$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa File: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (raw, json) Hash identifier: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE= Subject key identifier: 97:98:BA:C7:FB:92:FD:B0:1C:25:ED:E2:07:C1:14:03:DB:2E:60:2E Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 6AEB45F445F6A66D610F801290641997B3870375 Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa Signing time: Wed 11 Dec 2024 14:58:14 +0000 ROA not before: Wed 11 Dec 2024 14:53:14 +0000 ROA not after: Wed 10 Dec 2025 14:58:14 +0000 asID: 38523 IP address blocks: 2401:2c40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:eb:45:f4:45:f6:a6:6d:61:0f:80:12:90:64:19:97:b3:87:03:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Dec 11 14:53:14 2024 GMT Not After : Dec 10 14:58:14 2025 GMT Subject: CN=9798BAC7FB92FDB01C25EDE207C11403DB2E602E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1c:af:65:d4:07:18:ff:cc:ea:82:45:6b:69: bf:ac:e2:ca:a9:87:57:87:7e:e7:e4:3d:24:7b:a6: 3e:9d:f9:c6:96:13:6d:76:e9:a9:38:44:17:89:65: 57:f0:ee:72:5d:62:62:af:b9:40:b5:93:6e:fa:d5: 31:0e:6f:84:82:bf:34:2b:97:45:ae:d9:1f:0a:ae: 74:68:1e:04:21:37:df:5a:66:3c:46:a2:d1:b5:75: 3d:07:f1:32:37:ef:4a:49:03:74:20:6d:3f:45:90: fe:b6:bd:a1:62:bb:39:bd:2f:5d:f1:af:29:81:00: 1d:63:7e:16:a5:ae:e2:98:90:cf:a6:38:44:ec:81: 58:44:98:98:cf:60:02:d4:6d:d2:91:40:b3:a0:ae: 29:6a:aa:46:ce:f1:b8:27:52:e4:d8:20:e8:d9:6d: 22:7d:40:f9:f4:9e:08:0e:2e:5d:f3:b4:b5:8d:8c: fa:88:95:f9:67:c2:21:91:b4:76:83:cf:78:00:c5: 19:48:c3:f6:00:8a:67:6f:d2:3a:d1:f8:fd:12:6e: 20:87:5a:dc:97:54:f9:44:42:d8:8a:35:f4:f5:fb: 85:50:4e:9d:40:e6:69:49:55:da:98:f8:06:c1:d6: 03:57:dd:f4:d3:aa:56:14:c8:b5:e6:3e:91:26:ce: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:98:BA:C7:FB:92:FD:B0:1C:25:ED:E2:07:C1:14:03:DB:2E:60:2E X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2c40:5::/48 Signature Algorithm: sha256WithRSAEncryption 0f:93:6d:a3:0b:e2:ae:99:86:b5:8e:60:e5:e8:3c:c1:60:a3: ac:4a:9f:02:22:76:1e:bc:4c:df:62:aa:82:b3:36:18:7d:f8: a9:5f:c8:8d:72:b0:ac:94:fc:9b:5f:eb:86:8f:80:ea:ac:39: e8:da:f3:e7:db:ef:eb:42:0d:7a:0c:ca:ce:5b:63:ac:b9:5d: ac:20:00:1c:53:40:9d:87:fd:53:f0:3c:ab:ea:13:3a:93:92: ba:af:24:36:1f:93:44:b8:2c:53:bc:d5:af:74:9d:79:ba:30: ab:5d:27:89:f0:bf:3a:48:87:13:85:3b:f6:38:61:f8:59:03: da:ad:61:f5:7c:43:aa:7b:7d:83:e9:ff:73:cd:94:fa:b5:cd: 9f:89:ed:ec:40:5b:82:a5:26:1e:96:da:93:6a:59:2c:0f:b1: 78:8c:c4:dc:b0:87:91:c1:85:e4:56:ee:e5:12:97:ca:70:f1: 26:d6:2d:cf:cf:9b:2f:f4:4b:12:e7:88:15:72:87:25:24:8b: 78:70:20:cf:39:5b:6a:d3:51:f6:65:48:3a:37:81:3e:8b:1e: 07:ad:0e:cb:ea:5d:8b:bf:0e:86:21:31:dd:bf:c1:4f:f2:93: a1:1b:54:4c:96:57:80:46:4b:8f:45:35:d6:a3:51:4c:3c:dd: 32:8f:01:29 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUautF9EX2pm1hD4ASkGQZl7OHA3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNDEyMTExNDUzMTRaFw0yNTEyMTAxNDU4MTRaMDMxMTAvBgNV BAMTKDk3OThCQUM3RkI5MkZEQjAxQzI1RURFMjA3QzExNDAzREIyRTYwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrHK9l1AcY/8zqgkVrab+s4sqp h1eHfufkPSR7pj6d+caWE2126ak4RBeJZVfw7nJdYmKvuUC1k2761TEOb4SCvzQr l0Wu2R8KrnRoHgQhN99aZjxGotG1dT0H8TI370pJA3QgbT9FkP62vaFiuzm9L13x rymBAB1jfhalruKYkM+mOETsgVhEmJjPYALUbdKRQLOgrilqqkbO8bgnUuTYIOjZ bSJ9QPn0nggOLl3ztLWNjPqIlflnwiGRtHaDz3gAxRlIw/YAimdv0jrR+P0SbiCH WtyXVPlEQtiKNfT1+4VQTp1A5mlJVdqY+AbB1gNX3fTTqlYUyLXmPpEmzthFAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUl5i6x/uS/bAcJe3iB8EUA9suYC4wHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMyMzQzMDMxM2EzMjYzMzQzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEsQAAFMA0G CSqGSIb3DQEBCwUAA4IBAQAPk22jC+KumYa1jmDl6DzBYKOsSp8CInYevEzfYqqC szYYffipX8iNcrCslPybX+uGj4DqrDno2vPn2+/rQg16DMrOW2OsuV2sIAAcU0Cd h/1T8Dyr6hM6k5K6ryQ2H5NEuCxTvNWvdJ15ujCrXSeJ8L86SIcThTv2OGH4WQPa rWH1fEOqe32D6f9zzZT6tc2fie3sQFuCpSYeltqTalksD7F4jMTcsIeRwYXkVu7l EpfKcPEm1i3Pz5sv9EsS54gVcoclJIt4cCDPOVtq01H2ZUg6N4E+ix4HrQ7L6l2L vw6GITHdv8FP8pOhG1RMlleARkuPRTXWo1FMPN0yjwEp -----END CERTIFICATE-----Generated at Sun Apr 6 10:44:25 2025 by rpki-client