$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: EfXQgH3skqgBZ59mU79eQZFqw5azW9WiU2e3l6sHPMc= Subject key identifier: 8B:AA:BA:3A:39:86:A8:66:40:24:52:B4:41:CF:C3:75:C4:3C:91:C3 Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 7A03C960E592DBE090A5BC8133BB0E8FBDD55017 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa Signing time: Wed 07 Aug 2024 07:00:00 +0000 ROA not before: Wed 07 Aug 2024 06:55:00 +0000 ROA not after: Wed 06 Aug 2025 07:00:00 +0000 asID: 139949 IP address blocks: 2405:aac0:224::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:03:c9:60:e5:92:db:e0:90:a5:bc:81:33:bb:0e:8f:bd:d5:50:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Aug 7 06:55:00 2024 GMT Not After : Aug 6 07:00:00 2025 GMT Subject: CN=8BAABA3A3986A866402452B441CFC375C43C91C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:f6:8f:5a:ad:f7:79:10:11:21:65:39:84: 1e:f4:3d:a3:88:98:ee:65:d4:73:a9:36:e1:07:3e: 36:1e:5d:c0:ac:88:ed:cf:90:4b:cb:08:9d:8e:82: c6:4c:9b:4d:9e:b5:b6:08:25:f6:bc:44:fb:ae:07: 79:55:e0:0f:a0:e4:75:67:04:c5:a6:14:13:c0:e7: 1e:7b:c2:5b:49:97:fb:84:68:be:47:15:08:5f:e3: ed:c4:8c:34:33:5b:7e:85:fc:85:fb:46:ae:10:e8: 1f:4c:98:5d:89:89:3f:77:c6:e6:a8:84:9b:28:1f: cf:18:b5:d0:dd:06:50:d5:60:c5:38:42:25:fa:55: 75:ea:1b:7c:fc:a9:01:1d:50:6b:12:bd:6e:9d:24: e1:48:fb:4a:9b:33:8d:6c:80:6d:b8:27:5e:3d:6e: 90:dd:2e:69:ad:88:e2:1d:b5:21:81:13:85:03:eb: 48:49:80:b8:d7:35:34:29:85:70:12:11:6b:4d:63: ea:bb:53:f7:e1:72:56:c5:5a:06:17:52:8b:9d:5d: 7d:2a:0a:4f:f4:79:30:3d:61:08:2f:d4:cf:08:b6: 5e:64:b6:d9:82:64:43:17:6c:bc:2a:d6:91:ff:1b: cb:0b:35:e6:ed:5e:6b:d4:0a:4a:00:e9:12:21:ae: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AA:BA:3A:39:86:A8:66:40:24:52:B4:41:CF:C3:75:C4:3C:91:C3 X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:224::/48 Signature Algorithm: sha256WithRSAEncryption 75:ce:1d:71:c9:30:f2:ca:bc:4b:46:17:25:3a:43:d2:90:b1: 7f:2e:a4:c5:c2:89:86:4b:e8:14:f1:b5:24:bb:4d:f3:f2:87: ce:f5:2b:ac:30:2e:d7:f4:ae:48:c8:b6:44:16:de:13:d1:ea: 33:54:a0:ac:c7:5c:03:8b:f7:ec:06:40:74:9e:79:f0:57:98: c4:58:f8:83:bf:58:39:f4:29:f7:5b:93:3c:11:3d:c1:64:fc: 0a:12:ba:9f:9a:ad:d1:32:11:2e:1b:fd:c4:3b:62:57:93:99: a2:af:e0:5f:cf:d9:3a:4d:04:aa:31:1f:50:07:3d:a5:49:66: 34:69:d8:67:c1:ce:70:b8:6e:e0:e7:88:d1:3c:96:55:02:84: 94:a4:1a:82:9c:27:bd:c1:fb:33:2d:cb:51:39:70:67:bf:c8: 9b:7e:75:2d:9f:4e:75:a6:2a:6a:c5:ec:f5:93:25:11:d8:bf: 44:fc:2c:44:14:91:7e:45:f6:95:91:23:34:8b:bb:88:ff:7d: fb:8e:8b:1d:20:92:ea:9c:ce:16:03:c6:7b:14:4d:ab:4b:cf: d5:16:54:f5:a1:5f:a3:07:36:82:00:c9:b8:89:f9:cf:75:69: 36:58:ff:09:70:cd:ac:66:37:62:38:70:82:d1:93:5b:08:a0: aa:48:06:3a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUegPJYOWS2+CQpbyBM7sOj73VUBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNDA4MDcwNjU1MDBaFw0yNTA4MDYwNzAwMDBaMDMxMTAvBgNV BAMTKDhCQUFCQTNBMzk4NkE4NjY0MDI0NTJCNDQxQ0ZDMzc1QzQzQzkxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDPaPWq33eRARIWU5hB70PaOI mO5l1HOpNuEHPjYeXcCsiO3PkEvLCJ2OgsZMm02etbYIJfa8RPuuB3lV4A+g5HVn BMWmFBPA5x57wltJl/uEaL5HFQhf4+3EjDQzW36F/IX7Rq4Q6B9MmF2JiT93xuao hJsoH88YtdDdBlDVYMU4QiX6VXXqG3z8qQEdUGsSvW6dJOFI+0qbM41sgG24J149 bpDdLmmtiOIdtSGBE4UD60hJgLjXNTQphXASEWtNY+q7U/fhclbFWgYXUoudXX0q Ck/0eTA9YQgv1M8Itl5kttmCZEMXbLwq1pH/G8sLNebtXmvUCkoA6RIhrjHPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUi6q6OjmGqGZAJFK0Qc/DdcQ8kcMwHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzIzMjM0M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWq wAIkMA0GCSqGSIb3DQEBCwUAA4IBAQB1zh1xyTDyyrxLRhclOkPSkLF/LqTFwomG S+gU8bUku03z8ofO9SusMC7X9K5IyLZEFt4T0eozVKCsx1wDi/fsBkB0nnnwV5jE WPiDv1g59Cn3W5M8ET3BZPwKErqfmq3RMhEuG/3EO2JXk5mir+Bfz9k6TQSqMR9Q Bz2lSWY0adhnwc5wuG7g54jRPJZVAoSUpBqCnCe9wfszLctROXBnv8ibfnUtn051 pipqxez1kyUR2L9E/CxEFJF+RfaVkSM0i7uI/337josdIJLqnM4WA8Z7FE2rS8/V FlT1oV+jBzaCAMm4ifnPdWk2WP8JcM2sZjdiOHCC0ZNbCKCqSAY6 -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:32 2024 by rpki-client on console-fra.rpki-client.org