$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3a2f34382d3438203d3e20313432333339.roa File: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (raw, json) Hash identifier: to8Mghx8SjANkLNg9sqdQL62e7GUGvJB7Oj3zo1cw3Q= Subject key identifier: 01:06:56:80:84:A2:28:51:47:42:A5:71:F2:DC:3E:CB:B6:16:30:DE Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 3C816B85D4A8B8E6819435E541FE6BBAEC79E512 Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3a2f34382d3438203d3e20313432333339.roa Signing time: Thu 01 Aug 2024 02:46:52 +0000 ROA not before: Thu 01 Aug 2024 02:41:52 +0000 ROA not after: Thu 31 Jul 2025 02:46:52 +0000 asID: 142339 IP address blocks: 2407:a5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:81:6b:85:d4:a8:b8:e6:81:94:35:e5:41:fe:6b:ba:ec:79:e5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Aug 1 02:41:52 2024 GMT Not After : Jul 31 02:46:52 2025 GMT Subject: CN=0106568084A228514742A571F2DC3ECBB61630DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3b:76:7a:9e:3d:eb:ac:44:ae:e1:ea:ea:89: 91:a7:fd:a4:29:b8:df:62:c2:8e:64:9b:ca:d4:12: 29:1d:c5:0d:dd:d1:c6:0a:f1:d0:57:a9:d6:cb:8f: fe:cf:73:ac:ed:5b:d7:fd:1d:62:e5:ab:b4:a4:5d: da:5e:d9:94:af:26:b9:37:58:c3:a7:16:cb:e0:d8: 41:15:66:58:20:04:f8:b0:d8:54:40:b7:99:90:b5: 8c:76:10:2e:77:9a:ca:3c:90:89:f0:55:11:ed:19: fa:2d:3f:84:6c:d2:36:58:00:6b:f4:9f:00:49:2e: 16:f2:c1:3e:f0:12:02:0a:a0:41:0e:01:f5:a4:4f: 95:e5:0c:82:95:24:aa:e7:2c:1f:9d:85:26:f4:ed: cc:1f:e0:19:6a:54:62:85:04:67:e5:cf:d2:5a:f7: fa:02:0e:c3:c8:39:4e:18:96:56:89:8e:92:d3:62: 80:63:c4:83:86:b5:a5:1b:90:45:93:a7:3e:0a:51: 27:f9:f7:9a:fc:65:cb:48:f8:02:fb:4d:28:80:b8: eb:66:25:5f:0f:51:d0:4e:b7:2a:6c:33:0e:bb:b1: ee:c1:1c:9e:e9:79:7c:70:55:45:97:df:a2:62:f7: ae:66:80:14:24:41:4a:4f:30:19:dc:a0:39:91:b7: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:56:80:84:A2:28:51:47:42:A5:71:F2:DC:3E:CB:B6:16:30:DE X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3a2f34382d3438203d3e20313432333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:a5c0::/48 Signature Algorithm: sha256WithRSAEncryption 5f:b4:d2:f3:10:27:de:0d:77:e5:2e:04:73:e1:48:8a:db:e5: 99:c4:bb:4e:a9:f5:32:e7:a3:a8:74:de:97:d0:fd:27:50:a2: 16:45:30:6d:c2:ab:f1:54:66:a0:79:f3:76:91:c0:28:d7:1c: d2:3a:15:12:9b:b2:b5:af:8b:a8:ad:fe:b9:8d:72:83:0c:cc: 77:ed:03:3f:51:ed:f5:39:91:c9:cc:00:8d:1b:c3:7f:70:d9: da:37:34:5b:fe:41:5c:c1:72:1c:ca:b5:af:1d:64:ad:ad:d1: fb:d5:df:be:49:46:85:ac:cb:2f:4b:b4:ab:8a:c2:fe:af:e5: 5e:5e:8a:04:83:ab:ea:8a:7c:97:04:03:6b:15:c9:cf:ad:9c: 90:a4:3c:2d:03:81:20:ff:55:0d:d2:db:0f:b4:09:60:ab:98: 1b:f0:76:2e:f3:af:0d:81:7c:ae:6e:ed:05:8c:34:12:c9:5a: 4f:de:e5:55:24:6a:8a:c8:f3:a1:ce:d5:10:cd:ec:19:94:dd: 6f:1b:27:c9:6c:a6:9c:ff:65:af:70:b5:5f:87:11:2d:70:0b: ff:a7:25:5e:53:2d:e9:bb:1d:c7:82:c7:8e:96:9d:21:a8:e9: ae:d7:c3:3d:a8:cd:21:a8:59:2e:41:50:16:b0:c5:f6:97:75: ba:ba:0d:f7 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUPIFrhdSouOaBlDXlQf5ruux55RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNDA4MDEwMjQxNTJaFw0yNTA3MzEwMjQ2NTJaMDMxMTAvBgNV BAMTKDAxMDY1NjgwODRBMjI4NTE0NzQyQTU3MUYyREMzRUNCQjYxNjMwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyO3Z6nj3rrESu4erqiZGn/aQp uN9iwo5km8rUEikdxQ3d0cYK8dBXqdbLj/7Pc6ztW9f9HWLlq7SkXdpe2ZSvJrk3 WMOnFsvg2EEVZlggBPiw2FRAt5mQtYx2EC53mso8kInwVRHtGfotP4Rs0jZYAGv0 nwBJLhbywT7wEgIKoEEOAfWkT5XlDIKVJKrnLB+dhSb07cwf4BlqVGKFBGflz9Ja 9/oCDsPIOU4YllaJjpLTYoBjxIOGtaUbkEWTpz4KUSf595r8ZctI+AL7TSiAuOtm JV8PUdBOtypsMw67se7BHJ7peXxwVUWX36Ji965mgBQkQUpPMBncoDmRt7c9AgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUAQZWgISiKFFHQqVx8tw+y7YWMN4wHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExOTIwMjFlLTM5MDQtNDExNS1h ZjVlLTNlZGI3MTNiYWExNC8wLzMyMzQzMDM3M2E2MTM1NjMzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMxMzQzMjMzMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQHpcAAADANBgkq hkiG9w0BAQsFAAOCAQEAX7TS8xAn3g135S4Ec+FIitvlmcS7Tqn1MuejqHTel9D9 J1CiFkUwbcKr8VRmoHnzdpHAKNcc0joVEpuyta+LqK3+uY1ygwzMd+0DP1Ht9TmR ycwAjRvDf3DZ2jc0W/5BXMFyHMq1rx1kra3R+9XfvklGhazLL0u0q4rC/q/lXl6K BIOr6op8lwQDaxXJz62ckKQ8LQOBIP9VDdLbD7QJYKuYG/B2LvOvDYF8rm7tBYw0 EslaT97lVSRqisjzoc7VEM3sGZTdbxsnyWymnP9lr3C1X4cRLXAL/6clXlMt6bsd x4LHjpadIajprtfDPajNIahZLkFQFrDF9pd1uroN9w== -----END CERTIFICATE-----Generated at Mon Nov 25 09:00:38 2024 by rpki-client on console-fra.rpki-client.org