$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3438203d3e20323030323430.roa File: 323430313a633432303a383030303a3a2f33332d3438203d3e20323030323430.roa (raw, json) Hash identifier: cMc8d+LbVH0l10iXLL3MRifoPp/Y71SqyG/YmjLZvnM= Subject key identifier: B4:C6:20:12:28:F5:3B:CF:6D:80:CE:CA:AA:19:FE:5B:34:83:D9:C8 Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 5E8E689BDD1D95B4FBA70DA8D4E36FBA6E840F07 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3438203d3e20323030323430.roa Signing time: Thu 26 Sep 2024 01:05:07 +0000 ROA not before: Thu 26 Sep 2024 01:00:07 +0000 ROA not after: Thu 25 Sep 2025 01:05:07 +0000 asID: 200240 IP address blocks: 2401:c420:8000::/33 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8e:68:9b:dd:1d:95:b4:fb:a7:0d:a8:d4:e3:6f:ba:6e:84:0f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Sep 26 01:00:07 2024 GMT Not After : Sep 25 01:05:07 2025 GMT Subject: CN=B4C6201228F53BCF6D80CECAAA19FE5B3483D9C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9c:8c:07:75:38:37:b5:70:2a:9d:7e:52:2d: 4c:ac:c8:ed:9f:f8:1e:0c:bf:58:44:f6:3d:95:b8: 73:68:f6:14:0f:ba:5b:fb:84:2e:ce:d5:0d:ac:7e: 07:79:de:d0:17:25:80:5e:28:74:b0:62:2a:a4:25: 28:66:b1:1d:ed:83:c2:63:27:5d:fb:41:fe:7b:45: 7b:f0:50:8c:2d:f6:fe:cb:57:66:c0:9a:9c:59:df: 67:38:5f:20:d2:a9:20:76:d0:16:1c:49:ac:98:b4: 3a:7c:75:bb:dd:e6:46:75:83:94:8a:6d:3c:78:07: 4a:9a:be:aa:16:5d:c9:db:d6:aa:7f:f9:21:84:0e: e6:ff:e8:22:b6:a6:ee:90:73:db:73:a6:4c:cb:dd: 4c:7e:c5:21:5e:68:19:bc:8d:52:de:a6:e6:53:b9: bb:b4:41:58:b8:8b:13:9b:7c:21:b8:43:15:1b:4e: 13:1f:e7:05:08:cb:ce:e0:eb:e2:f7:08:26:ed:db: c4:00:5f:ec:03:de:13:9e:a9:15:c7:91:33:35:6a: e5:19:e1:c1:c7:19:25:c0:59:3b:26:6f:77:4d:00: bc:6a:78:17:da:69:8a:e1:3b:58:5e:ae:0b:3d:24: 2d:12:fe:5d:c4:d9:02:95:12:1a:8f:dc:a6:f0:8d: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C6:20:12:28:F5:3B:CF:6D:80:CE:CA:AA:19:FE:5B:34:83:D9:C8 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3438203d3e20323030323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:c420:8000::/33 Signature Algorithm: sha256WithRSAEncryption e5:b8:60:6f:aa:ec:41:60:01:39:22:2d:20:2a:4e:56:97:b3: 65:86:87:8c:2f:3c:7e:b5:70:90:02:64:33:03:43:5b:61:1c: e0:4f:fc:e5:d3:96:d8:cb:e7:17:c9:b3:12:0f:bb:0a:a0:84: e7:1e:22:d4:fb:96:d2:42:74:c4:1b:63:ba:1c:21:52:2b:66: 0b:e1:22:83:9e:78:ca:11:ef:cd:3b:b3:ca:46:80:44:00:47: 76:f9:66:0a:a8:3d:dd:52:4f:d2:0b:8b:0c:55:87:3a:49:3c: 73:49:01:94:50:1e:30:2c:c9:94:a6:93:d1:2a:96:f0:ef:5b: 00:41:2c:e7:31:3a:82:e8:28:e4:10:5b:23:71:2d:d7:b4:b4: 0f:e6:44:be:17:42:a8:c8:ac:59:06:7b:49:de:a9:2b:84:ed: b9:6d:a3:9c:66:6e:94:63:67:8e:91:3a:99:c3:61:e7:41:ad: b0:62:85:7f:9f:59:72:82:52:91:a3:46:3e:1b:c3:ef:e5:36: d7:db:ae:b8:f3:73:72:24:bf:57:98:17:2d:26:eb:2e:87:5a: 90:97:a4:3d:6e:67:cd:94:8e:4e:5b:7b:67:37:8d:c5:1f:32: 65:fc:7c:23:c4:01:31:85:e7:3a:4e:ce:8f:21:39:09:0e:8e: 38:b0:2a:dc -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUXo5om90dlbT7pw2o1ONvum6EDwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNDA5MjYwMTAwMDdaFw0yNTA5MjUwMTA1MDdaMDMxMTAvBgNV BAMTKEI0QzYyMDEyMjhGNTNCQ0Y2RDgwQ0VDQUFBMTlGRTVCMzQ4M0Q5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinIwHdTg3tXAqnX5SLUysyO2f +B4Mv1hE9j2VuHNo9hQPulv7hC7O1Q2sfgd53tAXJYBeKHSwYiqkJShmsR3tg8Jj J137Qf57RXvwUIwt9v7LV2bAmpxZ32c4XyDSqSB20BYcSayYtDp8dbvd5kZ1g5SK bTx4B0qavqoWXcnb1qp/+SGEDub/6CK2pu6Qc9tzpkzL3Ux+xSFeaBm8jVLepuZT ubu0QVi4ixObfCG4QxUbThMf5wUIy87g6+L3CCbt28QAX+wD3hOeqRXHkTM1auUZ 4cHHGSXAWTsmb3dNALxqeBfaaYrhO1hergs9JC0S/l3E2QKVEhqP3Kbwje/RAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUtMYgEij1O89tgM7Kqhn+WzSD2cgwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjg1OGY2LWRlMjAtNDEyMS1i Y2VhLTkwNzZlZGNjYzA5Ny8wLzMyMzQzMDMxM2E2MzM0MzIzMDNhMzgzMDMwMzAz YTNhMmYzMzMzMmQzNDM4MjAzZDNlMjAzMjMwMzAzMjM0MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgck AcQggDANBgkqhkiG9w0BAQsFAAOCAQEA5bhgb6rsQWABOSItICpOVpezZYaHjC88 frVwkAJkMwNDW2Ec4E/85dOW2MvnF8mzEg+7CqCE5x4i1PuW0kJ0xBtjuhwhUitm C+Eig554yhHvzTuzykaARABHdvlmCqg93VJP0guLDFWHOkk8c0kBlFAeMCzJlKaT 0SqW8O9bAEEs5zE6gugo5BBbI3Et17S0D+ZEvhdCqMisWQZ7Sd6pK4TtuW2jnGZu lGNnjpE6mcNh50GtsGKFf59ZcoJSkaNGPhvD7+U219uuuPNzciS/V5gXLSbrLoda kJekPW5nzZSOTlt7ZzeNxR8yZfx8I8QBMYXnOk7OjyE5CQ6OOLAq3A== -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org