$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: w/1urI9pbsrkswOeyok3APX8/jX2X2cjE/vqzH2ujCU= Subject key identifier: 3C:0B:CE:8F:2C:58:A4:22:CF:FB:CE:E8:49:D0:F2:33:D7:BD:4A:0F Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 54472B821A48DFAEA614C6AD6D834A1C7317B37A Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 08 Aug 2024 19:03:56 +0000 ROA not before: Thu 08 Aug 2024 18:58:56 +0000 ROA not after: Thu 07 Aug 2025 19:03:56 +0000 asID: 147137 IP address blocks: 2400:46a0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Oct 2024 06:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:47:2b:82:1a:48:df:ae:a6:14:c6:ad:6d:83:4a:1c:73:17:b3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Aug 8 18:58:56 2024 GMT Not After : Aug 7 19:03:56 2025 GMT Subject: CN=3C0BCE8F2C58A422CFFBCEE849D0F233D7BD4A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:57:50:e2:c7:ce:5b:cd:32:04:5f:60:99: 9f:de:16:86:85:c2:29:24:1a:76:4f:3e:37:c3:4c: 6e:70:48:be:5c:1f:1e:11:f0:bd:dd:ee:7b:0d:f5: 0c:7e:db:6d:96:d1:f7:b1:d8:90:be:6b:c0:52:2c: 5f:ab:41:64:a9:2b:45:41:c8:c6:ed:8d:df:08:42: f0:82:db:3d:8d:46:b0:df:62:bb:e2:d2:30:35:3d: fd:82:69:ec:24:0d:8e:9b:11:97:a9:21:96:43:bb: 64:80:3c:2a:2c:7f:72:87:00:c3:ac:0f:c8:c0:cf: a7:23:24:27:3c:27:63:4b:0c:81:6f:c3:3c:9e:42: f7:5b:ae:55:76:c5:8d:25:75:b4:b2:80:a1:85:04: 09:e3:4c:ed:0c:f3:ad:f6:81:74:68:9c:ff:90:f4: c0:32:4d:a0:9d:4e:cb:6e:c6:b6:0b:4f:f4:fc:01: 0a:eb:c0:0f:ba:c4:13:32:e9:f9:ce:10:16:d6:56: e2:71:3d:bc:7d:0b:ec:7d:9b:62:c5:7f:c0:3e:c5: 2d:a1:66:30:f4:d7:34:ee:e0:fc:f7:0f:88:9d:63: e3:b1:17:f7:5e:44:b3:7f:a5:d4:f0:0e:e2:68:d5: 7a:5d:a3:37:1b:3b:41:6f:19:f7:91:f2:82:0b:46: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0B:CE:8F:2C:58:A4:22:CF:FB:CE:E8:49:D0:F2:33:D7:BD:4A:0F X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:7::/48 Signature Algorithm: sha256WithRSAEncryption 9c:95:ea:af:46:43:7f:03:40:58:72:ec:e5:98:aa:50:5b:19: a4:2e:5c:07:97:3a:54:3f:72:1e:e8:64:20:ca:28:32:cf:09: 5a:65:0b:a9:8b:d5:31:8c:6b:8d:70:66:b6:3e:9c:df:db:0f: 73:6a:f3:a9:aa:aa:8a:7b:b8:bc:52:6a:3c:fc:c4:13:66:55: 38:d7:a3:b5:6d:a8:ba:f7:69:79:04:6f:c6:9a:62:fd:c6:65: e0:9a:2f:f5:ee:12:33:91:c4:2b:91:55:da:6f:0c:91:83:42: 9a:ae:d3:96:85:b4:85:c1:48:e0:ec:13:d6:d4:22:4a:3f:e0: f0:46:58:df:3e:f1:3e:88:3c:52:f5:f2:6d:2f:62:a2:07:98: 20:52:2a:af:07:ee:87:16:81:90:86:dc:43:e2:99:6d:17:1a: 55:55:c4:3d:5c:92:7c:65:ac:03:b2:19:0e:0d:bc:1e:ec:8c: 25:01:08:9a:e0:af:c8:e7:da:69:3c:ec:93:ed:31:c9:c6:4a: 54:e6:11:c5:67:c8:7f:ce:16:ac:7f:51:a0:cb:4a:e2:9a:a2: a3:9d:0e:82:d6:23:ce:2e:fa:c0:10:9e:5a:8d:62:e5:8a:82: 03:6c:4e:74:ea:38:60:7b:20:bc:aa:02:08:a6:c5:87:a7:26: 2e:21:14:06 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUVEcrghpI366mFMatbYNKHHMXs3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNDA4MDgxODU4NTZaFw0yNTA4MDcxOTAzNTZaMDMxMTAvBgNV BAMTKDNDMEJDRThGMkM1OEE0MjJDRkZCQ0VFODQ5RDBGMjMzRDdCRDRBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xVdQ4sfOW80yBF9gmZ/eFoaF wikkGnZPPjfDTG5wSL5cHx4R8L3d7nsN9Qx+222W0fex2JC+a8BSLF+rQWSpK0VB yMbtjd8IQvCC2z2NRrDfYrvi0jA1Pf2CaewkDY6bEZepIZZDu2SAPCosf3KHAMOs D8jAz6cjJCc8J2NLDIFvwzyeQvdbrlV2xY0ldbSygKGFBAnjTO0M8632gXRonP+Q 9MAyTaCdTstuxrYLT/T8AQrrwA+6xBMy6fnOEBbWVuJxPbx9C+x9m2LFf8A+xS2h ZjD01zTu4Pz3D4idY+OxF/deRLN/pdTwDuJo1XpdozcbO0FvGfeR8oILRkGxAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUPAvOjyxYpCLP+87oSdDyM9e9Sg8wHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzczMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAEagAAcw DQYJKoZIhvcNAQELBQADggEBAJyV6q9GQ38DQFhy7OWYqlBbGaQuXAeXOlQ/ch7o ZCDKKDLPCVplC6mL1TGMa41wZrY+nN/bD3Nq86mqqop7uLxSajz8xBNmVTjXo7Vt qLr3aXkEb8aaYv3GZeCaL/XuEjORxCuRVdpvDJGDQpqu05aFtIXBSODsE9bUIko/ 4PBGWN8+8T6IPFL18m0vYqIHmCBSKq8H7ocWgZCG3EPimW0XGlVVxD1cknxlrAOy GQ4NvB7sjCUBCJrgr8jn2mk87JPtMcnGSlTmEcVnyH/OFqx/UaDLSuKaoqOdDoLW I84u+sAQnlqNYuWKggNsTnTqOGB7ILyqAgimxYenJi4hFAY= -----END CERTIFICATE-----Generated at Sat Sep 28 02:14:02 2024 by rpki-client on console-fra.rpki-client.org