$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: s3E3mPk7zjMiukYXGYQ/u4fy9NIl41mmVAqUoXn6lXE= Subject key identifier: 20:B9:06:08:EC:EF:62:81:23:83:CC:7E:FF:0C:E4:D9:C3:87:3B:21 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 67B524BBB461640BAD576151B0EBA0C8AB9C4D8D Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa Signing time: Fri 09 Aug 2024 08:56:01 +0000 ROA not before: Fri 09 Aug 2024 08:51:01 +0000 ROA not after: Fri 08 Aug 2025 08:56:01 +0000 asID: 147137 IP address blocks: 2400:46a0:33::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Oct 2024 06:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b5:24:bb:b4:61:64:0b:ad:57:61:51:b0:eb:a0:c8:ab:9c:4d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Aug 9 08:51:01 2024 GMT Not After : Aug 8 08:56:01 2025 GMT Subject: CN=20B90608ECEF62812383CC7EFF0CE4D9C3873B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:11:fa:0d:2d:8a:6a:6d:ad:ae:a7:44:3a: 54:fe:c5:86:61:c9:fa:20:dd:13:d6:8f:5b:76:a9: 28:c1:94:42:65:18:8f:53:6d:71:8c:cf:38:57:d2: 24:64:0a:ed:01:8d:bc:1b:da:0d:b5:0a:4b:75:18: b6:38:2c:4c:c0:dc:9e:a2:1f:0d:8f:2a:b2:89:a0: 7d:f7:b2:7c:36:bc:a8:bc:6e:76:ca:12:2e:5b:3d: bd:36:ec:af:78:3f:b2:07:42:10:1e:33:f9:8a:94: 1c:cc:d7:6b:ea:5f:5e:88:d1:5e:20:91:3c:66:dd: a2:62:8c:6c:ae:89:b6:fa:3d:2f:c5:6f:d9:70:04: 1f:26:7d:b3:1c:f0:33:be:e9:94:d4:01:fe:d1:e3: 30:25:22:ed:5d:05:9f:d8:61:a6:b8:a2:93:63:a8: 61:27:50:34:86:4b:0e:4a:81:35:b8:79:c7:02:44: 8c:c9:4f:93:be:60:1a:49:f7:03:4a:8e:5d:14:81: 3b:18:e7:e6:8b:1f:89:cb:0e:b1:2b:89:a5:fd:0b: ac:3f:ec:b6:90:12:38:a1:a9:b0:01:ca:cc:61:b0: 34:40:85:f3:4e:9a:ff:00:b2:94:72:67:2f:b0:99: 43:6f:b9:d1:41:b5:2a:e4:86:f0:bf:c5:96:3c:bf: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B9:06:08:EC:EF:62:81:23:83:CC:7E:FF:0C:E4:D9:C3:87:3B:21 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:33::/48 Signature Algorithm: sha256WithRSAEncryption 19:91:24:98:d1:cd:a5:49:79:94:d6:ae:b8:fa:c3:52:a1:82: 38:93:1b:cf:fa:f7:87:79:4c:81:63:98:0f:84:89:00:a9:e2: ec:84:55:15:1c:91:9a:f3:df:6e:13:b3:bc:06:4f:1e:a2:2f: d2:ad:7d:df:e4:cb:b1:13:d6:24:a1:da:cc:0b:80:b8:21:30: 6a:ad:64:5b:2f:92:d1:0e:b7:72:a4:14:67:a7:77:cb:cb:d6: 81:42:ff:d0:d0:0e:50:98:aa:d6:ba:e2:ec:d3:3e:96:bc:99: f2:00:6b:96:d3:13:76:92:24:2b:65:7a:df:de:2b:c1:0b:8e: 16:33:ac:6a:0f:a0:31:5e:f0:a8:7e:eb:07:ee:89:5c:08:40: 1b:ab:34:f3:cf:8b:44:0a:f3:52:3f:fe:08:6c:c1:47:e9:7f: f8:43:86:1a:c0:b2:9e:79:b3:a1:54:d7:e7:44:26:64:e0:99: c6:4f:bd:c1:8a:b2:3c:cb:d0:e0:b1:ec:dd:26:5d:c4:e0:87: f8:89:44:71:83:c5:b0:ca:1c:ab:9f:11:33:e5:ad:fb:9e:e1: a3:e9:49:4c:92:76:8a:be:77:c6:28:5f:c9:c2:31:e6:ed:0f: b1:66:cc:18:b5:2c:7b:05:4c:a7:e0:84:46:39:7d:c9:45:0e: 6d:50:49:35 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUZ7Uku7RhZAutV2FRsOugyKucTY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNDA4MDkwODUxMDFaFw0yNTA4MDgwODU2MDFaMDMxMTAvBgNV BAMTKDIwQjkwNjA4RUNFRjYyODEyMzgzQ0M3RUZGMENFNEQ5QzM4NzNCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOxH6DS2Kam2trqdEOlT+xYZh yfog3RPWj1t2qSjBlEJlGI9TbXGMzzhX0iRkCu0Bjbwb2g21Ckt1GLY4LEzA3J6i Hw2PKrKJoH33snw2vKi8bnbKEi5bPb027K94P7IHQhAeM/mKlBzM12vqX16I0V4g kTxm3aJijGyuibb6PS/Fb9lwBB8mfbMc8DO+6ZTUAf7R4zAlIu1dBZ/YYaa4opNj qGEnUDSGSw5KgTW4eccCRIzJT5O+YBpJ9wNKjl0UgTsY5+aLH4nLDrEriaX9C6w/ 7LaQEjihqbABysxhsDRAhfNOmv8AspRyZy+wmUNvudFBtSrkhvC/xZY8v8sNAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUILkGCOzvYoEjg8x+/wzk2cOHOyEwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzMzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA MzANBgkqhkiG9w0BAQsFAAOCAQEAGZEkmNHNpUl5lNauuPrDUqGCOJMbz/r3h3lM gWOYD4SJAKni7IRVFRyRmvPfbhOzvAZPHqIv0q193+TLsRPWJKHazAuAuCEwaq1k Wy+S0Q63cqQUZ6d3y8vWgUL/0NAOUJiq1rri7NM+lryZ8gBrltMTdpIkK2V6394r wQuOFjOsag+gMV7wqH7rB+6JXAhAG6s088+LRArzUj/+CGzBR+l/+EOGGsCynnmz oVTX50QmZOCZxk+9wYqyPMvQ4LHs3SZdxOCH+IlEcYPFsMocq58RM+Wt+57ho+lJ TJJ2ir53xihfycIx5u0PsWbMGLUsewVMp+CERjl9yUUObVBJNQ== -----END CERTIFICATE-----Generated at Sat Sep 28 02:14:02 2024 by rpki-client on console-fra.rpki-client.org