$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: b4xLY6qypxZOfiBsZ9cRVZdCJbgH704o9Ls2GIBrq7I= Subject key identifier: 96:5E:2B:7B:1F:A2:55:98:9B:C2:11:17:85:F4:C3:25:7B:60:3A:07 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 48A5EF78C6891530467A7E2A9532B0081D3F3C67 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 08 Aug 2024 19:06:16 +0000 ROA not before: Thu 08 Aug 2024 19:01:16 +0000 ROA not after: Thu 07 Aug 2025 19:06:16 +0000 asID: 147137 IP address blocks: 2400:46a0:14::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Oct 2024 06:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a5:ef:78:c6:89:15:30:46:7a:7e:2a:95:32:b0:08:1d:3f:3c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Aug 8 19:01:16 2024 GMT Not After : Aug 7 19:06:16 2025 GMT Subject: CN=965E2B7B1FA255989BC2111785F4C3257B603A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:6d:53:7d:54:ad:41:3b:cb:48:41:1f:83: 22:79:0a:f6:e3:79:7f:32:e7:56:db:8c:7f:31:89: 04:1a:f3:46:4c:ce:a1:5c:c1:ab:b6:ad:4b:69:20: 00:79:8c:0f:4c:93:3f:c6:06:f2:4a:c1:80:85:3d: e9:2d:a9:03:9c:d8:d6:aa:fb:c1:4d:38:c8:cc:c7: 79:70:f4:ca:97:65:95:fd:af:77:47:6d:a8:5f:11: ff:0e:b6:cf:66:65:84:5c:4d:f0:7d:61:89:fa:ab: ba:0e:03:8c:f3:7c:25:f1:f7:4f:3b:82:f2:f4:da: de:df:3c:bd:fd:32:a1:42:17:ee:aa:df:48:d5:27: fa:1b:de:08:18:af:7c:f6:11:7d:d3:de:98:fb:d6: 26:35:f6:3c:7b:7e:64:ed:42:a1:15:a6:07:c6:71: d7:57:d0:bb:52:6b:8a:66:ff:5f:da:4a:8e:1e:fe: 91:92:3c:7f:8f:e1:41:d7:eb:13:e8:7a:7f:03:82: fe:bb:34:4a:16:41:ee:44:fa:eb:72:f0:84:99:74: 8c:00:ce:c1:76:24:f0:28:02:87:f6:bb:bc:16:90: 33:dd:b2:80:46:0d:f0:16:8e:00:eb:65:e7:c5:4d: 90:2b:32:32:bf:45:d8:4a:d3:cb:5f:5b:f9:78:4b: f7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5E:2B:7B:1F:A2:55:98:9B:C2:11:17:85:F4:C3:25:7B:60:3A:07 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:14::/48 Signature Algorithm: sha256WithRSAEncryption 3f:3d:f6:f4:87:af:8d:24:c6:d4:d5:29:6a:f9:15:f3:77:bd: 87:b9:2b:75:f6:37:c3:37:da:1c:2b:fb:72:80:00:4d:ba:7e: 7b:bf:0d:fa:bc:d8:71:8f:54:2d:8a:00:a3:63:94:69:0f:97: 74:14:22:28:16:5f:73:00:dd:fb:c3:f6:1c:d6:97:52:2f:cd: 31:17:93:d9:f4:dd:2f:e5:e7:4a:5c:4f:c2:a3:3c:ad:f5:1f: 57:e8:03:4a:3e:4a:0b:72:40:8f:24:54:63:df:a1:50:44:6b: e7:a6:2f:50:17:85:9d:e0:76:01:3f:de:8e:4d:d7:76:b0:a8: ba:7f:19:90:67:3d:d0:ff:79:b3:c0:ef:88:e2:10:b8:db:b7: 89:a0:3d:be:cf:07:af:f4:e6:95:b6:4f:64:da:3d:48:d3:2c: 7f:5d:35:d8:e7:19:e9:b9:1a:86:01:cf:18:96:fe:d5:64:83: 69:54:f7:98:c6:bd:5b:0b:9b:17:8b:1d:55:77:c1:40:78:d6: 4c:4b:0f:49:b4:2c:68:cf:95:5b:2e:ba:3c:82:65:fb:bb:f2: 0d:bd:f4:e3:69:4e:4f:00:0a:b5:9c:77:ad:b1:05:68:1d:67: de:7b:b8:aa:65:29:b0:d0:3b:15:a8:44:23:71:ff:77:ab:11: 01:3b:c2:40 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSKXveMaJFTBGen4qlTKwCB0/PGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNDA4MDgxOTAxMTZaFw0yNTA4MDcxOTA2MTZaMDMxMTAvBgNV BAMTKDk2NUUyQjdCMUZBMjU1OTg5QkMyMTExNzg1RjRDMzI1N0I2MDNBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZYG1TfVStQTvLSEEfgyJ5Cvbj eX8y51bbjH8xiQQa80ZMzqFcwau2rUtpIAB5jA9Mkz/GBvJKwYCFPektqQOc2Naq +8FNOMjMx3lw9MqXZZX9r3dHbahfEf8Ots9mZYRcTfB9YYn6q7oOA4zzfCXx9087 gvL02t7fPL39MqFCF+6q30jVJ/ob3ggYr3z2EX3T3pj71iY19jx7fmTtQqEVpgfG cddX0LtSa4pm/1/aSo4e/pGSPH+P4UHX6xPoen8Dgv67NEoWQe5E+uty8ISZdIwA zsF2JPAoAof2u7wWkDPdsoBGDfAWjgDrZefFTZArMjK/RdhK08tfW/l4S/f3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUll4rex+iVZibwhEXhfTDJXtgOgcwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA FDANBgkqhkiG9w0BAQsFAAOCAQEAPz329IevjSTG1NUpavkV83e9h7krdfY3wzfa HCv7coAATbp+e78N+rzYcY9ULYoAo2OUaQ+XdBQiKBZfcwDd+8P2HNaXUi/NMReT 2fTdL+XnSlxPwqM8rfUfV+gDSj5KC3JAjyRUY9+hUERr56YvUBeFneB2AT/ejk3X drCoun8ZkGc90P95s8DviOIQuNu3iaA9vs8Hr/TmlbZPZNo9SNMsf1012OcZ6bka hgHPGJb+1WSDaVT3mMa9WwubF4sdVXfBQHjWTEsPSbQsaM+VWy66PIJl+7vyDb30 42lOTwAKtZx3rbEFaB1n3nu4qmUpsNA7FahEI3H/d6sRATvCQA== -----END CERTIFICATE-----Generated at Sat Sep 28 02:14:02 2024 by rpki-client on console-fra.rpki-client.org