$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: PAuT0bZjLHzvfWljiif6E4/Viw/gVT1BgzKHnWYQu8g= Subject key identifier: 5A:39:30:3E:AD:F1:33:B6:B0:6C:94:52:0F:37:96:91:67:53:84:EB Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 4C6F97E10C71B5556F14D72FCBFFD51AC01C5331 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 08 Aug 2024 19:03:08 +0000 ROA not before: Thu 08 Aug 2024 18:58:08 +0000 ROA not after: Thu 07 Aug 2025 19:03:08 +0000 asID: 147137 IP address blocks: 2400:46a0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Oct 2024 06:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6f:97:e1:0c:71:b5:55:6f:14:d7:2f:cb:ff:d5:1a:c0:1c:53:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Aug 8 18:58:08 2024 GMT Not After : Aug 7 19:03:08 2025 GMT Subject: CN=5A39303EADF133B6B06C94520F379691675384EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6a:7e:56:b3:99:e0:b5:41:b3:ee:45:f7:00: 0c:b9:59:7e:11:91:0c:53:d6:5f:18:fc:0a:0a:b8: f7:f0:68:4e:b7:75:ea:02:6e:71:18:e6:27:e8:d0: b2:5e:6a:f7:43:b9:a9:d4:b7:42:d1:52:bf:11:5b: 0a:9a:5e:f7:5a:2e:6e:46:d1:a3:7f:64:71:1b:9e: cc:b0:87:5f:3d:43:ec:3b:51:4d:33:83:99:10:be: 04:cc:22:81:88:16:88:c3:d2:48:7a:1f:33:b4:49: 02:5a:61:bc:ed:92:7c:32:16:54:3f:27:08:e0:2d: 04:6b:32:9d:e9:ae:f3:a5:92:f1:76:03:20:bf:60: 82:16:e5:79:fa:30:f3:01:c9:90:f7:7e:cc:d2:90: 93:a8:02:a7:56:42:4a:f4:89:1e:d0:04:5d:f2:c1: 8a:ad:7e:fd:9d:25:71:86:a8:3d:e5:84:19:6b:89: c5:89:09:62:7f:cc:c9:7f:9a:03:87:ca:13:f9:92: 76:07:d5:b0:8e:04:66:fa:ba:1a:b8:06:0d:ef:04: fe:65:c0:b3:50:60:7e:c4:e9:11:8e:7c:f5:0a:fd: 13:2b:09:08:f0:4a:0c:1f:eb:9f:ce:33:0e:2a:08: b7:d5:29:49:50:a5:a5:78:9e:18:d5:c1:af:e6:01: 27:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:39:30:3E:AD:F1:33:B6:B0:6C:94:52:0F:37:96:91:67:53:84:EB X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:5::/48 Signature Algorithm: sha256WithRSAEncryption 59:d3:3f:90:d6:1c:7b:5f:04:9b:c6:7f:e1:24:5e:6f:8f:8b: d3:2e:97:58:be:5b:b3:70:2e:46:36:d3:c0:9a:ba:cb:14:36: 8c:17:20:71:85:75:94:53:41:f0:eb:fb:78:24:49:13:72:c1: 21:d7:34:77:c4:6a:61:f7:0b:45:23:4e:0a:94:f7:f0:98:8c: 61:f4:fa:35:b0:88:55:f8:10:6a:f0:1a:a6:6f:1e:61:41:ed: 30:83:41:01:49:52:6b:9b:13:9a:da:1f:c0:da:35:31:d3:00: 87:59:8a:6b:62:06:2a:cd:d6:ab:5c:fb:8c:5a:1d:5f:0d:24: f2:97:ac:44:ae:2c:b7:43:1c:ba:a1:36:c3:cf:09:18:d6:d9: de:d5:72:dc:88:0d:3d:59:54:8e:9d:0a:a5:18:da:09:14:bf: ca:94:f3:56:c6:9a:cd:6e:e2:01:09:47:6a:42:50:80:c7:a0: 0e:38:40:c1:32:c9:d9:4b:3c:37:d3:a3:c2:c2:c6:6f:a8:a1: c5:7d:65:fc:58:65:55:f1:83:e0:42:50:58:b0:f7:99:a6:8d: 15:d3:c1:92:bc:33:64:d7:50:b3:2e:2c:04:75:e8:0f:46:5e: 69:8b:b0:7c:d8:2c:39:43:af:05:44:e1:43:db:ab:4e:cc:56: 5e:40:0d:2b -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUTG+X4QxxtVVvFNcvy//VGsAcUzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNDA4MDgxODU4MDhaFw0yNTA4MDcxOTAzMDhaMDMxMTAvBgNV BAMTKDVBMzkzMDNFQURGMTMzQjZCMDZDOTQ1MjBGMzc5NjkxNjc1Mzg0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoan5Ws5ngtUGz7kX3AAy5WX4R kQxT1l8Y/AoKuPfwaE63deoCbnEY5ifo0LJeavdDuanUt0LRUr8RWwqaXvdaLm5G 0aN/ZHEbnsywh189Q+w7UU0zg5kQvgTMIoGIFojD0kh6HzO0SQJaYbztknwyFlQ/ JwjgLQRrMp3prvOlkvF2AyC/YIIW5Xn6MPMByZD3fszSkJOoAqdWQkr0iR7QBF3y wYqtfv2dJXGGqD3lhBlricWJCWJ/zMl/mgOHyhP5knYH1bCOBGb6uhq4Bg3vBP5l wLNQYH7E6RGOfPUK/RMrCQjwSgwf65/OMw4qCLfVKUlQpaV4nhjVwa/mASehAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUWjkwPq3xM7awbJRSDzeWkWdThOswHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzczMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAEagAAUw DQYJKoZIhvcNAQELBQADggEBAFnTP5DWHHtfBJvGf+EkXm+Pi9Mul1i+W7NwLkY2 08CaussUNowXIHGFdZRTQfDr+3gkSRNywSHXNHfEamH3C0UjTgqU9/CYjGH0+jWw iFX4EGrwGqZvHmFB7TCDQQFJUmubE5raH8DaNTHTAIdZimtiBirN1qtc+4xaHV8N JPKXrESuLLdDHLqhNsPPCRjW2d7VctyIDT1ZVI6dCqUY2gkUv8qU81bGms1u4gEJ R2pCUIDHoA44QMEyydlLPDfTo8LCxm+oocV9ZfxYZVXxg+BCUFiw95mmjRXTwZK8 M2TXULMuLAR16A9GXmmLsHzYLDlDrwVE4UPbq07MVl5ADSs= -----END CERTIFICATE-----Generated at Sat Sep 28 02:14:02 2024 by rpki-client on console-fra.rpki-client.org