$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a3a2f33332d3438203d3e20313431303538.roa File: 323430313a633432303a3a2f33332d3438203d3e20313431303538.roa (raw, json) Hash identifier: OzK4JWx1SEBNLlGY243HS2bB3To5ATS06zgWHOBtA2c= Subject key identifier: DD:20:A4:3C:A6:75:38:62:E1:66:F7:20:D7:50:8E:4B:D0:7A:F7:04 Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 470932DB7C965F125216A43F122BF90344DC3ACA Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a3a2f33332d3438203d3e20313431303538.roa Signing time: Thu 26 Sep 2024 01:06:38 +0000 ROA not before: Thu 26 Sep 2024 01:01:38 +0000 ROA not after: Thu 25 Sep 2025 01:06:38 +0000 asID: 141058 IP address blocks: 2401:c420::/33 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:09:32:db:7c:96:5f:12:52:16:a4:3f:12:2b:f9:03:44:dc:3a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Sep 26 01:01:38 2024 GMT Not After : Sep 25 01:06:38 2025 GMT Subject: CN=DD20A43CA6753862E166F720D7508E4BD07AF704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:ce:32:25:e5:c6:8b:37:f0:67:c4:7c:8d: bb:fe:10:1e:1b:c5:45:7d:ab:b9:4e:b3:21:a2:8c: 9a:8d:d1:d2:be:15:e1:5d:6f:0e:59:d8:c1:79:09: 93:d4:b5:a9:bf:a8:45:b8:de:4f:bc:9d:2d:b1:47: 68:18:9d:26:7e:19:24:2d:1e:02:97:e2:19:ed:0c: 8f:4f:25:eb:0e:ab:55:dc:f0:17:88:54:17:2c:6f: 4e:f4:4e:0f:fa:4f:6f:f6:7d:00:f7:05:16:34:23: 48:ec:45:ce:8a:90:04:3e:1e:0c:67:8f:2b:8a:45: 0b:0c:c8:7d:dd:00:a9:db:f4:d0:18:c8:15:72:5c: dc:9c:a2:58:9a:4b:7f:63:43:e7:ae:7d:94:0d:6d: af:72:2f:ed:87:3b:ca:38:fc:94:d9:28:7f:55:9b: 00:02:83:49:d7:8a:82:eb:03:13:15:bc:41:04:ed: ed:8e:13:fe:5f:ce:eb:ff:ab:ff:0b:ce:ee:b9:4a: 58:3a:e5:19:55:cb:a5:f5:cd:b3:20:b8:92:47:e0: c7:92:f3:38:31:3d:e1:ef:6b:e8:5f:f4:82:68:69: f1:0c:50:91:5d:59:52:dc:ea:4e:00:d3:16:3b:fc: c9:1e:c6:98:59:73:da:37:2d:5e:6f:95:2c:9b:d0: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:20:A4:3C:A6:75:38:62:E1:66:F7:20:D7:50:8E:4B:D0:7A:F7:04 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a3a2f33332d3438203d3e20313431303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:c420::/33 Signature Algorithm: sha256WithRSAEncryption b7:9c:6d:7e:72:b5:22:32:b4:b6:9e:57:3b:22:14:c0:76:70: 15:5b:4d:d5:a0:b7:e2:15:d4:50:da:04:58:b5:42:e7:b0:6e: 57:27:aa:3d:c2:ae:8d:75:66:16:2a:42:6b:00:c7:32:fd:71: 94:76:7b:dd:f6:04:98:6d:eb:da:85:38:82:cb:cb:b0:f6:95: 94:d0:d7:2e:73:11:bd:23:8c:0b:3f:4f:7b:9a:00:d3:31:4d: e2:5a:3f:ab:fd:75:cc:12:74:b2:37:fd:1b:78:12:89:ae:14: 0c:27:a0:2c:50:80:32:c3:0d:80:da:56:b9:04:a4:b1:fa:3a: 4a:f1:a0:01:a6:0f:2d:96:11:69:8c:69:b0:b8:18:f2:90:0c: fb:f0:6d:33:8e:e7:85:c1:15:64:22:bf:50:16:30:d3:c2:5b: 4f:1e:a1:a8:d0:bd:fb:df:f7:9c:d1:7d:fb:70:1f:4b:09:e8: 0b:46:c7:f8:4f:7e:a1:9a:3a:02:fc:17:5d:d2:a1:52:60:7d: 13:a2:d6:cf:59:1a:27:3e:72:f8:bf:da:3d:a8:e7:92:47:19: f7:12:9d:18:5a:46:b8:b6:57:09:94:80:01:39:df:44:f6:a4: 10:c9:f0:76:5b:af:c9:4d:39:08:91:5a:45:ed:5d:d8:fd:f4: bf:f5:bf:d5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURwky23yWXxJSFqQ/Eiv5A0TcOsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNDA5MjYwMTAxMzhaFw0yNTA5MjUwMTA2MzhaMDMxMTAvBgNV BAMTKEREMjBBNDNDQTY3NTM4NjJFMTY2RjcyMEQ3NTA4RTRCRDA3QUY3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQyc4yJeXGizfwZ8R8jbv+EB4b xUV9q7lOsyGijJqN0dK+FeFdbw5Z2MF5CZPUtam/qEW43k+8nS2xR2gYnSZ+GSQt HgKX4hntDI9PJesOq1Xc8BeIVBcsb070Tg/6T2/2fQD3BRY0I0jsRc6KkAQ+Hgxn jyuKRQsMyH3dAKnb9NAYyBVyXNycoliaS39jQ+eufZQNba9yL+2HO8o4/JTZKH9V mwACg0nXioLrAxMVvEEE7e2OE/5fzuv/q/8Lzu65Slg65RlVy6X1zbMguJJH4MeS 8zgxPeHva+hf9IJoafEMUJFdWVLc6k4A0xY7/MkexphZc9o3LV5vlSyb0NOXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3SCkPKZ1OGLhZvcg11COS9B69wQwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjg1OGY2LWRlMjAtNDEyMS1i Y2VhLTkwNzZlZGNjYzA5Ny8wLzMyMzQzMDMxM2E2MzM0MzIzMDNhM2EyZjMzMzMy ZDM0MzgyMDNkM2UyMDMxMzQzMTMwMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGByQBxCAAMA0GCSqG SIb3DQEBCwUAA4IBAQC3nG1+crUiMrS2nlc7IhTAdnAVW03VoLfiFdRQ2gRYtULn sG5XJ6o9wq6NdWYWKkJrAMcy/XGUdnvd9gSYbevahTiCy8uw9pWU0NcucxG9I4wL P097mgDTMU3iWj+r/XXMEnSyN/0beBKJrhQMJ6AsUIAyww2A2la5BKSx+jpK8aAB pg8tlhFpjGmwuBjykAz78G0zjueFwRVkIr9QFjDTwltPHqGo0L373/ec0X37cB9L CegLRsf4T36hmjoC/Bdd0qFSYH0TotbPWRonPnL4v9o9qOeSRxn3Ep0YWka4tlcJ lIABOd9E9qQQyfB2W6/JTTkIkVpF7V3Y/fS/9b/V -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org