$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: 8ta7yw4B4utuXOXcNX0Ilejom40ybRp3siLVt8aLaX8= Subject key identifier: EE:83:28:75:98:39:0E:46:51:C3:CD:B3:EA:D1:9E:D0:B3:47:69:54 Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 69B9C40DBD93B67DE5B5671786EA2376D4F1A567 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa Signing time: Tue 30 Jan 2024 05:00:00 +0000 ROA not before: Tue 30 Jan 2024 04:55:00 +0000 ROA not after: Tue 28 Jan 2025 05:00:00 +0000 asID: 139949 IP address blocks: 2405:aac0:221::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 10:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b9:c4:0d:bd:93:b6:7d:e5:b5:67:17:86:ea:23:76:d4:f1:a5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Jan 30 04:55:00 2024 GMT Not After : Jan 28 05:00:00 2025 GMT Subject: CN=EE83287598390E4651C3CDB3EAD19ED0B3476954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:10:53:0a:0f:4b:13:24:dc:d2:12:2b:2e:73: 43:b9:b4:2b:57:c3:69:58:47:71:21:2f:bc:24:5b: b0:fa:05:bc:75:63:f3:2c:55:34:80:b1:ba:61:80: aa:b6:c4:f7:91:4f:d8:6e:85:15:a8:ad:ef:29:a9: c3:5f:bb:de:74:a0:35:c0:ca:47:9a:50:89:06:9d: 46:ea:f9:02:85:ba:b8:e4:b0:98:80:3c:da:c8:c2: eb:4d:8c:ad:2f:87:f2:99:ad:93:f2:e7:65:93:74: f1:a3:eb:d9:d8:2a:d4:ea:8c:f8:f7:bd:ad:8c:76: c0:5e:95:34:fa:34:c3:4c:3b:3d:7c:7a:b0:09:7e: 66:e9:12:4e:58:74:30:b1:5a:38:d7:99:3d:46:30: 1b:35:f8:fb:eb:a4:f3:b8:a5:3a:52:0f:82:f2:68: 73:9b:f1:9c:7b:96:54:a3:61:7a:b8:34:dd:33:1e: 3a:bb:44:ea:5e:6e:a7:4e:c7:81:0f:a1:fd:04:ab: a8:4f:4f:d7:c9:24:c9:6d:82:39:65:db:f9:bc:3b: be:d0:26:af:89:e9:82:4c:1c:b6:9b:2e:a0:12:86: e8:2e:58:8b:93:1f:38:80:08:51:cc:cf:90:59:45: b6:37:c6:31:f6:c1:32:86:7c:78:aa:b5:7e:a5:08: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:28:75:98:39:0E:46:51:C3:CD:B3:EA:D1:9E:D0:B3:47:69:54 X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:221::/48 Signature Algorithm: sha256WithRSAEncryption 25:95:a0:63:a2:b5:14:d2:4b:cb:f6:62:f6:90:76:70:b5:70: 3f:d3:88:41:4e:00:06:b9:1f:25:a2:07:b7:c8:7b:ba:54:31: f0:d0:62:b5:6f:39:2b:62:3a:fe:76:dc:f7:57:8c:cf:83:0e: ce:8e:43:c6:0d:3e:c2:30:b1:f0:74:f6:c7:1d:bb:15:e5:1f: 50:76:25:8c:3a:9e:08:95:36:48:ad:25:1e:f4:7e:1d:d7:07: 51:34:d0:49:0f:6f:b2:1e:0e:f5:5a:18:08:7c:79:ec:a0:1e: d5:b9:c5:b7:90:19:87:0b:09:05:b9:49:c5:cf:e9:a0:56:5b: 71:4b:bf:48:ec:56:8e:39:fc:37:0f:ab:28:bb:32:63:51:3d: 1d:df:54:1f:fa:b1:37:f9:84:19:61:f3:a5:9d:c9:af:32:7a: 02:9c:d0:b4:8d:61:f9:bd:c7:d2:dc:49:48:02:69:a4:da:fc: 6a:bf:50:35:fa:9e:23:93:7e:66:c7:cb:ff:d3:68:93:4f:ad: b5:6c:23:92:54:f1:58:0a:54:58:8f:0f:30:d4:e5:2b:ec:17: 10:83:0f:7a:46:aa:07:b5:90:04:cd:8a:82:16:b6:3c:ca:f5: e3:57:d5:b6:7e:ed:b7:1e:85:62:7c:b2:fc:47:22:61:6e:31: a1:14:dc:da -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUabnEDb2Ttn3ltWcXhuojdtTxpWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNDAxMzAwNDU1MDBaFw0yNTAxMjgwNTAwMDBaMDMxMTAvBgNV BAMTKEVFODMyODc1OTgzOTBFNDY1MUMzQ0RCM0VBRDE5RUQwQjM0NzY5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoEFMKD0sTJNzSEisuc0O5tCtX w2lYR3EhL7wkW7D6Bbx1Y/MsVTSAsbphgKq2xPeRT9huhRWore8pqcNfu950oDXA ykeaUIkGnUbq+QKFurjksJiAPNrIwutNjK0vh/KZrZPy52WTdPGj69nYKtTqjPj3 va2MdsBelTT6NMNMOz18erAJfmbpEk5YdDCxWjjXmT1GMBs1+PvrpPO4pTpSD4Ly aHOb8Zx7llSjYXq4NN0zHjq7ROpebqdOx4EPof0Eq6hPT9fJJMltgjll2/m8O77Q Jq+J6YJMHLabLqAShuguWIuTHziACFHMz5BZRbY3xjH2wTKGfHiqtX6lCG9LAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU7oModZg5DkZRw82z6tGe0LNHaVQwHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzIzMjMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWq wAIhMA0GCSqGSIb3DQEBCwUAA4IBAQAllaBjorUU0kvL9mL2kHZwtXA/04hBTgAG uR8loge3yHu6VDHw0GK1bzkrYjr+dtz3V4zPgw7OjkPGDT7CMLHwdPbHHbsV5R9Q diWMOp4IlTZIrSUe9H4d1wdRNNBJD2+yHg71WhgIfHnsoB7VucW3kBmHCwkFuUnF z+mgVltxS79I7FaOOfw3D6souzJjUT0d31Qf+rE3+YQZYfOlncmvMnoCnNC0jWH5 vcfS3ElIAmmk2vxqv1A1+p4jk35mx8v/02iTT621bCOSVPFYClRYjw8w1OUr7BcQ gw96RqoHtZAEzYqCFrY8yvXjV9W2fu23HoVifLL8RyJhbjGhFNza -----END CERTIFICATE-----Generated at Sun May 5 08:37:12 2024 by rpki-client on console-fra.rpki-client.org