$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: PGM+RPYqD/0SwITZqydXWuhrSCRidz2ikSS8bdFxGqs= Subject key identifier: B5:85:95:F4:EF:1A:E0:ED:3A:0F:E4:4D:B8:3D:61:88:1F:B3:AC:DE Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 67EE80B25EDFB32981C906AD68BAD8260B3F86F6 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 08 Aug 2024 19:07:31 +0000 ROA not before: Thu 08 Aug 2024 19:02:31 +0000 ROA not after: Thu 07 Aug 2025 19:07:31 +0000 asID: 147137 IP address blocks: 2400:46a0:19::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 15:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ee:80:b2:5e:df:b3:29:81:c9:06:ad:68:ba:d8:26:0b:3f:86:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Aug 8 19:02:31 2024 GMT Not After : Aug 7 19:07:31 2025 GMT Subject: CN=B58595F4EF1AE0ED3A0FE44DB83D61881FB3ACDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9b:2a:7a:c4:14:8b:47:86:cc:f7:3b:55:29: 2f:ea:6d:48:8c:c4:b5:66:0f:8b:96:ec:15:c3:57: 19:00:b0:18:a6:ed:a7:9f:ca:48:ca:90:52:3d:75: b2:2c:ba:0a:45:87:c3:9e:6e:07:dc:32:dd:d4:ff: 98:da:2b:9a:39:6f:f4:a9:39:6c:01:c1:87:f4:b6: e6:82:26:95:2b:d5:fc:29:72:93:39:03:b4:ed:59: 8b:17:75:e1:06:b6:83:b3:3f:e3:26:98:25:74:13: b9:bd:71:e8:be:ab:7d:86:bc:ae:27:eb:f8:67:93: 1c:ee:f1:b0:6a:39:e5:d5:bc:13:53:09:bc:6d:e4: e6:bf:e7:7f:84:28:b1:79:bd:10:2c:79:01:47:be: 71:d5:ca:6e:53:06:05:8f:6a:f0:3e:b4:a1:12:01: d9:1f:ec:a5:c4:ce:20:03:05:b2:89:af:d8:b2:29: 0c:60:28:59:c7:50:b1:55:eb:5b:af:b0:46:c6:ca: 1d:2f:da:6b:b5:e2:0f:4c:10:f4:26:89:29:ba:e6: f3:2e:11:cc:ce:0c:06:c2:f8:46:f3:b7:7b:db:39: a6:5a:c5:c2:5f:93:72:a9:86:f3:9a:04:ff:40:21: d5:92:ca:b7:01:84:23:38:b5:bd:87:fc:8f:e6:24: 54:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:85:95:F4:EF:1A:E0:ED:3A:0F:E4:4D:B8:3D:61:88:1F:B3:AC:DE X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:19::/48 Signature Algorithm: sha256WithRSAEncryption 77:9a:d8:3b:e5:ea:47:5d:69:9c:c0:80:5a:00:ef:f8:ec:28: c6:c2:89:6d:b9:80:7e:81:54:e2:d2:d5:bd:63:0e:78:40:52: e9:0f:ab:d4:25:f4:95:77:24:6d:dc:45:3e:13:4a:50:62:95: a3:6a:4c:ce:d9:3f:6b:fa:df:45:9a:dd:49:ad:65:0f:d4:4a: 75:3d:8e:2d:29:1c:eb:93:04:6e:dc:56:2f:00:cb:f7:d0:1a: ca:73:6a:16:0a:3a:3e:99:45:69:2a:5d:01:fc:ac:93:c5:1c: eb:6b:48:15:51:0e:b8:ce:37:70:fe:fd:d8:c3:c6:94:e1:4a: ee:c5:2c:3e:6c:8d:86:ad:14:7b:81:51:16:7b:10:79:79:e5: 9f:86:78:52:1b:95:0e:fd:78:05:3d:05:3a:b6:60:96:af:65: d5:4c:96:3d:db:a4:8d:37:8b:85:14:ec:d1:ad:c2:48:2d:a8: 9d:e6:89:d8:ba:cd:2a:c5:8f:11:14:e2:07:06:44:8e:5b:2f: 9b:59:70:45:01:36:3d:6a:7b:bd:4d:42:e2:fe:6f:23:92:29: 92:3e:bf:1e:ab:d8:9b:a0:8c:c0:19:17:c7:f2:50:6d:a3:ea: 11:1e:1e:83:6d:03:c5:f6:48:80:58:1d:93:fc:92:49:ed:48: c7:af:ac:4c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUZ+6Asl7fsymByQataLrYJgs/hvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNDA4MDgxOTAyMzFaFw0yNTA4MDcxOTA3MzFaMDMxMTAvBgNV BAMTKEI1ODU5NUY0RUYxQUUwRUQzQTBGRTQ0REI4M0Q2MTg4MUZCM0FDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtmyp6xBSLR4bM9ztVKS/qbUiM xLVmD4uW7BXDVxkAsBim7aefykjKkFI9dbIsugpFh8OebgfcMt3U/5jaK5o5b/Sp OWwBwYf0tuaCJpUr1fwpcpM5A7TtWYsXdeEGtoOzP+MmmCV0E7m9cei+q32GvK4n 6/hnkxzu8bBqOeXVvBNTCbxt5Oa/53+EKLF5vRAseQFHvnHVym5TBgWPavA+tKES Adkf7KXEziADBbKJr9iyKQxgKFnHULFV61uvsEbGyh0v2mu14g9MEPQmiSm65vMu EczODAbC+Ebzt3vbOaZaxcJfk3KphvOaBP9AIdWSyrcBhCM4tb2H/I/mJFThAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUtYWV9O8a4O06D+RNuD1hiB+zrN4wHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA GTANBgkqhkiG9w0BAQsFAAOCAQEAd5rYO+XqR11pnMCAWgDv+OwoxsKJbbmAfoFU 4tLVvWMOeEBS6Q+r1CX0lXckbdxFPhNKUGKVo2pMztk/a/rfRZrdSa1lD9RKdT2O LSkc65MEbtxWLwDL99AaynNqFgo6PplFaSpdAfysk8Uc62tIFVEOuM43cP792MPG lOFK7sUsPmyNhq0Ue4FRFnsQeXnln4Z4UhuVDv14BT0FOrZglq9l1UyWPdukjTeL hRTs0a3CSC2oneaJ2LrNKsWPERTiBwZEjlsvm1lwRQE2PWp7vU1C4v5vI5Ipkj6/ HqvYm6CMwBkXx/JQbaPqER4eg20DxfZIgFgdk/ySSe1Ix6+sTA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org