$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a3a2f33322d3332203d3e2034333832.roa File: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (raw, json) Hash identifier: yqhluq19vYY9MvoE8j8zv32qcH2CnwUH88Ac8pAGx1Q= Subject key identifier: 54:50:BE:0B:68:55:E8:6E:28:28:45:4B:E6:5A:0E:7C:6E:1D:B3:E7 Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 69110FC0A22FB46CD05B91BEA5F821CD0038CC86 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a3a2f33322d3332203d3e2034333832.roa Signing time: Wed 21 Aug 2024 13:00:00 +0000 ROA not before: Wed 21 Aug 2024 12:55:00 +0000 ROA not after: Wed 20 Aug 2025 13:00:00 +0000 asID: 4382 IP address blocks: 2403:b900::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:11:0f:c0:a2:2f:b4:6c:d0:5b:91:be:a5:f8:21:cd:00:38:cc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Aug 21 12:55:00 2024 GMT Not After : Aug 20 13:00:00 2025 GMT Subject: CN=5450BE0B6855E86E2828454BE65A0E7C6E1DB3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:c5:52:0d:40:86:61:74:fb:73:b4:35:c9: ea:52:56:0f:a7:d8:b2:9c:8b:00:9e:e6:2c:46:73: f5:cd:da:a3:f5:a7:94:76:a9:b7:c0:35:31:52:8b: 89:47:81:85:54:aa:10:29:6d:08:e4:96:d6:40:c3: 8a:dd:6a:e3:f8:17:68:42:a1:8b:61:40:2d:f8:a5: 90:74:46:fa:c2:23:0b:a7:0b:19:59:1e:e1:ca:18: 20:1b:4f:9d:fe:5f:21:d3:7b:a9:08:d1:b3:85:99: dd:ff:c4:3d:62:49:7e:cf:ec:6d:6d:1d:e5:d6:b1: a9:c4:c2:33:b5:58:fa:5c:0b:23:3e:c2:49:04:c9: 35:94:dd:a8:4b:a9:54:ea:3c:6d:48:7f:9f:28:e8: 61:1b:2f:51:97:77:6f:f0:35:70:d4:96:a2:d8:0f: 6f:6c:42:6d:4c:53:49:b7:cc:32:ec:63:74:1f:be: 60:64:61:13:e3:12:88:ca:f5:3d:49:c1:b8:bd:b5: e5:f0:c6:74:46:64:71:b5:71:43:51:c1:80:cb:0d: 3e:23:81:8f:2f:ae:32:4b:b2:ca:0a:3b:9f:dc:80: 32:58:46:60:81:1e:af:25:de:62:7b:92:87:cf:c2: f3:89:ac:18:61:f8:e5:58:8f:fa:28:ff:0c:1c:37: 86:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:50:BE:0B:68:55:E8:6E:28:28:45:4B:E6:5A:0E:7C:6E:1D:B3:E7 X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a3a2f33322d3332203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b900::/32 Signature Algorithm: sha256WithRSAEncryption c2:b7:d1:70:76:aa:64:e1:70:9a:51:34:a4:56:c5:b2:a7:d5: f7:3a:c8:6e:66:e0:c2:f3:cc:85:84:ec:6c:8a:02:fe:75:17: 09:2f:99:fb:e8:9b:b1:d1:d1:ac:34:76:5c:86:b6:31:d9:5a: ab:fd:a3:8e:8c:de:04:97:bd:59:24:9b:ff:f2:3d:e6:28:1e: 8f:a3:27:ef:33:c3:37:1b:73:41:88:d2:a1:a2:5d:8b:b4:3b: c0:50:82:41:f1:fd:94:d5:0f:41:c7:cd:66:f0:55:05:f9:e9: 65:f4:fb:1f:db:ff:17:43:e1:22:24:eb:e0:3e:f3:3f:36:cc: de:04:5b:99:28:38:6b:bf:70:69:90:67:dc:3d:6d:70:df:af: 24:b8:09:1a:ab:7b:29:cd:fc:dd:31:4e:5a:7d:d9:86:77:16: c3:bf:e7:fa:49:ff:4d:e9:c2:1e:46:29:ea:51:40:be:b6:c1: d4:92:9d:3c:e7:1c:bc:23:bf:54:6d:9c:9d:c9:67:cd:55:93: 3c:0f:72:2d:4d:db:8e:03:b2:af:98:74:1a:f9:2d:36:20:c2: 3f:ef:86:ef:90:51:ea:52:c2:49:4d:1d:91:02:3b:ae:8c:e2: ce:25:a1:31:fa:8d:0c:0f:5c:77:90:6f:d4:e4:dc:0d:5d:ad: 9b:ff:ff:b2 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUaREPwKIvtGzQW5G+pfghzQA4zIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNDA4MjExMjU1MDBaFw0yNTA4MjAxMzAwMDBaMDMxMTAvBgNV BAMTKDU0NTBCRTBCNjg1NUU4NkUyODI4NDU0QkU2NUEwRTdDNkUxREIzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAsVSDUCGYXT7c7Q1yepSVg+n 2LKciwCe5ixGc/XN2qP1p5R2qbfANTFSi4lHgYVUqhApbQjkltZAw4rdauP4F2hC oYthQC34pZB0RvrCIwunCxlZHuHKGCAbT53+XyHTe6kI0bOFmd3/xD1iSX7P7G1t HeXWsanEwjO1WPpcCyM+wkkEyTWU3ahLqVTqPG1If58o6GEbL1GXd2/wNXDUlqLY D29sQm1MU0m3zDLsY3QfvmBkYRPjEojK9T1Jwbi9teXwxnRGZHG1cUNRwYDLDT4j gY8vrjJLssoKO5/cgDJYRmCBHq8l3mJ7kofPwvOJrBhh+OVYj/oo/wwcN4b/AgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUVFC+C2hV6G4oKEVL5loOfG4ds+cwHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg2YjM4ODktNjk2Ni00NWVmLTkw NzMtYWQxNDAxMWFjM2IyLzAvMzIzNDMwMzMzYTYyMzkzMDMwM2EzYTJmMzMzMjJk MzMzMjIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA7kAMA0GCSqGSIb3DQEB CwUAA4IBAQDCt9Fwdqpk4XCaUTSkVsWyp9X3OshuZuDC88yFhOxsigL+dRcJL5n7 6Jux0dGsNHZchrYx2Vqr/aOOjN4El71ZJJv/8j3mKB6PoyfvM8M3G3NBiNKhol2L tDvAUIJB8f2U1Q9Bx81m8FUF+ell9Psf2/8XQ+EiJOvgPvM/NszeBFuZKDhrv3Bp kGfcPW1w368kuAkaq3spzfzdMU5afdmGdxbDv+f6Sf9N6cIeRinqUUC+tsHUkp08 5xy8I79UbZydyWfNVZM8D3ItTduOA7KvmHQa+S02IMI/74bvkFHqUsJJTR2RAjuu jOLOJaEx+o0MD1x3kG/U5NwNXa2b//+y -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org