$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa File: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (raw, json) Hash identifier: 318Q6731sMFPRMDMOoStaI6Bz5sS+OT9DxYXEQE+OOU= Subject key identifier: 01:49:69:74:4F:2B:A7:77:6A:98:8E:1B:72:6C:54:66:D4:5C:AF:CC Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 325D96FD3165044AF6A4609AA27ACF8F574320F0 Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa Signing time: Tue 10 Dec 2024 15:00:06 +0000 ROA not before: Tue 10 Dec 2024 14:55:06 +0000 ROA not after: Tue 09 Dec 2025 15:00:06 +0000 asID: 138866 IP address blocks: 2404:fec0:7071::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 23:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5d:96:fd:31:65:04:4a:f6:a4:60:9a:a2:7a:cf:8f:57:43:20:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Dec 10 14:55:06 2024 GMT Not After : Dec 9 15:00:06 2025 GMT Subject: CN=014969744F2BA7776A988E1B726C5466D45CAFCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:92:bd:3f:4d:4d:52:4a:6d:e2:12:5d:dc: d7:10:08:13:dd:9a:43:95:fb:df:36:19:4a:1c:e8: 90:46:39:46:05:df:a2:fa:67:d4:41:2d:b9:fc:02: ea:9b:93:b8:38:ca:c4:bb:10:6d:b1:f5:31:c8:fc: 00:83:c3:45:15:e2:62:78:34:5e:d3:c1:39:98:34: c4:82:2b:49:77:d7:7f:79:21:9c:82:72:88:62:3c: 13:91:fa:d0:7d:33:a7:57:f8:14:ad:06:09:20:b2: 22:44:39:e8:11:16:6a:ec:94:0e:68:7f:4a:50:b0: d0:68:93:68:2c:c0:91:4f:c0:45:28:f1:33:9e:8f: f3:54:52:7d:36:24:f9:c6:16:1e:f5:e1:45:c9:b9: 64:19:c1:0f:48:f5:30:29:38:b3:f0:c8:8c:36:51: 83:bd:65:57:35:ee:f8:31:67:f9:49:6f:a3:e9:2f: 2f:9e:e5:94:e2:57:2b:3f:16:e0:33:06:b4:8a:92: 0c:c5:3d:3d:cb:ac:2a:49:0d:84:ee:03:70:b4:8b: 72:c1:f0:60:e6:14:68:03:2a:9b:2c:0a:dc:83:46: 87:a6:2d:7f:07:c9:8a:a9:63:43:88:34:1f:5b:5e: a4:83:52:b7:cc:f7:bc:7c:e1:ac:be:88:ae:69:74: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:49:69:74:4F:2B:A7:77:6A:98:8E:1B:72:6C:54:66:D4:5C:AF:CC X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fec0:7071::/48 Signature Algorithm: sha256WithRSAEncryption 49:ec:8e:ec:2c:c4:b7:d9:9a:a7:c1:fb:4d:73:aa:37:ad:3b: ea:42:51:4a:69:26:52:24:40:4b:54:90:89:7f:db:e7:4f:94: e6:53:32:16:a7:2f:34:ac:66:c5:bf:90:b6:e2:ca:55:98:92: 84:09:e9:74:54:68:e1:71:8d:32:58:9c:63:8b:a9:64:42:e2: cf:9c:64:84:18:75:57:b6:e5:eb:07:72:0d:b2:d6:e6:6a:40: cd:f8:33:5d:3d:7f:f6:7f:f7:09:25:af:79:56:04:c4:9a:82: 56:48:07:00:57:02:a3:a1:5d:99:53:3b:61:41:c2:bd:cd:ca: 0b:be:dd:29:e1:a2:8b:26:12:e5:7c:38:3f:b6:60:1e:56:7e: 4a:6e:30:18:34:45:d2:5c:03:05:2b:f8:fb:9b:cd:bf:75:90: c1:55:e4:63:af:29:e9:c2:c7:42:18:5b:b7:b8:6c:91:5e:41: f5:37:a6:1f:36:07:b8:dc:fa:8f:cd:c9:94:8f:35:ea:49:c2: d3:5c:66:3f:39:b9:d8:f6:92:29:6e:87:f0:83:80:68:b7:29: 2d:07:11:60:6f:bc:13:30:96:1f:8b:ba:65:41:d0:d2:56:69: 76:3e:91:62:f8:b1:2c:75:e0:77:6b:4d:c3:be:2c:21:2f:e8: 13:01:c7:85 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUMl2W/TFlBEr2pGCaonrPj1dDIPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNDEyMTAxNDU1MDZaFw0yNTEyMDkxNTAwMDZaMDMxMTAvBgNV BAMTKDAxNDk2OTc0NEYyQkE3Nzc2QTk4OEUxQjcyNkM1NDY2RDQ1Q0FGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdJK9P01NUkpt4hJd3NcQCBPd mkOV+982GUoc6JBGOUYF36L6Z9RBLbn8Auqbk7g4ysS7EG2x9THI/ACDw0UV4mJ4 NF7TwTmYNMSCK0l31395IZyCcohiPBOR+tB9M6dX+BStBgkgsiJEOegRFmrslA5o f0pQsNBok2gswJFPwEUo8TOej/NUUn02JPnGFh714UXJuWQZwQ9I9TApOLPwyIw2 UYO9ZVc17vgxZ/lJb6PpLy+e5ZTiVys/FuAzBrSKkgzFPT3LrCpJDYTuA3C0i3LB 8GDmFGgDKpssCtyDRoemLX8HyYqpY0OINB9bXqSDUrfM97x84ay+iK5pdJ2hAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUAUlpdE8rp3dqmI4bcmxUZtRcr8wwHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05 NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzczMDM3MzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BP7AcHEwDQYJKoZIhvcNAQELBQADggEBAEnsjuwsxLfZmqfB+01zqjetO+pCUUpp JlIkQEtUkIl/2+dPlOZTMhanLzSsZsW/kLbiylWYkoQJ6XRUaOFxjTJYnGOLqWRC 4s+cZIQYdVe25esHcg2y1uZqQM34M109f/Z/9wklr3lWBMSaglZIBwBXAqOhXZlT O2FBwr3Nygu+3SnhoosmEuV8OD+2YB5WfkpuMBg0RdJcAwUr+Pubzb91kMFV5GOv KenCx0IYW7e4bJFeQfU3ph82B7jc+o/NyZSPNepJwtNcZj85udj2kiluh/CDgGi3 KS0HEWBvvBMwlh+LumVB0NJWaXY+kWL4sSx14HdrTcO+LCEv6BMBx4U= -----END CERTIFICATE-----Generated at Sun Apr 6 17:57:33 2025 by rpki-client