$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa File: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (raw, json) Hash identifier: HyMWadhCrBlbrvw7eV4dA67xhQ9znG8zfhfFTeZs2rs= Subject key identifier: DA:06:17:5C:72:54:CC:C7:D9:9C:A2:AC:5F:F0:9C:C0:94:FA:16:84 Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44 Certificate serial: 033797DE9AE0EF5C2FC6992A91A3799282EF9849 Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa Signing time: Tue 30 Jul 2024 04:00:02 +0000 ROA not before: Tue 30 Jul 2024 03:55:02 +0000 ROA not after: Tue 29 Jul 2025 04:00:02 +0000 asID: 141073 IP address blocks: 2406:7740::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:37:97:de:9a:e0:ef:5c:2f:c6:99:2a:91:a3:79:92:82:ef:98:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44 Validity Not Before: Jul 30 03:55:02 2024 GMT Not After : Jul 29 04:00:02 2025 GMT Subject: CN=DA06175C7254CCC7D99CA2AC5FF09CC094FA1684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d8:12:f2:da:0a:77:f4:02:15:6a:31:05:76: a4:33:23:13:db:d3:79:b5:b0:fb:b9:15:62:ae:04: 34:3c:0d:2b:51:ba:82:37:cc:84:f6:50:13:a1:c2: 04:25:6c:eb:c7:dd:ab:03:9e:d2:0d:d1:8d:19:38: f0:23:14:dd:c9:69:e3:a9:c2:61:ed:57:06:6d:b6: 35:df:4e:20:72:45:61:25:8c:e1:cc:26:c7:fa:7e: 35:86:03:b8:7a:ad:52:3a:f2:86:c9:73:db:c0:3f: 84:15:de:b3:3e:3e:4c:4a:a0:1b:d7:b7:37:8e:34: 6a:53:ae:3f:68:06:ef:9f:60:55:28:59:c1:62:ce: df:50:72:4e:64:22:5e:89:e3:50:9b:6f:04:ba:89: 76:1e:7f:13:b7:39:87:f8:7b:54:e8:df:56:89:21: c4:f0:11:69:b7:b4:0d:28:b8:04:94:26:52:ab:41: d4:66:f3:49:d5:a2:08:c1:db:63:14:1c:9d:9a:a0: 0e:be:fb:a9:cd:bb:b5:e6:73:f5:69:2f:4b:d9:db: d5:f6:84:0b:1d:fa:95:4b:e0:e3:59:47:fb:34:82: a8:6b:a6:36:17:b5:cd:81:53:ea:38:37:30:aa:de: 95:fb:2a:38:d1:cc:b5:72:ef:d4:03:1a:74:56:2c: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:06:17:5C:72:54:CC:C7:D9:9C:A2:AC:5F:F0:9C:C0:94:FA:16:84 X509v3 Authority Key Identifier: keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7740::/32 Signature Algorithm: sha256WithRSAEncryption 60:45:de:37:72:f2:28:c2:91:1b:0b:c2:1e:06:21:f9:34:3a: ac:bd:25:8d:a3:f6:99:f6:fd:b3:8b:1d:c0:6d:4c:0a:c4:4d: 81:03:03:68:58:3d:a8:8f:3e:0b:b5:1a:4b:43:0b:3f:ec:ed: 49:58:dc:c9:c6:9b:8b:7d:7d:62:4b:62:ca:03:26:16:fa:53: 18:ff:7d:0d:34:d1:f5:f7:0c:7d:10:19:eb:a2:95:80:74:fe: 0c:fe:51:06:ca:33:ec:cc:52:af:8d:73:66:bf:2e:9c:43:90: 4b:1f:d8:f2:13:9e:ff:d1:c3:a9:66:ef:a6:cc:48:35:96:4b: a2:cb:d0:1a:be:ba:d9:42:d8:fe:10:8b:78:dc:0b:2d:ca:a8: 76:8b:e4:ea:98:7f:10:0d:13:9d:34:16:16:12:6e:5f:37:d0: 0d:76:f0:da:63:3d:4f:8d:30:fa:57:dc:26:13:5c:26:f9:6d: 37:eb:c3:c7:c0:de:5f:e5:2f:3b:04:62:e2:5d:2d:ad:63:b8: f3:00:9d:2b:76:3e:6d:6c:c6:7d:41:21:9b:42:be:73:7b:d6: 5d:76:b3:39:ed:ba:35:7a:9e:0e:ea:4a:2a:f6:f6:9a:0e:89: 8e:1e:2c:50:09:3d:d5:43:f9:d9:69:40:51:33:fe:b4:94:b3: 1e:f3:d4:02 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUAzeX3prg71wvxpkqkaN5koLvmEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZE NkU1NUU0NDAeFw0yNDA3MzAwMzU1MDJaFw0yNTA3MjkwNDAwMDJaMDMxMTAvBgNV BAMTKERBMDYxNzVDNzI1NENDQzdEOTlDQTJBQzVGRjA5Q0MwOTRGQTE2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2BLy2gp39AIVajEFdqQzIxPb 03m1sPu5FWKuBDQ8DStRuoI3zIT2UBOhwgQlbOvH3asDntIN0Y0ZOPAjFN3JaeOp wmHtVwZttjXfTiByRWEljOHMJsf6fjWGA7h6rVI68obJc9vAP4QV3rM+PkxKoBvX tzeONGpTrj9oBu+fYFUoWcFizt9Qck5kIl6J41CbbwS6iXYefxO3OYf4e1To31aJ IcTwEWm3tA0ouASUJlKrQdRm80nVogjB22MUHJ2aoA6++6nNu7Xmc/VpL0vZ29X2 hAsd+pVL4ONZR/s0gqhrpjYXtc2BU+o4NzCq3pX7KjjRzLVy79QDGnRWLCZrAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU2gYXXHJUzMfZnKKsX/CcwJT6FoQwHwYDVR0j BBgwFoAULRiVY5f6YFWkQVPKvwcwP9blXkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODU4Zjg1Yy1hNDU4LTRhNTgtYmJkZS00YmZiMzQzZGM0YjAvMC8yRDE4OTU2Mzk3 RkE2MDU1QTQ0MTUzQ0FCRjA3MzAzRkQ2RTU1RTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZENkU1 NUU0NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NThmODVjLWE0NTgtNGE1OC1i YmRlLTRiZmIzNDNkYzRiMC8wLzMyMzQzMDM2M2EzNzM3MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGd0AwDQYJKoZI hvcNAQELBQADggEBAGBF3jdy8ijCkRsLwh4GIfk0Oqy9JY2j9pn2/bOLHcBtTArE TYEDA2hYPaiPPgu1GktDCz/s7UlY3MnGm4t9fWJLYsoDJhb6Uxj/fQ000fX3DH0Q GeuilYB0/gz+UQbKM+zMUq+Nc2a/LpxDkEsf2PITnv/Rw6lm76bMSDWWS6LL0Bq+ utlC2P4Qi3jcCy3KqHaL5OqYfxANE500FhYSbl830A128NpjPU+NMPpX3CYTXCb5 bTfrw8fA3l/lLzsEYuJdLa1juPMAnSt2Pm1sxn1BIZtCvnN71l12szntujV6ng7q Sir29poOiY4eLFAJPdVD+dlpQFEz/rSUsx7z1AI= -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org