$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa File: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (raw, json) Hash identifier: 7lwbDZ+aI5yIIWKifKCkb4tfAf37jKqB7Px1ZTR64Jg= Subject key identifier: 45:BE:0F:9B:1E:A2:15:D6:29:69:F9:E1:01:0D:77:1B:64:07:81:E4 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 10AF3AF434B43E17D17C262CE2D72EEBF8133617 Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa Signing time: Tue 09 Jan 2024 14:34:39 +0000 ROA not before: Tue 09 Jan 2024 14:29:39 +0000 ROA not after: Tue 07 Jan 2025 14:34:39 +0000 asID: 138866 IP address blocks: 2404:fec0:7071::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:af:3a:f4:34:b4:3e:17:d1:7c:26:2c:e2:d7:2e:eb:f8:13:36:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Jan 9 14:29:39 2024 GMT Not After : Jan 7 14:34:39 2025 GMT Subject: CN=45BE0F9B1EA215D62969F9E1010D771B640781E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fa:43:64:47:84:70:38:82:2f:3d:5d:a0:53: 03:a0:2b:6c:4f:1e:a2:7a:51:75:d2:8d:3e:ab:76: 2b:0f:fe:ea:7e:ac:d5:9f:2d:b0:e0:46:d8:ec:4e: d6:d7:4f:d0:db:6d:f4:bd:ac:36:1e:0c:cc:e7:94: 9c:ab:2e:52:9d:6e:8a:30:9b:8e:c8:c1:b9:a5:8a: 88:f9:2c:f7:63:e4:df:fc:bf:8e:92:55:fd:53:9e: 10:af:7c:b5:22:4c:c9:a4:65:54:47:89:cd:17:c7: ba:e9:98:02:ad:98:8f:13:4d:c1:37:52:f4:11:d0: 64:76:e6:a4:d4:d1:7d:cb:48:f4:42:09:f0:4d:ed: a6:45:0b:6a:fb:15:2d:d9:7f:2e:d6:ad:4b:8f:13: 3d:f2:2f:77:cd:77:4a:5f:86:d1:97:e0:91:b0:98: f5:45:cc:a0:b4:89:b9:5e:cb:76:31:91:88:fb:d3: 04:02:e3:42:5d:85:68:b6:26:68:bd:f1:e9:8f:61: a0:a4:14:7b:74:db:c3:40:15:e2:57:75:98:a3:95: 3e:d6:40:36:27:d7:40:bc:c6:71:d2:88:31:4b:27: 56:f6:a7:1f:ca:a6:ad:7c:0b:94:cd:52:a5:b5:41: db:b2:e6:0f:96:94:86:ab:83:71:6f:68:6a:42:21: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BE:0F:9B:1E:A2:15:D6:29:69:F9:E1:01:0D:77:1B:64:07:81:E4 X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fec0:7071::/48 Signature Algorithm: sha256WithRSAEncryption 25:7c:26:97:b5:20:19:59:24:ca:b5:07:c0:c1:28:6a:e2:59: e6:41:97:2a:bd:f4:23:34:6c:e5:13:91:6a:b7:a1:fb:df:dc: f9:8a:59:d0:9b:2f:c6:0c:f3:16:54:43:57:8d:e9:97:f5:5b: 6d:6f:2e:4a:ed:eb:8b:b0:1c:47:f0:ad:05:b6:47:e8:d9:16: 0b:f1:86:6e:e5:11:fb:c3:c8:4c:37:aa:27:ae:13:a6:20:db: 97:03:18:54:d7:55:f1:40:a8:74:62:77:71:16:e8:9c:f9:62: 63:b7:46:f0:33:fc:8e:58:ef:ca:87:9f:b5:92:6c:01:79:c4: 2d:09:76:ae:a4:ff:d8:28:b2:33:39:31:9d:27:53:63:e9:08: a1:7d:54:0c:6a:7c:2a:af:f6:06:5a:31:cf:63:dd:3b:1a:53: 89:aa:8a:57:59:32:b8:1c:2b:2a:5d:6e:5f:83:4e:94:08:9f: 0a:f8:8f:f6:06:af:d8:99:7f:c5:2a:ef:0c:2c:e4:28:e8:23: dc:53:e0:77:1c:d8:58:df:f7:3a:a9:5f:19:6d:99:cf:1f:13: c8:81:c5:bb:ea:20:46:31:a0:59:38:09:c7:27:d5:59:52:00: 77:0e:b6:4d:69:bf:45:7b:cd:4e:2a:42:f9:6b:21:a5:fc:f8: 2f:8b:67:3b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUEK869DS0PhfRfCYs4tcu6/gTNhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNDAxMDkxNDI5MzlaFw0yNTAxMDcxNDM0MzlaMDMxMTAvBgNV BAMTKDQ1QkUwRjlCMUVBMjE1RDYyOTY5RjlFMTAxMEQ3NzFCNjQwNzgxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp+kNkR4RwOIIvPV2gUwOgK2xP HqJ6UXXSjT6rdisP/up+rNWfLbDgRtjsTtbXT9DbbfS9rDYeDMznlJyrLlKdboow m47Iwbmlioj5LPdj5N/8v46SVf1TnhCvfLUiTMmkZVRHic0Xx7rpmAKtmI8TTcE3 UvQR0GR25qTU0X3LSPRCCfBN7aZFC2r7FS3Zfy7WrUuPEz3yL3fNd0pfhtGX4JGw mPVFzKC0ibley3YxkYj70wQC40JdhWi2Jmi98emPYaCkFHt028NAFeJXdZijlT7W QDYn10C8xnHSiDFLJ1b2px/Kpq18C5TNUqW1Qduy5g+WlIarg3FvaGpCIbtXAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQURb4Pmx6iFdYpafnhAQ13G2QHgeQwHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05 NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzczMDM3MzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BP7AcHEwDQYJKoZIhvcNAQELBQADggEBACV8Jpe1IBlZJMq1B8DBKGriWeZBlyq9 9CM0bOUTkWq3ofvf3PmKWdCbL8YM8xZUQ1eN6Zf1W21vLkrt64uwHEfwrQW2R+jZ Fgvxhm7lEfvDyEw3qieuE6Yg25cDGFTXVfFAqHRid3EW6Jz5YmO3RvAz/I5Y78qH n7WSbAF5xC0Jdq6k/9gosjM5MZ0nU2PpCKF9VAxqfCqv9gZaMc9j3TsaU4mqildZ MrgcKypdbl+DTpQInwr4j/YGr9iZf8Uq7wws5CjoI9xT4Hcc2Fjf9zqpXxltmc8f E8iBxbvqIEYxoFk4Cccn1VlSAHcOtk1pv0V7zU4qQvlrIaX8+C+LZzs= -----END CERTIFICATE-----Generated at Tue Apr 30 18:54:26 2024 by rpki-client on console-fra.rpki-client.org