$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3a2f33322d3332203d3e20313336383431.roa File: 323430313a626534303a3a2f33322d3332203d3e20313336383431.roa (raw, json) Hash identifier: fqov0BDCIixBi9VcnBXwyfgiMxOlqrXxcfdLtIYOthI= Subject key identifier: 62:AF:72:E1:BC:F5:5F:16:53:42:23:BB:EF:5E:40:1E:85:3D:65:CD Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 203E221A7C0A5D485F739A16EF6D07268AE9EF09 Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3a2f33322d3332203d3e20313336383431.roa Signing time: Wed 13 Nov 2024 02:00:13 +0000 ROA not before: Wed 13 Nov 2024 01:55:13 +0000 ROA not after: Wed 12 Nov 2025 02:00:13 +0000 asID: 136841 IP address blocks: 2401:be40::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3e:22:1a:7c:0a:5d:48:5f:73:9a:16:ef:6d:07:26:8a:e9:ef:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Nov 13 01:55:13 2024 GMT Not After : Nov 12 02:00:13 2025 GMT Subject: CN=62AF72E1BCF55F16534223BBEF5E401E853D65CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:df:26:4e:16:2f:69:53:c0:44:b7:46:c2: 46:a7:a5:e0:d6:2d:62:1b:78:17:c5:7e:15:45:0e: 27:43:a1:14:ad:b8:e4:ff:7a:4d:58:77:a3:bb:cc: 9d:4b:7d:f7:44:ff:22:31:bd:f6:18:cd:15:50:a8: 13:6a:42:14:86:7a:99:d9:38:d1:95:d0:c7:f2:9e: 0c:03:4e:f6:3a:ca:8e:96:12:a3:17:92:3c:51:e5: b5:1c:ee:d7:72:31:10:c9:43:d7:89:40:f5:84:6f: a5:e7:9a:8e:be:47:b5:58:b6:25:25:49:27:44:c2: 63:5f:5b:b8:51:20:8c:4e:96:f4:41:a9:9a:f7:82: 13:17:fd:c5:3f:e9:ac:7b:08:68:af:2b:d3:3c:e3: 0f:b3:d0:08:fd:65:7c:8c:ad:4e:32:b1:04:4c:72: 98:5e:70:1f:90:2c:5d:1d:e8:2d:82:e9:56:1f:81: 10:2f:c2:99:26:dc:3e:cc:4c:13:78:61:07:0c:2e: fa:b1:5b:64:35:aa:28:35:6f:98:7a:bc:7e:a4:8d: 96:ff:b9:0c:6c:53:ce:e2:64:9c:cf:8a:3b:b8:89: 1e:9a:85:bc:22:a8:ba:9d:5f:29:ef:6c:ad:ba:08: cd:d6:bd:22:0b:1c:2c:f5:b5:46:49:cc:43:78:d3: ed:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AF:72:E1:BC:F5:5F:16:53:42:23:BB:EF:5E:40:1E:85:3D:65:CD X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3a2f33322d3332203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40::/32 Signature Algorithm: sha256WithRSAEncryption 5f:11:d1:fe:fa:75:10:75:ac:c0:30:33:4b:fd:a1:1a:74:9a: 2b:0e:bf:7c:69:86:bf:27:8d:c2:a3:3e:07:fd:11:f1:57:1a: 5c:90:e1:f4:7a:e3:7e:63:1b:f6:cc:86:a9:be:5f:d0:ab:82: 95:7a:11:3d:15:7d:0f:09:f0:a1:bc:d0:3c:08:e7:c9:ef:02: c6:4e:de:d7:e3:3a:5d:0b:af:5a:75:a1:aa:50:75:1c:a6:08: f4:75:36:7c:23:d5:11:74:1c:93:58:70:41:2a:10:c6:9f:05: 72:d2:f0:d7:06:dc:d6:8b:06:8e:0e:dd:fc:66:6f:df:52:e4: 49:f4:dc:b7:7b:15:de:80:ed:06:38:2f:ea:34:85:b2:c7:d7: b7:4f:10:70:86:46:1f:26:f3:e7:c4:a7:58:18:02:16:81:77: 2f:38:e0:25:20:3c:ba:d8:60:3d:c0:58:fd:37:97:b0:7c:87: cd:69:a1:23:f3:35:c5:b6:0c:d3:53:8c:92:66:df:5f:95:68: 7a:d3:c9:3b:7d:02:c9:ea:38:e8:3d:52:c3:dd:3a:e8:d5:9b: 65:b9:70:a0:62:d3:a6:c8:73:92:2c:96:0d:9e:34:19:21:0e: d4:04:bd:2e:d2:4a:1a:32:d1:41:9b:45:d5:43:6c:c9:6b:31: 99:9e:b1:b4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUID4iGnwKXUhfc5oW720HJorp7wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNDExMTMwMTU1MTNaFw0yNTExMTIwMjAwMTNaMDMxMTAvBgNV BAMTKDYyQUY3MkUxQkNGNTVGMTY1MzQyMjNCQkVGNUU0MDFFODUzRDY1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+H98mThYvaVPARLdGwkanpeDW LWIbeBfFfhVFDidDoRStuOT/ek1Yd6O7zJ1LffdE/yIxvfYYzRVQqBNqQhSGepnZ ONGV0MfyngwDTvY6yo6WEqMXkjxR5bUc7tdyMRDJQ9eJQPWEb6Xnmo6+R7VYtiUl SSdEwmNfW7hRIIxOlvRBqZr3ghMX/cU/6ax7CGivK9M84w+z0Aj9ZXyMrU4ysQRM cphecB+QLF0d6C2C6VYfgRAvwpkm3D7MTBN4YQcMLvqxW2Q1qig1b5h6vH6kjZb/ uQxsU87iZJzPiju4iR6ahbwiqLqdXynvbK26CM3WvSILHCz1tUZJzEN40+1VAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUYq9y4bz1XxZTQiO7715AHoU9Zc0wHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjM4MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBvkAwDQYJKoZI hvcNAQELBQADggEBAF8R0f76dRB1rMAwM0v9oRp0misOv3xphr8njcKjPgf9EfFX GlyQ4fR6435jG/bMhqm+X9CrgpV6ET0VfQ8J8KG80DwI58nvAsZO3tfjOl0Lr1p1 oapQdRymCPR1Nnwj1RF0HJNYcEEqEMafBXLS8NcG3NaLBo4O3fxmb99S5En03Ld7 Fd6A7QY4L+o0hbLH17dPEHCGRh8m8+fEp1gYAhaBdy844CUgPLrYYD3AWP03l7B8 h81poSPzNcW2DNNTjJJm31+VaHrTyTt9AsnqOOg9UsPdOujVm2W5cKBi06bIc5Is lg2eNBkhDtQEvS7SShoy0UGbRdVDbMlrMZmesbQ= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:56 2024 by rpki-client on console-fra.rpki-client.org