$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: WPswTVq7n7VUiE6XxPvvfyFVJh0fVzukvlERAkHSjPI= Subject key identifier: D8:E0:88:0B:3E:7E:68:A2:5A:CA:A4:B5:12:B4:B9:19:0E:BA:6B:60 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 68B388F7BD111BD933416C8A021AC18B2FB68AA4 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa Signing time: Fri 09 Aug 2024 08:46:13 +0000 ROA not before: Fri 09 Aug 2024 08:41:13 +0000 ROA not after: Fri 08 Aug 2025 08:46:13 +0000 asID: 147137 IP address blocks: 2400:46a0:23::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Oct 2024 06:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b3:88:f7:bd:11:1b:d9:33:41:6c:8a:02:1a:c1:8b:2f:b6:8a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Aug 9 08:41:13 2024 GMT Not After : Aug 8 08:46:13 2025 GMT Subject: CN=D8E0880B3E7E68A25ACAA4B512B4B9190EBA6B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:85:9a:fe:72:5e:39:bc:c8:09:03:a0:37:c4: f2:be:2b:08:5c:5c:9b:d4:e4:a8:57:7f:e8:36:3b: df:cf:f3:27:d7:12:54:67:b4:55:73:44:a9:ba:47: 19:2a:08:77:78:31:4c:c0:19:26:8c:e0:d7:4c:a5: 19:6e:0e:35:96:35:90:f8:af:8c:66:f0:9f:cb:8a: 54:80:ab:62:bd:63:98:38:84:ba:a8:b8:fc:83:d5: af:0c:c9:75:45:f1:70:12:6a:60:4a:c4:3d:54:a0: 9c:d6:bc:73:31:0e:4d:f8:91:28:a5:e7:40:ad:4f: fb:15:97:0a:fd:95:1c:7e:53:15:d6:7e:5c:c5:39: 51:77:4e:09:d6:15:33:33:80:09:ea:11:de:9a:e2: e1:8e:8d:f4:4d:c5:73:3e:00:bc:f1:df:9d:84:a7: c5:d8:b4:56:6f:aa:fe:d1:45:56:de:10:61:94:61: 56:a7:d5:78:c9:09:c4:25:15:15:a9:22:bd:d2:28: b5:02:62:80:b4:91:76:34:e6:d2:92:08:94:59:30: 0b:45:b1:50:ff:95:4a:7d:0d:9f:fd:f1:b7:44:85: 6c:fc:7f:44:ac:d3:09:73:87:5c:3e:9d:1a:6c:26: f0:12:f2:ae:fc:fc:67:c0:8d:fa:4c:bc:1d:3b:08: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E0:88:0B:3E:7E:68:A2:5A:CA:A4:B5:12:B4:B9:19:0E:BA:6B:60 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:23::/48 Signature Algorithm: sha256WithRSAEncryption 53:8d:6e:f1:c9:ea:2f:7d:ec:f7:96:36:bd:39:e7:5c:f7:87: b9:42:01:4f:81:97:4a:f8:da:37:30:e5:af:ad:e5:43:33:fe: 7e:16:70:8b:19:16:f8:37:e5:ef:2d:9c:f4:95:f7:07:48:3f: 7a:58:0c:d1:cb:da:d0:ca:d4:8c:51:d5:5e:21:1f:30:7d:43: a0:f6:22:29:94:4f:21:cd:05:59:74:54:32:22:83:ed:dd:f5: 0e:6e:7d:b0:4d:9e:2c:5a:a0:68:bd:1d:0a:58:65:0c:69:35: 10:5b:74:9a:b4:2d:c6:18:29:33:2a:16:34:0e:cb:d4:55:4a: ae:c2:f3:68:bf:40:97:cc:1f:10:dc:e2:7b:ce:cf:be:8e:b8: 03:1a:df:0f:63:84:74:bc:61:21:e4:ae:c0:78:6e:84:c5:d7: 03:a0:8c:ff:b9:b4:1b:ff:cc:b8:be:22:ee:52:cf:2b:d6:6e: a8:ad:28:34:4d:51:ce:0d:b9:fb:17:cd:fd:49:d3:17:01:70: 71:0c:4b:52:2f:83:5e:ae:77:be:67:bb:10:ef:53:1e:ca:c3: e6:10:c1:ed:3e:40:51:e7:f4:ac:6c:aa:37:12:e8:68:5e:54: d5:50:11:87:c8:60:de:9c:e3:44:15:b8:32:49:91:62:84:5f: f1:c5:7d:5f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUaLOI970RG9kzQWyKAhrBiy+2iqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNDA4MDkwODQxMTNaFw0yNTA4MDgwODQ2MTNaMDMxMTAvBgNV BAMTKEQ4RTA4ODBCM0U3RTY4QTI1QUNBQTRCNTEyQjRCOTE5MEVCQTZCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyhZr+cl45vMgJA6A3xPK+Kwhc XJvU5KhXf+g2O9/P8yfXElRntFVzRKm6RxkqCHd4MUzAGSaM4NdMpRluDjWWNZD4 r4xm8J/LilSAq2K9Y5g4hLqouPyD1a8MyXVF8XASamBKxD1UoJzWvHMxDk34kSil 50CtT/sVlwr9lRx+UxXWflzFOVF3TgnWFTMzgAnqEd6a4uGOjfRNxXM+ALzx352E p8XYtFZvqv7RRVbeEGGUYVan1XjJCcQlFRWpIr3SKLUCYoC0kXY05tKSCJRZMAtF sVD/lUp9DZ/98bdEhWz8f0Ss0wlzh1w+nRpsJvAS8q78/GfAjfpMvB07CC4XAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2OCICz5+aKJayqS1ErS5GQ66a2AwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA IzANBgkqhkiG9w0BAQsFAAOCAQEAU41u8cnqL33s95Y2vTnnXPeHuUIBT4GXSvja NzDlr63lQzP+fhZwixkW+Dfl7y2c9JX3B0g/elgM0cva0MrUjFHVXiEfMH1DoPYi KZRPIc0FWXRUMiKD7d31Dm59sE2eLFqgaL0dClhlDGk1EFt0mrQtxhgpMyoWNA7L 1FVKrsLzaL9Al8wfENzie87Pvo64AxrfD2OEdLxhIeSuwHhuhMXXA6CM/7m0G//M uL4i7lLPK9ZuqK0oNE1Rzg25+xfN/UnTFwFwcQxLUi+DXq53vme7EO9THsrD5hDB 7T5AUef0rGyqNxLoaF5U1VARh8hg3pzjRBW4MkmRYoRf8cV9Xw== -----END CERTIFICATE-----Generated at Sat Sep 28 03:37:39 2024 by rpki-client on console-ams.rpki-client.org