$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: 6PCw84MiS6Amab7HshdgWfPnR/SNFwRHfzuTQ/6yoHc= Subject key identifier: 99:04:F4:E3:D8:2F:F2:F1:0A:8D:DE:D8:88:11:45:5D:E0:41:32:A2 Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 13820D517178AFE8104161D8AAA471F9BB97BDBB Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 02 Jun 2024 14:00:03 +0000 ROA not before: Sun 02 Jun 2024 13:55:03 +0000 ROA not after: Sun 01 Jun 2025 14:00:03 +0000 asID: 140413 IP address blocks: 2406:13c0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:82:0d:51:71:78:af:e8:10:41:61:d8:aa:a4:71:f9:bb:97:bd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Jun 2 13:55:03 2024 GMT Not After : Jun 1 14:00:03 2025 GMT Subject: CN=9904F4E3D82FF2F10A8DDED88811455DE04132A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:1d:67:6f:7c:86:41:66:c4:f3:06:9c:1e: cf:e4:b2:f0:8b:24:05:5d:df:7c:a8:76:b1:81:dd: 71:d8:d9:83:37:5f:ee:07:55:d4:a7:46:65:63:a6: 34:49:93:dd:02:a2:ac:f9:2e:6d:a6:37:e6:ef:8c: 32:d2:6b:0f:bb:1b:8a:93:32:24:39:f1:29:a1:92: 0e:05:d2:c9:cf:5c:46:b1:20:c6:86:1c:79:fe:5a: 5b:61:ca:0e:f9:8b:2f:7d:7c:9e:d3:ff:78:4c:b5: 98:3e:b2:70:ed:b2:c3:06:06:f9:20:d0:65:15:65: 28:73:6c:c4:70:b7:d3:6c:bc:d7:95:2b:5c:ea:4a: 6d:2b:b9:ea:ab:56:01:a8:79:59:a5:bc:43:58:ec: 9a:20:a8:10:ba:52:6e:af:a0:a4:63:6b:cc:2c:0d: 54:e5:d9:86:94:99:cd:10:75:56:1c:fb:b5:fd:a9: bf:23:ea:50:0a:47:8c:e3:3d:12:23:2c:ea:10:39: ff:ef:65:42:ad:da:e0:68:f7:b3:30:58:0b:9f:4b: 83:75:01:b4:ae:55:91:ee:1b:4a:89:b8:cc:c4:69: df:9c:fb:f4:86:a3:7e:8b:4e:4e:70:ab:e1:22:2e: 18:9c:c8:15:d0:28:1d:45:c3:32:18:0c:40:5a:7f: 72:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:04:F4:E3:D8:2F:F2:F1:0A:8D:DE:D8:88:11:45:5D:E0:41:32:A2 X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:b::/48 Signature Algorithm: sha256WithRSAEncryption 62:49:ae:4f:6d:46:fe:bf:5b:0d:28:02:83:d3:2c:b3:0c:12: 66:a4:3b:4a:8e:0b:c0:6f:b0:ab:dd:2d:5f:19:72:94:d4:8b: bb:00:41:b1:be:aa:91:2a:2a:4d:ee:df:2c:15:42:e3:ae:cb: 9e:cf:07:0f:f3:76:22:d9:4d:c5:d7:1e:48:57:6a:99:e4:67: f6:95:d7:ff:98:bd:0f:39:a0:49:ba:60:bb:e6:f3:9f:0f:0a: 52:36:bb:45:e8:bc:bf:62:99:de:fc:be:1d:51:d4:d9:0a:db: a2:99:d2:38:e4:39:42:f2:49:fc:7b:2f:5a:d5:3c:4f:19:a6: fc:66:96:02:84:06:96:88:c4:75:7b:11:04:4c:b2:46:0c:a2: e3:bb:7a:b0:c3:82:16:9a:6d:41:6f:dd:6b:8f:ad:60:dd:df: 2c:88:28:af:f5:a3:42:de:01:fa:b0:53:ba:78:8d:45:7e:ae: 98:2a:4c:56:f1:61:b9:4f:0a:ad:95:4c:a5:00:49:81:79:52: 5d:6c:66:fe:30:6e:48:c6:a8:d0:87:f3:56:7a:4a:a6:a7:af: 64:b4:18:31:c8:2b:d2:89:2a:2e:6f:d0:e7:41:4a:98:4d:82: 86:47:32:81:1a:98:d9:66:98:db:ae:35:c3:91:c7:7a:00:c4: 1e:d8:55:d7 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUE4INUXF4r+gQQWHYqqRx+buXvbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNDA2MDIxMzU1MDNaFw0yNTA2MDExNDAwMDNaMDMxMTAvBgNV BAMTKDk5MDRGNEUzRDgyRkYyRjEwQThEREVEODg4MTE0NTVERTA0MTMyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuh1nb3yGQWbE8wacHs/ksvCL JAVd33yodrGB3XHY2YM3X+4HVdSnRmVjpjRJk90Coqz5Lm2mN+bvjDLSaw+7G4qT MiQ58Smhkg4F0snPXEaxIMaGHHn+Wlthyg75iy99fJ7T/3hMtZg+snDtssMGBvkg 0GUVZShzbMRwt9NsvNeVK1zqSm0rueqrVgGoeVmlvENY7JogqBC6Um6voKRja8ws DVTl2YaUmc0QdVYc+7X9qb8j6lAKR4zjPRIjLOoQOf/vZUKt2uBo97MwWAufS4N1 AbSuVZHuG0qJuMzEad+c+/SGo36LTk5wq+EiLhicyBXQKB1FwzIYDEBaf3IfAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUmQT049gv8vEKjd7YiBFFXeBBMqIwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAsw DQYJKoZIhvcNAQELBQADggEBAGJJrk9tRv6/Ww0oAoPTLLMMEmakO0qOC8BvsKvd LV8ZcpTUi7sAQbG+qpEqKk3u3ywVQuOuy57PBw/zdiLZTcXXHkhXapnkZ/aV1/+Y vQ85oEm6YLvm858PClI2u0XovL9imd78vh1R1NkK26KZ0jjkOULySfx7L1rVPE8Z pvxmlgKEBpaIxHV7EQRMskYMouO7erDDghaabUFv3WuPrWDd3yyIKK/1o0LeAfqw U7p4jUV+rpgqTFbxYblPCq2VTKUASYF5Ul1sZv4wbkjGqNCH81Z6Sqanr2S0GDHI K9KJKi5v0OdBSphNgoZHMoEamNlmmNuuNcORx3oAxB7YVdc= -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org