$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: KQZo+3HIHnlbyCCPEj10WYBSIOntfHXQo1x4ll1wXeQ= Subject key identifier: D3:99:B2:98:5E:39:D5:4A:74:20:CC:54:85:55:49:09:A4:5E:CF:5B Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 59A68D0E485AA597E79C38615B6AEA0E3F058B58 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa Signing time: Sun 20 Oct 2024 19:00:00 +0000 ROA not before: Sun 20 Oct 2024 18:55:00 +0000 ROA not after: Sun 19 Oct 2025 19:00:00 +0000 asID: 139949 IP address blocks: 2405:aac0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a6:8d:0e:48:5a:a5:97:e7:9c:38:61:5b:6a:ea:0e:3f:05:8b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Oct 20 18:55:00 2024 GMT Not After : Oct 19 19:00:00 2025 GMT Subject: CN=D399B2985E39D54A7420CC5485554909A45ECF5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:58:b2:ed:0f:2d:60:68:d0:01:6c:b2:85: 15:b8:a0:d7:85:27:81:f2:43:ce:ff:4c:07:9b:b5: 4c:23:f8:60:a5:b3:8f:11:5e:19:1f:63:17:49:88: 41:3a:26:39:9b:a0:a3:88:2e:eb:a2:46:ae:35:6f: 54:fb:86:09:77:f6:9e:34:19:a4:9e:20:76:e4:61: 24:c6:d4:63:01:11:b2:c3:61:58:2e:19:d3:0b:4f: e9:51:ad:b0:6a:7b:77:93:80:75:e3:66:0e:da:ec: c8:3c:30:e2:a7:da:12:de:3a:f1:67:79:dc:6f:59: 40:73:d2:4f:5c:7a:da:94:1d:1c:c5:68:f0:0d:ff: 99:ee:fb:ce:e5:4d:79:4f:2f:01:e4:8b:ea:77:76: 9a:aa:47:d0:91:15:52:e4:d9:dc:e5:f3:3d:db:a9: 43:5e:92:94:e2:0b:02:ac:dc:d4:fe:48:eb:90:8b: 34:99:bd:65:7a:52:9b:33:cb:21:85:2b:91:13:67: 60:b1:8c:35:4b:b2:01:c7:2b:ae:33:d8:77:a0:b8: 09:01:51:c3:3a:1d:52:8b:ce:1b:b0:96:8b:93:a6: b7:fc:7f:9f:25:57:cd:10:7d:2f:a6:7c:f5:a7:3d: 9b:3f:13:17:b9:e8:36:2b:c1:c6:b1:f3:bd:69:e7: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:99:B2:98:5E:39:D5:4A:74:20:CC:54:85:55:49:09:A4:5E:CF:5B X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:7::/48 Signature Algorithm: sha256WithRSAEncryption c2:f8:57:45:dd:95:8e:54:18:d0:ee:20:a6:7c:f0:87:e4:1a: bb:2b:b8:bc:78:93:e0:53:04:88:4f:a6:da:95:73:95:bf:8e: 50:b8:b2:88:08:01:67:fe:0a:bc:c7:2f:b3:b8:bd:45:c6:eb: 30:a3:05:56:f6:48:11:a7:25:7d:3c:4b:25:97:a4:08:66:6f: 9b:ff:1b:1a:88:e8:96:94:fe:c2:d6:3e:d1:35:74:ef:b2:5b: c0:25:6b:b1:2e:8f:96:de:9f:d3:a9:19:17:72:45:00:b4:b0: 40:9c:d3:58:89:8c:73:b9:ac:77:f5:80:2c:2d:68:6b:73:18: 80:d0:86:68:2a:62:d2:7e:f9:a3:fa:02:af:e1:a0:cb:cb:35: f0:86:bc:bd:c0:53:ba:f0:73:ef:07:ae:af:17:6b:05:a0:35: b0:8f:6d:54:83:75:1e:a1:6b:08:8f:32:ad:d0:26:bd:0b:75: 15:c3:d4:71:4e:3c:e9:67:39:21:09:c1:51:c0:c5:61:dc:35: 0b:0e:1f:e6:88:2e:7d:a4:b1:bb:44:aa:a1:bf:60:59:ee:5d: 69:d1:0c:3a:6d:d3:3d:ef:8d:5d:1c:d0:2b:ab:09:be:38:08: df:24:1a:65:99:87:a3:1c:6d:20:fb:2c:a8:6d:45:ad:3f:b6: 65:9c:54:01 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWaaNDkhapZfnnDhhW2rqDj8Fi1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNDEwMjAxODU1MDBaFw0yNTEwMTkxOTAwMDBaMDMxMTAvBgNV BAMTKEQzOTlCMjk4NUUzOUQ1NEE3NDIwQ0M1NDg1NTU0OTA5QTQ1RUNGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6w1iy7Q8tYGjQAWyyhRW4oNeF J4HyQ87/TAebtUwj+GCls48RXhkfYxdJiEE6JjmboKOILuuiRq41b1T7hgl39p40 GaSeIHbkYSTG1GMBEbLDYVguGdMLT+lRrbBqe3eTgHXjZg7a7Mg8MOKn2hLeOvFn edxvWUBz0k9cetqUHRzFaPAN/5nu+87lTXlPLwHki+p3dpqqR9CRFVLk2dzl8z3b qUNekpTiCwKs3NT+SOuQizSZvWV6UpszyyGFK5ETZ2CxjDVLsgHHK64z2HeguAkB UcM6HVKLzhuwlouTprf8f58lV80QfS+mfPWnPZs/Exe56DYrwcax871p502HAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU05mymF451Up0IMxUhVVJCaRez1swHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBarAAAcw DQYJKoZIhvcNAQELBQADggEBAML4V0XdlY5UGNDuIKZ88IfkGrsruLx4k+BTBIhP ptqVc5W/jlC4sogIAWf+CrzHL7O4vUXG6zCjBVb2SBGnJX08SyWXpAhmb5v/GxqI 6JaU/sLWPtE1dO+yW8Ala7Euj5ben9OpGRdyRQC0sECc01iJjHO5rHf1gCwtaGtz GIDQhmgqYtJ++aP6Aq/hoMvLNfCGvL3AU7rwc+8Hrq8XawWgNbCPbVSDdR6hawiP Mq3QJr0LdRXD1HFOPOlnOSEJwVHAxWHcNQsOH+aILn2ksbtEqqG/YFnuXWnRDDpt 0z3vjV0c0CurCb44CN8kGmWZh6McbSD7LKhtRa0/tmWcVAE= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:32 2024 by rpki-client on console-fra.rpki-client.org