$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa File: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (raw, json) Hash identifier: WsluVFkB4a+lP57xwnkZuJyPr6zcJ1fd0nejjcDmukA= Subject key identifier: E1:14:DC:D9:E9:81:F0:BB:D5:30:4C:C1:C6:3B:8A:75:0B:CD:24:B8 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 3F21CDB06BA9429E368AC41B2D9A7FA8F8248354 Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa Signing time: Mon 01 Jul 2024 16:00:01 +0000 ROA not before: Mon 01 Jul 2024 15:55:01 +0000 ROA not after: Mon 30 Jun 2025 16:00:01 +0000 asID: 138866 IP address blocks: 2404:fec0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:21:cd:b0:6b:a9:42:9e:36:8a:c4:1b:2d:9a:7f:a8:f8:24:83:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Jul 1 15:55:01 2024 GMT Not After : Jun 30 16:00:01 2025 GMT Subject: CN=E114DCD9E981F0BBD5304CC1C63B8A750BCD24B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:01:0d:37:a2:5d:63:40:41:e7:f9:43:30: f0:b6:0f:af:7b:de:61:ca:c4:c5:36:5b:c6:8b:51: 21:8e:9f:7b:7d:87:cb:7c:62:75:1d:ae:6f:88:0d: d0:e5:46:d5:a1:38:32:61:f8:1e:a3:70:bb:c8:e0: ea:8a:0f:cd:c9:ab:78:cb:e6:bd:73:45:10:cb:1b: f8:d1:0b:28:31:5c:74:15:bf:e3:a9:83:b0:fb:52: 5b:55:06:9f:f3:cd:fc:18:fd:d3:93:af:1b:2c:3f: 82:f8:bf:61:20:d5:2c:30:91:66:65:eb:a0:9b:ba: 42:0b:47:7b:9a:ea:70:b0:f6:c6:a0:fd:55:e8:3f: a1:11:97:7a:e7:0e:fc:39:fb:e8:53:be:7d:46:4c: 60:78:92:5c:09:55:f7:57:92:bc:a5:32:81:13:b7: be:53:56:c8:ea:20:9c:2e:92:c2:42:9c:49:5f:25: c9:cd:ea:13:c6:0b:03:bf:ef:d1:97:9b:00:56:52: 73:05:fb:ef:37:7a:d2:44:a2:59:19:89:c6:e5:1c: 6c:bb:26:fa:b6:a0:6a:7d:11:3c:61:b9:ee:40:87: ca:f1:f6:9a:58:82:cc:b8:1c:17:bc:a1:f7:1d:15: c8:fa:92:ce:f3:b9:1e:21:56:31:90:1f:5f:14:84: 0f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:14:DC:D9:E9:81:F0:BB:D5:30:4C:C1:C6:3B:8A:75:0B:CD:24:B8 X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fec0:4::/48 Signature Algorithm: sha256WithRSAEncryption 25:87:e8:ca:19:f2:1e:f7:77:5c:34:14:f3:3a:76:b0:13:22: 3f:6c:36:02:48:2f:86:14:a8:6c:f6:e4:32:c2:71:ea:0e:01: d9:53:c2:5c:da:2c:33:1c:98:73:fc:66:73:11:a5:d1:7d:ce: 73:03:d0:62:4f:83:5e:cd:6f:19:f0:61:ad:c9:24:b7:b4:38: c8:a8:a7:c8:b0:f6:1f:0a:56:84:4a:3a:50:f0:a6:dd:54:3d: 62:33:82:7d:cb:6e:da:9f:dc:fc:e7:8e:de:15:6b:00:66:1e: 1d:2f:d2:b3:9e:92:f6:70:f3:5b:92:a3:23:29:da:79:0d:b2: 70:ec:3d:52:b8:88:03:0a:db:a0:56:d9:64:df:f8:15:5c:26: df:a7:04:c2:c8:4b:1e:16:3f:78:32:62:fc:8a:19:4d:8a:22: 9c:bc:0e:ab:66:64:62:d5:0c:5f:ed:64:1d:54:f9:be:60:2c: d4:8b:90:29:e2:6a:91:13:7e:c0:98:45:39:70:51:7a:30:51: 22:c3:7a:83:f2:be:9e:5c:15:71:f7:40:92:6d:4f:85:c7:44: cf:cd:ca:8d:5c:22:fd:67:12:c2:e2:44:95:c9:29:fc:8a:b2: a3:31:84:5c:c6:7e:b1:1d:10:55:28:b3:e6:c9:42:c8:83:88: 66:ca:25:34 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUPyHNsGupQp42isQbLZp/qPgkg1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNDA3MDExNTU1MDFaFw0yNTA2MzAxNjAwMDFaMDMxMTAvBgNV BAMTKEUxMTREQ0Q5RTk4MUYwQkJENTMwNENDMUM2M0I4QTc1MEJDRDI0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9QENN6JdY0BB5/lDMPC2D697 3mHKxMU2W8aLUSGOn3t9h8t8YnUdrm+IDdDlRtWhODJh+B6jcLvI4OqKD83Jq3jL 5r1zRRDLG/jRCygxXHQVv+Opg7D7UltVBp/zzfwY/dOTrxssP4L4v2Eg1SwwkWZl 66CbukILR3ua6nCw9sag/VXoP6ERl3rnDvw5++hTvn1GTGB4klwJVfdXkrylMoET t75TVsjqIJwuksJCnElfJcnN6hPGCwO/79GXmwBWUnMF++83etJEolkZicblHGy7 Jvq2oGp9ETxhue5Ah8rx9ppYgsy4HBe8ofcdFcj6ks7zuR4hVjGQH18UhA+hAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU4RTc2emB8LvVMEzBxjuKdQvNJLgwHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05 NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP7AAAQw DQYJKoZIhvcNAQELBQADggEBACWH6MoZ8h73d1w0FPM6drATIj9sNgJIL4YUqGz2 5DLCceoOAdlTwlzaLDMcmHP8ZnMRpdF9znMD0GJPg17NbxnwYa3JJLe0OMiop8iw 9h8KVoRKOlDwpt1UPWIzgn3Lbtqf3Pznjt4VawBmHh0v0rOekvZw81uSoyMp2nkN snDsPVK4iAMK26BW2WTf+BVcJt+nBMLISx4WP3gyYvyKGU2KIpy8DqtmZGLVDF/t ZB1U+b5gLNSLkCniapETfsCYRTlwUXowUSLDeoPyvp5cFXH3QJJtT4XHRM/Nyo1c Iv1nEsLiRJXJKfyKsqMxhFzGfrEdEFUos+bJQsiDiGbKJTQ= -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org