$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: b5phOP/2RRxaXvlqDM+8BPCiSi5fs6R0SKsOK+zDGmc= Subject key identifier: 20:0D:2C:F6:41:30:BD:53:86:28:B5:4F:6A:2F:6D:C3:5A:99:21:96 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 3B407AB01CF471A0FBDD16D5FCCFE2B26905DD77 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa Signing time: Fri 09 Aug 2024 08:45:50 +0000 ROA not before: Fri 09 Aug 2024 08:40:50 +0000 ROA not after: Fri 08 Aug 2025 08:45:50 +0000 asID: 147137 IP address blocks: 2400:46a0:21::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Oct 2024 06:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:40:7a:b0:1c:f4:71:a0:fb:dd:16:d5:fc:cf:e2:b2:69:05:dd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Aug 9 08:40:50 2024 GMT Not After : Aug 8 08:45:50 2025 GMT Subject: CN=200D2CF64130BD538628B54F6A2F6DC35A992196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:a8:d6:d7:1d:3b:34:e4:9a:ab:8a:c2:60: 4a:43:4a:a2:ce:2c:b7:83:5a:fe:ff:28:ed:27:33: 9c:b5:cc:02:2b:c7:8a:0f:d2:f4:30:e1:b1:76:81: 9c:73:08:64:4b:ae:a4:f6:8a:12:ae:51:e4:d1:22: fd:e6:7a:01:5f:28:17:a0:64:5c:56:89:6f:36:f9: b5:5e:d3:eb:a7:19:b3:a3:27:b1:33:19:39:fd:18: 03:97:07:24:2f:f8:f7:de:07:1a:e6:65:58:ad:87: f9:96:91:e8:92:11:ae:da:39:34:a4:60:67:b8:12: b9:a5:a2:70:1b:44:b5:04:d5:8b:23:3c:3e:41:08: 10:a3:fc:4f:71:b9:76:09:61:29:56:6f:75:9a:d2: 6f:94:e4:b4:0e:a1:7e:8a:0a:ed:af:6a:cd:f6:44: 31:9e:c6:f5:17:e1:39:44:0f:b2:10:4b:90:15:2d: 35:f4:79:df:34:20:90:7c:b4:d0:d3:6a:18:ad:ff: 8f:ca:b7:de:38:9e:b9:ad:3d:03:ed:55:ff:8d:fe: 01:25:b3:64:52:4d:41:f4:5d:12:30:f0:a8:84:98: d4:5c:a1:af:9f:a2:b6:ae:c5:cd:e8:57:79:02:fc: 0e:3f:f1:8d:a1:84:5e:f8:df:27:3b:db:95:b7:45: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:2C:F6:41:30:BD:53:86:28:B5:4F:6A:2F:6D:C3:5A:99:21:96 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:21::/48 Signature Algorithm: sha256WithRSAEncryption 0b:94:bc:5c:6d:fa:3c:32:bb:74:5d:15:e8:c3:eb:94:54:75: 28:02:79:66:55:0a:ce:fb:b2:33:fc:65:7d:2b:d9:08:0d:0f: c7:00:a1:60:d3:8b:46:6a:dd:8e:39:22:7c:37:1b:b6:06:e5: 21:68:5e:6c:2b:cb:8b:af:57:7f:0a:43:0d:23:91:ab:00:4c: a3:ea:c3:58:6e:29:f8:3e:41:c7:e3:ee:8c:83:12:1e:54:e2: c7:97:a1:77:31:71:8d:93:64:64:fe:53:84:90:00:64:c0:fb: cd:22:5b:2b:77:35:bb:e6:d1:f1:cd:11:9a:fe:1c:5b:d7:87: 01:b1:3e:3b:3a:ff:f7:63:2b:21:7c:45:64:b2:df:f3:80:ba: 6d:dd:c9:b4:95:b2:1c:66:5b:da:d4:6c:a9:bd:b7:f8:4a:24: 56:d8:27:55:ef:89:be:b3:b5:7e:ef:44:18:b1:ce:b8:32:ee: 84:81:1d:8d:8e:b7:70:6d:3b:90:da:d5:20:62:48:5b:31:2b: cd:32:f4:b7:e3:e3:27:90:1d:97:99:9f:d4:86:a8:58:92:93: 15:51:05:4e:f1:1b:ba:2c:5d:0b:38:40:05:de:3b:d8:4a:dc: 49:71:6d:c5:51:46:bd:f4:12:90:84:4a:16:f9:1e:13:28:0a: bd:f6:0c:cb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUO0B6sBz0caD73RbV/M/ismkF3XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNDA4MDkwODQwNTBaFw0yNTA4MDgwODQ1NTBaMDMxMTAvBgNV BAMTKDIwMEQyQ0Y2NDEzMEJENTM4NjI4QjU0RjZBMkY2REMzNUE5OTIxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf0qjW1x07NOSaq4rCYEpDSqLO LLeDWv7/KO0nM5y1zAIrx4oP0vQw4bF2gZxzCGRLrqT2ihKuUeTRIv3megFfKBeg ZFxWiW82+bVe0+unGbOjJ7EzGTn9GAOXByQv+PfeBxrmZVith/mWkeiSEa7aOTSk YGe4ErmlonAbRLUE1YsjPD5BCBCj/E9xuXYJYSlWb3Wa0m+U5LQOoX6KCu2vas32 RDGexvUX4TlED7IQS5AVLTX0ed80IJB8tNDTahit/4/Kt944nrmtPQPtVf+N/gEl s2RSTUH0XRIw8KiEmNRcoa+forauxc3oV3kC/A4/8Y2hhF743yc725W3RYJLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUIA0s9kEwvVOGKLVPai9tw1qZIZYwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA ITANBgkqhkiG9w0BAQsFAAOCAQEAC5S8XG36PDK7dF0V6MPrlFR1KAJ5ZlUKzvuy M/xlfSvZCA0PxwChYNOLRmrdjjkifDcbtgblIWhebCvLi69XfwpDDSORqwBMo+rD WG4p+D5Bx+PujIMSHlTix5ehdzFxjZNkZP5ThJAAZMD7zSJbK3c1u+bR8c0Rmv4c W9eHAbE+Ozr/92MrIXxFZLLf84C6bd3JtJWyHGZb2tRsqb23+EokVtgnVe+JvrO1 fu9EGLHOuDLuhIEdjY63cG07kNrVIGJIWzErzTL0t+PjJ5Adl5mf1IaoWJKTFVEF TvEbuixdCzhABd472ErcSXFtxVFGvfQSkIRKFvkeEygKvfYMyw== -----END CERTIFICATE-----Generated at Sat Sep 28 03:37:39 2024 by rpki-client on console-ams.rpki-client.org