$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa File: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (raw, json) Hash identifier: xLGvyaDjwqpeZLZ4IR0CWf1khT74vyueTZyVJB2lFVg= Subject key identifier: 06:31:BE:A1:C2:F8:34:B5:88:B5:E1:39:10:4B:CD:4C:65:00:C6:3C Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Certificate serial: 7A9378BF59EBDA7090B43D78DCB7DFD0BB66E628 Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa Signing time: Thu 08 Aug 2024 04:00:03 +0000 ROA not before: Thu 08 Aug 2024 03:55:03 +0000 ROA not after: Thu 07 Aug 2025 04:00:03 +0000 asID: 133827 IP address blocks: 2404:a640:139::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:78:bf:59:eb:da:70:90:b4:3d:78:dc:b7:df:d0:bb:66:e6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Validity Not Before: Aug 8 03:55:03 2024 GMT Not After : Aug 7 04:00:03 2025 GMT Subject: CN=0631BEA1C2F834B588B5E139104BCD4C6500C63C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:35:3a:79:7b:4e:ac:28:a1:35:2f:c7:08: b7:fd:67:70:02:c3:86:16:a1:4e:9f:29:7a:e6:d9: b5:9e:e6:3c:e9:7e:8f:42:8a:5a:5a:37:e3:f6:c9: 03:98:4e:cc:d9:79:3b:d9:56:c9:b5:4d:c3:2b:8d: 29:fa:dd:db:fa:ea:4c:26:fe:9a:4d:9f:5b:65:e9: df:9d:6c:65:f0:82:61:fb:6b:26:87:94:39:e6:13: 2a:b6:e1:7f:97:d8:0d:42:ab:47:e6:10:f2:ef:11: 3d:25:06:4c:13:41:bc:7e:8f:2e:4f:1a:29:f0:79: 94:3a:f2:42:32:16:ce:d2:01:d3:d4:5f:25:bb:e0: a3:45:8f:ec:b9:1d:3a:a3:2e:43:c0:03:72:38:16: f8:32:f8:e1:c2:3e:3a:3f:89:2b:d3:65:c0:7c:04: 94:a1:73:a2:62:25:87:6a:2a:e1:a3:4b:c0:3e:ee: 23:bd:e9:de:b7:0a:5b:ad:e0:de:e2:67:3b:40:e7: bd:6b:f9:18:68:37:c4:95:c6:33:97:2f:28:71:23: b7:75:f7:5c:a6:3b:87:af:3b:a7:a5:6b:6f:01:c8: 1f:91:98:df:53:ca:e5:e3:ab:90:f0:9a:5b:f9:f5: 43:8c:d4:66:5b:f9:44:6e:77:b2:7b:ce:45:56:6b: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:31:BE:A1:C2:F8:34:B5:88:B5:E1:39:10:4B:CD:4C:65:00:C6:3C X509v3 Authority Key Identifier: keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a640:139::/48 Signature Algorithm: sha256WithRSAEncryption 37:da:c8:9c:1d:dc:8d:34:04:fb:9e:56:1e:77:b3:79:f9:c5: 3c:88:fd:37:f1:94:c3:2c:ba:ac:63:fc:bc:70:64:ce:48:dd: d6:12:86:2c:03:ef:d1:53:31:8f:0d:d3:07:f5:ff:c9:45:6b: 19:97:56:42:60:8a:0a:e1:ea:3b:24:48:4d:85:8c:ca:ba:2a: ef:45:11:9c:82:27:d8:db:98:95:35:ed:f3:39:23:f7:df:28: e6:8c:1a:61:03:d0:cd:86:30:4d:33:30:88:a6:e1:ae:68:ea: a6:20:4d:06:9b:0b:24:f3:58:27:eb:b1:1f:13:53:0e:df:e8: 98:a5:77:43:aa:6b:25:a5:ea:3f:2c:77:d0:4f:7e:a2:ec:d4: bd:ed:75:f7:35:3f:f1:1b:09:24:b8:6c:93:71:76:45:ed:cf: 5a:21:df:a3:56:e0:41:71:31:b1:02:f6:cb:de:3b:8b:4b:31: fd:50:ad:84:e6:d6:75:92:5c:b0:d7:b0:e7:37:cb:c5:95:84: 35:80:e4:d2:c1:b0:8a:08:0e:a1:e8:e4:f9:21:62:b3:d4:a7: 12:76:ab:16:b5:57:53:e5:f5:99:1d:aa:3a:4a:1f:cd:1f:d7: db:7e:bc:18:42:88:ee:c4:a5:2d:30:05:8f:72:37:00:09:58: fe:19:a6:e6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUepN4v1nr2nCQtD143Lff0Ltm5igwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1 NjlGODM2RjAeFw0yNDA4MDgwMzU1MDNaFw0yNTA4MDcwNDAwMDNaMDMxMTAvBgNV BAMTKDA2MzFCRUExQzJGODM0QjU4OEI1RTEzOTEwNEJDRDRDNjUwMEM2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmDU6eXtOrCihNS/HCLf9Z3AC w4YWoU6fKXrm2bWe5jzpfo9CilpaN+P2yQOYTszZeTvZVsm1TcMrjSn63dv66kwm /ppNn1tl6d+dbGXwgmH7ayaHlDnmEyq24X+X2A1Cq0fmEPLvET0lBkwTQbx+jy5P GinweZQ68kIyFs7SAdPUXyW74KNFj+y5HTqjLkPAA3I4Fvgy+OHCPjo/iSvTZcB8 BJShc6JiJYdqKuGjS8A+7iO96d63Clut4N7iZztA571r+RhoN8SVxjOXLyhxI7d1 91ymO4evO6ela28ByB+RmN9TyuXjq5Dwmlv59UOM1GZb+URud7J7zkVWa3YDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUBjG+ocL4NLWIteE5EEvNTGUAxjwwHwYDVR0j BBgwFoAUDOannVPYKfKlViNnbo0qmlafg28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTk5MDEyNS02MDlhLTQ4YzgtYWM4Ni0xYzNiYzMxNWJhZDYvMC8wQ0U2QTc5RDUz RDgyOUYyQTU1NjIzNjc2RThEMkE5QTU2OUY4MzZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1NjlG ODM2Ri5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhOTkwMTI1LTYwOWEtNDhjOC1h Yzg2LTFjM2JjMzE1YmFkNi8wLzMyMzQzMDM0M2E2MTM2MzQzMDNhMzEzMzM5M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMzMzgzMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJASm QAE5MA0GCSqGSIb3DQEBCwUAA4IBAQA32sicHdyNNAT7nlYed7N5+cU8iP038ZTD LLqsY/y8cGTOSN3WEoYsA+/RUzGPDdMH9f/JRWsZl1ZCYIoK4eo7JEhNhYzKuirv RRGcgifY25iVNe3zOSP33yjmjBphA9DNhjBNMzCIpuGuaOqmIE0Gmwsk81gn67Ef E1MO3+iYpXdDqmslpeo/LHfQT36i7NS97XX3NT/xGwkkuGyTcXZF7c9aId+jVuBB cTGxAvbL3juLSzH9UK2E5tZ1klyw17DnN8vFlYQ1gOTSwbCKCA6h6OT5IWKz1KcS dqsWtVdT5fWZHao6Sh/NH9fbfrwYQojuxKUtMAWPcjcACVj+Gabm -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org