$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa File: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (raw, json) Hash identifier: W5mKGPdSYzgUw2a09CxLXwSAuYwW6WWIOPXMYy/NjWc= Subject key identifier: 88:61:6F:53:15:D2:69:7B:BF:98:48:F1:76:37:1F:CA:1D:CA:FE:CE Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 5AC95528ABA47979574EC6E1BB2327A51F5E070A Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa Signing time: Wed 13 Mar 2024 07:21:11 +0000 ROA not before: Wed 13 Mar 2024 07:16:11 +0000 ROA not after: Wed 12 Mar 2025 07:21:11 +0000 asID: 59281 IP address blocks: 2400:cd80::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c9:55:28:ab:a4:79:79:57:4e:c6:e1:bb:23:27:a5:1f:5e:07:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Mar 13 07:16:11 2024 GMT Not After : Mar 12 07:21:11 2025 GMT Subject: CN=88616F5315D2697BBF9848F176371FCA1DCAFECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:78:1c:06:c7:f8:35:3e:32:34:01:1d:1b:6b: 70:ec:c2:9f:d7:91:6d:37:ea:c8:03:e5:d8:5c:4f: 37:1d:3c:b2:7c:40:a0:d5:f3:9c:b9:44:f4:dd:81: cc:14:1c:d0:e7:ef:6b:31:bb:af:46:16:1c:1c:e7: 3a:24:62:76:25:dc:43:b9:15:92:4c:77:0d:52:5b: 8e:10:7f:1d:14:50:f5:06:75:b7:63:e6:94:01:cb: 7c:3f:62:1b:93:e0:9e:0e:64:76:b9:46:19:7d:ed: 9d:d9:b6:c8:95:ba:28:d9:bc:7c:b9:e5:38:bf:8f: 10:df:04:1a:ba:40:1a:26:52:26:cd:21:52:2c:da: 61:db:80:44:f8:8e:11:00:cb:f0:2b:7b:bd:1b:94: 7c:55:e1:c3:ec:08:fc:c9:44:db:1b:4b:2f:a1:c4: 79:f1:d2:f4:f4:70:7e:bd:90:f5:0d:f3:49:64:72: f7:2f:27:4b:8e:58:6f:4c:d9:df:34:df:6c:13:ac: ab:57:ec:88:72:23:43:0b:04:bc:5c:50:ed:aa:be: 7b:69:a9:18:e4:d1:4e:d2:f1:02:80:09:41:a5:64: c7:79:a0:b0:2e:3c:93:9c:5c:b3:a3:78:8b:21:c7: a5:55:59:1f:0f:d4:bb:a3:39:3c:07:14:d2:94:5a: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:61:6F:53:15:D2:69:7B:BF:98:48:F1:76:37:1F:CA:1D:CA:FE:CE X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:cd80::/32 Signature Algorithm: sha256WithRSAEncryption 13:2d:d9:8b:d5:95:a1:6b:a3:77:1f:9f:6d:a2:3b:df:d1:a9: ec:92:8e:4c:58:43:77:d2:bd:0d:b0:a1:4e:5e:bc:6e:19:8f: 89:37:4f:1c:19:d2:05:90:e9:34:1d:50:77:72:58:61:77:f5: ba:df:d4:f8:9f:ae:7d:4f:e0:27:c2:26:d9:a3:25:df:93:77: 24:4d:ff:cc:2a:11:60:03:1c:aa:54:4d:c1:be:4e:ec:f4:10: 22:3c:0c:94:35:6d:de:2b:ad:6b:9f:72:e2:1e:c9:a7:50:d0: 1d:31:5a:46:4e:38:c0:d9:67:86:f9:98:4e:ef:72:72:a9:37: 6b:68:de:43:40:b4:4c:d4:b6:b1:5e:da:8b:09:5a:be:a3:9c: 76:a5:58:0d:37:3c:a3:1b:b1:28:de:1c:8c:14:1d:a4:6f:e7: 9a:fe:b9:4d:a9:c2:14:10:a2:88:e8:9a:77:4a:f5:db:73:01: 46:af:c6:f4:59:7a:cb:b2:fb:12:98:4a:9c:1d:75:cb:52:3c: ff:b8:a1:ca:30:15:74:10:62:c4:1b:48:3a:4d:9b:30:50:bc: ce:03:78:67:3b:fd:01:4d:de:c6:4f:1d:82:df:55:97:03:c5: 9e:13:69:b3:47:27:90:47:7b:ff:fc:69:bc:8d:71:96:f6:fe: 98:28:5f:43 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUWslVKKukeXlXTsbhuyMnpR9eBwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNDAzMTMwNzE2MTFaFw0yNTAzMTIwNzIxMTFaMDMxMTAvBgNV BAMTKDg4NjE2RjUzMTVEMjY5N0JCRjk4NDhGMTc2MzcxRkNBMURDQUZFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWeBwGx/g1PjI0AR0ba3Dswp/X kW036sgD5dhcTzcdPLJ8QKDV85y5RPTdgcwUHNDn72sxu69GFhwc5zokYnYl3EO5 FZJMdw1SW44Qfx0UUPUGdbdj5pQBy3w/YhuT4J4OZHa5Rhl97Z3ZtsiVuijZvHy5 5Ti/jxDfBBq6QBomUibNIVIs2mHbgET4jhEAy/Are70blHxV4cPsCPzJRNsbSy+h xHnx0vT0cH69kPUN80lkcvcvJ0uOWG9M2d8032wTrKtX7IhyI0MLBLxcUO2qvntp qRjk0U7S8QKACUGlZMd5oLAuPJOcXLOjeIshx6VVWR8P1LujOTwHFNKUWmYjAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUiGFvUxXSaXu/mEjxdjcfyh3K/s4wHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05 ZmExLTE1NGNhMTU3OTIyMy8wLzMyMzQzMDMwM2E2MzY0MzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAM2AMA0GCSqGSIb3 DQEBCwUAA4IBAQATLdmL1ZWha6N3H59tojvf0ansko5MWEN30r0NsKFOXrxuGY+J N08cGdIFkOk0HVB3clhhd/W639T4n659T+AnwibZoyXfk3ckTf/MKhFgAxyqVE3B vk7s9BAiPAyUNW3eK61rn3LiHsmnUNAdMVpGTjjA2WeG+ZhO73JyqTdraN5DQLRM 1LaxXtqLCVq+o5x2pVgNNzyjG7Eo3hyMFB2kb+ea/rlNqcIUEKKI6Jp3SvXbcwFG r8b0WXrLsvsSmEqcHXXLUjz/uKHKMBV0EGLEG0g6TZswULzOA3hnO/0BTd7GTx2C 31WXA8WeE2mzRyeQR3v//Gm8jXGW9v6YKF9D -----END CERTIFICATE-----Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org