$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: amybII68a8VE28x622WWbP3X6DorgNErjKJn51v04hU= Subject key identifier: A6:DD:D4:98:12:45:DA:03:53:12:A3:5B:65:5D:3F:8D:AC:18:93:34 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 63F7D459378B3D1493E6A61BAA7527F9C4081FCB Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 11 Aug 2024 13:41:35 +0000 ROA not before: Sun 11 Aug 2024 13:36:35 +0000 ROA not after: Sun 10 Aug 2025 13:41:35 +0000 asID: 153087 IP address blocks: 2404:97c0:2222::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f7:d4:59:37:8b:3d:14:93:e6:a6:1b:aa:75:27:f9:c4:08:1f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Aug 11 13:36:35 2024 GMT Not After : Aug 10 13:41:35 2025 GMT Subject: CN=A6DDD4981245DA035312A35B655D3F8DAC189334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:fb:63:83:f9:82:40:7d:4b:4b:e6:33:e7: 7b:10:91:28:93:74:ec:ce:20:01:39:70:83:2c:6a: ef:4d:30:a8:1c:7b:cb:50:c5:fa:15:83:81:85:11: 40:ea:1c:05:43:15:9c:13:d0:e4:6e:34:d4:f6:86: df:90:0e:f3:88:e6:f8:9c:92:e4:05:1e:7a:3a:d2: eb:ab:0e:89:25:e4:fa:b5:42:82:33:e7:62:f1:7b: 2b:5b:91:b4:05:40:4c:8e:10:e5:f6:02:b8:33:58: 72:4d:03:58:0f:56:5a:66:40:f0:de:8d:1a:8c:d1: 4f:c2:b5:9e:42:86:0e:6b:a0:ed:ec:ba:dc:87:07: 98:b3:e9:7e:12:64:49:8b:a0:06:31:be:3b:aa:a8: 16:60:71:a7:18:30:0e:31:25:e1:21:99:b9:ef:58: 89:64:c3:66:f7:1f:60:6a:16:3e:5b:d4:86:c2:be: 55:39:c4:75:cd:a3:47:4f:5f:48:9d:ff:6e:fa:70: 72:9e:c0:e9:29:3a:6c:37:24:9c:ea:3a:cf:62:d6: ac:f9:35:87:f0:d1:00:9c:ca:38:ed:c1:50:55:56: f1:9a:4c:73:cb:96:6c:cf:19:ee:94:df:9a:ad:fd: 88:5a:2d:5f:d6:e9:36:2a:57:8b:ad:23:72:a9:54: 51:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DD:D4:98:12:45:DA:03:53:12:A3:5B:65:5D:3F:8D:AC:18:93:34 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2222::/48 Signature Algorithm: sha256WithRSAEncryption 18:c9:56:9b:68:76:4d:92:92:7a:70:ae:f2:50:6e:f8:92:73: 04:5e:b2:dc:1f:8a:9a:20:4e:a3:4c:83:bb:94:03:c6:c3:09: a5:8a:8b:02:82:9e:0f:05:69:8c:ae:7c:7a:ab:c5:4e:96:31: 3c:54:dd:cd:f5:ff:c9:72:87:34:ca:10:e1:3b:a3:10:62:a1: 07:1a:80:1b:90:f4:89:44:56:8d:6d:17:11:b3:64:bf:c1:d6: fe:28:4b:62:f7:89:54:27:f5:c4:99:0a:5a:b2:cb:47:4b:f7: ad:17:48:04:cd:9c:1c:84:b9:eb:4d:30:0f:f5:51:3a:6e:a7: df:e8:da:6e:43:0c:ca:71:f0:11:6b:1c:e1:ae:0b:88:fd:c5: 7d:b9:77:2c:8b:75:eb:e1:a1:78:62:a6:29:e7:1c:83:3a:3a: 55:fb:59:6f:5d:a8:66:8a:3b:0a:df:18:c9:64:85:64:f7:34: b0:4b:95:8b:57:89:53:e0:66:dc:43:57:72:ee:9a:a6:3c:fd: ce:e0:fa:b5:96:1c:2a:09:e4:51:f1:69:3e:8f:63:58:67:59: 0d:f8:06:a1:49:55:60:50:76:53:41:b5:a6:73:c8:85:30:3c: 85:4c:e5:c1:e7:87:fd:55:71:57:ff:1e:de:5c:53:8f:52:0a: 89:20:93:0d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUY/fUWTeLPRST5qYbqnUn+cQIH8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNDA4MTExMzM2MzVaFw0yNTA4MTAxMzQxMzVaMDMxMTAvBgNV BAMTKEE2RERENDk4MTI0NURBMDM1MzEyQTM1QjY1NUQzRjhEQUMxODkzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZvtjg/mCQH1LS+Yz53sQkSiT dOzOIAE5cIMsau9NMKgce8tQxfoVg4GFEUDqHAVDFZwT0ORuNNT2ht+QDvOI5vic kuQFHno60uurDokl5Pq1QoIz52LxeytbkbQFQEyOEOX2ArgzWHJNA1gPVlpmQPDe jRqM0U/CtZ5Chg5roO3sutyHB5iz6X4SZEmLoAYxvjuqqBZgcacYMA4xJeEhmbnv WIlkw2b3H2BqFj5b1IbCvlU5xHXNo0dPX0id/276cHKewOkpOmw3JJzqOs9i1qz5 NYfw0QCcyjjtwVBVVvGaTHPLlmzPGe6U35qt/YhaLV/W6TYqV4utI3KpVFEZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUpt3UmBJF2gNTEqNbZV0/jawYkzQwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMyMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAIiIwDQYJKoZIhvcNAQELBQADggEBABjJVptodk2SknpwrvJQbviScwRestwf ipogTqNMg7uUA8bDCaWKiwKCng8FaYyufHqrxU6WMTxU3c31/8lyhzTKEOE7oxBi oQcagBuQ9IlEVo1tFxGzZL/B1v4oS2L3iVQn9cSZClqyy0dL960XSATNnByEuetN MA/1UTpup9/o2m5DDMpx8BFrHOGuC4j9xX25dyyLdevhoXhipinnHIM6OlX7WW9d qGaKOwrfGMlkhWT3NLBLlYtXiVPgZtxDV3LumqY8/c7g+rWWHCoJ5FHxaT6PY1hn WQ34BqFJVWBQdlNBtaZzyIUwPIVM5cHnh/1VcVf/Ht5cU49SCokgkw0= -----END CERTIFICATE-----Generated at Wed Nov 20 18:41:49 2024 by rpki-client on console-fra.rpki-client.org