$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430303a313838303a3a2f33322d3438203d3e203137363730.roa File: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (raw, json) Hash identifier: tPobItRGD2Vk5fK4/Oz2ojiatmX4ZdcXGBSqbeWy7Ng= Subject key identifier: 69:C2:8D:42:77:C7:7F:02:E7:C6:B7:9A:0D:FC:FB:96:48:51:B3:34 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 65837EFD6768ECE513140AD9FB3242A33C5BFE63 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430303a313838303a3a2f33322d3438203d3e203137363730.roa Signing time: Sun 04 Aug 2024 19:00:00 +0000 ROA not before: Sun 04 Aug 2024 18:55:00 +0000 ROA not after: Sun 03 Aug 2025 19:00:00 +0000 asID: 17670 IP address blocks: 2400:1880::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:83:7e:fd:67:68:ec:e5:13:14:0a:d9:fb:32:42:a3:3c:5b:fe:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Aug 4 18:55:00 2024 GMT Not After : Aug 3 19:00:00 2025 GMT Subject: CN=69C28D4277C77F02E7C6B79A0DFCFB964851B334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:ba:4d:c7:18:14:a5:a9:ed:46:a4:3c:20: 0e:23:d7:70:0f:a5:b4:30:1f:20:c5:23:d1:b3:9e: 40:9a:04:2d:13:aa:83:28:f6:99:26:55:a6:43:24: b1:21:da:60:e6:a2:d6:b9:c9:89:f8:73:49:92:ec: 6b:c9:83:25:ed:78:c8:df:66:dd:5e:79:a2:da:22: 35:b9:2c:3d:de:cf:28:53:6d:c4:3f:81:71:7b:1f: 9d:7a:f3:fc:2f:ae:a7:87:67:4e:bc:8d:4a:31:e3: 20:6f:eb:79:e3:56:80:1b:43:ec:dc:07:09:67:af: c4:1e:4b:70:93:2a:1f:de:14:10:8b:34:d6:02:7d: a3:68:f3:42:4a:cc:00:5d:50:40:42:60:c1:43:c9: c8:f2:d2:e8:10:fc:e2:9c:da:e2:c5:bc:b2:43:83: b1:16:fb:c3:3b:96:96:1e:bc:9e:e9:ab:5b:b6:f9: 1c:fa:7d:d3:5a:f8:0e:70:a9:a7:40:3b:5f:49:a9: ef:05:79:9c:c5:cc:b7:39:32:83:63:70:5c:2f:3b: 6f:3e:3e:05:5b:71:06:ed:17:a6:ea:34:f0:60:30: df:cf:a0:6a:30:62:5f:4b:d5:66:b6:5d:70:1e:a1: ea:e4:83:c7:55:88:11:f3:41:1e:da:80:37:81:3e: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C2:8D:42:77:C7:7F:02:E7:C6:B7:9A:0D:FC:FB:96:48:51:B3:34 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430303a313838303a3a2f33322d3438203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:1880::/32 Signature Algorithm: sha256WithRSAEncryption 7b:be:f8:09:2d:f5:58:7a:f7:ac:e2:18:2f:88:d0:f6:0e:60: 96:41:9b:c7:89:67:9d:45:fd:7e:02:3b:4a:7b:e1:75:ef:9d: c2:53:e3:bd:06:37:fc:83:20:ae:9a:c3:18:df:82:0d:e9:74: bf:c5:73:9f:7b:1c:46:58:18:bb:71:b2:f5:be:81:9d:c2:8f: 68:fb:0a:3f:f4:bb:8d:72:13:4a:5c:de:b4:9f:cc:c6:c2:ae: 52:01:8a:ae:e0:36:67:c2:3e:a7:f2:d7:66:e0:b8:3b:cc:75: f6:27:0c:2c:26:fa:26:c1:75:8e:1b:de:8d:a2:24:4d:42:ce: be:8b:58:e8:80:08:5a:25:e6:7a:46:10:be:d0:f4:47:3f:4f: 72:0d:7a:e8:c4:2b:85:cf:67:4c:88:69:60:a8:b9:a2:47:a0: c7:24:c6:9c:7f:11:08:e5:c5:27:30:c5:33:6b:8c:3d:a2:61: 46:20:5c:da:d4:4a:37:2e:81:9d:e3:62:95:54:64:23:eb:34: 3a:56:71:f7:38:12:fe:7e:e8:26:91:bf:51:dd:58:e2:bc:23: 7a:4c:5e:dd:3d:14:7a:16:ca:a6:f2:c8:34:31:c8:1a:4b:7c: a5:68:10:e3:dd:9b:ad:ec:bb:2f:ee:76:a5:db:89:f8:a7:34: 91:80:bd:a2 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUZYN+/Wdo7OUTFArZ+zJCozxb/mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNDA4MDQxODU1MDBaFw0yNTA4MDMxOTAwMDBaMDMxMTAvBgNV BAMTKDY5QzI4RDQyNzdDNzdGMDJFN0M2Qjc5QTBERkNGQjk2NDg1MUIzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpLpNxxgUpantRqQ8IA4j13AP pbQwHyDFI9GznkCaBC0TqoMo9pkmVaZDJLEh2mDmota5yYn4c0mS7GvJgyXteMjf Zt1eeaLaIjW5LD3ezyhTbcQ/gXF7H5168/wvrqeHZ068jUox4yBv63njVoAbQ+zc Bwlnr8QeS3CTKh/eFBCLNNYCfaNo80JKzABdUEBCYMFDycjy0ugQ/OKc2uLFvLJD g7EW+8M7lpYevJ7pq1u2+Rz6fdNa+A5wqadAO19Jqe8FeZzFzLc5MoNjcFwvO28+ PgVbcQbtF6bqNPBgMN/PoGowYl9L1Wa2XXAeoerkg8dViBHzQR7agDeBPuFBAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUacKNQnfHfwLnxreaDfz7lkhRszQwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMyMzQzMDMwM2EzMTM4MzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzczNjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkABiAMA0GCSqGSIb3 DQEBCwUAA4IBAQB7vvgJLfVYeves4hgviND2DmCWQZvHiWedRf1+AjtKe+F1753C U+O9Bjf8gyCumsMY34IN6XS/xXOfexxGWBi7cbL1voGdwo9o+wo/9LuNchNKXN60 n8zGwq5SAYqu4DZnwj6n8tdm4Lg7zHX2JwwsJvomwXWOG96NoiRNQs6+i1jogAha JeZ6RhC+0PRHP09yDXroxCuFz2dMiGlgqLmiR6DHJMacfxEI5cUnMMUza4w9omFG IFza1Eo3LoGd42KVVGQj6zQ6VnH3OBL+fugmkb9R3VjivCN6TF7dPRR6Fsqm8sg0 McgaS3ylaBDj3Zut7Lsv7nal24n4pzSRgL2i -----END CERTIFICATE-----Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org