09:56:fe:b9 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUVrhy9+XLgPpFsvkcjc/p+ubFtbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yMzEyMTMwMTU1MDFaFw0yNDEyMTEwMjAwMDFaMDMxMTAvBgNV BAMTKEJEQUVEMzgxRjRFQjk5QjFFREY3RDVBNjdFQTg0QkZBQkNGQzAwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95Aw3M1UdV1P9xVCr80pBYImL +TG6ck+SQeUoo20AaSHEyuqzn7fxDa7kawuCc10tODd1n/g41/l5fk0fyudZcbvP tn/Z01ktaHHPCZ/R5IZegeZdjZxxB6pGvgMak62TBgVoInUpPfSKJklfeQ3ZKq/4 tvdWPfSp6KcD/IltZ2JrfLrbmEjj00g2vBzQ5uI6fe7OtdnuPe50UwPyc4LJGtjx xMJ+DhXIsclDvO166TyTwRFTJsMfumChlwZQVGlzW6JVMTJJvaUKitoIY/Fpa6iL sbkLaocmwy80jgnj/z8xtyqa5kxDsHElXPlpJgjfbEfFjkGlWOWaR7Vw3tQfAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUva7TgfTrmbHt99WmfqhL+rz8AHkwHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjM4MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBvkAwDQYJKoZI hvcNAQELBQADggEBAEtDCEloaeocSzxzsM7OeflZAQQ3sJxvQ4herXkcW7RMrpFs bNCQOrrr9Cr8F07qnCfUKxhxgsEJXjaWmBYZcUw519AQ8bQ1so+42K5MK1u63WQg qlIaslJbWUBFgmxHOtBKzh3swFJzp+k0hfFv0NxjjyS9AZbnHJOB1qo+njvT/Ivk XWZe/PZIFe+afmZfP5ujDl/ZR3atpP/YL28IWmo7MmIPA4KHcahotVtuDXnS/Zvy kms6EKRKWt3I35wv6vg99Zzq88HglOuiXdD6RhrpetXsI+RfwWqv8M3cRLwimPnT AVbThj7e4yHkuX9BUEtbQQfKVWaZi4glgAlW/rk= -----END CERTIFICATE-----Generated at Mon May 6 11:49:27 2024 by rpki-client on console-fra.rpki-client.org