$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: geflI9/4w7m7+iCOsFZdzYH8ahMptfHVtvGDBvvL4ns= Subject key identifier: 86:A3:CC:7B:97:54:EF:47:CF:43:7B:CA:1A:6F:A7:EB:C6:20:B4:60 Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 731A7B0AA10D3AD8E4EB12E3EAA0E0A11E5BAA4E Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa Signing time: Tue 22 Oct 2024 12:00:00 +0000 ROA not before: Tue 22 Oct 2024 11:55:00 +0000 ROA not after: Tue 21 Oct 2025 12:00:00 +0000 asID: 139949 IP address blocks: 2405:aac0:56::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1a:7b:0a:a1:0d:3a:d8:e4:eb:12:e3:ea:a0:e0:a1:1e:5b:aa:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Oct 22 11:55:00 2024 GMT Not After : Oct 21 12:00:00 2025 GMT Subject: CN=86A3CC7B9754EF47CF437BCA1A6FA7EBC620B460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bc:1c:07:06:d9:9e:5a:cc:7a:ea:f7:37:17: 89:fb:fd:f1:1f:09:2f:11:8c:be:35:7d:7e:bb:01: 23:c7:12:e3:48:9d:5c:52:15:8a:45:ba:4a:cd:cb: 78:60:e8:8b:0d:d0:bc:fe:e1:d1:79:99:17:b7:45: 7b:b5:42:0f:d7:98:47:0a:cf:2c:c7:ba:81:3c:ea: f5:8e:3f:9e:b9:89:86:95:6f:59:2c:92:bb:4f:1f: 60:6f:15:a2:b8:35:22:52:3f:95:14:9d:7f:53:25: 26:fc:9a:13:a6:75:18:6a:90:1a:ed:e9:aa:85:44: 0c:0d:6a:77:9b:a5:6c:97:c4:84:19:b5:ac:05:5e: 33:6d:2c:76:5c:33:a6:98:f0:9d:66:a2:e7:0a:b1: 47:19:3c:54:b5:c9:16:b6:c9:4c:a5:32:ed:5e:44: 72:3e:f2:84:98:c4:38:90:d1:3b:0e:d6:1f:7f:a0: 54:b9:75:ef:d3:79:e2:7d:66:04:24:a5:d7:ce:61: a8:9e:ca:90:08:2c:df:18:4e:d8:60:4b:b5:d9:de: 8c:09:b3:78:53:13:ea:90:a7:64:8a:8d:a2:c6:4c: 5c:30:66:80:2b:69:c0:71:3f:5f:cf:a0:36:61:1e: 04:aa:97:2c:74:d5:91:38:18:17:d7:d2:d1:69:08: a1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A3:CC:7B:97:54:EF:47:CF:43:7B:CA:1A:6F:A7:EB:C6:20:B4:60 X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:56::/48 Signature Algorithm: sha256WithRSAEncryption 9d:b2:40:da:f6:ce:e8:d5:c4:b1:be:e7:e7:4a:78:e3:4f:48: e4:ec:40:bb:17:f9:97:95:fc:de:b5:8e:d1:f3:c9:f9:62:31: a8:26:c8:c2:5b:bb:4f:0a:8b:36:1c:1e:57:01:10:aa:b2:0e: 30:b4:06:a8:15:63:15:4e:d5:7e:74:43:32:ce:b9:43:ae:73: b9:f7:24:bb:aa:56:62:ed:02:40:aa:fe:79:70:52:77:22:6e: 5d:3b:46:40:0e:3b:a5:4e:0a:5d:06:be:96:21:19:46:12:f4: cf:ec:66:72:bf:09:18:e5:0f:e2:43:7d:cb:05:d5:38:16:8c: 64:05:cb:f9:1e:58:c3:84:61:87:da:7c:cd:b3:0a:14:00:f5: f1:ce:22:05:90:47:cd:dc:38:7d:b7:35:8d:0c:01:e9:72:c2: f1:32:d0:ca:ee:7d:15:56:b6:c2:62:1f:47:7a:f5:da:6c:ff: ed:a1:93:53:1b:55:7e:40:eb:18:55:41:76:5f:71:ab:9e:70: e9:da:7e:2c:ab:70:72:6b:7d:d8:9e:27:d1:66:ed:ac:1a:6c: e3:b4:70:4a:8e:2f:d2:ac:f8:20:5b:ea:93:7f:00:2d:d3:37: 60:4e:c3:53:30:30:ff:09:61:7b:d1:13:4a:c3:ef:97:b4:be: e1:6b:47:1b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcxp7CqENOtjk6xLj6qDgoR5bqk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNDEwMjIxMTU1MDBaFw0yNTEwMjExMjAwMDBaMDMxMTAvBgNV BAMTKDg2QTNDQzdCOTc1NEVGNDdDRjQzN0JDQTFBNkZBN0VCQzYyMEI0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrvBwHBtmeWsx66vc3F4n7/fEf CS8RjL41fX67ASPHEuNInVxSFYpFukrNy3hg6IsN0Lz+4dF5mRe3RXu1Qg/XmEcK zyzHuoE86vWOP565iYaVb1kskrtPH2BvFaK4NSJSP5UUnX9TJSb8mhOmdRhqkBrt 6aqFRAwNanebpWyXxIQZtawFXjNtLHZcM6aY8J1moucKsUcZPFS1yRa2yUylMu1e RHI+8oSYxDiQ0TsO1h9/oFS5de/TeeJ9ZgQkpdfOYaieypAILN8YTthgS7XZ3owJ s3hTE+qQp2SKjaLGTFwwZoAracBxP1/PoDZhHgSqlyx01ZE4GBfX0tFpCKEjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUhqPMe5dU70fPQ3vKGm+n68YgtGAwHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzUzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFqsAA VjANBgkqhkiG9w0BAQsFAAOCAQEAnbJA2vbO6NXEsb7n50p4409I5OxAuxf5l5X8 3rWO0fPJ+WIxqCbIwlu7TwqLNhweVwEQqrIOMLQGqBVjFU7VfnRDMs65Q65zufck u6pWYu0CQKr+eXBSdyJuXTtGQA47pU4KXQa+liEZRhL0z+xmcr8JGOUP4kN9ywXV OBaMZAXL+R5Yw4Rhh9p8zbMKFAD18c4iBZBHzdw4fbc1jQwB6XLC8TLQyu59FVa2 wmIfR3r12mz/7aGTUxtVfkDrGFVBdl9xq55w6dp+LKtwcmt92J4n0WbtrBps47Rw So4v0qz4IFvqk38ALdM3YE7DUzAw/wlhe9ETSsPvl7S+4WtHGw== -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:32 2024 by rpki-client on console-fra.rpki-client.org