$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/323430363a333834303a3a2f33322d3438203d3e20313430343438.roa File: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (raw, json) Hash identifier: Ra1E9cOQanH1SiHnfJl04HYirMLU+Yh3tE7np1INosY= Subject key identifier: C8:39:CE:01:9E:CF:56:34:96:56:51:DA:D5:EC:E3:DB:7C:64:4F:95 Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 1AF4C6DF4C757C5146E774F4F8A8439EC1B02DAF Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/323430363a333834303a3a2f33322d3438203d3e20313430343438.roa Signing time: Wed 23 Oct 2024 15:00:00 +0000 ROA not before: Wed 23 Oct 2024 14:55:00 +0000 ROA not after: Wed 22 Oct 2025 15:00:00 +0000 asID: 140448 IP address blocks: 2406:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f4:c6:df:4c:75:7c:51:46:e7:74:f4:f8:a8:43:9e:c1:b0:2d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: Oct 23 14:55:00 2024 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=C839CE019ECF5634965651DAD5ECE3DB7C644F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:42:b3:0f:b9:ff:5f:b7:08:78:1c:1d:49:d3: b2:6b:12:34:e9:1a:e5:ae:d7:99:84:5c:1b:2d:b6: 45:e5:66:07:6c:9d:12:e1:5c:1e:e9:08:84:76:04: b3:4c:d0:86:ad:d4:dd:1f:e6:a4:58:65:33:ab:b7: 81:a3:b5:09:df:23:30:64:1f:11:b6:2b:d8:20:ac: 61:5d:33:f0:59:0c:c6:f5:6d:61:d7:59:b4:58:1f: cc:63:fb:9b:c6:77:bd:dc:4a:26:13:bd:d7:e0:1a: a6:b8:3b:8e:29:d2:05:79:d4:20:6e:4b:39:1b:66: dc:a8:20:9e:9b:03:72:fa:be:13:03:73:11:89:92: c8:18:2a:b7:65:e6:3c:77:2a:84:35:40:8b:94:df: 91:c7:5d:ee:28:e0:0a:16:3c:22:e9:0e:d1:b4:d1: e1:e8:b5:d9:ba:88:4d:41:d4:71:28:3a:2c:5a:aa: 90:a2:03:e5:8f:a7:36:3c:fd:bf:83:05:36:33:13: 3e:55:a6:b1:db:00:17:06:5b:b8:7a:dd:62:e5:96: a5:fa:82:96:db:9e:8c:2c:8b:23:51:7d:06:d3:69: 0e:ed:e5:fd:88:e1:d9:7b:56:e5:58:94:47:94:f7: 29:e8:37:25:1e:91:0c:65:18:4d:c5:ee:62:d5:1b: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:39:CE:01:9E:CF:56:34:96:56:51:DA:D5:EC:E3:DB:7C:64:4F:95 X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/323430363a333834303a3a2f33322d3438203d3e20313430343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3840::/32 Signature Algorithm: sha256WithRSAEncryption 3a:c2:86:a5:34:29:2d:52:57:d0:35:71:55:db:05:a5:03:61: 9e:0e:43:a7:57:0c:f9:0a:80:7d:8e:8c:d7:d6:7d:67:5d:25: 5a:3c:e5:f7:d2:8a:a0:86:d8:2e:0a:09:a7:0c:ea:96:1f:53: 73:7d:f0:d5:df:51:83:b4:73:7d:6f:9c:75:75:aa:56:d6:a9: 1d:9d:9f:d3:db:62:3d:54:69:aa:e5:2e:1d:72:58:05:94:2f: bb:2a:30:2f:98:28:86:51:09:3f:97:de:2f:2c:4b:24:1a:59: 2c:40:6c:8e:d8:2c:c1:f3:ba:d5:39:6c:2a:97:0d:40:6a:27: e6:fe:dd:ad:94:8d:de:42:b1:80:bf:09:62:41:59:ed:52:04: b2:8b:77:72:2c:b2:ff:4f:2a:23:34:32:ba:dd:2c:4a:5f:a5: 4d:aa:71:ff:78:c6:0d:c4:1a:96:a5:c0:87:39:dc:0d:85:90: 78:9b:c6:91:1d:6c:40:0b:f2:1e:43:91:e3:c1:b9:d0:9f:d0: 6d:1a:ce:d5:38:23:bd:5c:83:34:42:a4:06:27:22:6b:61:f8: ec:66:2a:46:6f:32:d0:3a:00:c1:68:22:bf:b4:ab:bc:e8:1f: 53:f7:9d:ba:1a:3c:76:50:5b:9e:02:5b:28:40:7e:95:fd:b4: 4f:46:cb:cd -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUGvTG30x1fFFG53T0+KhDnsGwLa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNDEwMjMxNDU1MDBaFw0yNTEwMjIxNTAwMDBaMDMxMTAvBgNV BAMTKEM4MzlDRTAxOUVDRjU2MzQ5NjU2NTFEQUQ1RUNFM0RCN0M2NDRGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQrMPuf9ftwh4HB1J07JrEjTp GuWu15mEXBsttkXlZgdsnRLhXB7pCIR2BLNM0Iat1N0f5qRYZTOrt4GjtQnfIzBk HxG2K9ggrGFdM/BZDMb1bWHXWbRYH8xj+5vGd73cSiYTvdfgGqa4O44p0gV51CBu SzkbZtyoIJ6bA3L6vhMDcxGJksgYKrdl5jx3KoQ1QIuU35HHXe4o4AoWPCLpDtG0 0eHotdm6iE1B1HEoOixaqpCiA+WPpzY8/b+DBTYzEz5VprHbABcGW7h63WLllqX6 gpbbnowsiyNRfQbTaQ7t5f2I4dl7VuVYlEeU9ynoNyUekQxlGE3F7mLVG3IBAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUyDnOAZ7PVjSWVlHa1ezj23xkT5UwHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3YTFjZTRlLTU5YzgtNDFjYy1i NWU2LWJkN2I3YTcwNDM1Ni8wLzMyMzQzMDM2M2EzMzM4MzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMDM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGOEAwDQYJKoZI hvcNAQELBQADggEBADrChqU0KS1SV9A1cVXbBaUDYZ4OQ6dXDPkKgH2OjNfWfWdd JVo85ffSiqCG2C4KCacM6pYfU3N98NXfUYO0c31vnHV1qlbWqR2dn9PbYj1Uaarl Lh1yWAWUL7sqMC+YKIZRCT+X3i8sSyQaWSxAbI7YLMHzutU5bCqXDUBqJ+b+3a2U jd5CsYC/CWJBWe1SBLKLd3Issv9PKiM0MrrdLEpfpU2qcf94xg3EGpalwIc53A2F kHibxpEdbEAL8h5DkePBudCf0G0aztU4I71cgzRCpAYnImth+OxmKkZvMtA6AMFo Ir+0q7zoH1P3nboaPHZQW54CWyhAfpX9tE9Gy80= -----END CERTIFICATE-----Generated at Mon Nov 25 23:52:54 2024 by rpki-client on console-ams.rpki-client.org