$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa File: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (raw, json) Hash identifier: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g= Subject key identifier: 01:50:83:F4:47:4D:25:9D:AF:B0:68:FD:46:6F:C6:7C:7F:98:55:4D Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 6FFAB39DF6D4080947EE8B99B3B70DF4A7993FC1 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa Signing time: Thu 26 Dec 2024 08:58:07 +0000 ROA not before: Thu 26 Dec 2024 08:53:07 +0000 ROA not after: Thu 25 Dec 2025 08:58:07 +0000 asID: 153087 IP address blocks: 2404:97c0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 20:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fa:b3:9d:f6:d4:08:09:47:ee:8b:99:b3:b7:0d:f4:a7:99:3f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Dec 26 08:53:07 2024 GMT Not After : Dec 25 08:58:07 2025 GMT Subject: CN=015083F4474D259DAFB068FD466FC67C7F98554D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:6c:bf:53:42:8b:3e:6b:66:31:17:2a:3f: 0d:79:a1:5a:56:e8:e1:8d:2e:53:4e:fc:c1:3a:20: 17:70:43:be:d4:c7:5f:46:bb:ed:84:77:3f:7c:ad: c7:33:81:64:06:1b:e4:ae:74:d8:32:d7:de:4d:5a: b9:cb:ef:f5:2f:f6:49:d1:ab:95:51:43:d7:16:2f: a5:dd:23:4d:63:60:7f:e8:25:9c:23:14:7a:04:db: 8c:eb:ca:0b:04:de:bd:5d:a4:ed:9c:e0:6d:71:6d: 6e:65:db:71:ff:8b:15:ad:b9:52:8c:44:e8:14:a9: 99:63:77:7a:64:05:21:19:48:9c:1c:d0:b5:f1:84: ae:e3:cc:2f:f3:03:e9:dd:29:a8:38:6f:a4:09:5a: 41:63:d9:71:d5:09:0e:0a:d7:a2:bc:38:bb:3e:4f: bb:eb:03:1d:91:88:f4:3f:8d:79:93:86:ec:31:d0: ff:37:5c:b4:3d:bd:d6:41:32:e6:21:94:b3:5f:f5: a1:53:e9:37:cf:30:84:70:b2:4e:d4:95:fa:c8:b0: 57:68:db:e3:aa:c5:be:5e:99:e1:e3:d8:95:ad:75: c9:49:fe:2e:05:d3:51:30:e6:26:7c:d4:f0:b7:94: 30:f4:d0:10:bf:3f:7f:a3:ab:bb:4b:7a:08:8e:ac: 3f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:50:83:F4:47:4D:25:9D:AF:B0:68:FD:46:6F:C6:7C:7F:98:55:4D X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:200::/40 Signature Algorithm: sha256WithRSAEncryption 30:0c:0f:29:7e:49:a7:b8:a9:11:46:44:bd:7c:75:70:2b:01: 18:91:93:64:5a:1f:2e:95:6b:2c:60:3f:b8:59:f9:79:19:fb: e0:ba:35:d8:9b:93:40:2d:bf:b4:96:01:b2:12:3f:fb:1e:53: 5b:88:24:df:36:31:f5:28:89:5f:26:7c:2c:38:01:a5:19:ee: ff:b1:b0:84:58:2c:fc:96:68:5f:39:55:e0:bd:76:dd:e1:6b: ca:dc:12:7d:bf:50:72:5c:75:1b:b9:39:67:0a:66:e4:13:17: ab:2a:f2:07:97:aa:83:d1:a4:92:3c:5d:15:69:a1:d5:dd:d1: ec:32:dd:f9:28:3a:9c:94:f0:56:eb:2c:94:fe:42:77:62:b3: 61:2c:c6:ae:7b:e5:52:ae:20:77:63:4f:a7:7c:29:80:3b:42: 5e:a3:ca:e2:e8:19:c3:ca:79:ed:e2:0a:8a:fc:04:79:8a:2f: ff:97:7c:1f:b9:37:b2:d1:f6:45:4a:dc:68:fd:e7:b5:e4:e2: 96:d8:d1:fa:a2:1f:b6:89:23:68:de:a0:09:58:98:be:57:39: 7c:f1:e2:d4:80:c6:bc:d5:07:6c:a7:81:e9:3c:ee:ed:e8:da: b3:67:5a:1c:7d:91:67:06:13:13:6c:1b:9d:3a:b5:19:70:4c: fa:8b:94:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/qznfbUCAlH7ouZs7cN9KeZP8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNDEyMjYwODUzMDdaFw0yNTEyMjUwODU4MDdaMDMxMTAvBgNV BAMTKDAxNTA4M0Y0NDc0RDI1OURBRkIwNjhGRDQ2NkZDNjdDN0Y5ODU1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hmy/U0KLPmtmMRcqPw15oVpW 6OGNLlNO/ME6IBdwQ77Ux19Gu+2Edz98rcczgWQGG+SudNgy195NWrnL7/Uv9knR q5VRQ9cWL6XdI01jYH/oJZwjFHoE24zrygsE3r1dpO2c4G1xbW5l23H/ixWtuVKM ROgUqZljd3pkBSEZSJwc0LXxhK7jzC/zA+ndKag4b6QJWkFj2XHVCQ4K16K8OLs+ T7vrAx2RiPQ/jXmThuwx0P83XLQ9vdZBMuYhlLNf9aFT6TfPMIRwsk7UlfrIsFdo 2+Oqxb5emeHj2JWtdclJ/i4F01Ew5iZ81PC3lDD00BC/P3+jq7tLegiOrD/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAVCD9EdNJZ2vsGj9Rm/GfH+YVU0wHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMDMwM2Ez YTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJASX wAIwDQYJKoZIhvcNAQELBQADggEBADAMDyl+Sae4qRFGRL18dXArARiRk2RaHy6V ayxgP7hZ+XkZ++C6Ndibk0Atv7SWAbISP/seU1uIJN82MfUoiV8mfCw4AaUZ7v+x sIRYLPyWaF85VeC9dt3ha8rcEn2/UHJcdRu5OWcKZuQTF6sq8geXqoPRpJI8XRVp odXd0ewy3fkoOpyU8FbrLJT+Qndis2Esxq575VKuIHdjT6d8KYA7Ql6jyuLoGcPK ee3iCor8BHmKL/+XfB+5N7LR9kVK3Gj957Xk4pbY0fqiH7aJI2jeoAlYmL5XOXzx 4tSAxrzVB2yngek87u3o2rNnWhx9kWcGExNsG506tRlwTPqLlBA= -----END CERTIFICATE-----Generated at Sun Apr 6 07:53:44 2025 by rpki-client