$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa File: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (raw, json) Hash identifier: in1eOlYNKCk2lGbXKJTXvY33Xdz5YgM95JjqhRefg8I= Subject key identifier: 99:C2:75:FA:50:81:2F:E3:68:D5:68:50:8E:D9:C2:EF:01:6C:FE:4C Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 106DFF9A15AEAD7AB3615487E311157CAD4B3C9F Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa Signing time: Mon 01 Jul 2024 16:00:02 +0000 ROA not before: Mon 01 Jul 2024 15:55:02 +0000 ROA not after: Mon 30 Jun 2025 16:00:02 +0000 asID: 138866 IP address blocks: 2404:fec0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6d:ff:9a:15:ae:ad:7a:b3:61:54:87:e3:11:15:7c:ad:4b:3c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Jul 1 15:55:02 2024 GMT Not After : Jun 30 16:00:02 2025 GMT Subject: CN=99C275FA50812FE368D568508ED9C2EF016CFE4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:5c:d8:3e:6c:65:67:c6:85:09:19:b9:ad: 67:c1:19:3b:82:f8:91:8e:bb:a9:bd:86:de:42:25: aa:fa:79:90:5a:6b:fd:13:90:62:22:c8:ea:d5:d7: 42:14:c4:26:a9:b4:71:49:00:ff:9b:c0:73:d9:6d: cb:8d:4a:3b:c5:ce:0a:5c:4d:32:c1:b5:e8:bd:7f: 78:81:dd:99:a7:a7:19:e8:95:34:10:c2:2c:59:18: 87:a6:5e:4c:75:5d:d4:58:4a:54:4c:44:46:2e:51: f5:d6:ed:b1:16:7b:48:df:0b:66:74:e7:5c:fc:3f: 41:17:b3:e9:df:9e:1a:13:19:fe:0f:10:fc:56:30: 3b:1c:de:2e:3a:13:48:2b:68:31:06:66:5a:9a:fa: 8a:4b:4c:e0:f7:21:c4:bd:9e:9c:2f:3d:8a:e8:52: 5f:f4:c4:82:e4:68:da:85:49:b3:eb:12:e6:28:ce: 02:11:ce:45:07:93:55:09:5b:5c:ef:2f:77:d3:0a: 1e:0c:d0:9c:26:45:34:17:6a:3c:63:a0:78:f4:56: 07:13:74:2a:44:3c:8e:b4:9b:27:4a:c7:0c:2d:45: b3:31:d2:23:23:a9:26:c1:0d:4d:11:d9:de:d6:dd: 2b:38:fa:d4:4d:cb:ad:57:71:f8:0f:c1:20:5c:12: ba:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C2:75:FA:50:81:2F:E3:68:D5:68:50:8E:D9:C2:EF:01:6C:FE:4C X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fec0:5::/48 Signature Algorithm: sha256WithRSAEncryption 30:3d:d4:65:9f:18:91:83:8c:75:ab:42:fe:72:37:5a:3c:03: db:3f:83:07:81:bc:2b:e0:99:8c:c5:a2:51:f3:64:3c:48:49: c9:0e:19:0f:07:da:d1:77:71:27:de:24:89:c8:6a:3f:7e:56: bf:d9:40:bf:6d:e9:7b:33:a1:3e:3b:23:43:24:db:22:33:0d: fd:af:c0:58:87:f3:14:5b:8e:4c:7f:b3:82:3e:ca:05:88:48: 03:ba:83:59:e2:7f:42:0e:4a:7c:00:57:df:f2:5e:75:1c:d4: 93:c2:ef:86:fd:c9:5d:e7:0b:04:44:fc:aa:b7:91:9a:b0:de: c8:ce:cd:41:eb:ab:09:8b:1b:cf:be:06:ec:18:fb:3e:c0:4f: 20:9c:cc:0f:c8:b8:57:27:c2:5e:16:9e:bd:23:d6:1c:c6:05: 6d:db:0b:66:f1:07:e8:30:34:16:89:57:65:54:56:05:13:77: 24:ae:57:ab:f9:da:33:11:0b:62:6a:79:4e:aa:ad:6d:48:9c: 0f:50:a8:73:bb:96:3a:be:7c:a1:76:4e:b3:2f:60:36:2e:2b: ca:d8:f3:0d:7c:95:bd:a6:43:37:72:5f:1e:f7:75:b7:8f:7e: bb:ea:13:4d:cc:60:89:be:2e:87:ed:4e:48:41:a7:a4:88:d9: 73:e1:2e:dd -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUEG3/mhWurXqzYVSH4xEVfK1LPJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNDA3MDExNTU1MDJaFw0yNTA2MzAxNjAwMDJaMDMxMTAvBgNV BAMTKDk5QzI3NUZBNTA4MTJGRTM2OEQ1Njg1MDhFRDlDMkVGMDE2Q0ZFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC811zYPmxlZ8aFCRm5rWfBGTuC +JGOu6m9ht5CJar6eZBaa/0TkGIiyOrV10IUxCaptHFJAP+bwHPZbcuNSjvFzgpc TTLBtei9f3iB3ZmnpxnolTQQwixZGIemXkx1XdRYSlRMREYuUfXW7bEWe0jfC2Z0 51z8P0EXs+nfnhoTGf4PEPxWMDsc3i46E0graDEGZlqa+opLTOD3IcS9npwvPYro Ul/0xILkaNqFSbPrEuYozgIRzkUHk1UJW1zvL3fTCh4M0JwmRTQXajxjoHj0VgcT dCpEPI60mydKxwwtRbMx0iMjqSbBDU0R2d7W3Ss4+tRNy61XcfgPwSBcErqvAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUmcJ1+lCBL+No1WhQjtnC7wFs/kwwHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05 NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP7AAAUw DQYJKoZIhvcNAQELBQADggEBADA91GWfGJGDjHWrQv5yN1o8A9s/gweBvCvgmYzF olHzZDxISckOGQ8H2tF3cSfeJInIaj9+Vr/ZQL9t6XszoT47I0Mk2yIzDf2vwFiH 8xRbjkx/s4I+ygWISAO6g1nif0IOSnwAV9/yXnUc1JPC74b9yV3nCwRE/Kq3kZqw 3sjOzUHrqwmLG8++BuwY+z7ATyCczA/IuFcnwl4Wnr0j1hzGBW3bC2bxB+gwNBaJ V2VUVgUTdySuV6v52jMRC2JqeU6qrW1InA9QqHO7ljq+fKF2TrMvYDYuK8rY8w18 lb2mQzdyXx73dbePfrvqE03MYIm+LoftTkhBp6SI2XPhLt0= -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org