$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: 2gHnO4FvDv3m+D/zbSRO0Ij9y5H/LS364gvsZ7Hr8xo= Subject key identifier: 5E:2D:9D:AF:6A:36:DB:1F:76:F6:60:EF:9E:CE:4C:5C:7D:44:BD:AF Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 439EAE068D2E5F61196B7F95E57C1F8A5C6165E0 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa Signing time: Sat 09 Nov 2024 04:00:00 +0000 ROA not before: Sat 09 Nov 2024 03:55:00 +0000 ROA not after: Sat 08 Nov 2025 04:00:00 +0000 asID: 58552 IP address blocks: 2404:fd00:fac3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9e:ae:06:8d:2e:5f:61:19:6b:7f:95:e5:7c:1f:8a:5c:61:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Nov 9 03:55:00 2024 GMT Not After : Nov 8 04:00:00 2025 GMT Subject: CN=5E2D9DAF6A36DB1F76F660EF9ECE4C5C7D44BDAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:0e:a0:fd:1b:83:64:51:6b:52:10:a5:af: eb:76:30:7e:e7:06:66:4b:43:58:a9:d3:9c:fd:78: 85:41:45:a7:84:d1:f8:7a:de:3e:f8:46:a8:45:b2: 7f:28:7e:69:c2:78:8b:6f:df:14:f3:c2:56:5c:d4: db:c1:af:86:12:2f:ef:6c:d6:fd:c9:52:6b:a9:93: 8f:82:36:f9:b8:05:c4:0c:45:93:a7:03:be:ac:c0: 8e:a0:0a:4f:34:02:b8:06:96:0a:17:c9:5e:cf:b7: ff:0a:40:fe:5b:90:ab:be:f0:cc:ed:06:ae:95:b0: d6:a2:b2:b7:fc:f5:96:c3:d9:e3:17:4b:8d:7d:f2: 64:cd:22:10:d2:07:61:2c:5f:f7:89:c1:dd:6c:56: 0d:a2:96:79:a0:07:d9:9f:b1:2e:d7:87:6b:df:1f: 63:4b:11:dd:cb:93:be:33:ea:dc:67:ac:88:9e:64: bd:38:3c:2a:11:10:b1:c2:9b:53:cf:1e:d3:37:0f: a6:e6:fb:28:f3:c2:f2:1a:52:fd:63:fb:af:a5:8e: cc:b3:e6:1f:ae:cc:f2:fc:18:f4:24:6d:ba:b6:00: 9a:3d:36:66:1a:5e:fc:ef:0c:03:a9:1f:f8:d5:4c: 34:93:e4:b2:f9:c3:c3:99:35:23:0c:89:1e:35:73: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2D:9D:AF:6A:36:DB:1F:76:F6:60:EF:9E:CE:4C:5C:7D:44:BD:AF X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:fac3::/48 Signature Algorithm: sha256WithRSAEncryption 69:07:d9:49:3f:be:a1:36:66:0c:ab:5b:82:4d:6e:82:d9:d4: 5b:e8:4a:b7:4c:6a:dc:66:3d:4b:92:29:3f:b1:af:82:09:36: 53:25:0a:bc:d7:81:04:62:a6:f5:dc:1c:52:78:a7:49:fa:b4: bb:9f:e3:d3:fe:1a:da:c5:26:86:ce:36:9c:6a:0d:9c:06:ed: 01:e9:6b:dc:51:97:8c:91:28:90:10:77:05:8a:0f:e6:9c:44: 77:7c:b9:c2:c1:3f:b4:3c:26:fd:c2:a1:3c:ee:01:b0:84:30: c2:65:48:49:f1:c5:be:61:a9:6e:ce:af:1c:d3:0e:5d:f5:5d: 6e:ec:ac:b8:5d:76:b1:56:42:87:81:88:d8:01:d5:ec:2c:a5: 16:5f:60:bd:24:ad:f1:86:52:3a:b1:12:2b:a1:f8:dc:6c:77: 0a:5c:ea:68:b3:2d:ec:bc:b0:03:2c:1f:ae:05:ab:9b:fb:36: 89:81:74:79:3a:94:35:9e:a1:5c:70:ba:49:5b:85:44:2c:e8: ab:e3:a6:bc:50:63:9b:4a:d5:8e:f0:4e:c1:a5:21:f6:14:42: 45:0e:63:e9:a5:83:61:7d:4e:aa:e8:4b:5c:1a:3a:7c:d8:72: ef:9d:6e:22:5b:77:b1:1d:a6:4c:a7:75:51:96:ab:5a:57:1b: ad:f6:ab:2c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQ56uBo0uX2EZa3+V5XwfilxhZeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNDExMDkwMzU1MDBaFw0yNTExMDgwNDAwMDBaMDMxMTAvBgNV BAMTKDVFMkQ5REFGNkEzNkRCMUY3NkY2NjBFRjlFQ0U0QzVDN0Q0NEJEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YQ6g/RuDZFFrUhClr+t2MH7n BmZLQ1ip05z9eIVBRaeE0fh63j74RqhFsn8ofmnCeItv3xTzwlZc1NvBr4YSL+9s 1v3JUmupk4+CNvm4BcQMRZOnA76swI6gCk80ArgGlgoXyV7Pt/8KQP5bkKu+8Mzt Bq6VsNaisrf89ZbD2eMXS4198mTNIhDSB2EsX/eJwd1sVg2ilnmgB9mfsS7Xh2vf H2NLEd3Lk74z6txnrIieZL04PCoRELHCm1PPHtM3D6bm+yjzwvIaUv1j+6+ljsyz 5h+uzPL8GPQkbbq2AJo9NmYaXvzvDAOpH/jVTDST5LL5w8OZNSMMiR41c84ZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUXi2dr2o22x929mDvns5MXH1Eva8wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhNjY2MTYzMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM4MzUzNTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAT9 APrDMA0GCSqGSIb3DQEBCwUAA4IBAQBpB9lJP76hNmYMq1uCTW6C2dRb6Eq3TGrc Zj1Lkik/sa+CCTZTJQq814EEYqb13BxSeKdJ+rS7n+PT/hraxSaGzjacag2cBu0B 6WvcUZeMkSiQEHcFig/mnER3fLnCwT+0PCb9wqE87gGwhDDCZUhJ8cW+Yaluzq8c 0w5d9V1u7Ky4XXaxVkKHgYjYAdXsLKUWX2C9JK3xhlI6sRIrofjcbHcKXOposy3s vLADLB+uBaub+zaJgXR5OpQ1nqFccLpJW4VELOir46a8UGObStWO8E7BpSH2FEJF DmPppYNhfU6q6EtcGjp82HLvnW4iW3exHaZMp3VRlqtaVxut9qss -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org